Can an online lending app automatically debit my GCash or bank account?
Last updated: 2026-07-11 · Educational content; not legal advice.
Short answer
An app can only pull money from your GCash, card, or bank account if you gave a valid, specific authorization for auto-debit or a linked-account mandate — a lender cannot lawfully take funds without your consent, and consent buried in a blanket permission is contestable. You can revoke a recurring auto-debit or e-wallet auto-charge mandate through your bank or e-wallet provider, and any deduction beyond what you actually authorized (or above the SEC MC 3, s. 2022 caps on a covered loan) is a disputable transaction you can raise with the provider and the SEC. Under RA 11765 the financial provider must act on your written dispute within a set period.
Primary sources
Frequently asked
Can I stop an auto-debit I already set up?
Yes. You can cancel or revoke a recurring auto-debit arrangement or e-wallet auto-charge mandate through your bank or e-wallet provider. Removing the mandate does not erase a valid debt, but it stops the lender from pulling funds without a fresh, specific authorization.
They took more than my agreed installment — what now?
Dispute it in writing with both the lender and your bank/e-wallet, attaching the transaction record. On a covered loan, anything beyond the disclosed installment or above the SEC MC 3 (2022) caps is contestable — see /answer/the-app-charged-me-more-than-i-borrowed-is-that-legal.
Is a blanket 'allow access' enough consent?
No. Under RA 10173 consent must be specific and informed; a catch-all permission does not lawfully authorize open-ended withdrawals or contact scraping. Vague or coerced consent is contestable with the provider and the NPC.
Take action
Related companies
Got a similar problem?
File a complaint and we'll pre-fill BSP, SEC, DTI, and small-claims letters for you.
Interest caps, licensing, and how to complain about online lending apps in the Philippines.