Harassment from online lending apps can feel overwhelming: repeated calls, threats of arrest, messages to your family or employer, public shaming on social media, or collectors using your contact list to pressure you. In the Philippines, lenders may collect valid debts, but they cannot use intimidation, humiliation, illegal threats, or abusive use of your personal data. This guide explains what counts as online lending app harassment, your legal rights, what evidence to save, where to complain, and how to protect yourself without making the situation worse.

What Counts as Harassment from Online Lending Apps?

Online lending app harassment usually happens when a lender, collection agent, or third-party collector goes beyond lawful debt collection and uses pressure tactics meant to shame, frighten, or isolate the borrower.

Common examples include:

Threatening to have you arrested solely because you missed payment
Saying they will file a criminal case when the issue is only non-payment of a loan
Calling or texting before 6:00 a.m. or after 10:00 p.m. without a valid exception
Sending insults, obscene words, or degrading messages
Contacting your relatives, friends, co-workers, employer, or phone contacts who are not guarantors
Posting your photo, ID, name, address, workplace, or debt details online
Calling you a scammer, criminal, estafador, or thief without legal basis
Threatening violence or harm to your reputation, property, family, or employment
Pretending to be from a court, police station, barangay, NBI, prosecutor’s office, or law office
Using your contact list, photos, or ID documents for public shaming or intimidation

The important distinction is this: a lender may remind you to pay, send a demand letter, negotiate payment terms, or file a lawful civil collection case. But collection must be done in good faith, through lawful means, and without abuse.

Your Main Legal Protections in the Philippines

SEC rules prohibit unfair debt collection practices

The Securities and Exchange Commission regulates lending companies, financing companies, and many online lending platforms. Under SEC Memorandum Circular No. 18, Series of 2019, lending and financing companies — including their third-party service providers and collection agents — are prohibited from using unfair debt collection practices. The rule covers threats of violence or other criminal means, threats to take actions that cannot legally be taken, obscene or insulting language, false representations, and disclosure or publication of a borrower’s personal information except in limited lawful situations.

The same SEC rule treats contacting people in the borrower’s contact list, other than guarantors or co-makers, as an unfair debt collection practice. It also requires collectors to disclose their full name or true identity and requires lending or financing companies to maintain a complaint-handling channel for borrowers. Penalties may include fines, suspension, or revocation of the company’s authority, depending on the violation and repetition.

Online lending apps cannot freely use your contacts and personal data

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information and recognizes privacy as a fundamental right. Consent must be freely given, specific, informed, and evidenced by written, electronic, or recorded means. (Supreme Court E-Library)

Borrowers have rights to be informed about how their data will be used, to access their data, to dispute inaccuracies, and to demand blocking, removal, or destruction of unlawfully obtained or unauthorized personal data. The National Privacy Commission can receive complaints, investigate, facilitate settlement, adjudicate matters, issue cease-and-desist orders, and require corrective action. (Supreme Court E-Library)

This matters because many abusive online lending apps pressure borrowers by accessing contact lists, photos, IDs, device data, or social media information. A March 2026 joint advisory from the DICT, NPC, and SEC specifically warned against unnecessary app permissions, excessive or disproportionate contact-list processing, public shaming, harassment, threats, and contacting people in a borrower’s contacts who are not guarantors. It also clarified that a guarantor must have expressly consented to be responsible for the loan and to be contacted in case of default.

Financial consumers have the right to fair treatment and complaint redress

The Financial Products and Services Consumer Protection Act, or Republic Act No. 11765 of 2022, protects financial consumers, including users of digital financial products and services. It recognizes rights such as equitable and fair treatment, disclosure and transparency, data privacy and protection, and timely handling and redress of complaints. The law identifies regulators such as the SEC, BSP, Insurance Commission, and Cooperative Development Authority, depending on the type of financial institution involved. (Supreme Court E-Library)

For most online lending app harassment complaints involving lending or financing companies, the SEC is usually the starting point. If the harassment involves misuse of personal data, the NPC may also be involved. If there are threats, cyberstalking, fake accounts, identity misuse, or online defamation, law enforcement cybercrime units may also be relevant.

Criminal laws may apply when collection becomes threatening, coercive, or defamatory

Not every rude collection message is automatically a criminal case, but some conduct may fall under the Revised Penal Code or special laws.

Possible criminal issues include:

Grave threats or light threats when collectors threaten harm, violence, or unlawful injury
Grave coercion or unjust vexation when pressure tactics go beyond lawful demands
Other deceits when collectors use fraudulent representations
Cyberlibel when defamatory statements are made online using a computer system
Unauthorized processing or disclosure of personal information under the Data Privacy Act

The Cybercrime Prevention Act of 2012, or Republic Act No. 10175, covers cyber-related offenses and also recognizes that crimes under the Revised Penal Code and special laws may be committed through information and communications technology. The NBI and PNP are designated cybercrime law enforcement authorities. (Supreme Court E-Library)

The Supreme Court has also recognized that online defamation may be covered by cyberlibel under the Cybercrime Prevention Act, as discussed in Disini v. Secretary of Justice. (Supreme Court E-Library)

Non-payment of a loan is not automatically a crime

A common scare tactic is: “Magbabayad ka ngayon or ipapakulong ka namin.” That statement is often misleading if the only issue is failure to pay a debt.

The 1987 Constitution provides that no person shall be imprisoned for debt. (Supreme Court E-Library)

This does not mean a borrower can ignore all consequences. A creditor may still file a civil collection case, report accurate credit information through lawful channels, or pursue remedies if there is fraud, falsification, bounced checks, identity theft, or another separate offense. But ordinary inability to pay a loan is different from a crime.

What to Do Immediately If an Online Lending App Is Harassing You

1. Preserve evidence before blocking or deleting anything

Do not rely on memory. Save proof while the messages, calls, posts, and app records are still available.

Collect:

Screenshots of text messages, chat messages, app notifications, and emails
Screen recordings showing the sender profile, phone number, date, time, and full conversation
Call logs showing repeated calls and the time of calls
Messages sent to your family, friends, co-workers, employer, or contacts
Social media posts, comments, fake profiles, or group chats where you were shamed
Loan agreement, disclosure statement, statement of account, and repayment schedule
Proof of the actual amount received and amount demanded
GCash, Maya, bank transfer, payment center, or remittance receipts
App name, app store link, screenshots of the app page, and the company name shown in the app
The collector’s name, number, email, or claimed office
Any threat of arrest, barangay action, court case, police action, or public posting

Ask your contacts to send you screenshots of what they received. If a collector called your employer or relative, ask them to write down the date, time, number used, and what was said.

2. Revoke unnecessary app permissions

Check your phone settings and review app permissions. Online lending apps should not have unlimited access to your contact list, gallery, camera, location, microphone, or files beyond what is necessary and proportionate.

The DICT-NPC-SEC advisory states that camera or gallery access should be limited to legitimate purposes such as know-your-customer verification and should be turned off after the purpose is achieved. It also warns that unbridled contact-list processing is prohibited.

Practical steps:

Go to your phone settings.
Open the app permission settings.
Disable access to contacts, photos, camera, microphone, location, and files if not needed.
Change passwords for email, social media, and e-wallet accounts.
Turn on two-factor authentication.
Save evidence before uninstalling the app.
Report fake accounts or abusive posts to the platform.

3. Identify the lender behind the app

Many borrowers know only the app name, but the legal entity may be a lending company, financing company, collection agency, or unknown operator.

Look for:

Corporate name
SEC registration number
Certificate of Authority number
App name and developer name
Office address
Email address and customer service channel
Payment account names
Privacy policy and terms of service
Names of collection agencies or third-party collectors

Under the Lending Company Regulation Act of 2007, or Republic Act No. 9474, a lending company must be a corporation and must have authority from the SEC to operate as a lending company. The SEC has regulatory and supervisory powers over lending companies, including authority to impose administrative sanctions. (Supreme Court E-Library)

You can check the SEC’s online resources, including its complaint portal and verification tools, to confirm whether the company or online lending platform appears in SEC records. The SEC iMessage portal allows users to open a ticket and check ticket status. (Securities and Exchange Commission)

4. Send a short written response if you need to dispute the debt or stop abusive contact

Keep your message calm and factual. Do not insult the collector, threaten them, or send emotional replies that can later be used against you.

A simple response may look like this:

I am requesting a written statement of account showing the principal, interest, penalties, fees, payments made, and remaining balance. I also dispute any unauthorized charges. Please communicate only through lawful channels. Do not contact persons who are not guarantors or co-makers, and do not disclose my personal information to third parties. I am preserving evidence of abusive collection practices for filing with the proper government agencies.

Use this only if it fits your situation. Do not admit a wrong amount. Do not promise payment terms you cannot follow. Do not send additional IDs, selfies, passwords, OTPs, or contact information just because a collector demands them.

5. Warn your contacts without panicking

If the lender has already messaged your contacts, send a calm note to the people affected.

You can say:

You may receive messages from an online lending collector. Please do not reply, click links, send money, or give my information. Kindly screenshot the message, including the number or profile used, date, and time, and send it to me for my complaint.

This helps stop the harassment from spreading and helps you collect evidence.

6. Do not ignore real legal documents

Many online lending collectors send fake “subpoenas,” fake police notices, fake barangay notices, or threatening templates. A real court case or official government notice normally comes through proper channels and contains verifiable details.

However, if you receive an actual summons, subpoena, barangay notice, prosecutor’s notice, or court order, do not ignore it. Check the issuing office directly using official contact details, not the number provided by the collector.

Where to File a Complaint

Different agencies handle different parts of the problem. One harassment incident may require more than one complaint.

Problem	Office to consider	Best for	What to prepare
Unfair debt collection by a lending or financing company	SEC Financing and Lending Companies Division / SEC iMessage	Harassment, threats, obscene language, false legal threats, contacting non-guarantor contacts, unreasonable collection practices	Screenshots, call logs, app name, company name, loan details, collector details, messages to contacts
Misuse of personal data	National Privacy Commission	Contact-list scraping, posting ID/photo, unauthorized disclosure, public shaming, excessive app permissions	Notarized complaint form, evidence, IDs, screenshots, privacy notice, app permission screenshots
Threats, cyberstalking, fake accounts, identity misuse, hacking, online shaming	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Potential cybercrime or criminal harassment	Evidence, device, URLs, screenshots, IDs, account details, phone numbers
Harassment by banks, credit card companies, or BSP-supervised institutions	Bangko Sentral ng Pilipinas	Banks, credit cards, e-wallets, BSP-supervised financial institutions	Account details, statements, messages, proof of complaint to institution
Inaccurate credit reporting	Credit Information Corporation and the concerned lender	Wrong credit data or disputed credit report entries	Credit report, dispute letter, proof of payment, identity documents

The 2026 joint DICT-NPC-SEC advisory gives official reporting channels for abusive online lending behavior, including SEC iMessage, the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

How to File a Strong SEC Complaint Against an Online Lending App

A strong complaint is organized, specific, and evidence-based. Avoid general statements like “they harassed me” without showing what happened.

Step 1: Prepare a timeline

Write the facts in order:

Date you downloaded or used the app
App name and company name, if known
Loan amount applied for
Amount actually received
Fees deducted upfront
Due date
Amount demanded
Date harassment started
Names, numbers, or profiles used by collectors
Specific abusive acts
Names of contacts who were messaged
Payments already made, if any

Step 2: Identify the specific unfair collection acts

Match your evidence to specific acts, such as:

Threats of violence
Threats of illegal action
False claims of arrest, criminal case, or government enforcement
Obscene, insulting, or humiliating language
Contacting non-guarantor contacts
Posting or threatening to post personal information
Collecting at unreasonable times
Refusal to identify the collector or company
Continuing harassment after you disputed the account

Step 3: Attach clear evidence

Use filenames that are easy to understand, such as:

01 Loan Agreement.pdf
02 Statement of Account.png
03 Threat of Arrest Screenshot.png
04 Message to Employer.png
05 Midnight Call Log.png
06 Payment Receipt GCash.png

If there are many screenshots, arrange them in chronological order. A one-page summary helps the evaluator understand the pattern quickly.

Step 4: Submit through the SEC iMessage portal

Use the SEC iMessage portal to open a ticket and keep the ticket number. The SEC portal also allows ticket status checking. (Securities and Exchange Commission)

Practical bottlenecks include incomplete company information, unclear screenshots, missing dates, or complaints that mix several apps without identifying which collector did what. If several apps harassed you, separate the evidence by app or company.

How to File a Privacy Complaint with the NPC

If the main problem is misuse of your contacts, posting your personal information, using your ID or photo, or processing your data beyond what you agreed to, the National Privacy Commission may be the appropriate agency.

The NPC’s formal complaint process requires a specific complaint format. The NPC provides a downloadable complaint form, and the complaint must be printed, filled out, notarized, and submitted either personally, by courier, or by scanned copy through email at the official complaints address. (National Privacy Commission)

Prepare:

Notarized NPC complaint form
Valid government ID or passport
Screenshots of app permissions
Privacy policy or app terms, if available
Screenshots of messages to contacts
Screenshots of public posts or disclosure of your information
Proof that the contacted person was not a guarantor
Timeline of events
Contact details of the respondent company, if known

For OFWs or foreigners outside the Philippines, affidavits or sworn statements signed abroad may need proper notarization through a Philippine Embassy or Consulate, or another acceptable authentication method depending on the receiving office’s requirements. If documents are in a foreign language, a translation may be requested.

Civil Remedies May Also Be Available

Harassment may also create civil liability, especially when it causes reputational harm, emotional distress, or damage to employment or family relationships.

The Civil Code provides broad human-relations protections. Article 19 requires every person to act with justice, give everyone their due, and observe honesty and good faith. Article 20 allows indemnity when someone causes damage contrary to law. Article 21 covers willful acts that cause loss or injury in a manner contrary to morals, good customs, or public policy. Article 26 protects dignity, personality, privacy, and peace of mind, including acts that meddle with private life or humiliate another person. (Lawphil)

In practice, civil action is usually considered when the harassment caused measurable harm, such as job consequences, business loss, severe reputational damage, or public humiliation. Evidence is critical. Screenshots alone may not be enough if authenticity is challenged, so preserve original messages, URLs, devices, timestamps, and witnesses where possible.

Common Scenarios and What They Mean

“The app messaged everyone in my contacts.”

This is one of the clearest warning signs of abusive online lending collection. Under SEC rules, contacting people in the borrower’s contact list other than guarantors or co-makers may be treated as an unfair debt collection practice. The 2026 advisory also states that only guarantors who expressly consented to loan responsibility and default contact may be contacted for debt collection.

Save messages from your contacts and file with the SEC. If personal data was misused, consider an NPC complaint as well.

“They threatened to post my face and ID online.”

That may involve both unfair debt collection and data privacy violations. If they actually post your photo, ID, address, workplace, or debt details, preserve the post immediately through screenshots, screen recording, URLs, and witness screenshots. Report the post to the platform, but save evidence first.

“They said police will arrest me today.”

A real arrest does not happen just because a private collector sends a text. Police officers do not arrest people merely for unpaid civil debts. A lawful arrest generally requires legal grounds, and a real criminal complaint follows official procedure. Save the threat and include it in your SEC complaint as a possible false or illegal threat.

“They called my employer.”

If your employer is not a guarantor or co-maker, this may be abusive collection. It may also interfere with your employment and reputation. Ask your employer or HR to preserve the caller ID, date, time, and message. If the collector disclosed your debt to your workplace, include that in your complaint.

“I paid already but they keep demanding more.”

Ask for a written statement of account and compare it against your payment receipts. Keep all GCash, Maya, bank, payment center, or remittance confirmations. Do not pay a new account just because a collector sends it by text. Verify the official payment channel through the app or company.

“The app is not registered.”

Operating a lending company without SEC authority is a separate regulatory issue. RA 9474 requires lending companies to be corporations with SEC authority before conducting lending business. (Supreme Court E-Library)

Even if the app is unregistered, preserve evidence and report it. Lack of registration does not give collectors permission to harass you, and it does not automatically mean every peso received becomes free money. The legal consequences depend on the facts, the parties, and the applicable law.

“I am an OFW or foreigner outside the Philippines.”

You can still preserve evidence and file complaints if the lender, app, borrower transaction, or affected persons are connected to the Philippines. Use screenshots with visible dates and time zones. If your Philippine contacts were harassed, ask them to save their own evidence. If a sworn complaint is required, check the receiving office’s rules for notarization abroad.

Collectors cannot lawfully threaten deportation, immigration blacklisting, or arrest solely because of an unpaid online loan. If a collector uses immigration threats without basis, save the exact message.

Documents and Evidence Checklist

Document or proof	Why it matters
Valid ID or passport	Establishes your identity as complainant
Loan agreement or disclosure statement	Shows the terms, amount, due date, fees, and lender
Statement of account	Helps verify whether the amount demanded is accurate
Payment receipts	Proves payments already made
Screenshots of threats or insults	Shows unfair debt collection conduct
Call logs	Shows frequency and timing of calls
Messages sent to contacts	Proves third-party contact or public shaming
Screenshots of app permissions	Helps show excessive access to contacts, photos, camera, or files
App store page and app screenshots	Helps identify the platform and developer
Company name, SEC registration, Certificate of Authority	Helps identify the regulated entity
URLs of posts, fake profiles, or group chats	Useful for cybercrime or platform reports
Chronology of events	Helps agencies understand the pattern
Notarized affidavit or complaint form	Often required for formal NPC, police, prosecutor, or court processes

What Not to Do

Do not delete evidence before saving copies.
Do not send more IDs, selfies, OTPs, passwords, or contact lists to collectors.
Do not pay to a random account without verifying the official payment channel.
Do not admit a false balance just to stop the harassment.
Do not ignore real legal notices from courts, prosecutors, or government offices.
Do not retaliate with insults or threats. Keep your own messages calm and usable as evidence.
Do not borrow from another abusive app just to silence the first one.
Do not rely only on Facebook posts or public complaints. File with the proper agency and keep records.

Frequently Asked Questions

Can online lending apps contact my contacts in the Philippines?

Generally, they should not contact people in your contact list for debt collection unless those people are guarantors or co-makers. SEC rules treat contacting non-guarantor contacts as an unfair debt collection practice, and the 2026 DICT-NPC-SEC advisory emphasizes that only a guarantor who expressly consented may be contacted for default-related collection.

Can an online lending app post my photo, ID, or name online?

Posting your photo, ID, debt details, or personal information to shame you may raise SEC, data privacy, civil, and possibly cybercrime issues. Save the post, URL, date, time, account name, and screenshots before reporting it to the platform.

Can I go to jail for not paying an online loan?

Not for debt alone. The Constitution states that no person shall be imprisoned for debt. However, separate criminal issues may arise if there is fraud, falsification, identity theft, bounced checks, or other conduct beyond simple non-payment. (Supreme Court E-Library)

Where should I complain first: SEC, NPC, PNP, or NBI?

For abusive collection by an online lending app or lending company, start with the SEC. For misuse of personal data, contact-list abuse, or posting personal information, consider the NPC. For threats, fake accounts, hacking, identity misuse, cyberstalking, or online defamation, consider PNP-ACG or NBI Cybercrime Division.

Do I still need to pay the loan if the lender harassed me?

Harassment does not automatically erase a valid debt. But you may dispute unlawful charges, unclear fees, excessive demands, or abusive collection conduct. Ask for a written statement of account and pay only through verified official channels.

What if the collector says they are from a law office?

Ask for the full name of the collector, law office, company represented, written authority, statement of account, and official contact details. A real law office should not use threats, insults, false criminal accusations, or contact-list harassment.

What if the app deducted huge fees before releasing the loan?

Save the loan disclosure, amount approved, amount actually received, and repayment demand. This may raise issues under consumer protection, lending, disclosure, and interest or fee rules. Report unclear or abusive charges to the appropriate regulator.

Can I block the collector?

You may block abusive numbers after preserving evidence, but make sure you still have a way to receive legitimate notices from the lender or official offices. Blocking should not be used to ignore real court papers or government notices.

How long do complaints take?

Timelines vary depending on the agency, completeness of documents, number of respondents, and whether the company can be identified. Complaints with clear screenshots, dates, app details, company names, and organized evidence usually move more efficiently than complaints with incomplete or scattered proof.

Key Takeaways

Online lending apps may collect debts, but they cannot use threats, humiliation, false legal claims, or abusive contact-list tactics.
SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by lending and financing companies and their collectors.
The Data Privacy Act protects borrowers against unauthorized or excessive use of personal data, including contacts, photos, IDs, and public disclosure.
Non-payment of a loan is not automatically a crime, and a collector cannot lawfully threaten jail solely for unpaid debt.
Save evidence first: screenshots, call logs, app details, payment receipts, messages to contacts, and URLs of posts.
File with the SEC for unfair debt collection, the NPC for privacy violations, and PNP-ACG or NBI Cybercrime Division for threats, fake accounts, hacking, or cyber-related abuse.
Do not send more personal data, pay random accounts, delete evidence, or ignore real legal notices.
A calm, organized complaint with a clear timeline and complete documents is usually stronger than scattered screenshots without context.