Yes. Philippine lending apps may collect valid debts, but they generally cannot contact your family, friends, co-workers, or phone contacts to pressure you to pay unless that person is truly a guarantor, co-maker, surety, or other person who expressly agreed to be legally responsible for the loan. A family member listed only as a “reference” is not automatically liable. A collector also cannot shame you, threaten you, post your details online, call at unreasonable hours, or use your contact list as a weapon.

This matters because many borrowers panic when an online lending app says, “We will message all your contacts,” “We will call your employer,” or “We will tell your family you are a scammer.” In the Philippines, those tactics can violate SEC rules on unfair debt collection, the Data Privacy Act, and sometimes even criminal laws. This guide explains what is allowed, what is prohibited, what evidence to save, and where to complain.

The Short Answer: Can a Lending App Contact Your Family?

A lending app may contact a family member only in limited situations:

Situation	Can the lending app contact them?	Important limit
Family member is only in your phone contacts	No	Contact-list harvesting and debt shaming are prohibited.
Family member is only a character reference	Not for debt collection	A character reference may be used for verification, not payment pressure.
Family member expressly agreed to be a guarantor	Yes, but only lawfully	No threats, shaming, false claims, or abusive calls.
Family member signed as co-maker or surety	Yes, because they may be directly liable	They should receive proper, respectful collection communications.
Family member did not sign anything	No, as a rule	Being your parent, sibling, spouse, child, or friend does not automatically make them liable.
Employer or officemate is contacted to embarrass you	No	This is a common unfair collection practice.

The 2026 DICT-NPC-SEC Advisory on Online Lending Platforms states that contacting people in the borrower’s contact list other than those named as guarantors is prohibited, and that for debt collection, lending and financing companies may only contact the guarantor. It also says unnecessary, excessive, or disproportionate processing of personal data, especially contact-list access, is prohibited.

Why Lending Apps Cannot Use Your Contact List for Collection

Many online lending apps ask for phone permissions during installation. Some borrowers click “allow” because they need the loan urgently or because the app will not proceed without access. That does not mean the lender can freely copy your contacts and message your relatives.

Under Republic Act No. 10173, or the Data Privacy Act of 2012, personal data must be processed fairly, lawfully, and only for legitimate purposes. The National Privacy Commission has specifically addressed online lending apps through NPC Circular No. 2020-01, as amended by NPC Circular No. 2022-02, because of complaints involving contact-list misuse, public shaming, and harassment. The NPC has explained that online lenders are prohibited from harvesting phone and social-media contact lists for harassment or debt collection. (National Privacy Commission)

The NPC’s amended circular makes an important distinction:

A character reference is used to verify identity or information.
A guarantor is someone who expressly agrees to answer for the loan if the borrower defaults.
A character reference is not automatically a guarantor.

That distinction is crucial. If your sister, parent, spouse, or friend was merely named as a reference, the lender should not treat that person as someone who must pay your loan.

Legal Basis: What Philippine Law Says

SEC Rules on Unfair Debt Collection

The Securities and Exchange Commission regulates lending companies under Republic Act No. 9474, the Lending Company Regulation Act of 2007, and financing companies under Republic Act No. 8556, the Financing Company Act of 1998. Lending and financing companies, including their third-party collection agents, are covered by SEC Memorandum Circular No. 18, Series of 2019 on unfair debt collection practices. (Lawphil)

SEC MC No. 18 prohibits, among others:

threats of violence or criminal means;
threats to take actions that cannot legally be taken;
obscene, insulting, or profane language;
disclosure or publication of borrowers’ names and personal information;
communicating false loan information;
deceptive means to collect;
contacting borrowers before 6:00 a.m. or after 10:00 p.m., subject to stated exceptions; and
contacting people in the borrower’s contact list other than those named as guarantors or co-makers.

The SEC circular also states that lending and financing companies remain responsible for the acts of third-party service providers they hire for collection. In other words, a lender cannot simply blame an outsourced collector if that collector harasses your family.

Data Privacy Rules

The Data Privacy Act protects borrowers and third parties whose personal information is used without proper basis. The NPC has said that lenders should not conduct unnecessary processing, such as requiring unnecessary app permissions or using personal data in a way that leads to harassment, debt collection outside guarantors, or unfair collection practices. (National Privacy Commission)

The 2026 Advisory also warns borrowers to review app permissions carefully and states that online lending platforms may access contacts only to allow the borrower to select character references or guarantors, or to derive proportional metadata when necessary for specified and legitimate purposes. Unbridled contact-list processing is prohibited.

Civil Code Rules on Liability of Family Members

A debt is an obligation. Under Article 1157 of the Civil Code, obligations arise from law, contracts, quasi-contracts, crimes, and quasi-delicts. For most lending app loans, the obligation arises from a contract between the borrower and the lender. A stranger to that contract is generally not liable.

A guarantor is different. Under Article 2047 of the Civil Code, a guarantor binds himself or herself to fulfill the borrower’s obligation if the borrower fails to do so. If a person binds himself solidarily with the borrower, the arrangement may be a suretyship. The Supreme Court has repeatedly recognized that a surety’s liability is joint and several with the principal debtor. (Lawphil)

This is why the wording matters. A family member who merely answered a verification call is not the same as a person who signed or electronically agreed to be a co-maker, guarantor, or surety.

No Imprisonment for Ordinary Debt

Collectors sometimes say, “Makukulong ka,” “Ipapa-barangay kita,” or “May warrant na.” For ordinary unpaid debt, Article III, Section 20 of the 1987 Constitution states that no person shall be imprisoned for debt or non-payment of a poll tax. (Supreme Court E-Library)

This does not erase the debt. A lender may still file a civil case, such as a small claims case, if the claim is proper. But a collector should not threaten arrest merely because you missed payment.

Possible Criminal Laws When Collection Becomes Harassment

Depending on the facts, abusive collection may also involve the Revised Penal Code or cybercrime laws, such as:

grave threats under Article 282;
grave coercions under Article 286;
unjust vexation under Article 287;
oral defamation or slander under Article 358;
libel under Articles 353 and 355, if defamatory statements are published; and
cyberlibel under Republic Act No. 10175, the Cybercrime Prevention Act of 2012, if defamatory statements are made through computer systems or online platforms. (Lawphil)

Not every rude call is automatically a criminal case. But threats, public shaming, fake accusations of fraud, edited photos, posts in group chats, or messages to your employer can cross legal lines.

What Lending Apps Are Allowed to Do

A lending app is not powerless. If you borrowed money and the loan is valid, the lender may:

send you payment reminders;
call or message you at reasonable times;
ask for payment based on the loan agreement;
give you a statement of account;
assign collection to a legitimate collection agency;
report credit information where allowed by law and proper disclosures; and
file a civil case if the debt remains unpaid.

For money claims, the Rules on Expedited Procedures in the First Level Courts allow small claims cases for money owed under loans and other credit accommodations up to ₱1,000,000. Small claims cases are handled in first-level courts, and lawyers are generally not allowed to appear for parties during the hearing. (Supreme Court of the Philippines)

So the practical point is this: you may still owe the loan, but the lender must collect it legally.

What Lending Apps Are Not Allowed to Do

A lending app or its collector should not:

message your family saying you are a scammer or criminal;
tell your relatives to pay if they did not sign as guarantor or co-maker;
post your name, face, ID, address, or loan balance online;
send your photo to group chats;
threaten to call your employer to embarrass you;
call your office repeatedly;
pretend to be a police officer, lawyer, prosecutor, court sheriff, or barangay official;
threaten arrest for non-payment of an ordinary debt;
demand advance fees for a supposed loan release;
use profanity or insults;
call between 10:01 p.m. and 5:59 a.m. for collection; or
continue using your contact list after the purpose for app permission has ended.

A 2025 Philippine Information Agency report, quoting an SEC lawyer, reiterated that calls between 10:01 p.m. and 5:59 a.m. may be treated as unfair collection, and that lenders are prohibited from contacting people in the borrower’s contact list other than guarantors or co-makers. (Philippine Information Agency)

What to Do If a Lending App Contacts Your Family

1. Preserve evidence immediately

Do not rely on memory. Save proof before the collector deletes messages or changes numbers.

Keep:

screenshots of SMS, Viber, Messenger, WhatsApp, Telegram, email, or in-app messages;
call logs showing date, time, number, and duration;
screen recordings if messages disappear;
names, phone numbers, and profile photos used by collectors;
the app name, company name, SEC registration details, privacy notice, and loan agreement;
proof that the family member did not sign as guarantor or co-maker;
statements from family members who received messages; and
copies of threats, defamatory posts, or group-chat messages.

If the harassment happened online, capture the whole screen, including the sender, date, time, URL or group name, and the content. Cropped screenshots are still useful, but complete screenshots are stronger.

2. Check whether the family member actually agreed to be liable

Ask the collector for the basis of contacting your family member:

Did that person sign a guaranty?
Did that person agree to be a co-maker?
Was there an electronic consent screen?
Was the consent separate from being a character reference?
Can they provide the document or audit trail?

If the family member never agreed, say clearly in writing:

“This person is not a guarantor, co-maker, surety, or borrower. Do not contact this person for debt collection. Communicate directly with the borrower through lawful channels.”

Keep the message and proof of sending.

3. Revoke unnecessary app permissions

On your phone, review the app permissions. Remove access to contacts, photos, camera, location, storage, microphone, and SMS unless truly necessary. The 2026 Advisory says online lending platforms must prompt users to turn off, disallow, or revoke permissions when the purpose has already been achieved.

If you fully paid the loan or closed the account, ask the lender to delete or securely dispose of personal data that is no longer necessary, subject to lawful retention periods.

4. Send a written complaint to the lender first, especially for privacy issues

For NPC complaints, exhaustion of remedies is important. The NPC says a complainant must first inform the respondent in writing of the privacy violation or personal data breach and give the respondent a chance to address it. If there is no timely or appropriate action, or no response within 15 calendar days from receipt, attach proof when filing with the NPC. (National Privacy Commission)

Your written demand may ask the lender to:

stop contacting non-guarantor family members;
identify the company and collector;
provide the basis for processing your contacts;
delete unlawfully collected contact-list data;
preserve records for investigation;
provide a statement of account; and
confirm that third-party collectors have been instructed to stop unlawful contact.

5. File with the proper agency

Use the agency that matches the problem:

Problem	Where to file	Usual documents
Unfair debt collection by lending or financing company	SEC Financing and Lending Companies Department through SEC iMessage	Complaint narrative, screenshots, call logs, app/company name, loan details
Contact-list harvesting or privacy violation	National Privacy Commission	Notarized complaint-assisted form or verified complaint, evidence, witness affidavits, proof of prior written notice
Threats, extortion, fake police/court messages, cyber harassment	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Screenshots, links, numbers, account names, affidavits, device evidence
Local in-person harassment by known individuals	Police or barangay, depending on facts	IDs, incident report, witness statements
Actual court collection case	First-level court or RTC, depending on amount and procedure	Loan contract, demand letters, proof of payment or defenses

The 2026 DICT-NPC-SEC Advisory lists SEC FINLEND through the SEC iMessage portal for unfair debt collection, and DICT, NBI Cybercrime Division, and PNP Anti-Cybercrime Group for other harassment, threats, frauds, or scams.

How to File a Complaint with the SEC

For unfair debt collection, prepare a clear complaint. The SEC iMessage portal allows users to submit complaints and service requests. (Securities and Exchange Commission)

Include:

Your full name, contact details, and address.
Name of the lending app and company, if known.
App screenshots from Google Play, App Store, website, or messages.
Loan date, amount released, fees deducted, due date, and amount demanded.
Names or numbers of collectors.
A timeline of harassment.
Screenshots showing contact with family, friends, employer, or contacts.
Proof that the contacted person was not a guarantor or co-maker.
A specific request, such as investigation for unfair debt collection and order to stop contacting third parties.

SEC administrative proceedings may take time. A practical bottleneck is identifying the real company behind the app, because some apps use trade names, changing numbers, or third-party collectors. Include every name, number, and screenshot you have.

How to File a Complaint with the National Privacy Commission

For privacy violations, the NPC requires a filled-out and notarized complaint-assisted form or a verified complaint, with evidence and witness affidavits. Filing may be done personally, by registered mail, courier, or authorized electronic mail. (National Privacy Commission)

The NPC states that from receipt of a complaint, its Complaints and Investigation Division has 30 calendar days to give due course or dismiss the complaint without prejudice. The full process up to final adjudication may take about 10 to 12 months. (National Privacy Commission)

For borrowers abroad, notarization can be a practical issue. If a sworn statement is executed outside the Philippines, agencies or courts may require consular notarization or apostille authentication, depending on the document and the forum where it will be used. For an initial online report, scanned evidence is usually useful, but formal proceedings may require properly executed affidavits.

What Your Family Member Can Say to the Collector

A family member who did not sign anything can respond calmly and briefly:

“I am not the borrower, guarantor, co-maker, or surety. Do not contact me again for debt collection. Please delete my personal data unless you have a lawful basis to retain it. Further messages will be documented and reported.”

They should not argue about the debt, promise payment, send money, or provide additional information such as your address, employer, salary, or travel plans.

If the message contains threats or public shaming, they should save it and may file their own privacy complaint because they are also a data subject whose personal information was used.

Common Scenarios

“The app messaged my mother and told her I am a fraud.”

That is not proper debt collection if your mother is not a guarantor or co-maker. It may be an unfair collection practice, a privacy violation, and possibly defamation depending on the exact words and how they were sent.

“My spouse was contacted. Is my spouse automatically liable?”

Not automatically. Marriage alone does not make a spouse a co-borrower. However, under the Family Code, debts incurred during marriage may sometimes affect community or conjugal property if they benefited the family or fall under the applicable property regime. That is different from saying a collector may shame or threaten the spouse.

“The app called my employer.”

Contacting the workplace to embarrass a borrower is a common red flag. Also, an employer generally should not deduct wages for a private loan unless allowed by law and properly authorized. Article 113 of the Labor Code restricts wage deductions, subject to lawful exceptions.

“I listed my brother as a character reference.”

A character reference is not automatically a guarantor. Under the NPC’s amended guidelines, character references are for identity or information verification. Debt collection outside guarantors is not allowed.

“The collector said they will file a case.”

A lender may file a proper civil case if the debt is valid. But threatening a fake criminal case, fake warrant, or fake police action for ordinary non-payment is different. Ask for the company name, written demand, statement of account, and legal basis.

“The app is not registered with the SEC.”

Still preserve evidence and report it. The 2026 Advisory refers to online lending platforms whether recorded or unrecorded, and the SEC may act against unauthorized lending operations.

Practical Tips If You Still Owe the Loan

Handling harassment does not mean ignoring a real debt. If the loan is valid:

Ask for a written statement of account.
Verify principal, interest, penalties, and fees.
Keep proof of all payments.
Pay through official channels only.
Avoid sending money to personal e-wallets unless clearly authorized and receipted.
Ask for a payment restructuring plan in writing.
After full payment, request a certificate of full payment or closure confirmation.
Keep all records for at least several years in case the account is sold or re-collected.

Be careful with “advance fees” for supposed loan release, deletion of records, or settlement. The SEC has warned that legitimate lending or financing companies and their agents do not ask for advance fees for loan release; processing fees are typically deducted from proceeds. (Philippine Information Agency)

Frequently Asked Questions

Can an online lending app call my parents about my loan?

Generally, no, unless your parent expressly agreed to be a guarantor, co-maker, surety, or borrower. A parent is not automatically liable just because of family relationship.

Can a lending app message all my contacts if I allowed contact permission?

No. Consent must be specific, informed, and lawful. The NPC and SEC have made clear that unbridled contact-list processing and contacting non-guarantor contacts for debt collection are prohibited.

Can a character reference be forced to pay my debt?

No. A character reference is used for verification. A guarantor or co-maker is different because that person expressly assumes legal responsibility.

Can a lending app post my name and photo online?

No. Publishing or disclosing borrowers’ names and personal information to shame them for alleged non-payment is an unfair collection practice and may also raise privacy and defamation issues.

Can I go to jail for not paying a lending app?

For ordinary non-payment of debt, no. The Constitution prohibits imprisonment for debt. But if there is a separate criminal act, such as fraud, falsification, or issuing a bouncing check under applicable laws, that is a different matter.

What agency handles lending app harassment in the Philippines?

For unfair debt collection by lending and financing companies, file with the SEC. For misuse of personal data and contact-list harassment, file with the NPC. For threats, cyber harassment, extortion, or fake law-enforcement messages, report to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.

Can the lender contact my employer?

A lender should not contact your employer to shame you, pressure you, or disclose your loan details. If your employer is not a guarantor, co-maker, or authorized payroll deduction party, workplace harassment may be reported.

What if the collector uses a different number every day?

Document each number, date, time, and message. Include all numbers and screenshots in your SEC, NPC, PNP, or NBI complaint. Changing numbers is common, so your timeline is important.

What if I am abroad and my family in the Philippines is being harassed?

The same Philippine rules may apply if the lending app or lending company operates in the Philippines or targets Philippine borrowers. Save evidence, ask your family to preserve messages, and consider written complaints to the SEC and NPC. Formal affidavits executed abroad may need consular notarization or apostille authentication if required in a proceeding.

Should I delete the lending app?

Before deleting, take screenshots of the loan details, privacy notice, permissions, repayment channels, and account information. After preserving evidence and securing access to records, you may remove unnecessary permissions and uninstall if needed for safety.

Key Takeaways

Lending apps in the Philippines generally cannot contact your family for debt collection unless that family member is a real guarantor, co-maker, surety, or borrower.
A character reference is not automatically liable for your loan.
Contact-list harvesting, public shaming, threats, abusive language, fake legal threats, and late-night collection calls may violate SEC rules, data privacy law, or criminal laws.
Ordinary unpaid debt does not lead to imprisonment, but the lender may still pursue lawful civil collection.
Save screenshots, call logs, app details, loan documents, and witness statements before filing a complaint.
File unfair collection complaints with the SEC, privacy complaints with the NPC, and threats or cyber harassment with the PNP Anti-Cybercrime Group or NBI Cybercrime Division.