Being harassed by an online lending app can feel frightening, especially when collectors threaten to message your family, employer, or social media contacts. In the Philippines, owing money does not give a lender the right to shame you, threaten you, misuse your contact list, or pretend that a criminal case or warrant already exists. This guide explains what counts as online lending harassment, which government office to approach, what evidence to prepare, and how to file complaints with the SEC, National Privacy Commission, BSP, police, NBI, or prosecutor depending on what happened.

What Counts as Online Lending App Harassment?

Online lending app harassment usually involves abusive collection tactics after a borrower misses a due date or disputes the amount charged. It may happen through SMS, calls, Viber, Messenger, WhatsApp, email, app notifications, fake demand letters, or social media posts.

Common examples include:

Threatening to post your photo, ID, or loan details online
Calling or messaging your relatives, friends, office, HR department, neighbors, or customers
Sending messages such as “scammer,” “magnanakaw,” “fraudster,” or “wanted”
Using obscene, insulting, or degrading language
Threatening arrest, imprisonment, barangay blotter, or police action for ordinary nonpayment
Sending fake subpoenas, fake warrants, fake court documents, or fake lawyer letters
Accessing your phone contacts, photos, gallery, camera, or social media accounts beyond what is necessary
Telling third parties that you owe money
Contacting people in your phonebook who are not guarantors or co-makers
Demanding payment through personal wallets without official receipts or loan breakdowns
Calling repeatedly at unreasonable hours

A lender may collect a valid debt through lawful reminders, demand letters, restructuring discussions, and court action when appropriate. What the law prohibits is abusive, deceptive, excessive, or privacy-violating collection.

Your Main Rights Under Philippine Law

Several Philippine laws and regulatory rules may apply at the same time. The right complaint depends on the conduct, not just the name of the app.

Issue	Main Legal Basis	What It Protects
Harassment, threats, insults, public shaming, contacting third parties	SEC Memorandum Circular No. 18, Series of 2019	Borrowers of lending and financing companies
Unauthorized access to contacts, photos, phone permissions, or disclosure of personal data	Data Privacy Act of 2012, RA 10173 and NPC Circular No. 2022-02	Privacy of borrowers, character references, and contacts
Cyberlibel, threats, online identity misuse, fake public posts	Cybercrime Prevention Act of 2012, RA 10175, Revised Penal Code	Criminal remedies for online wrongdoing
Abusive financial collection practices by covered financial service providers	Financial Products and Services Consumer Protection Act, RA 11765	Fair treatment, data protection, complaint handling
Failure to disclose true cost of credit	Truth in Lending Act, RA 3765	Disclosure of interest, charges, and finance cost
Lending company authority and SEC supervision	Lending Company Regulation Act of 2007, RA 9474, Financing Company Act of 1998, RA 8556	Regulation of lending and financing companies

SEC Memorandum Circular No. 18, Series of 2019 specifically treats as unfair collection practices the use or threat of violence or criminal means, threats to take actions that cannot legally be taken, insults or profane language, disclosure or publication of borrower names and personal information, false or deceptive means, and contacting persons in the borrower’s contact list other than named guarantors or co-makers. It also requires financing and lending companies to keep borrower data confidential, subject only to limited lawful exceptions.

The same SEC circular states that lending companies and financing companies remain responsible even if they outsource collection to third-party service providers. This matters because many online lending apps blame “collection partners” or “agents” when complaints are filed. Under the SEC rule, outsourcing does not erase the lender’s responsibility for abusive collection practices.

NPC Circular No. 2022-02 also directly addresses online loan apps. It prohibits unnecessary app permissions and excessive processing of personal data, including unrestrained use of contact lists. It states that borrowers’ photos must not be used to harass or embarrass them, that unbridled processing of contact lists is prohibited, and that contacting persons in the borrower’s contact list other than guarantors is prohibited for debt collection.

Where to File a Complaint Against an Online Lending App

You may need to file with more than one office. For example, if an app threatens you and messages your employer using your contact list, the case may involve both SEC unfair debt collection and NPC data privacy violations.

Where to File	Use This When	Practical Result
Securities and Exchange Commission (SEC)	The respondent is a lending company, financing company, or online lending platform using abusive collection tactics	Administrative investigation, fines, suspension, revocation, or orders against the lender
National Privacy Commission (NPC)	The app accessed contacts, disclosed debt information, posted your photo, or used personal data beyond lawful purposes	Privacy investigation, orders to stop processing, penalties, referral for prosecution
BSP Consumer Assistance Mechanism	The issue involves a BSP-supervised institution such as a bank, e-money issuer, credit card issuer, or certain financial service provider	Consumer assistance, referral to institution, possible mediation/adjudication
PNP Anti-Cybercrime Group or NBI Cybercrime Division	There are threats, fake posts, hacking, identity misuse, extortion, cyberlibel, or online impersonation	Criminal investigation and evidence gathering
City or Provincial Prosecutor’s Office	You want to pursue a criminal complaint for threats, cyberlibel, unjust vexation, coercion, or related offenses	Preliminary investigation and possible filing of criminal case in court

The SEC now maintains the SEC i-Message portal for public inquiries and complaints. The SEC page describes it as a web-based channel for submitting complaints, issues, and requests. (Securities and Exchange Commission)

For privacy complaints, the NPC requires a formal complaint in the proper format. Its complaint page instructs complainants to download the form, fill it out, have it notarized, and submit it in person, by courier, or by scanned email to the NPC complaints address. The NPC also announced a new Complaint-Affidavit template effective 1 July 2025, so use the current form from the NPC website instead of old templates shared in Facebook groups. (National Privacy Commission)

For cybercrime incidents, the DOJ Office of Cybercrime directs the public to proceed to the National Bureau of Investigation Cybercrime Division or the Philippine National Police Anti-Cybercrime Group. (Cybercrime Center)

Step-by-Step: What to Do Before Filing

1. Secure your evidence before deleting anything

Do this first. Many borrowers delete the app or messages out of panic, then later struggle to prove what happened.

Save:

Screenshots of all threats, insults, and collection messages
Screenshots showing the sender’s number, profile, username, email, or app account
Call logs showing date, time, number, and frequency
Messages sent to your relatives, employer, friends, or contacts
Social media posts, comments, tags, stories, or group posts
App store page showing app name, developer name, and privacy policy
Loan agreement, promissory note, disclosure statement, statement of account, and payment schedule
Receipts, GCash/Maya/bank confirmations, and reference numbers
Emails or chats where you asked for a computation or disputed the amount
Evidence that the person contacted was not a guarantor or co-maker

Take screenshots that show the date, time, sender, and full context. Avoid cropping too much. If a message appears in a thread, capture enough of the thread to show continuity.

Be careful with secret audio recordings of calls. The Philippines has the Anti-Wiretapping Act, RA 4200, and the Supreme Court has treated secret recording of private communications as legally sensitive in cases such as Ramirez v. Court of Appeals. Safer evidence includes screenshots, call logs, written messages, voicemails voluntarily left by the collector, witness statements from people contacted, and platform records.

2. Identify the real company behind the app

Online lending apps often use brand names different from the corporate name. Before filing, look for:

App name
Developer name in Google Play Store or Apple App Store
Corporate name in the loan agreement or disclosure statement
SEC registration number
Certificate of Authority number
Business address
Customer service email
Data Protection Officer contact details
Privacy policy link
Collection agency name, if disclosed

Check the SEC’s lending and financing company resources, including its lists of lending companies, financing companies, and recorded online lending platforms. If the app is not recorded or the company’s authority has been revoked, mention that in your complaint and attach screenshots of your search.

3. Send a written demand to stop the harassment

Before filing, it is usually useful to send a clear written message to the lender’s customer service, complaints desk, or Data Protection Officer. Keep it short and factual.

State that:

You are not refusing to address the loan, but you dispute the harassment or unlawful collection method.
You demand that they stop contacting third parties.
You withdraw any supposed consent to unnecessary processing of your contact list, photos, or other unrelated data.
You request a full statement of account and basis for all interest, penalties, and charges.
You request the name and authority of any third-party collection agency.
You reserve the right to file complaints with the SEC, NPC, and law enforcement.

Do not insult the collector back. Do not post the collector’s personal details publicly. Your goal is to create a clean paper trail.

4. Revoke unnecessary app permissions

On your phone, check app permissions and disable access to contacts, camera, photos, microphone, location, and SMS unless truly necessary. If you already have the evidence you need, consider uninstalling the app only after saving documents, screenshots, and account details.

For Android users, check:

Settings
Apps
Select the lending app
Permissions
Deny unnecessary permissions

For iPhone users, check:

Settings
Privacy & Security
Contacts / Photos / Camera / Microphone
Disable access for the app

This does not erase data already taken by the app, but it may reduce further access.

How to File a Complaint with the SEC

File with the SEC when the issue is abusive collection by a lending company, financing company, online lending platform, or its collection agent.

What to include in your SEC complaint

Prepare a single organized PDF or folder containing:

Document	Why It Matters
Valid government-issued ID	Confirms complainant identity
Complaint narrative	Explains what happened in chronological order
Loan agreement, disclosure statement, or app loan details	Shows the lender, amount, interest, penalties, and due date
Screenshots of harassment	Proves unfair collection acts
Proof that third parties were contacted	Shows disclosure to family, employer, friends, or contacts
Payment receipts	Helps verify actual balance and disputed charges
App store screenshots	Identifies app name and developer
Prior written complaint to company	Shows you attempted direct resolution
Statement of account requests	Useful for Truth in Lending or overcharging issues

Write your complaint in a simple timeline:

Date you downloaded the app
Date and amount of loan
Due date and amount demanded
Dates of harassment
Names/numbers/accounts used by collectors
People contacted by the collector
Exact words used in threats or insults
What you are asking the SEC to do

Possible requests include investigation, order to stop harassment, sanctions for unfair debt collection, verification of the lender’s authority, and action against unrecorded online lending activity.

SEC penalties for unfair collection

Under SEC MC No. 18, violations may lead to fines and stronger sanctions. The circular lists fines for first and second offenses and, for a third offense, possible higher fines, suspension of lending or financing activities for up to 60 days, or revocation of the company’s authority depending on the facts and gravity of the offense.

How to File a Complaint with the National Privacy Commission

File with the NPC when the lending app misused personal data. This is especially important when the app:

Accessed your contact list without necessity
Messaged your contacts about your debt
Posted or threatened to post your photo, ID, or loan details
Used your profile picture to shame you
Contacted character references for collection instead of identity verification
Treated a character reference as a guarantor without that person’s consent
Failed to explain how your data was collected or used
Refused to remove a character reference’s data after request

A character reference is not the same as a guarantor. A guarantor is a person who expressly binds himself or herself to pay if the borrower fails to do so. Under NPC Circular No. 2022-02, a character reference must not automatically be treated as a guarantor, and for debt collection, lenders may only contact the guarantor.

NPC filing requirements

The NPC complaint process generally requires:

Current NPC Complaint-Affidavit form
Notarized complaint
Copies of evidence
Valid ID
Witness affidavits, if available
Proof of prior communication with the company or its Data Protection Officer, when applicable

Use the latest form from the NPC complaint filing page because the NPC updates its templates and requirements. (National Privacy Commission)

When to Go to the Police, NBI, or Prosecutor

Regulatory complaints are useful, but serious threats or online attacks may also justify criminal action.

Consider going to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or prosecutor if the collector:

Threatens physical harm
Threatens to release edited photos or humiliating posts
Posts your face with accusations like “scammer” or “wanted”
Uses fake police, court, barangay, or lawyer documents
Demands money through intimidation
Impersonates a government officer
Hacks or takes over accounts
Uses your ID or photo to create fake posts
Sends threats to your workplace or customers

Possible offenses may include grave threats, light threats, coercion, unjust vexation, libel or cyberlibel, identity-related offenses, or other crimes depending on the facts. The exact charge is determined by the prosecutor, not by the label used in your complaint.

For a prosecutor complaint, prepare a complaint-affidavit. This is a sworn written statement narrating the facts. Attach screenshots, printed messages, witness affidavits, IDs, and proof connecting the account or number to the collector when available. Many prosecutor’s offices require multiple copies, so ask the local office about the current number of sets before filing.

What If You Are an OFW or Foreigner?

OFWs and foreigners can still complain when the lending app, borrower, lender, collection activity, or affected contacts are connected to the Philippines.

Practical points:

SEC i-Message and email-based submissions can help if you are abroad.
NPC complaints may require notarized documents; if signed abroad, ask the NPC or the receiving office whether consular notarization, local notarization with authentication, or Apostille is required.
If a relative in the Philippines will file or follow up for you, prepare a Special Power of Attorney and copies of your ID.
If evidence is in another language, prepare an English translation when needed.
If the collector harasses your family in the Philippines, your family member can also prepare a witness affidavit.

For foreign documents used in Philippine proceedings, authentication requirements depend on where the document was executed and which office will receive it. The DFA’s apostille system mainly concerns Philippine public documents for use abroad, while foreign documents for Philippine use may need authentication or apostille from the issuing country depending on the circumstances. Check the receiving agency before spending money on authentication.

Common Mistakes That Weaken Complaints

Deleting the app too early

Delete only after saving loan details, screenshots, app identity, privacy policy, and payment records. Once deleted, important account screens may be hard to recover.

Filing with only emotional statements and no evidence

Government agencies need dates, screenshots, names, numbers, and documents. A short, organized complaint with strong evidence is better than a long but unsupported story.

Paying to personal accounts without proof

If you decide to pay, use official payment channels whenever possible. Ask for a written computation and receipt. Payments to random personal wallets can create later disputes.

Ignoring a real court notice

Harassment is illegal, but a valid debt may still be pursued legally. If you receive a real court summons, prosecutor subpoena, or small claims notice, respond within the required period.

Believing every “warrant” or “subpoena” sent by chat

A real warrant of arrest is not casually issued by a collector through Messenger. A real subpoena or court order has identifying case details and comes from the proper office. Save suspicious documents and include them in your complaint.

Publicly shaming the collector back

Do not create your own libel, privacy, or harassment problem. Keep your responses factual and preserve evidence.

Documents Checklist for Filing

Evidence	SEC	NPC	Police / NBI / Prosecutor
Valid ID	Yes	Yes	Yes
Complaint narrative or affidavit	Yes	Yes, notarized	Yes, sworn complaint-affidavit
Loan agreement / disclosure statement	Yes	Helpful	Helpful
Statement of account / computation	Yes	Helpful	Helpful
Screenshots of threats or insults	Yes	Yes	Yes
Proof of messages to contacts	Yes	Yes	Yes
Social media URLs and screenshots	Yes	Yes	Yes
App permissions screenshots	Helpful	Yes	Helpful
App store developer screenshots	Yes	Yes	Helpful
Payment receipts	Yes	Helpful	Helpful
Witness affidavits from family/employer/contacts	Helpful	Helpful	Yes
Prior complaint to company/DPO	Helpful	Often important	Helpful

Practical Timeline

Timelines vary depending on docket volume, completeness of documents, and whether the respondent company can be identified.

Process	Usual Practical Timeline
Preserving evidence and preparing complaint	1–7 days
Company response to your written complaint	A few days to several weeks, depending on the company
SEC complaint acknowledgment or ticket	Often days to weeks
SEC investigation or administrative action	Several weeks to months
NPC complaint review and proceedings	Several months, especially if evidence is incomplete
Police/NBI cybercrime assistance	Initial reporting may be immediate; investigation varies
Prosecutor preliminary investigation	Often several months, depending on docket and counter-affidavits

A well-organized complaint usually moves faster than a complaint with missing IDs, unclear respondent names, mixed-up screenshots, or no timeline.

Frequently Asked Questions

Can an online lending app message my contacts?

Not freely. Under SEC MC No. 18 and NPC Circular No. 2022-02, contacting people in your contact list other than named guarantors or co-makers is a serious issue. Character references should not be treated as guarantors, and contact list processing must not be excessive or used for harassment.

Can they post my photo or call me a scammer online?

No. Posting your photo, name, ID, loan details, or accusations to shame you may violate SEC debt collection rules, the Data Privacy Act, and possibly criminal laws on libel or cyberlibel depending on the content.

Do I still have to pay the loan if the app harassed me?

A harassment complaint does not automatically erase a valid debt. However, the lender must collect lawfully, disclose the correct amount, and avoid abusive practices. You can dispute illegal collection while still asking for a proper statement of account and proof of charges.

Can I be jailed for not paying an online loan?

Ordinary nonpayment of debt is not a crime by itself. The Philippine Constitution prohibits imprisonment for debt. However, separate criminal issues may arise if there is fraud, estafa, bouncing checks, falsified documents, or other criminal acts. Collectors often misuse the fear of arrest to pressure borrowers.

What if the app is not SEC-registered or not on the recorded OLP list?

Mention that in your SEC complaint and attach screenshots of your verification attempt. Unregistered or unrecorded lending activity may trigger regulatory action. Still file with the NPC or cybercrime authorities if there was privacy abuse, threats, or online shaming.

Should I file with SEC or NPC first?

File with SEC for unfair debt collection by lending or financing companies. File with NPC for misuse of personal data, contact list abuse, unauthorized disclosure, or public shaming. If both happened, you may file with both and tailor each complaint to that agency’s jurisdiction.

What if the collector is using different numbers every day?

Keep a log. Screenshot each number, date, time, message, and platform. Include patterns, repeated scripts, identical payment instructions, and links to the same app or lender. The more organized the pattern, the easier it is for authorities to evaluate.

Can my employer act against me because collectors called the office?

A collector’s call does not prove misconduct at work. If your employer is contacted, ask HR or the recipient to save the message, number, date, and screenshots. That person may provide a witness statement. The collector’s disclosure of your alleged debt to your workplace may support your complaint.

Is barangay mediation required before filing a complaint?

Not for SEC, NPC, BSP, police, NBI, or prosecutor complaints. Barangay conciliation may matter in some ordinary civil disputes between individuals in the same city or municipality, but complaints against companies, online platforms, privacy violations, cybercrime, or regulatory breaches usually go directly to the proper agency.

Key Takeaways

Online lending apps may collect debts, but they cannot threaten, shame, deceive, or misuse your personal data.
SEC MC No. 18 prohibits unfair debt collection practices by lending and financing companies, including threats, insults, disclosure of borrower information, false representations, and improper contact with third parties.
NPC Circular No. 2022-02 restricts online lending apps from excessive app permissions and unbridled processing of contact lists.
File with the SEC for abusive collection, with the NPC for privacy violations, and with PNP/NBI/prosecutors for threats, cyberlibel, impersonation, or extortion.
Preserve evidence before deleting the app: screenshots, call logs, loan documents, payment records, app details, and messages sent to your contacts.
A harassment complaint does not automatically cancel a valid debt, but it can stop unlawful collection and trigger regulatory or criminal consequences.
Use the latest official SEC and NPC channels and forms, because complaint systems, templates, and agency procedures can change.