In the Philippines, online lending apps can demand payment of a legitimate loan, but they cannot harass you, shame you online, threaten arrest, message your contacts, or misuse your personal data just to collect. If an online lending app is calling at abusive hours, posting your photo, texting your employer or relatives, threatening a police case, or using your contact list without permission, you can report it to the proper Philippine agencies. This guide explains what counts as harassment, which laws protect you, where to file a complaint, what evidence to prepare, and what usually happens after you report an abusive online lending app.

What Counts as Harassment by Online Lending Apps?

Online lending app harassment usually happens during debt collection. The app, its collector, or a third-party collection agency pressures the borrower through fear, embarrassment, or public exposure.

Common examples include:

Threatening to have you arrested for nonpayment of a loan
Saying they will file a criminal case even if the issue is only nonpayment
Sending messages to your family, friends, employer, co-workers, or social media contacts
Calling or texting people who are not your guarantors or co-makers
Posting your name, photo, ID, address, or loan details online
Using insults, profanity, sexual comments, or degrading language
Creating fake “wanted,” “scammer,” or “estafa” graphics using your picture
Calling repeatedly to intimidate you
Demanding payment through threats of violence or public humiliation
Accessing or saving your phone contacts, photos, gallery, or social media contacts for collection purposes
Pretending to be a lawyer, police officer, court sheriff, barangay official, or NBI/PNP personnel
Demanding “advance fees” or extra charges not clearly disclosed in your loan documents

A borrower may still owe money, but owing money does not give a lender the right to abuse, shame, threaten, or misuse personal data.

The Main Legal Rules That Protect Borrowers

SEC Memorandum Circular No. 18, Series of 2019

The most important rule for debt collection harassment by lending and financing companies is SEC Memorandum Circular No. 18, Series of 2019, entitled Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies.

This SEC circular applies to:

Lending companies
Financing companies
Third-party service providers or collection agencies hired by them

Under this circular, lenders and collectors must observe good faith and reasonable conduct. They are prohibited from using unfair collection practices such as:

Violence or threats of violence
Threats to take action that cannot legally be taken
Obscene, insulting, or profane language
Disclosure or publication of the names and personal information of borrowers who allegedly refuse to pay
Communicating false loan information
False representation or deceptive means to collect a debt
Contacting a borrower at unreasonable or inconvenient times, subject to the circular’s specific rules
Contacting people in the borrower’s contact list other than those named as guarantors or co-makers

The circular also makes the lending or financing company responsible for the acts of its collection agency. A company cannot simply say, “That was our third-party collector, not us.”

The SEC may impose administrative penalties. For lending companies, the first offense is ₱25,000 and the second offense is ₱50,000. For financing companies, the first offense is ₱50,000 and the second offense is ₱100,000. A third offense may result in heavier fines, suspension, or revocation of the company’s authority to operate.

2026 DICT-NPC-SEC Public Advisory on Online Lending Platforms

In the DICT-NPC-SEC Public Advisory on Online Lending Platforms, the Department of Information and Communications Technology, National Privacy Commission, and Securities and Exchange Commission reiterated that online lending platforms must not engage in harassment, intimidation, public shaming, or unlawful use of personal data.

The advisory is especially important because it clarifies the difference between a character reference and a guarantor:

Person listed in the loan app	What they are for	Can they be contacted for collection?
Character reference	Identity verification or reference checking	Generally no, not for debt collection
Guarantor	Person who separately consented to assume responsibility if the borrower defaults	Yes, but only if they truly consented as guarantor
Random contact from your phone book	Not part of the loan obligation	No

The advisory states that, for debt collection, lending and financing companies may only contact the guarantor. It also says that unnecessary, excessive, or disproportionate processing of personal data is prohibited, especially access to contact lists that leads to harassment.

Data Privacy Act of 2012

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information. In online lending cases, this matters because many abusive apps collect more data than needed, such as phone contacts, photos, social media contacts, or gallery access.

The National Privacy Commission has specifically warned that online lenders are barred from harvesting borrowers’ phone and social media contact lists for harassment or public shaming. The NPC’s guidance on online lending explains that unnecessary app permissions, such as access to phone contacts or social media contacts, can violate data privacy principles.

If an online lending app used your personal data to shame you, contact your relatives, or expose your loan details, the issue is not only “collection harassment.” It may also be a data privacy violation.

Financial Products and Services Consumer Protection Act

The Financial Products and Services Consumer Protection Act, or Republic Act No. 11765, strengthens protection for consumers of financial products and services. It gives financial regulators, including the SEC and BSP, stronger authority over abusive, fraudulent, or unfair financial practices.

For online loans, this supports the borrower’s right to:

Fair and respectful treatment
Clear disclosure of terms
Protection from abusive or deceptive practices
Proper complaint handling by financial service providers

Lending Company Regulation Act and Truth in Lending Act

The Lending Company Regulation Act of 2007, or Republic Act No. 9474, requires lending companies to operate under SEC regulation. A legitimate lending company must have proper registration and authority.

The Truth in Lending Act, or Republic Act No. 3765, requires creditors to disclose finance charges and the true cost of credit. This becomes relevant when an app deducts hidden charges, imposes unclear fees, or gives misleading loan terms.

Revised Penal Code and Cybercrime Law

Some online lending harassment may also involve criminal acts under the Revised Penal Code and the Cybercrime Prevention Act of 2012, or Republic Act No. 10175.

Depending on the facts, the conduct may involve:

Grave threats under Article 282 of the Revised Penal Code
Grave coercions under Article 286
Unjust vexation under Article 287
Libel under Articles 353 and 355
Oral defamation or slander under Article 358
Cyberlibel under RA 10175 if defamatory statements are posted or sent through a computer system

In Disini v. Secretary of Justice, G.R. No. 203335, February 11, 2014, the Supreme Court discussed cyberlibel under RA 10175. For borrowers, the practical point is simple: if the collector posts defamatory accusations online, sends edited photos, or publishes false claims through digital channels, you may raise the matter with cybercrime authorities.

The Philippine Constitution also provides that no person shall be imprisoned for debt. Nonpayment of a loan is generally a civil matter. A lender may pursue lawful collection, but a collector should not threaten jail simply because you missed payment. A criminal case like estafa requires specific elements, such as deceit or fraud, not mere inability to pay.

Where to Report Online Lending App Harassment

Different agencies handle different parts of the problem. In many serious cases, you may need to report to more than one office.

Problem	Where to report	Official channel
Unfair debt collection by a lending or financing company	SEC Financing and Lending Companies Department (FINLEND)	SEC iMessage complaint portal
Misuse of personal data, contact list harvesting, public shaming, unauthorized disclosure	National Privacy Commission	NPC filing a complaint page
Threats, fraud, scams, cyber harassment	DICT Cyber Hotline	1326@dict.gov.ph
Cybercrime, threats, identity misuse, online defamation	NBI Cybercrime Division	ccd@nbi.gov.ph
Cybercrime, threats, online harassment	PNP Anti-Cybercrime Group	acg@pnp.gov.ph or onlinecims.ocs@gmail.com
Complaint against a bank, e-money issuer, or BSP-supervised financial institution	Bangko Sentral ng Pilipinas	BSP Online Buddy and consumer assistance channels

Step-by-Step Guide: How to Report Harassment by Online Lending Apps

1. Preserve evidence before blocking or deleting anything

Before uninstalling the app, changing numbers, or deleting messages, save evidence.

Collect:

Screenshots of threats, insults, and collection messages
Screenshots showing the sender’s number, username, profile, or email
Call logs showing repeated or late-night calls
Text messages sent to you and your contacts
Posts or comments where your name, photo, ID, or loan details were exposed
Messages sent to your employer, relatives, friends, or co-workers
Loan agreement, disclosure statement, repayment schedule, and receipts
App name, website, Google Play or App Store link, and developer name
SEC registration details, if shown in the app
Proof that the contacted person was not a guarantor or co-maker

For phone calls, be careful with secret recordings because the Philippines has an Anti-Wiretapping Law. Safer evidence includes call logs, screenshots, voicemail left by the caller, written summaries made immediately after the call, and witness statements from people who personally received the harassment.

2. Identify the lending company behind the app

Many apps use trade names that are different from the registered company name. Look for:

Corporate name
SEC registration number
Certificate of Authority number
Business address
Customer service email
Privacy policy
Name of financing or lending company in the loan agreement
Payment recipient names

Check whether the platform is recorded or authorized by the SEC. If the app is unrecorded or unauthorized, mention that in your complaint.

3. Stop unnecessary access to your phone data

After saving evidence:

Revoke the app’s access to contacts, camera, photos, files, microphone, and location
Change passwords for email, social media, and financial apps
Turn on two-factor authentication
Warn family, friends, and co-workers not to respond to suspicious collectors
Do not click links sent by collectors
Pay only through official channels if you decide to pay

Do not send your password, OTP, ID selfie, or screen-sharing access to anyone claiming to “help settle” the loan.

4. Send one clear written objection, if safe

If you still have a working official customer service email, send a short written notice. This is useful because it creates a record that you objected to the harassment.

Example:

I am requesting your company and all collection agents acting on your behalf to stop contacting my relatives, friends, employer, co-workers, and other persons who are not guarantors or co-makers. I also object to the use, disclosure, or publication of my personal data and loan information for harassment or public shaming. Please communicate with me only through my registered mobile number or email and provide a proper statement of account.

Keep the tone factual. Do not insult the collector. Do not admit to false accusations. Do not agree to extra charges you do not understand.

5. File a complaint with the SEC for unfair debt collection

Use the SEC iMessage portal and select the appropriate complaint category for lending or financing companies if available.

Include:

Your full name and contact details
Name of the online lending app
Name of the lending or financing company, if known
Loan amount, date borrowed, due date, and amount demanded
Description of the harassment
Names or numbers of collectors
Screenshots and supporting evidence
Names of contacted third parties, if they consent to be identified
What relief you are requesting, such as investigation, sanction, correction of records, or order to stop unfair collection

Focus on facts. Instead of writing only “they harassed me,” state what happened:

“On June 10 at 11:45 p.m., this number called me 12 times.”
“On June 11, the collector sent my loan details to my employer.”
“My sister was not a guarantor, but she received this message calling me a scammer.”
“The app accessed my contacts and sent messages to people I never listed as guarantors.”

6. File a complaint with the NPC for data privacy violations

If your contacts, photos, ID, workplace, address, or loan details were misused, file with the National Privacy Commission.

The NPC states that a formal complaint must be filed in a specific format. On its official complaint filing page, the NPC instructs complainants to:

Download the complaint form.
Print and fill it out.
Have it notarized.
Submit it in person, by courier, or by scanned copy through email to complaints@privacy.gov.ph.

Attach evidence showing unauthorized or excessive processing of personal data, such as:

Messages sent to your contacts
Proof the app accessed your contact list
Screenshots of app permissions
Privacy notice or consent screen from the app
Public posts containing your personal data
Screenshots of threats to disclose your information
Statements from relatives or co-workers who received messages

If you are abroad, you may still prepare a complaint. For notarized affidavits or sworn documents executed outside the Philippines, practical options usually include notarization before a Philippine Embassy or Consulate, or local notarization with apostille if required by the receiving office. Check the specific agency’s latest filing instructions before sending original documents from overseas.

7. Report threats, scams, or cyber harassment to cybercrime authorities

Report to DICT, NBI Cybercrime Division, or PNP Anti-Cybercrime Group when the conduct includes:

Threats of violence
Fake police, NBI, court, or barangay notices
Edited photos or fake “wanted” posters
Online posts calling you a criminal, scammer, or estafador
Identity theft
Phishing links
Access to accounts or devices
Blackmail
Repeated cyber harassment

For urgent safety concerns, go to the nearest police station or PNP Anti-Cybercrime office. A police blotter does not by itself decide the case, but it helps document the incident.

Documents and Evidence Checklist

Document or evidence	Why it matters
Government ID	Confirms your identity as complainant
Loan agreement or screenshots of loan terms	Shows the lender, loan amount, due date, charges, and app used
Disclosure statement or repayment schedule	Supports Truth in Lending or hidden charge issues
Screenshots of abusive messages	Proves threats, insults, shaming, or illegal collection
Call logs	Shows frequency and timing of calls
Messages sent to contacts	Proves third-party harassment
Statement from contacted relative, employer, or friend	Shows the collector contacted a non-guarantor
App permission screenshots	Supports data privacy complaint
App store link, website, or developer page	Helps identify the online lending platform
Payment receipts	Shows payments already made
Email complaint to lender	Shows you tried to object or resolve the issue
Police blotter or incident report	Supports threats or safety concerns

Timelines and Practical Realities

Complaint timelines vary. Online filings may generate a reference or ticket number quickly, but investigation and resolution can take weeks or months depending on the agency, completeness of evidence, and whether the company responds.

Common bottlenecks include:

The app uses a trade name and hides the real company name.
The collector uses prepaid SIM cards or fake profiles.
The app is not recorded with the SEC.
Screenshots do not show dates, numbers, or sender identity.
The complainant deleted the app before saving loan details.
Relatives or co-workers received harassment but do not want to give statements.
The borrower reports only to one agency even though the case involves both debt collection and data privacy.

A complaint does not automatically erase a valid loan. The government may act on harassment, unfair collection, unauthorized data use, or illegal lending activity, but the underlying debt may still need to be settled, disputed, or negotiated separately.

What If the Online Lending App Says It Will File Estafa?

Collectors often use the word “estafa” to scare borrowers. In Philippine law, estafa is not the same as being unable to pay a loan.

A simple unpaid debt is generally civil. For estafa, there must be facts showing fraud or deceit, usually at the beginning of the transaction. For example, using a fake identity or intentionally deceiving the lender may raise different issues. But merely missing a payment because of financial difficulty does not automatically make a borrower a criminal.

If a collector threatens jail, police pickup, or NBI arrest without a real legal basis, include the exact message in your complaint.

What If They Contacted My Employer or Family?

If your employer, family, friends, or co-workers were not guarantors or co-makers, contacting them for collection may be an unfair debt collection practice and a data privacy issue.

Ask the contacted person to save:

The message or call log
The sender’s number or account
Date and time received
Any screenshot showing your name, photo, loan amount, or accusations

A short written statement from that person can help. It does not need to be dramatic. A simple factual statement is often better:

I received a message from this number on this date about the loan of [name]. I am not a guarantor or co-maker. I did not consent to be contacted about this loan.

What If the App Is Not SEC-Registered?

If the online lending app is not authorized or recorded, report it to the SEC and include the app link, screenshots, developer name, and payment details.

Unregistered or unrecorded apps are often harder to trace, but reporting still matters because regulators may request takedowns, issue advisories, coordinate with app platforms, or investigate related entities.

Be careful with “loan rescue” groups or agents who promise to delete your loan for a fee. Some are scams that target borrowers who are already under pressure.

Frequently Asked Questions

Can I report an online lending app even if I really owe money?

Yes. A valid debt does not allow harassment, threats, public shaming, or misuse of personal data. Your complaint can focus on the abusive collection method, not on denying the loan.

Can an online lending app message my contacts?

For debt collection, they should not contact random people in your phone book. Under SEC rules and the 2026 DICT-NPC-SEC advisory, contacting persons in the borrower’s contact list other than guarantors or proper co-makers can be an unfair collection practice. A character reference is not automatically a guarantor.

Can I be jailed for not paying an online loan?

Generally, no one is imprisoned merely for debt. A lender may file a civil collection case. A criminal case requires specific facts, such as fraud, threats, falsification, or other criminal conduct. Collectors should not threaten arrest just because you missed payment.

Where should I file first, SEC or NPC?

File with the SEC if the main issue is unfair debt collection by a lending or financing company. File with the NPC if the issue involves misuse of personal data, contact list harvesting, public shaming, or unauthorized disclosure. If both happened, you may file with both.

Do I need a lawyer to file a complaint?

For many SEC and NPC complaints, individuals can file on their own if they have clear facts and evidence. For criminal complaints, serious threats, cyberlibel, or cases involving damages, legal assistance can help in preparing affidavits and identifying the proper charge.

What if the collector used a fake name or different phone numbers?

Still report it. Submit the numbers, screenshots, payment accounts, app details, and any company information shown in the loan agreement or app. Agencies often look at patterns across complaints.

Should I uninstall the lending app immediately?

Save evidence first. Take screenshots of the loan details, app permissions, company name, privacy policy, payment instructions, and messages. After preserving evidence, revoke unnecessary permissions and consider uninstalling the app to stop further access.

Can I report if I am an OFW or outside the Philippines?

Yes. You can use online channels such as SEC iMessage and NPC email filing, depending on the complaint. For notarized documents executed abroad, you may need consular notarization or apostille, depending on the agency’s requirements.

What if the lender keeps adding huge penalties?

Ask for a written statement of account showing principal, interest, penalties, payments, and legal basis for charges. Hidden or unclear charges may raise issues under consumer protection and truth-in-lending rules. Do not pay unofficial collectors or personal accounts unless you can verify that the payment channel is authorized.

Can I sue for damages if they posted my photo or shamed me?

Depending on the facts, possible remedies may include complaints before regulators, criminal complaints for defamation or cyberlibel, and civil claims for damages under the Civil Code. Articles 19, 20, 21, and 26 of the Civil Code are commonly relevant when a person’s rights, dignity, privacy, or reputation are abused.

Key Takeaways

Online lending apps may collect lawful debts, but they cannot harass, threaten, shame, or misuse personal data.
Report unfair debt collection to the SEC through the SEC iMessage portal.
Report contact list harvesting, public shaming, and unauthorized disclosure of personal data to the National Privacy Commission.
Report threats, fake criminal accusations, scams, cyberlibel, and identity misuse to DICT, NBI Cybercrime Division, or PNP Anti-Cybercrime Group.
Save evidence before deleting messages or uninstalling the app.
Character references are not automatically guarantors.
Nonpayment of a loan is generally a civil matter; collectors should not threaten jail without legal basis.
A complaint may stop or penalize abusive collection, but it does not automatically cancel a valid loan.