Online lending app harassment in the Philippines can feel frightening because collectors often use shame, threats, fake legal language, and your own contact list to pressure you into paying. Philippine law allows lenders to collect legitimate debts, but it does not allow them to threaten you, insult you, publish your name, message your contacts, pretend you will be arrested, or misuse your personal data. This article explains what conduct is illegal, which government office handles each type of complaint, what evidence to save, and the practical steps you can take to stop online lending app harassment.

What Counts as Online Lending App Harassment?

Online lending app harassment usually happens when a lending company, financing company, online lending platform, or collection agent tries to collect a debt through abusive or humiliating methods.

Common examples include:

Sending messages like “ipapahiya ka namin,” “makukulong ka,” or “pupuntahan ka namin sa bahay”
Calling repeatedly at unreasonable hours
Sending your name, photo, loan details, or alleged debt to your contacts
Messaging your employer, relatives, neighbors, or friends who are not guarantors
Posting your name or photo in Facebook groups, group chats, or public pages
Calling you a scammer, criminal, thief, or fraudster online
Threatening arrest, barangay blotter, NBI record, immigration hold, or police action for ordinary non-payment
Demanding “extension fees” or “processing fees” without a clear statement of account
Using fake lawyer letters, fake subpoenas, or fake warrant language

The important distinction is this: owing money is not the same as giving the lender permission to harass you. A lender may send lawful reminders, demand letters, and account statements. It may also file a civil case if it believes the debt is valid. But debt collection must still be lawful, fair, respectful, and consistent with privacy rules.

Legal Basis: Your Rights Against Online Lending App Harassment

SEC Memorandum Circular No. 18, Series of 2019

The main rule against abusive collection by lending and financing companies is SEC Memorandum Circular No. 18, Series of 2019, officially titled Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies. It applies not only to financing companies and lending companies, but also to third-party service providers hired to collect debts. The SEC circular allows reasonable and legally permissible collection, but requires good faith, reasonable conduct, and avoidance of unscrupulous or untoward acts.

Under this SEC rule, the following may be treated as unfair debt collection practices:

Threatening violence or other criminal means to harm a person, reputation, or property
Threatening to take action that cannot legally be taken
Using obscenities, insults, or profane language that amounts to abuse
Publishing or disclosing the names and personal information of borrowers who allegedly refuse to pay
Communicating false information about the debt, including falsely telling others that a debt is disputed or unpaid
Using false representation or deceptive means to collect or obtain borrower information
Contacting the borrower before 6:00 a.m. or after 10:00 p.m., subject to the exceptions in the circular
Contacting people in the borrower’s contact list other than those named as guarantors or co-makers

The SEC circular also requires lending and financing companies to keep borrower data confidential for collection purposes, subject only to specific exceptions such as borrower consent, court or government orders, disclosures to authorized collection agents, and other limited lawful disclosures. It also states that if collection is outsourced, the third-party collector is treated as an agent, and the ultimate responsibility remains with the lending or financing company.

Violations may lead to administrative penalties. For lending companies, the circular provides fines starting at ₱25,000 for the first offense and ₱50,000 for the second offense. For financing companies, the amounts are ₱50,000 and ₱100,000. For a third offense, depending on the facts and gravity, the SEC may impose higher fines, suspension, or revocation of the certificate of authority to operate.

2026 DICT-NPC-SEC Advisory on Online Lending Platforms

In March 2026, the DICT, National Privacy Commission, and SEC issued a public advisory on online lending platforms after reports of harassment, intimidation, public shaming, and unlawful use of personal data. The advisory specifically reiterates that unnecessary app permissions, excessive access to contact lists, processing that leads to harassment, debt collection outside guarantors, threats, and unfair collection practices are prohibited.

The advisory is very practical for borrowers because it confirms a key rule: for debt collection, lending companies, financing companies, and similar entities may only contact the guarantor. Merely being in your phone contact list does not make someone responsible for your loan.

The same advisory identifies the proper reporting channels. For unfair debt collection practices, complaints may be submitted to the SEC Financing and Lending Companies Department through the SEC iMessage portal. For other harassment, threats, fraud, or scams, the advisory points borrowers to the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

Data Privacy Act of 2012 and NPC Rules

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information processed by private entities and government offices. The law recognizes privacy as a fundamental human right and defines consent as a freely given, specific, and informed indication that a person agrees to the collection and processing of personal information. (National Privacy Commission)

For online lending apps, this matters because many harassment cases begin with excessive app permissions. A borrower may grant access for identity verification, but that does not automatically authorize the lender to harvest the entire contact list and shame the borrower through family, friends, co-workers, or neighbors.

The NPC’s amended rules on loan-related transactions state that lenders should provide just-in-time notices before getting consent, and must avoid unnecessary processing or unnecessary permissions involving personal and sensitive personal information. The NPC also explains that contact information may be processed for identity verification and checking the truthfulness of information, but processing must not be unbridled, excessive, disproportionate, used for harassment, used for debt collection outside guarantors, or result in unfair collection practices. (National Privacy Commission)

Under the Data Privacy Act, data subjects have rights such as the right to dispute inaccurate personal information and have it corrected, and the right to suspend, withdraw, block, remove, or destroy personal information that is unlawfully obtained, used for unauthorized purposes, outdated, false, incomplete, or no longer necessary. (National Privacy Commission)

Republic Act No. 11765: Financial Products and Services Consumer Protection Act

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, strengthens protection for financial consumers. It prohibits financial service providers from using abusive collection or debt recovery practices and requires them to respect client privacy and protect client data. It also makes financial service providers responsible for the acts or omissions of their employees, agents, and accredited third-party service providers, including those involved in debt collection. (Supreme Court E-Library)

This is important when an online lending app says, “Hindi kami ‘yan, collection agency ‘yan.” If the collector is acting for the lender, the lender may still be responsible under financial consumer protection rules and SEC regulations.

Truth in Lending Act and Disclosure of Charges

The Truth in Lending Act, Republic Act No. 3765, requires creditors to disclose the true cost of credit. Before a credit transaction is completed, the creditor must provide a clear written statement showing items such as the total amount financed, finance charge in pesos and centavos, and the simple annual rate on the outstanding unpaid balance. (Lawphil)

If the lending app keeps adding unclear “service fees,” “extension fees,” “late charges,” or rollover amounts, ask for a written statement of account showing:

Original principal released to you
Interest rate
Service fees
Late payment charges
Rollover or extension fees
Payments already made
Current amount claimed
Basis for every charge

A vague demand for payment is not the same as a proper explanation of the debt.

Cybercrime, Libel, Threats, and Identity Theft

Some online lending app harassment may also involve criminal laws. Republic Act No. 10175, the Cybercrime Prevention Act of 2012, covers certain offenses committed through computer systems, including computer-related identity theft and online libel. The DOJ rules implementing RA 10175 identify the NBI and PNP cybercrime units as law enforcement authorities for cybercrime cases. (Supreme Court E-Library)

If a collector posts your photo and calls you a scammer, thief, or criminal, that may raise issues of cyberlibel, depending on the facts. If they use your identity, photos, ID, contact list, or account data without right, that may raise data privacy and cybercrime issues. In Disini v. Secretary of Justice, the Supreme Court upheld online libel as constitutional as to the original author of the post, but not as to people who merely receive or react to it. (Supreme Court E-Library)

Threats, coercion, and unjust vexation may also be considered under the Revised Penal Code depending on the words used, the acts done, and the evidence. For example, Article 287 covers unjust vexation and other light coercions, while Articles 282 and 286 may become relevant where there are threats or coercive acts. (Supreme Court E-Library)

Step-by-Step Guide: How to Stop Online Lending App Harassment

1. Do not panic, and separate the debt issue from the harassment issue

There are usually two separate problems:

Issue	What it means	Where it usually goes
The debt itself	Whether you borrowed, how much was released, what interest or fees are valid, and what remains unpaid	Direct negotiation, statement of account, civil collection case, small claims if filed
Harassment and privacy abuse	Threats, public shaming, contact-list messaging, insults, fake legal threats, unlawful data use	SEC, NPC, PNP ACG, NBI Cybercrime Division, possibly prosecutor’s office

Even if you owe money, the lender must still follow the law. Even if you dispute the amount, you should still keep records and respond calmly in writing.

2. Preserve evidence before blocking, deleting, or uninstalling anything

Evidence is the foundation of a strong complaint. Before deleting the app or blocking numbers, save the proof.

Collect:

Screenshots of all threatening or insulting messages
Screenshots showing the sender’s number, username, page name, email address, or app name
Call logs showing repeated calls and call times
Screenshots of messages sent to your contacts
Statements from relatives, friends, employers, or co-workers who received messages
Screenshots of public posts, group chat messages, or comments using your name or photo
Loan agreement, disclosure statement, privacy policy, app permissions, and in-app account page
Proof of payments, GCash/Maya/bank transfer receipts, and reference numbers
App store listing, developer name, package name, and website
Demand letters, emails, or text messages from collectors

For voice calls, be careful. Philippine law has an Anti-Wiretapping Act, so secretly recording private calls may create legal issues. A safer approach is to save call logs, take detailed notes immediately after the call, ask the collector to put demands in writing, and report serious threats to law enforcement.

3. Identify the real company behind the app

Many online lending apps use brand names that are different from their SEC-registered corporate names. Some apps also change names, use several apps, or use collectors who do not clearly identify themselves.

Look for:

Corporate name in the loan agreement
SEC registration number
Certificate of Authority number
Name of financing or lending company
Customer service email
Data Protection Officer contact details
Payment recipient name
E-wallet or bank account name
App developer name in Google Play or Apple App Store
Website domain and privacy policy

Under the Lending Company Regulation Act of 2007, Republic Act No. 9474, lending companies are regulated and must operate under SEC authority. The law’s policy is to regulate lending companies, prevent practices prejudicial to public interest, and set minimum requirements for doing business. (Lawphil)

If the app does not disclose a real company, certificate of authority, address, or customer assistance channel, that is a red flag. Still file the complaint using whatever identifying details you have.

4. Revoke unnecessary app permissions

Online lending apps often ask for access to contacts, camera, photos, storage, location, SMS, or microphone. Some access may be justifiable for identity verification, but broad and continuing access is often unnecessary.

After saving evidence:

On Android: go to Settings > Apps > [App Name] > Permissions, then deny contacts, photos, location, microphone, SMS, and other permissions not needed.
On iPhone: go to Settings > Privacy & Security, then review Contacts, Photos, Camera, Microphone, and Location permissions.
Remove linked social media access if the app requested it.
Change passwords for email, e-wallets, and social media if you suspect account access.
Tighten Facebook privacy settings, especially friends list, posts, profile photo, employer, and family relationships.

Revoking permissions does not erase data already copied by the app, but it can reduce further access.

5. Send a written demand to stop harassment

Send a short, calm written message by email, in-app support, or SMS. Avoid emotional replies. Do not curse, threaten back, or make statements that can be twisted against you.

You can write:

I am requesting that all collection communications be sent only to me through this number/email. Do not contact my relatives, friends, employer, co-workers, or phone contacts unless they are expressly named as guarantors or co-makers in a valid loan document. I also object to any publication or disclosure of my personal information, photo, loan details, or alleged debt. Please send me a complete statement of account showing principal, interest, fees, penalties, payments, and the legal basis for the amount being claimed.

If you are willing to pay the correct amount, add:

I am willing to discuss the lawful balance after receiving a complete statement of account and payment instructions under the registered company name.

If you dispute the loan, add:

I dispute the amount being claimed and request proof of the loan, release of proceeds, disclosure statement, and computation.

6. Tell your contacts what is happening

If the app already messaged your contacts, send them a simple warning:

I am dealing with harassment from an online lending app. Please do not respond, send money, give my information, click links, or engage with them. Please screenshot any message you receive, including the sender’s number and date/time, and forward it to me for my complaint.

This helps in two ways. First, it protects your contacts from scams. Second, it gives you third-party evidence.

7. File a complaint with the SEC for unfair debt collection

File with the SEC when the issue involves a lending company, financing company, online lending app, or collector using abusive collection practices.

Use the SEC iMessage portal and choose the relevant service for complaints involving financing and lending companies. The SEC iMessage page states that users may open a new ticket, submit complaints, and check ticket status. (imessage.sec.gov.ph)

Include:

Your full name and contact details
App name and corporate name, if known
SEC registration number or Certificate of Authority number, if available
Loan account number or registered mobile number
Date of loan, amount released, and amount demanded
Summary of harassment
Screenshots and proof
Names and numbers of collectors
List of contacts who were messaged
Specific request: investigation, order to stop harassment, sanctions, and verification of whether the company/app is authorized

A strong SEC complaint is factual and organized. Instead of saying only “they harassed me,” write a timeline:

Date/Time	What happened	Evidence
June 3, 8:15 p.m.	Collector texted that I would be arrested tomorrow	Screenshot 1
June 4, 7:30 a.m.	My employer received a message saying I am a scammer	Screenshot from employer
June 4, 11:20 p.m.	Collector called 12 times after 10 p.m.	Call log

8. File a complaint with the National Privacy Commission

File with the NPC when the app misused your personal data, accessed your contact list excessively, disclosed your debt to others, posted your photo, messaged non-guarantor contacts, refused to delete unlawfully processed data, or ignored your data privacy rights.

The NPC formal complaint page states that a formal complaint must follow a specific format, the form should be printed and filled out, notarized, and submitted in person, by courier, or by scanned email to the NPC complaints address. (National Privacy Commission)

Prepare:

Filled-out NPC complaint form
Notarized complaint or verified complaint
Government ID
Screenshots of messages to you and your contacts
Proof that contacts were not guarantors
App privacy notice, permissions, and consent screens
Your written request to stop processing or delete data, if any
Responses or lack of response from the lender
Affidavits or signed statements from contacts who were messaged, if available

For OFWs or complainants abroad, notarization may be the practical bottleneck. Documents executed abroad for Philippine proceedings may require notarization before a Philippine consulate or proper authentication/apostille depending on where and how they will be used. For initial online reporting, send clear scanned copies first if the agency allows it, then follow instructions for original or notarized documents.

9. Report threats, scams, fake warrants, identity theft, or public shaming to cybercrime authorities

Go to cybercrime authorities if the conduct goes beyond collection and involves:

Fake subpoenas, fake warrants, fake NBI or police threats
Impersonation of a lawyer, court, police officer, or government agency
Use of your ID, photo, or account without authority
Public Facebook posts, group chats, or defamatory posts
Threats to harm you, your family, your reputation, or your property
Scam demands for processing fees, unlock fees, or advance payments

The 2026 DICT-NPC-SEC advisory lists reporting channels for other harassment, threats, fraud, and scams, including the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

A barangay blotter can also be useful if collectors visit your home, threaten your household, disturb neighbors, or cause immediate safety concerns. But for online lending app harassment, the barangay usually cannot sanction the lending company. The blotter is mainly supporting evidence and a safety record.

10. Handle the debt carefully while the complaint is pending

Filing a harassment complaint does not automatically erase a real debt. If you borrowed and received money, the lender may still claim payment through lawful means.

Practical steps:

Ask for a complete statement of account.
Pay only through traceable channels under the correct company name.
Do not pay random personal accounts without written confirmation.
Avoid paying endless “extension fees” if they do not reduce the principal.
Keep all receipts.
If negotiating, put the payment plan in writing.
Do not give new IDs, passwords, OTPs, or contacts to collectors.

If you receive a real court summons, do not ignore it. Ordinary collection cases may proceed as civil cases, and small money claims can be filed under small claims procedure. A genuine court document will identify the court, case number, parties, and deadlines. A text message saying “final warning, warrant tomorrow” is not the same as a court summons.

Can You Be Arrested for Not Paying an Online Loan?

Generally, you cannot be imprisoned merely for debt. The Philippine Constitution provides that no person shall be imprisoned for debt or non-payment of a poll tax. That means ordinary failure to pay a loan is not automatically a criminal case.

However, do not confuse this with fraud. A separate criminal complaint may be possible if there was alleged deceit from the beginning, identity fraud, falsified documents, or other criminal acts. But a collector cannot simply declare you guilty of estafa through text. Only prosecutors and courts determine criminal liability after proper proceedings.

So when an online lending app says, “May warrant ka na bukas,” ask for the official case number, court, prosecutor’s office, and copy of the complaint. Most abusive collectors use arrest threats because fear makes people pay quickly.

What If They Contacted Your Employer, Relatives, or Friends?

Contacting your phone contacts is one of the most common and most damaging forms of online lending harassment.

Under SEC rules, contacting people in the borrower’s contact list other than named guarantors or co-makers is an unfair debt collection practice. The 2026 DICT-NPC-SEC advisory is even clearer for online lending platforms: for debt collection, they may only contact the guarantor.

A “character reference” is not automatically a guarantor. A guarantor must clearly agree to be responsible for the debt if the borrower defaults. The 2026 advisory states that online lending platforms must have separate interfaces for character references and guarantors, and that guarantors must expressly consent to assume responsibility for the loan.

If your employer or contacts were messaged:

Ask them to screenshot the message.
Save the number, profile, email, or account used.
Ask if they are willing to give a short statement.
Include those screenshots in your SEC and NPC complaints.
Tell them not to reply or negotiate with the collector.

What If the App Is Not SEC-Registered?

Still report it.

An unregistered or unrecorded app may create additional regulatory issues. The SEC can investigate lending or financing activity, and cybercrime authorities can investigate threats, scams, impersonation, or online abuse. The 2026 advisory expressly refers to entities offering or facilitating loans through online lending platforms, whether recorded or unrecorded.

When the company is hidden, focus on identifiers:

App name
App store link
Developer name
Website
Phone numbers used
Email addresses used
Payment accounts
Screenshots of in-app pages
Loan agreement or disclosure statement
Names used by collectors

Do not assume you have no remedy just because the app hides behind different names.

Documents and Evidence Checklist

Purpose	Documents or evidence to prepare
SEC complaint	Screenshots, call logs, loan agreement, app name, company name, SEC/CA number if known, statement of account, proof of payments
NPC complaint	Notarized complaint form, ID, privacy notice, app permission screenshots, messages to contacts, proof contacts were not guarantors
PNP/NBI cybercrime report	Threatening messages, public posts, fake warrants/subpoenas, identity theft evidence, URLs, usernames, phone numbers
Debt negotiation	Statement of account, disclosure statement, payment receipts, written payment proposal
OFW/foreigner filing through representative	Authorization letter or Special Power of Attorney, IDs, notarized or authenticated/apostilled documents if required

Common Mistakes That Make the Problem Worse

Paying “extension fees” again and again

Some borrowers pay small extensions repeatedly, only to discover the principal barely moved. Ask whether the payment reduces principal, interest, or penalties. If the app cannot give a clear statement of account, that is a warning sign.

Deleting all messages out of fear

Do not delete evidence. Save screenshots, export messages where possible, and back them up.

Cursing or threatening the collector back

It is understandable to be angry, but abusive replies may be used against you. Keep your responses short, factual, and written.

Assuming every demand is legal because there was a loan

A real debt does not legalize public shaming, threats, contact-list harassment, or misuse of personal data.

Ignoring real court papers

Fake legal threats are common, but real court papers should never be ignored. If you receive an actual summons, check the court, case number, and deadline.

Frequently Asked Questions

How do I stop online lending apps from contacting my contacts?

First, revoke the app’s contact permissions and secure your social media privacy settings. Then send a written demand telling the lender or collector to communicate only with you and not with non-guarantor contacts. Save evidence and file complaints with the SEC for unfair debt collection and with the NPC for misuse of personal data.

Is it legal for an online lending app to message my employer?

Usually, no, if your employer is not a guarantor, co-maker, or otherwise legally involved in the loan. Messaging your employer to shame you, pressure payment, or disclose your debt may be an unfair collection practice and a data privacy issue.

Can online lending apps post my photo or name on Facebook?

They should not publish your name, photo, personal information, or alleged debt to shame you. This may violate SEC rules on unfair collection, data privacy laws, and possibly cyberlibel rules depending on what was posted.

Can I file both SEC and NPC complaints?

Yes. The SEC complaint addresses unfair debt collection by lending or financing companies. The NPC complaint addresses misuse of personal data, excessive app permissions, contact-list harvesting, unauthorized disclosure, and failure to respect data privacy rights. The same incident may involve both.

Do I still need to pay if the lending app harassed me?

Harassment does not automatically cancel a valid loan. But the lender must prove the debt, disclose the proper computation, and collect lawfully. You can dispute illegal charges, demand a statement of account, and report harassment while still addressing any legitimate balance.

What if the collector says I will be arrested for not paying?

Ask for the official case number, prosecutor’s office, court, and copy of the complaint. Ordinary non-payment of debt is not automatically a crime. Arrest threats are often used to scare borrowers. If the collector uses fake warrants, fake police language, or threats, preserve the messages and report them.

Should I uninstall the lending app?

Save evidence first. Screenshot the account page, loan details, permissions, privacy notice, messages, and company information. After that, you may revoke permissions or uninstall the app if needed for privacy and safety. Remember that uninstalling does not delete data already taken by the app.

Can OFWs file complaints from abroad?

Yes, practical filing can start online or by email where the agency allows it. The challenge is usually notarization or authentication of sworn documents. If a Philippine agency or court requires a sworn statement executed abroad, you may need consular notarization, apostille, or a properly notarized Special Power of Attorney for a representative in the Philippines.

What if I used a fake name or wrong information in the app?

Do not add more false information. If there is already a dispute, ask for the statement of account and handle the matter carefully. Harassment is still not allowed, but using false information may create separate issues if the lender claims fraud. Keep communications factual.

How long does an SEC or NPC complaint take?

Timelines vary depending on completeness of evidence, number of complaints, whether the company can be identified, and whether the agency requires additional documents. Online submission may generate a ticket quickly, but investigation and action can take weeks or months. A clear timeline, organized screenshots, and complete company details usually help avoid delays.

Key Takeaways

Online lending apps may collect legitimate debts, but they cannot use threats, insults, public shaming, fake legal claims, or contact-list harassment.
SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by lending and financing companies and their collectors.
The Data Privacy Act and NPC loan-related rules protect borrowers from excessive app permissions, unauthorized disclosure, and abusive use of contact lists.
For debt collection, contacts who are not guarantors should not be harassed or pressured to pay.
Save evidence before blocking, deleting, or uninstalling the app.
File with the SEC for unfair debt collection, the NPC for data privacy violations, and PNP/NBI cybercrime units for threats, scams, identity theft, or public online shaming.
Non-payment of an ordinary loan is not the same as a criminal conviction, and collectors cannot create warrants by text message.
Handle the debt separately: request a complete statement of account, pay only through traceable channels, and keep all receipts.