A Legal Article in the Philippine Context

Online lending apps have become common in the Philippines because they offer quick loans with minimal paperwork. Many borrowers are asked to provide “emergency contacts,” phonebook access, or references before a loan is approved. The problem begins when some lending apps call, text, shame, threaten, or pressure these contacts to force the borrower to pay.

In the Philippine context, an online lending app generally cannot lawfully harass an emergency contact. An emergency contact is not automatically a co-borrower, guarantor, surety, or collecting agent. Unless that person clearly agreed to be legally responsible for the loan, the lender has no right to demand payment from them, threaten them, shame them, or repeatedly contact them in an abusive way.

This issue touches several areas of Philippine law: data privacy, debt collection rules, cybercrime, harassment, unfair collection practices, and possible civil or criminal liability.

1. What Is an Emergency Contact?

An emergency contact is usually a person whose name and number are provided by the borrower during the loan application. In legitimate lending practice, this contact may be used to verify identity, confirm basic information, or reach the borrower in urgent situations.

However, being listed as an emergency contact does not mean the person agreed to pay the loan.

There is a major difference between:

Emergency contact A person listed for contact or verification purposes only.

Reference A person who may confirm the borrower’s identity, employment, residence, or relationship.

Co-borrower A person who also borrowed money and is jointly liable.

Guarantor or surety A person who expressly agreed to answer for the borrower’s debt if the borrower fails to pay.

In Philippine law, liability for another person’s debt cannot be assumed lightly. A lender cannot simply treat an emergency contact as liable just because their number appeared in the borrower’s phonebook or loan application.

2. Can a Lending App Contact an Emergency Contact?

A lending app may have a limited right to contact an emergency contact, but only for a legitimate and lawful purpose.

For example, it may be acceptable to ask:

“Do you know how we can reach [borrower]?” “Please inform [borrower] to contact us regarding an important matter.”

But the lender crosses the line when it says things like:

“Pay your friend’s loan.” “You will be reported too.” “We will post your name online.” “You are responsible because you are listed as an emergency contact.” “We will tell your employer, family, barangay, or neighbors.” “Your friend is a scammer and you are involved.” “We will keep calling until payment is made.”

Those statements may be abusive, misleading, defamatory, coercive, or unlawful depending on the facts.

3. An Emergency Contact Is Not Automatically Liable for the Debt

Under basic principles of obligations and contracts, a person is generally bound only when they consented to an obligation. If an emergency contact never signed a loan contract, never agreed to guarantee payment, and never received the loan proceeds, there is usually no basis to demand payment from that person.

A lender cannot create liability by unilateral declaration. The borrower cannot make another person liable simply by typing their name or phone number into an app.

For an emergency contact to become legally liable, there must usually be clear proof that they agreed to be a co-borrower, guarantor, surety, or similar obligor. This consent must be real, voluntary, and provable.

Therefore, statements such as “You are the emergency contact, so you must pay” are generally misleading.

4. Data Privacy Issues Under the Data Privacy Act

The Data Privacy Act of 2012, or Republic Act No. 10173, is highly relevant. Phone numbers, names, addresses, social media profiles, employment details, photos, and contact lists are personal information. Lending apps that collect, store, use, or disclose such information must comply with data privacy principles.

The main principles are:

Transparency The person must know how their data is being collected, used, stored, shared, and protected.

Legitimate purpose The use of personal data must be connected to a lawful and clearly declared purpose.

Proportionality The data collected and used must be adequate, relevant, suitable, necessary, and not excessive.

When a lending app accesses a borrower’s entire contact list and sends collection messages to friends, relatives, coworkers, or employers, serious privacy concerns arise. Even if the borrower clicked “allow contacts,” that does not automatically give the lender unlimited power to use everyone’s personal information for public shaming, pressure tactics, or mass collection.

The emergency contact also has privacy rights. Their personal data cannot be misused merely because the borrower listed them.

5. Consent of the Borrower Is Not Always Enough

Some online lending apps argue that the borrower gave consent by allowing access to contacts or by agreeing to app terms and conditions.

That argument has limits.

First, the borrower can only consent to the processing of their own personal data. The borrower’s consent does not automatically replace the consent of every person in their contact list.

Second, consent must be informed, specific, and freely given. If the app hides broad data access in vague terms, or makes invasive permissions a condition for a small loan, regulators may view the practice critically.

Third, even when data processing is allowed, the use must still be lawful, fair, and proportionate. Consent is not a license to harass, shame, threaten, or defame people.

6. SEC Rules on Financing and Lending Companies

In the Philippines, lending companies and financing companies are regulated by the Securities and Exchange Commission when they operate as registered lending or financing entities.

The SEC has issued rules and circulars against abusive debt collection practices, especially involving online lending apps. These rules have addressed practices such as:

Repeatedly contacting people in the borrower’s contact list Using threats, insults, obscene language, or false representations Shaming borrowers or contacts on social media Disclosing loan details to third parties Threatening legal action that is not actually intended or legally proper Using fake government, police, court, or lawyer identities Contacting the borrower’s employer or relatives in an abusive way Collecting through intimidation or public humiliation

The SEC has also acted against certain online lending operators for unfair debt collection practices, unauthorized operations, abusive collection methods, and misuse of personal data.

A lending app that harasses emergency contacts may face administrative consequences, including penalties, suspension, revocation of registration, takedown orders, or referral to other agencies depending on the circumstances.

7. National Privacy Commission Complaints

The National Privacy Commission handles complaints involving misuse of personal data. If a lending app obtained, used, disclosed, or processed an emergency contact’s personal information improperly, the emergency contact may consider filing a complaint with the NPC.

Possible privacy violations may include:

Using the emergency contact’s number without lawful basis Disclosing the borrower’s debt to the emergency contact Sending defamatory or threatening messages Accessing and using the borrower’s phonebook excessively Sharing personal information with collectors or third parties without proper safeguards Publicly posting names, photos, or accusations Using contact information for harassment rather than legitimate collection

The NPC has been active in matters involving online lending apps, particularly where contact lists were harvested and used for debt-shaming or coercive collection.

8. Harassment, Threats, and Unjust Vexation

Depending on the conduct, harassment of an emergency contact may also raise criminal-law concerns.

Possible criminal issues include:

Grave threats or light threats If the collector threatens harm, arrest, public exposure, employment consequences, or other unlawful injury.

Unjust vexation If the conduct causes annoyance, irritation, distress, torment, or disturbance without legitimate justification.

Slander or oral defamation If defamatory statements are made verbally.

Libel or cyberlibel If defamatory statements are made in writing, online, by text, chat, social media, email, or similar means.

Coercion If the collector uses intimidation to force someone to do something against their will, such as paying a debt they do not owe.

Not every annoying call is automatically a criminal offense. But repeated, abusive, threatening, defamatory, or coercive communications may expose the collector or lending company to legal consequences.

9. Cyberlibel and Online Shaming

If a lending app or collector posts on Facebook, Messenger groups, workplace chats, community pages, or other online platforms accusing the borrower or emergency contact of being a scammer, fraudster, thief, or criminal, this may amount to cyberlibel.

Cyberlibel under Philippine law involves defamatory statements made through a computer system or similar digital means. A debt collector cannot avoid liability simply by saying the post was made to collect a debt.

Statements that may be problematic include:

“This person is a scammer.” “This borrower is a criminal.” “This emergency contact is hiding a debtor.” “This person helped commit fraud.” “Do not trust this person.” “Employer, please terminate this employee.”

Debt collection does not justify public humiliation. A debt is a civil obligation unless there is a separate criminal act. Nonpayment of a loan, by itself, is generally not automatically a crime.

10. Disclosure of the Borrower’s Debt to Third Parties

A common abusive practice is telling the emergency contact:

“Your friend owes us money.” “Your relative failed to pay.” “Your coworker is delinquent.” “Please pressure them to pay.” “We will keep calling you because they are hiding.”

This may be improper because loan information is personal and financial information. Disclosure to third parties must have a lawful basis. Even when contacting a reference is allowed, disclosing unnecessary details about the loan, amount, penalties, default status, or accusations may be excessive.

The safer and more lawful approach for a lender is to ask the contact to relay a message, without revealing private financial details.

11. Can a Lending App Call the Emergency Contact’s Employer?

Calling an emergency contact’s workplace, supervisor, HR department, or business contacts to shame or pressure them is highly risky and may be unlawful.

A lender may not use employment pressure as a collection tool against a person who is not liable for the loan. If the collector tells the employer that the emergency contact is involved in a debt issue, is irresponsible, is a scammer, or should be disciplined, this may lead to liability for defamation, privacy violation, or damages.

Even with the borrower, contacting an employer can be abusive if done to humiliate, threaten, or pressure rather than for a legitimate verification purpose.

12. Can the Lending App Threaten Arrest?

Collectors often say:

“You will be arrested.” “The police will come.” “We filed a criminal case.” “NBI will visit you.” “Barangay officials will pick you up.” “You will be charged as an accomplice.”

These statements are often misleading or abusive, especially when directed at an emergency contact.

In general, unpaid debt is a civil matter. A borrower may be sued for collection of sum of money, but nonpayment alone does not automatically lead to arrest. An emergency contact who did not borrow, guarantee, or participate in fraud generally should not be threatened with criminal liability.

A lending app cannot use fake police threats, fake court notices, fake subpoenas, fake barangay complaints, or fabricated legal documents to force payment.

13. Can the Emergency Contact Block the Lending App?

Yes. An emergency contact may block calls, texts, and messages from a lending app or collector, especially if they are abusive, repeated, irrelevant, or threatening.

Blocking does not create legal liability. Refusing to answer a collector’s call does not make the emergency contact responsible for the borrower’s debt.

However, it is wise to preserve evidence before blocking, such as screenshots, call logs, phone numbers, account names, messages, and recordings where legally usable.

14. What Evidence Should Be Kept?

An emergency contact who is being harassed should preserve evidence carefully.

Useful evidence includes:

Screenshots of text messages, Messenger chats, Viber messages, emails, app notifications, and social media posts Call logs showing repeated calls Names, numbers, usernames, and profile links of collectors Voice recordings, where legally obtained and relevant Screenshots of threats, insults, accusations, or demands for payment Proof that the person is only an emergency contact and not a co-borrower The name of the lending app, company, SEC registration number, website, and app store page Proof of public posting or group messages Names of witnesses who saw or received the messages

Evidence matters because complaints before the SEC, NPC, PNP Anti-Cybercrime Group, NBI Cybercrime Division, or courts will require specific facts.

15. What Can an Emergency Contact Say to the Collector?

The emergency contact may respond firmly and briefly. For example:

“I am not the borrower, co-borrower, guarantor, or surety. I did not consent to be contacted for debt collection. Stop contacting me and delete my personal data unless you have a lawful basis to retain it.”

Another possible response:

“Do not disclose loan information to me. Do not threaten or harass me. Any further abusive communication will be documented and reported to the proper authorities.”

The emergency contact should avoid arguing at length, admitting liability, promising payment, or giving additional personal information.

16. Where Can Complaints Be Filed?

Depending on the facts, complaints may be brought before different agencies.

Securities and Exchange Commission For abusive collection practices by lending or financing companies, unauthorized lending operations, or violations of lending company rules.

National Privacy Commission For misuse of personal data, unauthorized processing, excessive contact-list access, disclosure of debt information, or privacy violations.

PNP Anti-Cybercrime Group or NBI Cybercrime Division For cyberlibel, online threats, identity misuse, fake legal notices, extortion-like conduct, or digital harassment.

Barangay or local authorities For community-level harassment, repeated disturbance, or possible settlement discussions, depending on the nature of the complaint.

Regular courts For civil damages, injunctions, defamation cases, or other legal remedies.

App stores and platforms The lending app may also be reported to Google Play, Apple App Store, Facebook, Messenger, or other platforms if it violates platform policies.

17. Can the Borrower Also Complain?

Yes. The borrower may also complain if the lending app accessed contacts, disclosed the loan to others, used threats, imposed abusive collection methods, or publicly shamed them.

Borrowers have rights even when they owe money. A valid debt does not authorize unlawful collection methods.

The borrower may still be liable for the loan, interest, penalties, and lawful collection costs, but the lender must collect through lawful means.

18. Does Failure to Pay a Loan Justify Harassment?

No. Debt collection must be lawful, fair, and proportionate.

A lender may send reminders, demand letters, account notices, or file a proper civil case. It may report to lawful credit information systems if allowed. It may use legitimate collection agencies.

But it may not:

Harass emergency contacts Threaten people with arrest without basis Publicly shame borrowers or contacts Use obscene or insulting language Send messages to everyone in the borrower’s phonebook Pretend to be a police officer, lawyer, court sheriff, or government official Disclose private loan information unnecessarily Pressure uninvolved third parties to pay Use false accusations to destroy reputation

A debt does not erase a person’s rights.

19. Is It Legal for Lending Apps to Access Contacts?

Accessing contacts is not automatically illegal, but it is heavily restricted by privacy principles.

The app must have a lawful basis, must disclose why it needs access, must collect only what is necessary, and must not use the contacts for abusive collection.

If the app accesses an entire phonebook when it only needs one or two references, that may be excessive. If it uses the phonebook to shame the borrower, pressure relatives, or threaten coworkers, that may be unlawful.

The fact that the borrower clicked “allow” does not automatically make all later uses lawful.

20. What If the Emergency Contact Actually Agreed to Be a Guarantor?

The answer changes if the emergency contact truly agreed to guarantee the loan.

If the person signed or electronically accepted a guaranty, suretyship agreement, co-borrower agreement, or similar undertaking, the lender may have a legal basis to demand payment from them. Even then, the lender still cannot harass, threaten, shame, or abuse them.

Legal liability does not permit illegal collection methods.

A lawful demand is different from harassment.

21. What If the Emergency Contact Helped the Borrower Commit Fraud?

If an emergency contact knowingly helped the borrower submit false information, fake identity documents, or fraudulent details, there could be separate legal consequences. But the lender must have proof. It cannot simply accuse the emergency contact of fraud because the borrower defaulted.

Default is not the same as fraud. A borrower’s inability or failure to pay does not automatically make the borrower, much less the emergency contact, a criminal.

22. Common Illegal or Abusive Collection Tactics

The following tactics are red flags:

Calling more than necessary and at unreasonable hours Using profanity, insults, or humiliation Calling relatives, friends, coworkers, employers, or neighbors Sending messages to group chats Posting the borrower’s photo or name online Labeling the borrower or contact as a scammer Threatening arrest, barangay action, NBI, police, or immigration consequences without basis Demanding payment from an emergency contact Using fake lawyer letters or fake court documents Threatening to contact the employer Telling third parties the loan amount or default status Creating edited photos, wanted posters, or defamatory graphics Using multiple numbers to evade blocking Refusing to identify the company or collector Continuing to contact someone after being told they are not liable

These practices may support complaints or legal action.

23. Possible Liability of the Lending Company

A lending company may be liable for the acts of its collectors, agents, employees, or third-party collection agencies if they act within the collection process or under the company’s authority.

The company cannot always escape liability by saying:

“That was just our collector.” “That was a third-party agency.” “We did not authorize that exact wording.” “The borrower gave us the number.” “You were listed as emergency contact.” “The borrower owes us money.”

Regulators and courts may look at the total conduct: how the app collects data, how it trains collectors, what scripts are used, whether harassment is tolerated, and whether the abuse is part of a pattern.

24. Civil Remedies

An emergency contact who suffers damage may consider civil remedies. Depending on the facts, possible claims may involve:

Damages for violation of privacy Damages for defamation Damages for emotional distress, anxiety, humiliation, or reputational injury Damages for abuse of rights Injunction to stop further harassment Claims based on unlawful acts by employees or agents

Philippine civil law recognizes that rights must be exercised with justice, honesty, and good faith. A creditor has a right to collect, but that right must not be abused.

25. Demand to Stop Processing Personal Data

An emergency contact may demand that the lending app stop processing their personal data if there is no lawful basis to continue.

This may include demanding that the company:

Stop calling or messaging Delete the contact’s number from collection lists Stop sharing the number with collectors Stop disclosing loan information Identify where the data came from Identify the company’s data protection officer Provide the purpose and legal basis for processing Preserve records for investigation

A written demand is usually better than a purely verbal one because it creates a record.

26. Sample Message to a Lending App

Here is a practical message an emergency contact may send:

“I am not the borrower, co-borrower, guarantor, or surety of this loan. I did not authorize your company to contact me for debt collection. Do not demand payment from me or disclose the borrower’s loan details to me. Your repeated calls and messages are unwanted and are being documented. Please stop processing my personal information for collection purposes unless you can show a lawful basis. Further harassment, threats, or disclosure of personal information may be reported to the SEC, National Privacy Commission, and appropriate law enforcement agencies.”

This kind of message is firm but avoids unnecessary insults or threats.

27. Practical Steps for Emergency Contacts

An emergency contact who is being harassed can take these steps:

Do not pay unless there is a clear legal obligation.
Do not admit liability.
Do not give personal information.
Save all evidence.
Ask for the company name, SEC registration, office address, and collector identity.
Send a written demand to stop contacting you.
Block the numbers after preserving evidence.
Report abusive messages to the relevant agency.
Warn the borrower, but do not let the collector pressure you into becoming the collector’s messenger.
Consult a lawyer if threats, public posts, or employer contact occur.

28. Practical Steps for Borrowers

Borrowers should also take care when using online lending apps.

Before borrowing, check whether the lending company is registered, read permissions requested by the app, avoid apps that demand unnecessary phonebook access, and keep copies of loan terms.

If the borrower is already dealing with harassment, they should document everything and communicate in writing. They may also revoke unnecessary permissions, uninstall abusive apps after preserving evidence, and file complaints if personal data was misused.

A borrower should not ignore legitimate debts, but repayment issues must be handled separately from abusive collection. The borrower can negotiate payment while still objecting to unlawful harassment.

29. Lawful Collection vs. Harassment

A lender may lawfully:

Send payment reminders Send formal demand letters Call the borrower at reasonable times Use respectful collection agents Offer restructuring or settlement File a civil collection case Report valid credit information through lawful channels

A lender may not lawfully:

Threaten uninvolved contacts Shame borrowers online Use personal data excessively Demand payment from non-liable persons Pretend to be police or court personnel Use defamatory language Disclose private loan details to third parties Use fear, humiliation, or social pressure as the main collection method

The dividing line is not merely whether the borrower owes money. The dividing line is whether the collection method is lawful, fair, necessary, and proportionate.

30. Key Legal Takeaways

An online lending app cannot lawfully harass an emergency contact.

An emergency contact is not automatically liable for the borrower’s loan.

A borrower’s consent to provide a contact number does not give the lender unlimited authority to use that contact for debt collection.

Repeated calls, threats, insults, public shaming, disclosure of loan details, and demands for payment from an emergency contact may violate Philippine law and regulations.

The emergency contact may preserve evidence, demand that the harassment stop, block the collector, and file complaints with the SEC, National Privacy Commission, cybercrime authorities, or courts depending on the conduct involved.

The lender has a right to collect valid debts, but collection must be done through lawful means. Debt collection is not a license to invade privacy, destroy reputations, threaten families, or pressure uninvolved third parties.