Quick answer
A creditor may demand payment, send reasonable notices, engage a collection agency, report accurate credit information through lawful channels, and file a civil case. It may not use threats, violence, deception, public shaming, abusive language, unlawful disclosure of personal data, or other oppressive collection methods.
Harassment does not erase a valid debt, but it may support separate administrative, privacy, criminal, or civil remedies. Preserve the evidence, complain in writing to the creditor, and escalate to the proper regulator. Report threats of violence, forced entry, stalking, extortion, or fake warrants immediately to the police or the National Bureau of Investigation.
The right rules and complaint office depend on who extended the credit:
- Banks, digital banks, and other BSP-supervised institutions are generally under the Bangko Sentral ng Pilipinas.
- Lending and financing companies—including many online lending platforms—are generally under the Securities and Exchange Commission.
- Misuse or disclosure of personal data may also be reported to the National Privacy Commission.
- Cooperatives offering credit are generally under the Cooperative Development Authority, except cooperative banks and other institutions placed under BSP supervision.
What debt collectors are prohibited from doing
The Financial Products and Services Consumer Protection Act, or Republic Act No. 11765, prohibits financial service providers from using abusive collection or debt-recovery practices. A provider remains responsible for its employees and agents and is solidarily liable with accredited third-party service providers for acts or omissions that include debt collection.
For lending and financing companies, SEC Memorandum Circular No. 18, Series of 2019 identifies conduct such as:
- Threatening violence, physical harm, damage to property, or injury to the borrower’s reputation;
- Threatening an action that cannot legally be taken;
- Using obscenities, insults, or profane language that amounts to an offense;
- Publishing or disclosing the borrower’s name or personal information outside permitted circumstances;
- Giving or threatening to give another person false loan information, including concealing the fact that the debt is disputed;
- Using false representations or deceptive means to collect or obtain information;
- Refusing to disclose the collector’s full name or true identity; and
- Contacting people found in the borrower’s phone contact list when they are not named guarantors or co-makers.
Under the SEC circular, contact before 6:00 a.m. or after 10:00 p.m. is generally treated as unreasonable. The circular contains exceptions when the account has been past due for more than 15 days or when the borrower has given express written, electronic, or recorded consent that those hours are the only reasonable or convenient time for contact. Even where an exception applies, threats, insults, deception, disclosure to unrelated people, and other abusive conduct remain prohibited.
For credit-card debt, the Philippine Credit Card Industry Regulation Law likewise prohibits a card issuer or collection agent from harassing, abusing, or oppressing any person. A card issuer must notify the cardholder in writing before endorsing the account to a collection agency, identifying the agency and its contact details.
Privacy violations by online lenders
The National Privacy Commission’s Circular No. 20-01 applies to the processing of personal data for loan-related transactions by lending and financing companies, their service providers, and even persons acting as lenders without the required SEC authority.
Among other safeguards, it provides that:
- A lending app may request only permissions that are suitable, necessary, and not excessive for a lawful purpose.
- Access to a borrower’s entire phone contact list or email list, harvesting social-media contacts, or copying those contacts for collection or harassment is prohibited.
- An app must instead provide a separate interface through which the borrower can voluntarily name character references or co-makers.
- A borrower’s photograph must not be used to harass or embarrass the borrower.
- Loan providers remain accountable for personal data processed by their collection agencies and other service providers.
- Personal data must not be retained indefinitely for an unspecified future use.
A lender may contact a properly identified guarantor, co-maker, or, within privacy limits, a character reference. A character reference does not become liable for the debt merely because the borrower supplied the person’s name. Liability depends on whether the person actually entered into a valid agreement as guarantor, surety, or co-maker.
Lawful submission of accurate credit data to an authorized credit-information system is also different from posting a borrower’s debt publicly or sending humiliating messages to relatives, colleagues, or social-media contacts.
What collectors may lawfully do
Not every unpleasant collection effort is illegal. Subject to the contract and applicable law, a creditor or authorized collector may generally:
- Ask the borrower to pay;
- Send a professional demand letter;
- Communicate through reasonable calls, messages, email, or personal visits;
- Offer restructuring or a payment arrangement;
- Engage an authorized collection agency or lawyer;
- File a civil action for collection; and
- Make disclosures required or permitted by law, including authorized credit reporting.
A collector may truthfully warn that the creditor is considering a civil case. It may not falsely claim that a case, warrant, subpoena, or court order already exists.
A visit to a home or workplace is not automatically unlawful. The collector cannot force entry, refuse to leave private premises, seize property without lawful authority, pretend to be a police officer or court employee, or announce the debt to neighbors, colleagues, or customers merely to cause embarrassment.
What to do immediately
1. Confirm who is collecting
Ask for the collector’s:
- Full name and employer;
- Office address and official contact details;
- Name of the original creditor;
- Account or loan reference number;
- Written breakdown of principal, interest, fees, penalties, and payments; and
- Authority to collect if the account was assigned or endorsed.
Verify these details through the creditor’s official website, app, branch, or published customer-service number. Do not send money to a new personal bank or e-wallet account merely because a caller demands immediate payment.
If the amount or identity of the creditor is disputed, say so clearly in writing. Request the contract, disclosure statement, statement of account, payment history, and evidence of any assignment.
2. Preserve the evidence before blocking anyone
Keep original copies of:
- Text messages, chat conversations, emails, social-media posts, and app notifications;
- Screenshots showing the sender, complete message, date, and time;
- Call logs and voicemails;
- Demand letters, envelopes, courier receipts, and notices;
- Loan agreements, disclosure statements, statements of account, and payment receipts;
- The app’s name, developer, app-store link, permissions, privacy notice, and company details;
- Messages received by relatives, colleagues, employers, or other contacts;
- Names of witnesses and a chronological incident log; and
- Medical records, employment records, or other proof of resulting harm, if relevant.
Ask affected contacts to preserve their own original messages and call logs. Back up the evidence without editing or cropping away identifying details.
Do not secretly record a private telephone or in-person conversation without legal advice. The Anti-Wiretapping Act generally prohibits secretly recording a private communication without authorization from all parties. Written messages, call logs, existing voicemails, witness accounts, and a contemporaneous incident diary can be preserved without creating that risk.
3. Send a written complaint and boundary notice
Write to both the collection agency and the original creditor. Include:
- Your name and a masked account reference;
- A short chronology of the conduct;
- The exact messages, calls, disclosures, or threats complained of;
- The names or numbers used by the collectors;
- A statement identifying any amount you dispute;
- A request to investigate and preserve relevant records;
- A request that abusive conduct and unauthorized third-party disclosure stop;
- Your preferred reasonable communication channel and hours; and
- The specific correction or resolution you seek.
Ask for a complaint reference number and written response. Keep proof of delivery.
Requesting written-only communication does not automatically extinguish the creditor’s right to pursue lawful collection. It does, however, create a clear record of your boundaries and of any abusive conduct that continues afterward.
Where to file a complaint
For a bank or another BSP-supervised institution
First use the institution’s Financial Consumer Protection Assistance Mechanism or official customer-service complaint channel. This is the required first-level recourse.
If the response is unsatisfactory or the matter remains unresolved, escalate through the BSP Online Buddy or other BSP consumer-assistance channels. If BOB is unavailable, the BSP currently accepts its Complaint, Inquiry and Request form at consumeraffairs@bsp.gov.ph. Attach the complaint sent to the institution, its response if any, and supporting documents.
The BSP’s Regulations on Financial Consumer Protection require BSP-supervised institutions and their authorized agents to act in good faith, use reasonable conduct, and avoid abusive collection practices.
For a lending or financing company or online lending platform
Complain first through the company’s official complaints desk. Then file with the SEC through the SEC iMessage portal and select the help topic for complaints on financing and lending companies.
Include the company’s corporate name if known, the app or platform name, loan documents, proof of your prior complaint, screenshots, relevant phone numbers and accounts, and the relief requested. The SEC complaint may lead to regulatory investigation and sanctions, but compensation or cancellation of a debt is not automatic.
For misuse or disclosure of personal data
First notify the lender, collection agency, or its data-protection officer in writing. Under the 2021 NPC Rules of Procedure, as amended, an NPC complaint ordinarily will not proceed unless:
- The complainant first informed the responsible entity in writing; and
- The entity failed to take timely and appropriate action or did not respond within 15 calendar days after receiving the notice.
The NPC may waive this exhaustion requirement for good cause or serious violations, including grave and irreparable harm, lack of an adequate remedy, or conduct that is patently illegal.
A formal complaint must generally be written, verified, supported by evidence, and accompanied by a certification against forum shopping. The NPC’s current instructions require a notarized complaint form and the applicable filing fee unless an exemption or waiver applies. It may be submitted in person, by courier, or as instructed on the NPC’s formal complaint page.
Do not wait unnecessarily. Different administrative, civil, and criminal remedies have different prescriptive periods.
For threats, coercion, extortion, or other possible crimes
Go to the nearest police station or seek assistance from the NBI when the conduct involves credible threats of harm, forced entry, stalking, blackmail, impersonation of authorities, fake legal documents, account takeover, or other criminal activity. Online incidents may also be brought to the NBI Cybercrime Division or submitted through the NBI online complaint facility.
Depending on the precise words, acts, intent, and evidence, harassment may fall under offenses such as grave threats, coercion, unjust vexation, trespass, defamation, or cybercrime-related offenses. These labels are fact-specific; not every rude message satisfies the elements of a crime.
If there is an immediate danger, prioritize personal safety, contact emergency services or the nearest police station, and do not meet the collector alone.
Civil remedies and damages
A person harmed by abusive collection may also consider a civil action for damages, an injunction, or other appropriate relief.
Articles 19, 20, 21, and 26 of the Civil Code require people exercising their rights to act with justice, honesty, and good faith and recognize relief for unlawful or willfully injurious conduct affecting dignity, privacy, family relations, or peace of mind.
Recovery is not automatic. The claimant must establish the wrongful conduct and the legally required connection to actual injury or recoverable damages. The appropriate defendants, venue, causes of action, evidence, and filing deadline depend on the facts. Consult a Philippine lawyer before filing, particularly if the conduct caused job loss, reputational damage, financial loss, or serious emotional or physical harm.
A collection complaint does not stop a court case
The Constitution provides that no person may be imprisoned merely for debt or nonpayment of a poll tax. This does not prevent a creditor from filing a civil collection case. Separate conduct—such as fraud, falsification, or issuing a bouncing check under applicable law—may have different consequences.
Do not ignore genuine court papers. A regulator or privacy complaint does not automatically suspend a civil action, stop contractual interest, or extend the deadline stated in a summons. Verify the case directly with the named court and obtain legal assistance promptly.
For qualifying money claims not exceeding ₱1 million, exclusive of interest and costs, a creditor may use the Supreme Court’s small-claims procedure. Follow the response deadline and instructions in the actual summons and court forms.
Common mistakes to avoid
- Assuming harassment automatically cancels the loan;
- Paying an unknown personal account without confirming the collector’s authority;
- Deleting the app, messages, or call history before preserving evidence;
- Posting the collector’s personal data publicly in retaliation;
- Secretly recording private calls without considering the Anti-Wiretapping Act;
- Signing a restructuring agreement, waiver, admission, or acknowledgment without reading it;
- Making a token payment on an old or disputed obligation without understanding how it may affect available defenses;
- Giving the collector an OTP, PIN, password, complete card number, or access to a device;
- Filing only a vague complaint without dates, names, screenshots, or the requested relief;
- Treating a reference as legally liable when the person did not agree to be a guarantor or co-maker; or
- Ignoring authentic demand letters, summonses, or notices because a regulatory complaint is pending.
When legal help is urgent
Seek immediate assistance if:
- The collector threatens death, physical injury, sexual violence, kidnapping, arson, or damage to property;
- Someone is following you, waiting outside your home or workplace, or trying to enter by force;
- Your photo or personal information is being altered, sexualized, posted, or distributed;
- The collector demands money in exchange for not exposing private information;
- A supposed police officer, prosecutor, sheriff, or court employee is demanding payment;
- You receive an authentic summons, subpoena, warrant, or court order;
- Money is being taken through unauthorized transactions;
- The collector is contacting a child or vulnerable family member;
- The harassment is causing a medical or mental-health emergency; or
- A filing or response deadline is approaching.
If cost is a concern, ask the Public Attorney’s Office about eligibility or inquire with an Integrated Bar of the Philippines legal-aid office.
Frequently asked questions
Can a collector have me arrested for an unpaid loan?
Not for mere nonpayment of an ordinary debt. Only lawful authorities can arrest a person, and an arrest ordinarily requires the legal grounds and procedures provided by law. Separate alleged crimes, such as fraud or a bouncing-check offense, must be evaluated independently.
Can a collector contact my employer or family?
A limited, lawful communication may be possible depending on the person’s role and the applicable rules. Publicly disclosing the debt, humiliating the borrower, communicating false information, or contacting unrelated people taken from a phone contact list may violate SEC and privacy rules. A genuine guarantor or co-maker is different because that person may have contractual liability.
Can an online lender access my contacts because I accepted its permissions?
Not automatically. Consent and app permissions do not authorize unlimited processing. NPC Circular No. 20-01 expressly prohibits harvesting or saving contact lists for collection or harassment and requires a separate interface for borrower-selected references or co-makers.
Can I block the collector?
After preserving the evidence, you may block abusive numbers or accounts for safety. Keep at least one reasonable written channel open if you want to receive legitimate account information, settlement proposals, or notices. Blocking a number does not affect formal court service.
Can a collector seize my belongings?
A private collector cannot simply take property because payment is overdue. Enforcement against property generally requires contractual and legal authority and, in many situations, court process. Do not physically resist if an official sheriff acts under a genuine court order; verify the order and seek counsel immediately.
Does filing with the SEC, BSP, or NPC erase the debt?
No. The complaint addresses the collector’s conduct or the provider’s regulatory compliance. The validity and amount of the debt remain separate issues unless resolved by agreement, regulator action within its authority, or a court.
Can I complain to more than one agency?
Yes, when different violations are involved. For example, threats may be reported to law enforcement, unfair collection by an online lender to the SEC, and contact-list harvesting or public disclosure to the NPC. Disclose related pending proceedings when a complaint form or certification requires it.
Official legal references
- Republic Act No. 11765 — Financial Products and Services Consumer Protection Act
- SEC Memorandum Circular No. 18, Series of 2019
- BSP Circular No. 1160 — Regulations on Financial Consumer Protection
- Republic Act No. 10870 — Philippine Credit Card Industry Regulation Law
- Republic Act No. 10173 — Data Privacy Act of 2012
- NPC Circular No. 20-01 — Loan-Related Transactions
- 2021 NPC Rules of Procedure, as amended
- Civil Code of the Philippines
- Revised Penal Code
- Republic Act No. 4200 — Anti-Wiretapping Act
This article provides general legal information, not legal advice or a prediction of any case’s outcome. Rights and remedies depend on the loan documents, creditor, collector’s conduct, evidence, and applicable procedural rules. Official sources and procedures were checked as of August 6, 2026.