If relentless calls and text messages from an online lending app are arriving at all hours, or if collectors have started messaging your family, friends, coworkers, or even posting details about your debt online, you are facing a common form of excessive harassment that Philippine law expressly prohibits. Many borrowers experience exactly this—aggressive pressure tactics that go far beyond legitimate collection efforts. This article explains what counts as illegal harassment, the specific legal protections available to you, and the clear, practical steps to file effective complaints with the right government agencies so the abusive behavior can be stopped.

What Counts as Excessive Harassment by Online Lending Apps

Legitimate debt collection involves reasonable communication during appropriate hours, directed primarily at the borrower (or authorized co-obligors), using factual statements about the amount owed and options for payment. Excessive harassment crosses clear legal lines when it involves any of the following common tactics reported by victims:

Repeated calls or texts at unreasonable hours (typically before 7 or 8 a.m. or after 8 or 9 p.m., or during known rest periods).
Threats of arrest, imprisonment, lawsuits, or public shame for non-payment (note that failure to pay a civil debt is generally not a crime).
Contacting or messaging people in your phone contacts, social media friends, family, employer, or coworkers to disclose your debt or pressure them to pay on your behalf.
Public shaming through social media posts, group messages, or sharing your photo or personal details.
Use of profane, insulting, humiliating, or abusive language.
Impersonating lawyers, police officers, court personnel, or government agents.
Accessing and using your phone contacts, photos, or other data beyond what is strictly necessary and consented to for the loan transaction.
Sending excessive volumes of messages or making multiple daily contacts that disrupt your daily life, work, or mental well-being.
Misrepresenting the amount owed by adding unauthorized fees or penalties, or using fake legal documents.

These practices are not “just how collection works.” They violate specific regulatory rules, privacy protections, and criminal law provisions.

Legal Rights and Protections Against Unfair Debt Collection

SEC Memorandum Circular No. 18, Series of 2019 (Prohibition on Unfair Debt Collection Practices)

Lending companies operating online apps are primarily regulated by the Securities and Exchange Commission (SEC) under Republic Act No. 9474 (the Lending Company Regulation Act of 2007). SEC MC No. 18, s. 2019 explicitly bans unfair debt collection practices by these companies, their agents, and third-party collectors.

Prohibited acts include:

Using threats, violence, or any criminal means to harm a person’s reputation, person, or property.
Using obscene, insulting, or profane language.
Publishing or disclosing the borrower’s name and debt information to third parties.
Contacting persons in the borrower’s contact list except in narrowly justified circumstances (such as named guarantors or co-makers with proper basis).
Communicating at unreasonable hours or in an excessive or harassing manner.
Making false representations or impersonating lawyers, police, or court officers.
Threatening legal action that is not actually intended or lacks basis.
Employing any unfair, unconscionable, or oppressive collection method.

Violations can result in administrative penalties ranging from ₱25,000 to ₱1,000,000 per violation, plus suspension or revocation of the company’s authority to operate as a lending company. The SEC has revoked licenses of multiple online lending platforms for these exact practices.

Data Privacy Act of 2012 (Republic Act No. 10173)

This is one of the strongest tools against lending app harassment. The law strictly regulates the collection, processing, and disclosure of personal data (including phone contacts, photos, and location data).

Key violations in the lending context include:

Harvesting phone or social media contact lists without informed, specific, and documented consent for that purpose.
Using personal data to contact or shame third parties.
Processing data in ways that are not necessary, proportionate, or lawful (blanket app permissions do not authorize debt-shaming campaigns).
Unauthorized disclosure of sensitive personal information.

The National Privacy Commission (NPC) has issued circulars specifically prohibiting online lending apps from accessing contact lists or using photos to harass or embarrass borrowers. The NPC has investigated and sanctioned numerous apps, issued cease-and-desist orders, imposed fines, and referred cases for criminal prosecution. The Supreme Court has upheld NPC decisions ordering damages and prosecution in cases involving unauthorized access to contact lists and shaming.

Responsible officers and directors of the lending company can face personal criminal liability, with penalties of imprisonment from 1 to 5 years and fines up to ₱2,000,000 depending on the violation (unauthorized processing or malicious disclosure).

Revised Penal Code and Cybercrime Prevention Act (RA 10175)

Certain acts of harassment constitute criminal offenses:

Unjust vexation (Article 287) — Any act that unjustly annoys, irritates, torments, or distresses another person without causing physical injury. Repeated harassing calls or texts at odd hours or to family members often fall here. This is a light offense.
Grave coercion (Article 286) — Using intimidation or threats to compel someone (including family members) to do or refrain from doing something, such as pressuring relatives to pay the debt.
Grave threats (Article 282) — Threatening to commit a crime against your person, honor, or property (or that of your family) to force payment.
Online elements (social media shaming, defamatory posts, or electronic threats) may also violate the Cybercrime Prevention Act, including possible cyber libel.

Non-payment of a civil debt alone is not a crime. Threats of jail for mere non-payment are usually baseless and themselves illegal.

Civil Code Protections (Articles 19, 20, and 21)

You can also claim damages for acts that are contrary to law, morals, good customs, or public policy, or that constitute abuse of rights causing damage (including moral and exemplary damages for anxiety, humiliation, and emotional distress). This provides a basis for civil suits seeking compensation and injunctive relief to stop ongoing harassment.

Step-by-Step Practical Guide to Filing Complaints

1. Document Everything Thoroughly

Strong evidence is the foundation of any successful complaint. Do this immediately:

Take full screenshots of every text, chat, or social media message (include the sender number or username, timestamp, full content, and conversation thread).
Screenshot call logs showing dates, times, and frequency.
Note the impact on you (sleeplessness, anxiety, work disruption, strain on family relationships) with dates if possible.
Ask affected family members or friends to provide their own written statements or affidavits describing what they received.
Keep loan agreement screenshots, app permission screens, and any prior communications with the lender.
Organize everything chronologically in folders on your phone or computer. Do not delete messages or uninstall the app until you have complete copies.

Rely primarily on written records and screenshots. While recordings of conversations in which you are a direct participant are sometimes used, written evidence is safer and less open to challenge.

2. Identify the Responsible Company

Note the exact app name, company name (from loan documents, app store listing, or terms), website, and any contact details. Check whether the company appears registered with the SEC (many legitimate ones are; some operate without proper authority).

3. Send a Formal Written Demand (Optional but Recommended First Step)

Draft and notarize a clear cease-and-desist letter demanding that the company and its agents immediately stop all harassing communications, cease contacting any third parties, and limit future contact to reasonable methods and hours directed only at you (or authorized persons). Send it via email with read receipt and/or registered mail. Keep copies. This often prompts companies to instruct collectors to back off and creates an excellent paper trail.

4. File Regulatory Complaints (Often the Most Effective Starting Point)

Securities and Exchange Commission (SEC) — Primary venue for unfair collection practices by lending companies.

File through the official SEC iMessage Portal. You will need to create an account, provide your details, the company/app name, a chronological narrative of events, attached evidence (screenshots, logs), and a government-issued ID. The SEC can investigate, require the company to explain or stop the practices, impose fines, suspend or revoke the lending authority, and refer matters for criminal action.

National Privacy Commission (NPC) — Best for data privacy violations (contact list harvesting, unauthorized disclosures, shaming).

File online through the National Privacy Commission portal or via email to complaints@privacy.gov.ph. Provide details of how your personal data was misused. The NPC can issue cease-and-desist orders, investigate, impose administrative penalties, and recommend criminal prosecution under the Data Privacy Act. Many victims file with both SEC and NPC simultaneously.

5. File a Criminal Complaint When Threats, Coercion, or Repeated Vexation Are Involved

Visit your local Philippine National Police (PNP) station and have the incidents recorded in the official blotter (this is free and creates an official record).
Prepare a notarized Complaint-Affidavit narrating the facts in clear, chronological order, attaching all evidence as annexes, and stating the specific violations (e.g., unjust vexation under Art. 287, grave threats under Art. 282).
File the notarized affidavit with the Office of the City or Provincial Prosecutor having jurisdiction (usually where the acts occurred or where you reside).
For strong online or cyber elements, also report to the PNP Anti-Cybercrime Group (acg@pnp.gov.ph), NBI Cybercrime Division (ccd@nbi.gov.ph or antifraud@nbi.gov.ph), or call the Cybercrime Investigation and Coordinating Center (CICC) hotline at 1326 (toll-free, 24/7) for guidance or assistance.

The prosecutor will conduct a preliminary investigation. If probable cause is found, an Information will be filed in court (usually Metropolitan Trial Court for unjust vexation).

Important timing note: Unjust vexation is a light offense that generally prescribes in two (2) months from discovery under Articles 90 and 91 of the Revised Penal Code. Act promptly if this applies to your situation.

6. Consider a Civil Action for Damages

You may file a separate civil case (or include a claim in appropriate proceedings) for moral damages, exemplary damages, and attorney’s fees under the Civil Code. This can be pursued alongside regulatory or criminal complaints. For smaller claims, check if small claims court procedures apply. A lawyer is strongly recommended for court filings.

Common Challenges and Practical Realities

Many borrowers delay action out of fear, stress, or uncertainty about the process. Others worry that complaining will somehow worsen their debt situation (it generally does not—the debt remains a separate civil obligation, but illegal collection tactics can and should be challenged).

Unregistered or frequently rebranded apps can make identification harder, but strong evidence of the communications and app used is still valuable for NPC, police, and prosecutor complaints. Family members or contacts who were harassed have their own independent rights to file complaints about privacy violations and direct harassment directed at them.

For OFWs and foreigners: You have the same substantive rights. Most agencies accept online or email submissions with scanned documents and valid IDs. Sworn affidavits can be executed before a Philippine consular officer or through accepted remote notarization services. Apostille may be needed later for formal court use but is often not required for initial agency complaints. Many successful complaints have been filed from abroad.

Required Documents, Evidence, Fees, and Timelines

Core Evidence Package (for all channels):

Government-issued ID (passport, driver’s license, UMID, etc.).
Chronological narrative or sworn affidavit.
Screenshots of all harassing messages and call logs (with visible timestamps and sender details).
Witness statements/affidavits from affected family or contacts (notarized when possible).
Loan agreement or app screenshots showing terms and permissions.
Any medical or counseling records documenting emotional or psychological impact (helpful for damages claims).

Fees: Regulatory complaints (SEC and NPC) are generally free to file. Criminal complaints at the prosecutor level have no filing fee, though notarization of your affidavit typically costs ₱200–₱1,000 depending on length and location. Civil court docket fees depend on the amount of damages claimed.

Timelines: Regulatory bodies usually acknowledge complaints quickly and aim to investigate within weeks to a few months (urgent interim orders are possible). Criminal preliminary investigation can take several months due to volume. Civil cases take longer. The sooner you file (especially for short-prescription offenses), the stronger your position on evidence and ongoing harm.

Frequently Asked Questions

Can online lending apps legally contact my family, friends, or employer about my debt?
No. Under SEC MC No. 18, s. 2019 and the Data Privacy Act, unauthorized disclosure of your debt to third parties for shaming or pressure is prohibited. Contacting people in your contact list is generally not allowed except in very limited, justified circumstances involving named co-obligors.

Is it illegal for collectors to threaten me with arrest or jail for not paying?
Yes, in most cases. Mere non-payment of a civil debt is not a criminal offense. False threats of arrest or criminal prosecution can constitute grave threats, unjust vexation, or grave coercion under the Revised Penal Code and are also banned under SEC rules.

How do I start the complaint process if I’m overwhelmed or abroad?
Begin by thoroughly documenting everything with screenshots. Then file online through the SEC iMessage Portal and/or the National Privacy Commission. These channels are accessible from anywhere and do not require a lawyer for the initial submission.

What evidence works best for these complaints?
Clear, timestamped screenshots of messages and call logs, organized chronologically, plus witness statements from anyone contacted. A well-written sworn affidavit tying the evidence to the specific prohibited acts is very powerful.

Does filing a complaint cancel my debt or stop all collection?
No. The underlying civil debt generally remains (unless separately settled or litigated). However, illegal harassment tactics must stop, and regulators can order the company to cease the abusive methods while any legitimate collection must comply with fair practices.

How long do I have to file a criminal complaint for unjust vexation?
Unjust vexation is a light offense that generally prescribes in two (2) months from the date of the act or its discovery under the Revised Penal Code. File promptly if your situation involves repeated annoying or distressing contacts.

Can I claim money for the stress and humiliation caused?
Yes. You can seek moral and exemplary damages in a civil action under the Civil Code for the emotional distress, anxiety, and harm to your reputation and relationships caused by the illegal harassment.

What penalties can the lending company or its officers face?
SEC can impose substantial fines and revoke the company’s authority to operate. The NPC can impose administrative fines and refer cases for criminal prosecution under the Data Privacy Act (imprisonment and fines up to ₱2 million for responsible persons). Criminal convictions under the Revised Penal Code carry fines and possible imprisonment depending on the offense.

What if the app is not registered with the SEC?
You can still file complaints with the NPC (for privacy violations), PNP, NBI, or the prosecutor’s office. The general criminal and civil laws apply regardless of registration status. Evidence of the app’s operations and communications remains usable.

Will complaining make things worse or affect my credit?
Legitimate complaints about illegal tactics should not negatively affect your credit standing. In many cases, companies instruct collectors to stop once regulators become involved. Focus on stopping the abuse while addressing any legitimate debt separately through proper channels if you choose.

Key Takeaways

Excessive harassment by online lending apps through threats, third-party shaming, unreasonable contacts, abusive language, or data misuse is illegal under SEC MC No. 18, s. 2019, the Data Privacy Act of 2012, the Revised Penal Code, and related rules.
You have strong, practical remedies through regulatory complaints to the SEC and NPC, which are often the fastest ways to stop the behavior.
Thorough documentation with screenshots, timelines, and witness statements is essential and empowers your complaints.
Criminal complaints (especially for unjust vexation) require prompt action due to short prescriptive periods.
OFWs, foreigners, and family members who were contacted all have enforceable rights and accessible filing options.
Legitimate debt collection must respect your dignity and privacy; you can enforce those boundaries through proper government channels without needing to hire a lawyer for the initial regulatory or prosecutor-level steps.

Taking documented action through the right agencies has helped many borrowers stop abusive collection campaigns and, in some cases, recover compensation for the harm caused. Start with evidence preservation and the SEC or NPC portals—you have clear rights and workable paths forward.