Quick answer

Preserve the post before seeking its removal, then report it through the channels that fit what happened:

Report the post to the social-media platform.
Send a written takedown and cease-and-desist complaint to the lender’s consumer-assistance unit and data protection officer.
Report lending or collection misconduct to the Securities and Exchange Commission (SEC).
File with the National Privacy Commission (NPC) if personal data, photographs, contacts, or loan information were improperly used or disclosed.
Contact law enforcement immediately for credible threats, stalking, identity misuse, or potentially criminal defamation.

A lender may collect a valid debt through lawful means. It may not use public shaming, threats, deceptive statements, or unauthorized disclosure as collection tools. Reporting abusive conduct does not by itself cancel, reduce, or settle the loan.

What may make the post unlawful

SEC Memorandum Circular No. 18, Series of 2019 applies to lending companies, financing companies, and third-party collection providers acting for them. It prohibits unfair collection practices such as:

Threatening violence, injury, reputational harm, property damage, or action that cannot legally be taken;
Using obscenities, insults, or profane language amounting to abuse;
Publishing or disclosing borrowers’ names and personal information outside legally permitted circumstances;
Communicating false loan information, including failing to disclose that a debt is disputed when required;
Using false representations or deceptive means to collect or obtain information; and
Contacting people in the borrower’s contact list who were not named as guarantors or co-makers, even if the borrower supposedly consented to contact-list access.

The Financial Products and Services Consumer Protection Act separately prohibits abusive collection or debt-recovery practices. A regulated financial service provider can be responsible for its employees and agents and may be solidarily liable with an accredited third-party collector for collection-related acts or omissions.

Public shaming is different from lawful collection

A collector may privately communicate with the borrower, an actual co-maker, or a person who validly agreed to be a guarantor. Limited disclosure may also be lawful when specifically authorized by law, a valid court or government order, or a properly scoped arrangement with counsel or a collection provider.

Those exceptions do not ordinarily authorize posting a borrower’s name, photograph, address, workplace, loan balance, identification document, or alleged delinquency on Facebook, TikTok, messaging groups, or other public or semi-public forums to embarrass the borrower into paying.

Under NPC Circular No. 2022-02:

A borrower’s photograph must not be used to harass or embarrass the borrower;
Unbridled processing of contact lists—including processing that leads to harassment or unfair collection—is prohibited;
For debt collection, the lender may contact only a valid guarantor, not unrelated people found in the borrower’s contact list; and
A character reference is not automatically a guarantor. Character references may be contacted to verify the applicant’s identity and information, not to pressure them to pay the debt.

Whether a particular post violates the Data Privacy Act, constitutes cyberlibel, or creates another criminal or civil claim depends on its exact wording, audience, source, context, supporting documents, and the identity and authority of the person who posted it. Calling a post “malicious” does not by itself establish legal liability.

Preserve the evidence before requesting removal

Online content can be edited, deleted, hidden, or made private. Before blocking the account or reporting the post, preserve:

Full-screen screenshots showing the post, account name, profile photograph, date, time, reactions, comments, shares, and surrounding context;
The complete post URL and the poster’s profile or page URL;
A screen recording that opens the profile, post, comments, and URL without cuts;
Copies of photographs, “wanted” posters, edited IDs, threats, captions, hashtags, and tagged accounts;
Messages or notifications received by relatives, employers, coworkers, or other contacts;
The app’s name, developer, app-store listing, website, privacy notice, and requested device permissions;
Loan documents, disclosure statement, payment records, statements of account, and any notice disputing the balance;
Names, telephone numbers, email addresses, and claimed agency or company of each collector;
Your correspondence with the lender, collector, platform, SEC, or NPC; and
A simple chronology listing dates, times, accounts used, people contacted, and harm caused.

Keep the original files. Do not rely only on cropped or annotated screenshots. Save backup copies in a secure location, and ask recipients of collection messages to preserve their original notifications and provide signed statements if later required.

Avoid reposting the offending content publicly merely to complain about it. Reposting may spread your own personal information and complicate the dispute.

Take immediate steps to limit further harm

After preserving evidence:

Use the platform’s reporting function. Choose the most accurate category, such as harassment, bullying, privacy violation, impersonation, threat, or disclosure of personal information. Save the report number and confirmation.
Revoke the lending app’s unnecessary access to contacts, photographs, storage, camera, microphone, location, and social-media accounts. Screenshot the existing permissions first.
Change passwords if the app or collector may have accessed an account. Enable multi-factor authentication.
Warn affected contacts briefly that the messages came from a collector and that they should not disclose information, click links, or send money.
Do not pay a personal account solely because someone promises to remove the post. Verify the collector’s authority and the lender’s official payment channel, and insist on a receipt.

If the post reveals your address, daily routine, children’s information, identification numbers, financial credentials, or other information that creates an immediate security risk, prioritize personal safety and law-enforcement assistance.

Send a written complaint to the lender

Send the complaint to the lender’s official consumer-assistance unit and data protection officer, not only to the individual collector. Use an email address or in-app channel that produces proof of delivery.

Include:

Your name and loan or account reference, while avoiding unnecessary sensitive information;
The app’s brand and the corporate operator’s name;
The collector’s name, number, account, or claimed agency;
The URLs and dates of the posts;
A short factual description of what was disclosed or threatened;
Whether the balance or account is disputed;
Copies of evidence;
A demand to stop the posts and unauthorized third-party contact;
A request for immediate takedown, correction of false information, and confirmation that copies sent to third parties have been addressed;
A request to identify the collector and confirm whether the collector was authorized;
A request to preserve relevant account, access, call, message, and collection records; and
A reasonable deadline for an urgent written response.

State clearly that your complaint concerns the collection method and data use. Do not make an unnecessary admission about the amount or validity of a disputed debt.

This written notice is especially important for an NPC complaint. Under the NPC’s current Rules of Procedure, a complainant must generally show that the organization was informed in writing and either failed to take appropriate action or did not respond within 15 calendar days. The NPC may waive this requirement for good cause or a serious violation presenting significant risk of harm.

Report the company or collector to the SEC

The SEC is normally the regulator for lending companies, financing companies, their online lending platforms, and their collection agencies.

File through the SEC iMessage ticketing system and select the service for complaints involving financing and lending companies. The SEC’s official complaint instructions require a completed complaint form, supporting evidence, a valid government-issued ID, and one complaint form for each respondent company.

Identify both:

The app or brand used with consumers; and
The corporation operating the app, including its SEC registration or Certificate of Authority details if known.

Describe the conduct precisely: public posting, tagging relatives, contacting unrelated people, threats, false legal claims, insults, edited images, or disclosure of loan information. Attach the written complaint previously sent to the lender and its response, if any.

If you cannot identify the corporate operator, provide the app-store developer name, website, payment-account name, telephone numbers, screenshots, and any registration claims. State if you suspect that the lender is operating without SEC authority.

The SEC may investigate regulatory violations and impose measures within its authority. It does not ordinarily cancel the debt, rewrite payment terms, declare the contract void, or adjudicate all civil or criminal damages through the complaint process.

File a privacy complaint with the NPC

An NPC complaint may be appropriate when the post or collection campaign used or disclosed:

Your name, photograph, address, employment, contacts, ID, or loan details;
Personal data taken from your phone or social-media accounts;
Information about relatives, coworkers, or character references;
False or unwarranted personal information posted in bad faith; or
Data beyond what was necessary and proportionate for lawful collection.

The Data Privacy Act of 2012 regulates unauthorized processing and disclosure and specifically addresses malicious disclosure by personal-information controllers, processors, officials, employees, or agents.

Follow the NPC’s formal complaint filing instructions. A formal complaint generally must be written, signed, verified, and supported by evidence. The NPC’s rules also require the relevant correspondence with the respondent and a certification against forum shopping. The complaint form must be notarized and may be submitted through the authorized in-person, courier, or email channel listed on the NPC page. Filing fees apply unless an exemption or waiver is available.

If the harm is continuing or potentially irreparable, explain why waiting for the ordinary 15-day response period would be unsafe or inadequate and provide evidence supporting a request for the NPC to waive prior exhaustion. Waiver is discretionary.

A borrower is not the only possible complainant. A relative, coworker, character reference, or other person whose own data was harvested, posted, or misused may have a separate privacy complaint.

When to involve the police, NBI, or a prosecutor

Seek prompt law-enforcement assistance when the content includes:

A credible threat of physical harm, abduction, property damage, or an unlawful visit;
Stalking, repeated intimidation, or publication of a home address;
Impersonation or use of a fake account in your name;
Altered identification documents or fabricated criminal accusations;
Account hacking or identity theft;
Sexual images or threats to publish them; or
Statements that may constitute cyberlibel or another criminal offense.

For an immediate threat, call Unified 911 or go to the nearest police station. For online evidence, you may also approach the PNP Anti-Cybercrime Group or the NBI Cybercrime Division. Bring the device containing the original evidence, printed copies, URLs, your chronology, identification, and proof connecting the collector to the lender.

Under the Cybercrime Prevention Act, law-enforcement authorities may require the preservation of relevant computer data. Because posts and account records may disappear, ask the investigator promptly whether a preservation request or order is appropriate.

Cyberlibel has a particularly short deadline. In Causing v. People, the Supreme Court held that cyberlibel prescribes in one year from discovery. Do not assume that a post’s continued visibility restarts that period. Consult counsel quickly if a criminal complaint is being considered. See the Supreme Court’s explanation and the decision in G.R. No. 258524.

Nonpayment of an ordinary debt, by itself, is not grounds for imprisonment. Article III, Section 20 of the 1987 Constitution prohibits imprisonment for debt. Separate conduct—such as proven fraud or another independently punishable act—must be evaluated on its own facts.

If the lender is regulated by another agency

Check the contract, disclosure statement, app page, and the lender’s registration details:

Complaints against ordinary lending and financing companies usually go to the SEC.
If the creditor is a bank or another BSP-supervised institution, complain first through its financial consumer-assistance mechanism. If unresolved, use the BSP consumer complaint procedure.
If the lender is a cooperative, confirm whether the Cooperative Development Authority has jurisdiction.

A payment service or e-wallet appearing in the transaction does not necessarily make it the lender. Identify the entity that granted the loan and the entity directing the collector.

Common mistakes to avoid

Seeking takedown before preserving the complete post and URL;
Naming only the app brand and not the corporation or collection agency;
Filing a vague complaint without dates, account names, screenshots, and supporting loan records;
Assuming that giving contact-list permission authorized public disclosure or contact with everyone;
Treating a character reference as a guarantor;
Publicly arguing with the collector and spreading the post further;
Editing or discarding original evidence;
Sending unredacted IDs or financial credentials through unofficial channels;
Paying an unverified collector or personal account without written authority and a receipt;
Waiting until the one-year cyberlibel period is nearly over; and
Assuming that a regulatory complaint automatically suspends or cancels payment obligations.

Continue addressing any valid loan through documented, official channels. If the balance is disputed, ask for a statement of account and calculation of principal, interest, fees, payments, and penalties.

When legal help is urgent

Consult a Philippine lawyer promptly if:

The post remains online and is causing serious employment, business, safety, or family harm;
The collector threatens violence, arrest, criminal prosecution, or a visit to your home;
Your address, ID, children’s information, or intimate material was disclosed;
You need an injunction, damages, or immediate court relief;
The lender disputes responsibility for the collector;
You are considering a cyberlibel complaint;
Several agencies or court cases may involve the same facts; or
You are being asked to sign a waiver, settlement, or admission of liability.

A lawyer can assess the exact post, loan documents, privacy notice, consent language, and possible criminal, civil, administrative, or provisional remedies. If eligible, ask the Public Attorney’s Office or an appropriate legal-aid organization about assistance.

Frequently asked questions

Is public shaming allowed if I really owe money?

A genuine debt does not authorize prohibited collection practices. The lender may demand payment, negotiate, send lawful notices, use an authorized collector, or pursue proper legal remedies. Public humiliation and unnecessary disclosure remain separately reviewable.

May the collector contact my relatives or employer?

Not merely because their details appeared in your phone. A valid guarantor or co-maker may be contacted within the scope of that obligation. A character reference may be contacted only for the permitted verification purpose and is not automatically liable for the loan.

What if the lender says an independent collector made the post?

That does not automatically remove the lender’s responsibility. SEC rules cover third-party collection providers, and the Financial Products and Services Consumer Protection Act makes providers responsible for authorized representatives and potentially solidarily liable with accredited third-party service providers.

Can I complain even if the post has already been deleted?

Yes. Submit the preserved screenshots, URLs, notifications, witness statements, and platform correspondence. Deletion may limit continuing harm but does not necessarily resolve past disclosure or misconduct.

Can I report a post made about someone else?

You may report it to the platform. For an SEC, NPC, civil, or criminal complaint, the proper complainant and required authority depend on whose rights or personal data were affected. A person whose own number, name, photograph, or other data was misused may have an independent complaint.

Will filing a complaint stop collection calls immediately?

Not automatically. Demand cessation of the specific unlawful conduct, block abusive accounts after preserving evidence, and continue communicating through the lender’s official channel. Urgent threats should be reported to law enforcement without waiting for a regulatory response.

This article provides general Philippine legal information, not legal advice or a prediction of any complaint’s outcome. Rights, jurisdiction, and remedies depend on the complete posts, loan documents, consent records, parties, and evidence. Official sources and procedures were checked as of 6 August 2026.