A Philippine Legal Article

Online lending apps have become a major source of emergency cash in the Philippines. Their speed and accessibility, however, have also produced a long list of abuses: debt shaming, threats, unauthorized access to phone contacts, repeated calls to relatives and co-workers, public exposure on social media, fake criminal accusations, and coercive collection tactics. In the Philippine setting, these acts are not merely “bad business practice.” Depending on the facts, they can violate data privacy law, consumer protection rules, financial regulations, cybercrime-related laws, and even criminal laws on unjust vexation, grave threats, coercion, libel, or identity-related offenses.

This article explains the legal framework, what conduct is unlawful, who can be complained against, where to file complaints, what evidence to gather, what remedies are available, and how to write and pursue a complaint in the Philippines.

I. The Typical Problem With Online Lending Apps

A borrower downloads an app, submits ID and personal details, and is required to grant access to contacts, photos, SMS, or device information. When payment becomes due, the app or its collectors begin to harass the borrower. Common tactics include:

calling the borrower repeatedly at all hours;
contacting people in the borrower’s phonebook;
sending humiliating messages to family, friends, co-workers, or employers;
threatening arrest, imprisonment, lawsuits, or “barangay exposure” without legal basis;
posting the borrower’s photo or personal details online;
using insults, obscene language, or intimidation;
misrepresenting the amount due through hidden fees or abusive charges;
pretending to be lawyers, police, or government agents;
continuing to process or disclose personal data beyond what is necessary for collection.

In the Philippines, the fact that a person owes money does not erase their statutory and constitutional rights. Debt collection is allowed. Harassment, unlawful disclosure, and coercion are not.

II. The Core Legal Principle

A lender may demand payment through lawful means. It may remind, call, email, send formal demand letters, and file a proper civil case when warranted. But it may not use shame, fear, deception, or misuse of personal data as a collection tool.

This distinction is fundamental. The borrower’s default does not authorize the lender or the lending app to:

expose the borrower’s debt to unrelated third parties;
invade privacy beyond legitimate and proportionate collection efforts;
threaten criminal prosecution where the obligation is purely civil;
access and weaponize the borrower’s contact list for public humiliation;
process sensitive or excessive personal data without a valid legal basis;
engage in unfair, abusive, or fraudulent collection practices.

III. Philippine Laws and Regulations Commonly Involved

1. Data Privacy Act of 2012

Republic Act No. 10173 is the most important law in complaints involving privacy violations by online lending apps.

Under this law, personal information controllers and processors must process personal data lawfully, fairly, transparently, for legitimate purposes, and proportionately. They must protect data against unauthorized access, disclosure, and misuse. Collection of personal data must be relevant and not excessive.

In the online lending context, likely privacy issues include:

collecting contact lists without a lawful, proportionate, and transparent basis;
using contacts not as references but as pressure targets;
disclosing the borrower’s debt status to people who have no legal need to know;
sharing the borrower’s photo, ID, address, or debt details with third parties;
continuing aggressive data processing after the original purpose has been exceeded;
failing to secure personal data;
using consent obtained through vague, bundled, or coercive app permissions in a way that exceeds legitimate collection activity.

Important practical point: “consent” is not a magic shield. Even where a borrower clicked “allow,” data processing must still satisfy lawful criteria and remain necessary, specific, informed, and proportional. A broad permission hidden inside app onboarding does not automatically legalize debt shaming or indiscriminate disclosure to contacts.

Potential DPA issues may include:

unauthorized processing;
unauthorized disclosure;
processing for purposes incompatible with the declared purpose;
access due to negligence;
improper disposal or retention;
denial of data subject rights, depending on circumstances.

The National Privacy Commission is the principal body for privacy complaints.

2. SEC Regulation of Lending and Financing Companies

Many online lending operators in the Philippines must be registered and regulated as lending or financing companies. The Securities and Exchange Commission has issued rules and advisories directed at online lending platforms, especially concerning abusive and unfair debt collection practices.

A lender or financing company generally cannot operate lawfully without the proper authority. Even where it is registered, it may still violate SEC rules if it engages in harassment, false representations, or abusive collection.

Conduct that commonly triggers regulatory concern includes:

using obscene or insulting language;
disclosing debt information to third parties;
threatening violence or criminal prosecution without basis;
impersonating legal authorities;
using deceptive collection methods;
operating through unregistered or noncompliant apps.

The SEC has historically taken action against online lending apps for abusive practices, including suspension or revocation-related enforcement measures, depending on the case. A complaint to the SEC is often one of the strongest administrative avenues when the app is operating as a lending or financing business.

3. Financial Products and Services Consumer Protection Act

Republic Act No. 11765 strengthens consumer protection in the financial sector. It is relevant when a lender, financing company, or related service provider commits unfair, deceptive, or abusive acts or practices.

In a lending-app case, this law may support arguments involving:

abusive collection methods;
misleading disclosures;
unconscionable charges or opaque fees;
exploitative treatment of financially vulnerable borrowers;
unfair use of personal information in connection with financial services.

Depending on the regulator and the entity involved, this law can reinforce administrative complaints.

4. Consumer Act Principles and Unfair Practices

Although lending is specially regulated, broader consumer protection principles remain useful, especially where the app misrepresents fees, loan terms, or penalties, or uses deceptive user interfaces and false urgency.

This is often not the primary cause of action, but it can support the narrative that the borrower was subjected to unfair and deceptive treatment.

5. Civil Code of the Philippines

Even where no specific criminal prosecution succeeds, the borrower may still have a civil claim for damages under the Civil Code. Relevant concepts may include:

abuse of rights;
acts contrary to law, morals, good customs, or public policy;
damages for humiliation, anxiety, besmirched reputation, and mental anguish;
nominal, moral, temperate, actual, and exemplary damages where supported by evidence.

If collectors contact the borrower’s employer, family, or clients in a humiliating way, the resulting reputational and emotional injury may support a damages claim.

6. Revised Penal Code and Related Criminal Liability

Depending on the facts, collection tactics may cross into criminal conduct. Possible offenses may include:

Grave Threats or Other Threat-Related Offenses

If the collector threatens unlawful harm, violence, public humiliation, or fabricated criminal consequences.

Grave Coercion

If the borrower is forced, through intimidation, to do something against their will beyond lawful debt payment procedures.

Unjust Vexation

Often relevant in repeated harassment cases where conduct causes annoyance, irritation, torment, or distress without proper legal basis.

Oral Defamation or Libel

If the collector spreads false or malicious statements damaging the borrower’s reputation. If done through messages, social media, or digital publication, cyber-related liability may also be explored.

Slander by Deed

If humiliating conduct is performed in a way meant to dishonor or embarrass the borrower.

False Pretenses or Usurpation-Type Conduct

If the collector falsely claims to be a lawyer, sheriff, police officer, judge, NBI agent, or government official.

Light Threats / Alarm and Scandal-Type Situations

These may arise depending on the manner of harassment.

Not every offensive message becomes a criminal case. But sustained harassment, reputational attacks, and intimidation frequently deserve police blotter documentation and legal assessment.

7. Cybercrime Prevention Act of 2012

Republic Act No. 10175 may become relevant when the acts are committed through electronic means. If defamatory content, threats, or identity-related abuse is done online, cybercrime implications may arise.

Digital publication matters. A humiliating Facebook post, group chat disclosure, mass text blast, or online accusation may strengthen cyber-enabled theories of liability, subject to the exact elements of the offense.

8. Safe Spaces and Anti-Harassment-Type Concerns

Not every harassment case under lending apps falls under specialized anti-harassment statutes, but abusive communications may overlap with broader protections when gender-based, sexually degrading, or threatening in a manner recognized by law. This is fact-sensitive.

9. Constitutionally Protected Privacy and Dignity Interests

Philippine law strongly protects human dignity, privacy, and reputation. While constitutional rights are usually enforced against state action, constitutional values influence the interpretation of private-law duties, regulatory rules, and damage claims. Public shaming by debt collectors is deeply inconsistent with these values.

IV. What Lending Apps and Collectors Usually Cannot Legally Do

The following are strong warning signs of unlawful conduct:

1. Contacting People in Your Phonebook to Shame You

A lender may verify identity and communicate through lawful channels, but indiscriminate calls or messages to unrelated contacts solely to embarrass the borrower are highly problematic. This is one of the clearest red flags in privacy complaints.

2. Exposing Your Debt to Co-Workers, Employer, Friends, or Family

Debt is a private financial matter. Telling third parties that someone is a “scammer,” “criminal,” or “refusing to pay” may create both privacy and defamation problems.

3. Threatening Arrest for Nonpayment of a Purely Civil Debt

As a rule, failure to pay a loan is not by itself a crime. A collector who says “you will be arrested tomorrow” merely because of unpaid debt is often making a legally baseless threat. Criminal liability may arise only if there is some separate offense, not from ordinary inability to pay.

4. Pretending to Be From Government, Court, or Law Enforcement

Collectors cannot lawfully impersonate the police, NBI, court officers, or government agencies to frighten borrowers into paying.

5. Using Obscene, Insulting, or Degrading Language

This may support SEC complaints, privacy complaints, damages claims, and possibly criminal complaints depending on the manner and content.

6. Posting Photos, IDs, or “Wanted” Notices Online

Public posting is especially dangerous for the app operator. It may be a serious privacy violation and can also support defamation-related theories.

7. Collecting Excessive Data Unrelated to Lending

Access to contacts, photos, SMS, microphone, location, or files may become unlawful when excessive, irrelevant, or used beyond a legitimate and disclosed purpose.

8. Continuing Harassment Through Multiple Numbers and Accounts

This shows pattern, bad faith, and often deliberate abuse.

9. Misstating the Amount Due

Inflated charges, hidden penalties, and deceptive computations may form part of a broader complaint.

V. Who Can Be Complained Against

A borrower should identify all potentially responsible parties:

the online lending app itself;
the lending company or financing company behind the app;
the collection agency, if outsourced;
individual collectors, agents, or supervisors when identifiable;
the app developer or data processor, in some privacy situations;
officers or responsible compliance personnel where legally relevant.

In practice, complaints are stronger when they name:

the brand name of the app,
the corporate entity,
website or app store information,
known contact details,
screenshots linking the abusive messages to the app or collector.

If the app is not clearly identifying its corporate owner, that itself is suspicious and should be mentioned in the complaint.

VI. Where to File Complaints in the Philippines

A borrower may file with more than one body because one set of facts can create multiple forms of liability.

1. National Privacy Commission (NPC)

Best for:

unauthorized access to contacts or phone data;
unlawful disclosure of personal information;
excessive or disproportionate data processing;
privacy breaches connected with collection.

What it can address:

privacy violations under the Data Privacy Act;
orders relating to compliance;
findings of improper data processing;
possible administrative or criminal referral consequences.

When to go there:

if contacts were messaged;
if private data was exposed;
if app permissions were abused;
if personal details were circulated without lawful basis.

2. Securities and Exchange Commission (SEC)

Best for:

harassment by online lending platforms;
abusive debt collection;
questions on whether the lender is duly registered;
violations of rules governing lending and financing companies.

What it can address:

regulatory violations;
administrative enforcement;
sanctions against erring entities;
scrutiny of whether the company may legally operate.

When to go there:

if the app is an online lender or financing platform using abusive tactics;
if you suspect the operator is unregistered or noncompliant;
if collection methods are unlawful or deceptive.

3. Bangko Sentral ng Pilipinas (BSP), When Applicable

If the entity is BSP-supervised rather than SEC-supervised, the BSP consumer assistance structure may become relevant. Not all digital lenders fall under BSP jurisdiction, but some financial institutions do. Jurisdiction depends on the nature of the entity.

4. Philippine National Police, NBI, or Prosecutor’s Office

Best for:

grave threats;
extortionate or intimidating conduct;
cyber libel or online threats;
impersonation;
criminal harassment.

A police blotter is not the case itself, but it creates contemporaneous documentation. A formal criminal complaint generally proceeds through the prosecutor’s office, often after complaint-affidavits and supporting evidence are prepared.

5. Department of Justice / Prosecutor

Where criminal complaints are evaluated and filed, subject to local procedure.

6. Civil Courts

Best for:

damages;
injunction-related relief in some situations;
claims arising from humiliation, mental anguish, reputational harm, and unlawful conduct.

7. App Store or Platform Reporting

This is not a legal remedy, but it is practical. Reporting the app to distribution platforms can support consumer protection efforts and help stop further abuse. It should supplement, not replace, formal complaints.

8. National Telecommunications Commission or Related Channels

If the issue involves abusive text blasts, spoofing, or telecom misuse, other agencies may become relevant, though these are usually secondary to NPC, SEC, and criminal channels.

VII. Which Complaint Should Be Filed First?

There is no single correct sequence, but a practical order is often:

preserve evidence immediately;
identify the company behind the app;
file privacy-related complaints with the NPC if personal data was misused;
file administrative complaints with the SEC if it is a lending/financing operator;
document threats with police or NBI if criminal conduct occurred;
consider civil damages if the harm is serious and provable.

Where threats are ongoing, immediate safety and evidence preservation come first.

VIII. Evidence: What You Must Gather Before Filing

Complaints often succeed or fail on documentation. Save everything.

Essential evidence includes:

1. Screenshots

Capture:

abusive messages;
call logs;
collector names or aliases;
profile pages;
social media posts;
app permissions requested;
account statements and due dates;
fee breakdowns;
threats of arrest or exposure.

Make sure screenshots show dates, times, numbers, URLs, usernames, and context when possible.

2. Screen Recordings

Useful when:

content may be deleted;
the app interface changes;
messages appear in chat apps that are easy to erase.

3. Call Logs and Recordings

If lawfully available, retain logs of repeated calls. Be careful with recording rules and privacy implications, but contemporaneous notes are always helpful.

4. Copies of the Loan Agreement and App Terms

Download or screenshot:

promissory note or digital contract;
privacy policy;
consent forms;
disclosure statements;
fee schedules;
terms on penalties and collection.

5. App Details

Record:

exact app name;
package name or app store listing;
developer name;
website;
email addresses;
customer service details;
SEC registration claims, if any.

6. Statements From Third Parties

If family members, co-workers, or friends received messages, ask them to save screenshots and, if needed, prepare written statements.

7. Proof of Harm

This may include:

medical or psychological consultation records, if harassment caused distress;
workplace memoranda, if employer contact caused professional harm;
evidence of reputational damage;
financial records showing hidden fees or disputed balances.

8. Demand or Cease-and-Desist Communication

A formal written demand is not always required before filing, but it may be useful. It can show that the lender was warned and continued the misconduct.

IX. How to Analyze the Facts Before Complaining

A strong complaint separates legal wrongs into categories.

Category A: Privacy Violations

Ask:

Did the app access contacts?
Did collectors message unrelated people?
Was my debt disclosed to others?
Was my photo or ID circulated?
Was data processed beyond what was necessary?

Category B: Harassment and Unfair Collection

Ask:

Was I insulted or shamed?
Was I called repeatedly at unreasonable times?
Was I threatened with arrest or violence?
Did they misrepresent legal consequences?
Did they pressure my employer or relatives?

Category C: Registration and Regulatory Issues

Ask:

Is the company registered?
Is it really a lending company or just an anonymous app?
Does it have proper disclosures?
Are loan charges transparent?

Category D: Criminal Conduct

Ask:

Were there threats?
Were there false accusations?
Did they impersonate officials?
Was there public online posting?
Was there extortion-like pressure?

By organizing the facts this way, one incident can be converted into several legal theories and multiple complaint tracks.

X. Common Defenses of Lending Apps and Why They Often Fail

1. “The borrower consented.”

Not all consent is valid for all purposes. Privacy law still requires lawful, fair, and proportionate processing. Access to contacts does not necessarily justify shaming those contacts.

2. “We were only collecting a lawful debt.”

Debt collection is lawful. Harassment and unlawful disclosure are not. The end does not justify the means.

3. “The borrower was in default.”

Default may justify a demand for payment, not reputational abuse or privacy invasion.

4. “Third-party collectors acted on their own.”

Companies may still be responsible for agents, outsourced collectors, or processors acting within the collection chain, especially in administrative and civil contexts.

5. “The messages were just reminders.”

The content, frequency, audience, and tone matter. A reminder to the borrower differs from mass disclosure to their contacts.

6. “The borrower’s contacts were references.”

Even legitimate references do not authorize widespread humiliation or repeated third-party disclosures unrelated to lawful collection.

XI. Remedies Available

A complainant may seek several forms of relief, depending on the forum.

1. Administrative Relief

Before the NPC or SEC, the complainant may seek:

investigation;
compliance orders;
sanctions;
recognition of regulatory violations;
action against noncompliant app operations.

2. Criminal Relief

Where supported by facts:

filing of complaint-affidavits;
preliminary investigation;
prosecution of responsible persons.

3. Civil Relief

Possible claims:

actual damages;
moral damages;
exemplary damages;
attorney’s fees and litigation expenses in proper cases.

4. Practical Relief

Even short of final adjudication, complaints may pressure the app to:

stop contacting third parties;
cease abusive communication;
remove posts;
correct records;
disclose the lawful basis of processing;
identify the real corporate operator.

XII. How to Draft the Complaint

A legal complaint should not read like a rant. It should read like a chronology supported by exhibits.

Good structure:

1. Caption and Parties

Identify:

complainant;
respondent app/company/collector;
addresses or online identifiers.

2. Statement of Facts

Use numbered paragraphs:

when the app was downloaded;
loan amount and due date;
permissions required;
first sign of abuse;
calls/messages received;
third parties contacted;
threats made;
harm suffered.

3. Legal Violations

State the laws or regulatory rules implicated:

Data Privacy Act;
SEC rules on unfair collection;
consumer financial protection;
Civil Code damages;
relevant penal provisions, if applicable.

4. Evidence List

Label attachments:

Annex “A” screenshot of messages;
Annex “B” call log;
Annex “C” app permissions;
Annex “D” messages to relatives;
Annex “E” copy of loan terms.

5. Relief Sought

Ask for:

investigation;
cease and desist from harassment;
sanctions;
removal of unlawful posts or disclosures;
recognition of privacy violations;
referral for criminal action where proper.

XIII. Sample Factual Allegations That Matter

In drafting, specificity is powerful. Examples:

“On 14 March 2026, at around 8:42 a.m., I received a message from mobile number ______ stating that I would be arrested if I failed to pay within two hours.”
“On the same date, my sister and two co-workers informed me that they received messages identifying me as a debtor and warning them to pressure me to pay.”
“The app had previously required access to my contact list during registration.”
“The messages sent to third parties included my full name, loan status, and insulting descriptions of my character.”
“I suffered humiliation, anxiety, and damage to my professional reputation because my employer was contacted.”

This level of detail is far stronger than saying merely, “They harassed me.”

XIV. A Short Sample Complaint Theory

A borrower might frame the case this way:

The respondent online lending app processed the complainant’s personal data in a manner that was excessive, unfair, and incompatible with the legitimate purpose of loan servicing. Instead of limiting collection efforts to lawful communication with the borrower, respondent accessed or used the complainant’s contact information to disclose the alleged debt to unrelated third parties, causing humiliation and distress. Respondent also used threatening and misleading language, including false statements about arrest and legal action, amounting to abusive and unfair debt collection. Such acts violate the Data Privacy Act, applicable SEC regulations on lending and financing companies, and give rise to criminal and civil liability under Philippine law.

That is the heart of many viable complaints.

XV. Sending a Demand Before Filing: Is It Necessary?

Not always. For administrative complaints, it can help but is not universally required. For criminal complaints, prior demand is generally not required to prove threats or unlawful disclosure. For civil damages, a prior written demand may help establish bad faith or refusal to stop harmful acts.

A practical cease-and-desist letter may demand that the app:

stop contacting third parties;
stop using abusive language;
preserve all data and records;
identify the lawful basis for processing personal data;
delete unlawfully processed data where appropriate;
communicate only through lawful channels.

Be careful not to admit more than necessary. A borrower may acknowledge the account while firmly contesting unlawful collection conduct.

XVI. What Borrowers Should Avoid Doing

Even if harassed, borrowers should avoid:

making retaliatory threats;
posting defamatory accusations without proof;
using fake payment receipts;
destroying their own evidence;
changing phones without backing up records;
paying through suspicious personal accounts without verification;
assuming every debt is void just because collection was abusive.

A valid debt can coexist with an invalid collection method. The borrower should separate the obligation from the abuse.

XVII. Is Nonpayment of an Online Loan a Criminal Case?

Usually, ordinary nonpayment of debt is civil, not criminal. That is one of the most abused points in scare tactics used by collectors. A person generally cannot be imprisoned merely for failure to pay a loan. But separate criminal acts may arise from either side depending on facts. The key is this: collectors cannot automatically convert a debt into a criminal threat.

This is why phrases such as “you will be jailed today unless you pay now” are often legally suspect.

XVIII. What if the App Is Unregistered or Anonymous?

That makes the case more serious, not less.

If an app does not clearly disclose:

its corporate identity,
registration information,
physical address,
legitimate customer support channels,
privacy accountability details,

that should be highlighted in the complaint. Anonymous lending operations may be easier to expose through SEC complaints, app store records, payment trail evidence, domain information, and screenshots. Even where the exact operators are initially unknown, a complaint can still identify the app, the collection numbers, the payment accounts, and the digital footprints.

XIX. Data Subject Rights That May Matter

Under Philippine privacy principles, a borrower may invoke rights related to personal data, such as:

the right to be informed;
the right to object, in some situations;
the right to access;
the right to rectification;
the right to erasure or blocking, where legally proper;
the right to damages.

These rights are not absolute and depend on lawful grounds for processing, but they are highly relevant when the app is using data excessively or unlawfully.

For example, a borrower may ask:

what personal data was collected;
from what source;
for what exact purpose;
to whom it was disclosed;
how long it will be retained;
who the data protection officer is.

A refusal or evasive response can strengthen the complaint narrative.

XX. Can the App Contact References at All?

This is fact-sensitive.

Limited contact for identity verification or lawful collection may be argued by a lender. But contacting references or phonebook entries becomes unlawful when it is:

excessive;
repetitive;
intimidating;
unrelated to a legitimate need;
designed to shame the borrower;
disclosive of debt information beyond necessity.

The more the app uses references as pressure points rather than legitimate contact points, the weaker its defense becomes.

XXI. Employer Contact Is Especially Problematic

When lenders call a borrower’s employer, supervisor, or HR department, the risks increase significantly. This can affect livelihood and reputation. Unless there is a narrow, legitimate, and lawful basis, such contact often appears punitive and coercive.

In many cases, employer contact is among the most damaging pieces of evidence because it shows that the collector sought leverage through public embarrassment rather than lawful demand.

XXII. Social Media Exposure Is One of the Strongest Complaint Triggers

Posting a borrower’s face, ID, unpaid balance, or accusation online is one of the clearest examples of overreach. It can involve:

privacy violations;
libel or cyber libel issues;
reputational damage;
abusive collection;
possible grounds for damages.

Borrowers should preserve full-page screenshots, URLs, timestamps, and names of viewers or recipients who saw the post.

XXIII. Can the Borrower Sue Even If the Debt Is Real?

Yes. A borrower may complain about unlawful collection conduct even if the underlying debt exists. The law does not condition privacy and dignity on perfect payment history.

The better view is:

the lender may pursue the debt lawfully;
the borrower remains protected against unlawful collection tactics.

This is central to understanding these cases.

XXIV. Practical Complaint Strategy in the Philippines

A disciplined approach often works best:

Step 1: Secure Evidence

Do not argue endlessly with collectors. Preserve everything first.

Step 2: Identify the Corporate Entity

Check the app, receipts, emails, privacy policy, and loan agreement.

Step 3: Stop Informal Engagement

Tell the collector in writing that further communication must be lawful and that unauthorized third-party disclosure is objected to.

Step 4: File the Appropriate Complaints

NPC for privacy misuse,
SEC for abusive online lending practices,
police/NBI/prosecutor for threats and other crimes,
civil counsel for damages where harm is serious.

Step 5: Maintain a Timeline

Create a dated spreadsheet or log of every call, message, and disclosure.

Step 6: Protect Your Accounts and Device

Revoke unnecessary app permissions, uninstall carefully after preserving evidence, and change passwords if needed.

Step 7: Inform Affected Contacts

If third parties were contacted, ask them to preserve evidence and avoid responding emotionally.

XXV. The Importance of Proportionality Under Privacy Law

One of the strongest legal ideas in these cases is proportionality. Even where collection is a legitimate business purpose, the methods used must be proportionate. Public humiliation is disproportionate. Contact blasting is disproportionate. Threats of arrest for a civil debt are disproportionate. Use of unrelated private data for leverage is disproportionate.

This principle is often more persuasive than abstract arguments about consent.

XXVI. Damages: What Harm Can Be Claimed?

Where supported by evidence, a borrower may claim:

emotional distress;
anxiety;
sleeplessness;
embarrassment;
reputational damage;
workplace consequences;
family conflict;
financial loss caused by unlawful collection;
therapy or treatment expenses, if any;
attorney’s fees in proper cases.

Moral damages are especially relevant where humiliation and mental anguish are clear. But courts and adjudicators prefer concrete evidence, not merely generalized assertions.

XXVII. Are There Risks in Filing a Complaint?

Yes, but they are manageable.

Possible issues include:

jurisdictional confusion between agencies;
difficulty identifying the real operator;
collectors using multiple disposable numbers;
weak documentation;
the lender countering that the borrower simply wants to avoid payment.

That is why the complaint must remain evidence-driven and legally focused. The borrower should not frame it as “cancel my debt because they harassed me,” unless there is an actual legal basis affecting enforceability. The stronger position is: “The debt issue is separate; the collection conduct violated my rights.”

XXVIII. Key Legal Themes That Usually Persuade Regulators

The most persuasive facts in these cases are usually:

third-party disclosure of debt;
use of contact lists;
threats of arrest or criminal prosecution;
insulting and degrading language;
public posting or social media shaming;
absence of clear corporate identity or registration;
excessive app permissions;
repeated harassment after objection.

These facts show pattern, bad faith, and misuse of technology.

XXIX. A Borrower’s Rights in One Sentence

A borrower in the Philippines may be required to pay a lawful debt, but cannot lawfully be stripped of privacy, dignity, and due process by an online lending app.

XXX. Final Legal Assessment

In the Philippine context, complaints against online lending apps for harassment and privacy violations are often strongest when they are framed as a combination of:

Data Privacy Act violations for unauthorized, excessive, or unfair processing and disclosure of personal data;
SEC regulatory violations for abusive, deceptive, and unfair collection practices by lending or financing entities;
possible criminal offenses where threats, defamation, coercion, impersonation, or cyber-enabled abuse are present; and
civil claims for damages based on humiliation, emotional suffering, and injury to reputation.

The law does not prohibit debt collection. It prohibits debt collection by intimidation, exposure, deception, and unlawful data misuse. In many online lending app disputes, that is exactly where liability begins.

Because specific procedures, agency circulars, and enforcement practices can change, the safest legal approach is to treat every complaint as fact-intensive and to ground it in preserved evidence, precise timelines, and the exact identity of the app operator. But as a matter of Philippine legal principle, a borrower who has been harassed, publicly shamed, or exposed through misuse of phone data has a serious basis to complain—and often in more than one forum at the same time.