If an online lending app is calling your contacts, posting debt-shaming messages, threatening to expose you online, using profane language, or saying they will have you arrested, you are not powerless. In the Philippines, abusive online lending app collection can be reported to the Securities and Exchange Commission (SEC), the National Privacy Commission (NPC), and cybercrime authorities depending on what happened. The fastest way to protect yourself is to preserve evidence first, identify the lending company behind the app, then file the right complaint with the right agency.
What counts as online lending app harassment in the Philippines?
A lender may demand payment of a legitimate debt, but it must collect through lawful, fair, and proportionate means. The problem is not simply that the app is asking you to pay. The problem begins when collection agents use intimidation, public shame, unauthorized use of personal data, threats, fake legal claims, or pressure on people who are not responsible for your loan.
Under SEC Memorandum Circular No. 18, Series of 2019, unfair debt collection practices include:
- Threats of violence or other criminal means to harm a person, reputation, or property
- Threats to take action that cannot legally be taken
- Obscene, insulting, or profane language meant to abuse the borrower
- Disclosure or publication of the borrower’s name or personal information because of alleged refusal to pay
- Telling other people about the loan when the information is false, should be known to be false, or includes the fact that the debt is disputed
- False representations or deceptive means to collect or obtain borrower information
- Contacting the borrower before 6:00 a.m. or after 10:00 p.m., except in limited circumstances
- Contacting people in the borrower’s contact list other than those named as guarantors or co-makers
A 2026 joint advisory by the DICT, NPC, and SEC also states that online lending platforms must not use excessive or disproportionate personal data processing, especially contact-list access, in a way that leads to harassment, debt collection outside named guarantors, threats of violence, or unfair collection practices. It specifically says that contacting persons in the borrower’s contact list other than named guarantors is prohibited.
Legal basis: your rights against abusive online lenders
Several Philippine laws may apply at the same time. That is why many victims file more than one report: one with the SEC for unfair collection, one with the NPC for data privacy violations, and one with the PNP Anti-Cybercrime Group or NBI Cybercrime Division for threats, fraud, or online attacks.
| Legal basis | Why it matters in online lending harassment |
|---|---|
| SEC Memorandum Circular No. 18, Series of 2019 | Prohibits unfair debt collection practices by financing and lending companies, including abusive language, threats, public shaming, unauthorized disclosure, and improper contact with third parties. |
| Republic Act No. 9474, Lending Company Regulation Act of 2007 | Lending companies must operate under SEC authority. A company cannot simply lend to the public as a lending company without complying with SEC rules. (Lawphil) |
| Republic Act No. 8556, Financing Company Act of 1998 | Financing companies also operate under SEC authority and may be penalized for operating without proper authority or violating the law. (Lawphil) |
| Republic Act No. 11765, Financial Products and Services Consumer Protection Act | Recognizes financial consumers’ rights to fair treatment, disclosure and transparency, data privacy, and timely complaint handling. It also covers digital financial products and services. (Supreme Court E-Library) |
| Republic Act No. 10173, Data Privacy Act of 2012 | Protects personal information and gives the NPC authority to receive complaints, investigate, order corrective action, and recommend prosecution for data privacy violations. (National Privacy Commission) |
| Republic Act No. 10175, Cybercrime Prevention Act of 2012 | May apply when threats, identity theft, computer-related fraud, or cyber libel are committed through online messages, social media, or other computer systems. (Supreme Court E-Library) |
| Revised Penal Code | Threats, coercion, unjust vexation, libel, slander, and related acts may be criminal offenses depending on the exact words and acts used. (Lawphil) |
| Civil Code Articles 19, 20, 21, and 26 | Even if an act is not charged as a crime, abusive conduct may support a civil action for damages when it violates good faith, morals, privacy, dignity, or peace of mind. (Lawphil) |
| Republic Act No. 3765, Truth in Lending Act | If the complaint involves hidden charges, misleading fees, or failure to disclose the true cost of credit, this law may be relevant. (Lawphil) |
Where to report online lending app harassment
| Problem | File with | Best for |
|---|---|---|
| Harassing collection calls, threats, shaming, contacting non-guarantor contacts | SEC Financing and Lending Companies Department / FINLEND through the SEC iMessage portal | Unfair debt collection by lending or financing companies and their online lending platforms |
| Contact-list scraping, unauthorized disclosure of personal data, public posting of borrower details | National Privacy Commission | Data privacy complaints under RA 10173 |
| Death threats, edited sexual images, identity theft, fake warrants, extortion, fraud, online attacks | PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DICT Cyber Hotline | Criminal or cybercrime investigation |
| A formal criminal case | Office of the City or Provincial Prosecutor | Filing a complaint-affidavit after evidence is gathered |
The 2026 DICT-NPC-SEC advisory lists the SEC iMessage portal for unfair debt collection complaints, hotline 1-4732 or 1-4SEC, DICT Cyber Hotline email 1326@dict.gov.ph, NBI Cybercrime Division email ccd@nbi.gov.ph, and PNP Anti-Cybercrime Group email acg@pnp.gov.ph and onlinecims.ocs@gmail.com.
Step-by-step guide: how to report harassment by an online lending app
1. Preserve evidence before blocking, deleting, or uninstalling
Your evidence is usually more important than your explanation. Agencies need to see what happened, when it happened, who sent it, and how it connects to the lending app.
Save:
- Screenshots of text messages, chats, emails, Facebook posts, comments, and app notifications
- Call logs showing the number, date, time, and frequency of calls
- Screen recordings showing the full conversation thread, sender profile, and number
- The app name, app store page, developer name, privacy notice, website, and customer service details
- Loan agreement, disclosure statement, repayment schedule, interest, service fees, processing fees, and penalties
- Proof of payments, receipts, GCash or Maya confirmations, bank transfers, and collection notices
- Messages sent to your family, employer, co-workers, barangay officials, or other contacts
- Names and numbers of people contacted by the collector
- Any threats involving arrest, barangay blotter, fake subpoenas, edited photos, “sex scandal” threats, or public posting
Do not edit the screenshots except to make copies for safe sharing. Keep the original files on your phone and back them up to cloud storage or another device.
2. Identify the company behind the app
The app name is not always the legal company name. Many online lending apps use trade names, platform names, or several app names under one lending or financing company.
Look for the legal entity in:
- The loan agreement
- The disclosure statement
- The privacy policy
- The app’s “About,” “Terms,” or “Contact Us” page
- The app store developer page
- SEC registration or recorded online lending platform listings
- Receipts, payment channels, and collection messages
This matters because a complaint against “Cash Fast App” may be harder to act on if the SEC or NPC needs the registered corporate name, address, responsible officers, or platform operator.
3. File a complaint with the SEC for unfair debt collection
Use the SEC complaint route when the issue involves abusive collection practices by a lending company, financing company, or online lending platform. The SEC iMessage portal allows users to open a new ticket and submit a complaint; the SEC page describes it as a platform for reporting issues and submitting complaints. (Securities and Exchange Commission)
In your SEC complaint, include:
- Your full name, contact number, and email address
- Name of the online lending app
- Name of the lending or financing company, if known
- Loan amount, release date, due date, and amount demanded
- Summary of the harassment in chronological order
- Screenshots, call logs, payment receipts, and messages to third parties
- Names and numbers of collection agents, if visible
- A clear request for investigation for unfair debt collection practices
A practical subject line is:
[Your Full Name] _ [Online Lending App / Company] _ Unfair Debt Collection / Harassment Complaint
SEC MC 18 allows the SEC to impose administrative penalties. For violations, the circular provides fines for lending companies and financing companies, and for a third offense the SEC may impose heavier fines, suspension of lending or financing activities, or revocation of the certificate of authority, depending on the facts and gravity of the offense.
4. File a complaint with the NPC for privacy violations
Use the NPC route when the app accessed your contacts without a proper purpose, messaged people who were not guarantors, posted your name or photo, disclosed your debt, used your ID or selfie improperly, or threatened to misuse your personal information.
The NPC formal complaint page requires a specific complaint format: download the form, print and fill it out, have it notarized, then submit it in person, by courier, or by scanned email to the NPC. (National Privacy Commission)
For an NPC complaint, prepare:
- Notarized complaint form or complaint-affidavit
- Valid government ID
- Screenshots showing what personal data was used or disclosed
- Proof that non-guarantor contacts were messaged
- Privacy policy or app permission screenshots
- Loan documents showing what consent was supposedly given
- A short explanation of why the data use was excessive, unauthorized, or unrelated to legitimate collection
A common mistake is filing a privacy complaint as an FOI request. The NPC has explained in a public FOI response that a harassment and privacy complaint against an online lending app is not an FOI request and should follow the NPC Citizen’s Charter complaint process instead. (www.foi.gov.ph)
5. Report serious threats, fraud, or cybercrime to PNP, NBI, or DICT
Go to cybercrime authorities when the collector:
- Threatens death, physical harm, rape, or kidnapping
- Threatens to create or circulate edited sexual images
- Pretends to be police, court staff, prosecutor, or barangay official
- Sends fake warrants, subpoenas, or criminal case notices
- Uses your identity, photos, IDs, or contact list for fraud
- Posts defamatory statements online
- Extorts payment by threatening public humiliation
The PNP Anti-Cybercrime Group and NBI Cybercrime Division can receive complaints involving online threats, fraud, scams, and cyber harassment. The DICT-NPC-SEC advisory lists official reporting channels for these agencies, including NBI Cybercrime Division and PNP Anti-Cybercrime Group contact details.
For immediate danger, make a police report right away and preserve the threatening message. For a criminal complaint, expect to prepare a complaint-affidavit and supporting affidavits from people who received the harassment messages.
6. Keep paying records separate from harassment records
A harassment complaint does not automatically cancel a valid loan. Keep a separate file for:
- Principal amount received
- Amount already paid
- Interest and fees charged
- Amount the app claims is still due
- Proof of disputed charges
- Any settlement or payment plan
This distinction matters because regulators may punish harassment even if a loan exists, while payment disputes may require a separate review of the loan terms, disclosure, interest, penalties, and collection charges.
What to do if the lending app contacts your family, employer, or barangay
If the app messages people who are not guarantors, save those messages. Ask the recipient to send you the full screenshot showing the sender, date, time, number, and message. If the person is willing, ask them to execute a short statement describing what they received.
A simple response your contact can use is:
“I am not a guarantor or co-maker of this loan. Do not contact me again or use my personal information for collection. Further messages will be included in complaints to the SEC, NPC, and cybercrime authorities.”
Character references are not automatically guarantors. The 2026 DICT-NPC-SEC advisory distinguishes character references, who may be used for identification or verification, from guarantors, who must separately consent to assume responsibility for the loan in case of default.
What if the collector says you will be arrested?
A person cannot be imprisoned merely for debt. Article III, Section 20 of the 1987 Philippine Constitution states that no person shall be imprisoned for debt or non-payment of a poll tax. (Supreme Court E-Library)
This does not mean every loan-related issue is immune from criminal law. Fraud, falsified documents, identity theft, bouncing checks, threats, or cybercrime may create separate criminal issues. But a collector’s blanket statement that “police will arrest you today if you do not pay” is often used as intimidation, especially when there is no real case, subpoena, warrant, or court order.
A real warrant of arrest is issued by a court, not by a lending app, collection agent, or “legal department” text message.
Practical timelines and common bottlenecks
Online lending harassment complaints are often delayed because the evidence is incomplete, the respondent company is unclear, or the complainant submits only emotional summaries without organized screenshots.
Expect these practical steps:
| Stage | What usually happens |
|---|---|
| Initial complaint | Agency checks if the complaint is under its jurisdiction and whether documents are complete |
| Validation | You may be asked for clearer screenshots, company name, loan documents, or a notarized complaint |
| Referral or coordination | SEC, NPC, PNP, NBI, or DICT may refer aspects of the complaint to the proper office |
| Investigation | The company or platform may be asked to comment, explain, or produce records |
| Resolution or enforcement | Possible outcomes include warnings, fines, orders, suspension, revocation, criminal referral, or closure of the complaint depending on evidence |
The best way to reduce delay is to submit a timeline table with dates, times, screenshots, phone numbers, and the specific rule violated.
Sample evidence timeline format
| Date and time | What happened | Evidence file |
|---|---|---|
| May 3, 9:14 p.m. | Collector texted threat to message my employer | Screenshot 01 |
| May 4, 7:02 a.m. | My sister received message saying I am a scammer | Screenshot 02; sister’s statement |
| May 4, 11:38 p.m. | Collector called after 10 p.m. and used profane language | Call log 03; recording if lawfully available |
| May 5, 8:30 a.m. | App demanded payment higher than disclosed amount | Loan disclosure; payment demand screenshot |
| May 5, 1:10 p.m. | Facebook post disclosed my name and alleged debt | Screenshot 04; URL; screen recording |
Special notes for OFWs and foreigners
Filipinos abroad can usually start by filing through online or email channels, especially for SEC, NPC, DICT, PNP ACG, and NBI cybercrime reports. If a notarized affidavit is required and you are outside the Philippines, you may need consular notarization at a Philippine Embassy or Consulate, or a foreign notarization with the proper authentication depending on where the document was executed and where it will be used. Philippine embassies and consulates commonly notarize affidavits and similar private documents for use in the Philippines. (Philippine Embassy)
Foreigners in the Philippines may also report harassment if the online lender is operating in the Philippines, processing personal data in the Philippines, or targeting Philippine-based borrowers. The Data Privacy Act has extraterritorial provisions when the processing relates to a Philippine citizen or resident, or when the entity has links with the Philippines. (National Privacy Commission)
Common mistakes to avoid
Deleting the app too early
Uninstalling the app may remove useful proof such as the loan agreement, privacy notice, in-app messages, and repayment computation. Capture evidence first.
Paying only because of threats
Payment may stop some calls, but it may also encourage repeated abusive demands if the amount is unclear. If you pay, keep proof and state what the payment is for.
Filing with only one agency
If the issue is both harassment and data misuse, filing only with the SEC may leave the privacy issue unresolved. If there are death threats or fake sexual images, filing only with the NPC may leave the criminal aspect unaddressed.
Sending angry replies
Collectors may screenshot your replies and use them to distract from their own misconduct. Keep replies short, factual, and non-abusive.
Assuming high interest alone is harassment
High interest, by itself, is not always treated the same as harassment. The Credit Information Corporation notes that SEC MC 18 addresses unfair collection practices and does not cover high interest rates. Hidden charges, misleading disclosures, or failure to show the true cost of credit may instead raise issues under disclosure and consumer protection rules, including the Truth in Lending Act and RA 11765. (Credit Information Corporation (CIC))
Frequently Asked Questions
Can I report an online lending app for messaging my contacts?
Yes. If the people contacted were not named guarantors or co-makers, this may violate SEC rules on unfair debt collection and data privacy principles. The 2026 DICT-NPC-SEC advisory specifically says contacting persons in the borrower’s contact list other than named guarantors is prohibited.
Where should I report online lending harassment first?
For abusive collection, start with the SEC. For contact-list misuse, public posting, or unauthorized personal data processing, file with the NPC. For threats, extortion, fake warrants, identity theft, or cyber attacks, report to PNP ACG, NBI Cybercrime Division, or DICT Cyber Hotline.
Do I still have to pay the loan if the app harassed me?
A harassment complaint does not automatically erase a valid loan. However, the lender may still be penalized for illegal collection practices. Keep your payment dispute separate from your harassment evidence.
Can an online lending app post my name and picture online?
Publicly posting your name, photo, alleged debt, ID, or private details to shame you may raise SEC, NPC, civil, and possibly criminal issues. It may involve unfair debt collection, unauthorized disclosure of personal information, defamation, or cybercrime depending on the content and platform.
Can I be jailed for not paying an online loan?
Not for debt alone. The Constitution prohibits imprisonment for debt. But separate criminal acts, such as fraud, falsification, identity theft, or cybercrime, are different from simple non-payment. (Supreme Court E-Library)
What if the app says it will file a barangay case?
A barangay may receive complaints between residents in proper cases, but a lending app cannot use the barangay as a tool for public shaming or unlawful collection. If the collector threatens to post your debt at the barangay, message barangay officials, or humiliate you publicly, preserve the evidence and include it in your SEC and NPC complaints.
What if the collector uses a fake police or court notice?
Save the notice and report it to cybercrime authorities. A real court process has official case details and comes from the proper court or government office, not from a random collection number pressuring you to pay within minutes.
Can my employer be contacted about my online loan?
A collector should not use your workplace to shame, pressure, or disclose your alleged debt to people who are not legally responsible for it. If your employer or co-worker receives messages, ask for full screenshots and include them in your complaint.
What if the lending app is not registered with the SEC?
Report it to the SEC and cybercrime authorities. Operating as a lending or financing company without proper authority may create separate regulatory issues. Save the app store page, website, developer name, payment channels, and all collection messages.
Key Takeaways
- Online lending apps may collect legitimate debts, but they cannot use threats, public shaming, abusive language, false legal claims, or unauthorized contact-list harassment.
- File with the SEC for unfair debt collection, the NPC for personal data misuse, and PNP ACG/NBI/DICT for threats, fraud, extortion, or cybercrime.
- Preserve evidence before deleting messages, blocking numbers, or uninstalling the app.
- Character references are not automatically guarantors; non-guarantor contacts should not be used for debt collection.
- You cannot be jailed for debt alone, but fraud, threats, identity theft, or other criminal acts are separate matters.
- A strong complaint includes a clear timeline, screenshots with dates and numbers, loan documents, payment records, and proof of messages sent to third parties.