Abusive online lending apps can make a small loan feel like a public humiliation campaign: collectors call nonstop, threaten jail, message your relatives, post your photo, or shame you in group chats. Philippine law allows lenders to collect legitimate debts, but it does not allow harassment, threats, public shaming, unauthorized use of your contact list, or deceptive collection tactics. This guide explains where to complain, what evidence to prepare, what laws protect you, and what usually happens after you file a complaint in the Philippines.

What Counts as Abuse by an Online Lending App?

An online lending app, online lending platform, lending company, financing company, or its collection agency may remind you about a debt and demand payment through lawful means. The line is crossed when the collection method attacks your dignity, privacy, reputation, safety, or peace of mind.

Common abusive acts include:

Calling or messaging you repeatedly in a way meant to intimidate you
Threatening arrest, barangay blotter, deportation, NBI action, or criminal prosecution just to scare you into paying
Telling your family, employer, co-workers, Facebook friends, or phone contacts about your loan
Posting your photo, ID, “wanted” poster, fake police notice, or edited image online
Sending messages like “scammer,” “magnanakaw,” “estafador,” or “hindi nagbabayad ng utang” to other people
Using obscene, insulting, or degrading language
Contacting people in your phonebook who are not guarantors or co-makers
Demanding payment to a personal GCash/Maya/bank account without proper company identification or receipt
Collecting charges that were not clearly disclosed when you took the loan

The SEC’s rules on unfair debt collection cover financing companies, lending companies, and third-party service providers they hire for collection. SEC Memorandum Circular No. 18, Series of 2019 treats threats, violence, criminal means, public disclosure of borrower information, false representation, deceptive collection, unreasonable contact hours, and contacting persons other than named guarantors or co-makers as unfair collection practices.

Your Main Legal Rights Against Abusive Online Lending Apps

You cannot be jailed simply for not paying a loan

A loan is generally a civil obligation. Article III, Section 20 of the 1987 Philippine Constitution states that no person shall be imprisoned for debt or non-payment of a poll tax. (Lawphil)

This does not mean a borrower may ignore a lawful debt. A lender may still file a proper civil collection case if the debt is valid. But collectors cannot use fake criminal threats to force payment. If they say “ipapakulong ka namin bukas,” “may warrant ka na,” or “pupuntahan ka ng pulis,” preserve the message as evidence.

Criminal issues are different if there is alleged fraud, identity theft, forged documents, bounced checks, or other acts separate from ordinary non-payment. But mere inability to pay a loan is not a crime.

Your contacts cannot be harassed just because they are in your phonebook

The 2026 public advisory of the DICT, NPC, and SEC specifically states that unnecessary app permissions, unauthorized or excessive processing of personal data, and contacting persons in a borrower’s contact list other than named guarantors are prohibited. For debt collection, lenders may contact the guarantor; a character reference is not automatically a guarantor.

This matters because many abusive loan apps pressure borrowers by harvesting phone contacts, then sending mass messages to relatives, employers, neighbors, or friends. If the person contacted did not agree to be a guarantor or co-maker, that contact may also complain.

You have data privacy rights

Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information and recognizes privacy as a fundamental right in information and communications systems. The National Privacy Commission (NPC) enforces data privacy obligations and may act on unlawful processing of personal data. (National Privacy Commission)

The NPC’s implementing rules require personal data processing to follow the principles of transparency, legitimate purpose, and proportionality. In simple terms:

Transparency means the lender must clearly tell you what data it collects and how it will use it.
Legitimate purpose means the data use must be lawful and connected to a valid purpose.
Proportionality means the lender should collect and use only what is necessary, not everything in your phone. (Supreme Court E-Library)

The NPC has previously stated that online lenders are barred from harvesting borrowers’ phone and social-media contact lists, after complaints that online lenders used personal data of borrowers and others in their contact lists for harassment and shaming. (National Privacy Commission)

You have financial consumer protection rights

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, covers financial products and services, including credit. It identifies regulators such as the BSP, SEC, Insurance Commission, and CDA, and gives financial regulators authority over market conduct, consumer protection, and reasonableness of charges or fees within their jurisdiction. (Supreme Court E-Library)

For most SEC-registered lending and financing companies, the main regulator is the Securities and Exchange Commission, especially through its Financing and Lending Companies Department.

You may claim civil damages for serious harassment

The Civil Code of the Philippines can also matter. Articles 19, 20, 21, and 26 require people to act with justice, honesty, good faith, and respect for the dignity, privacy, and peace of mind of others. A borrower whose privacy, reputation, or peace of mind was seriously violated may have a basis to claim damages in a proper civil case. (Lawphil)

Civil damages are separate from SEC or NPC administrative complaints. Administrative complaints can lead to sanctions against the company; civil cases focus on compensation for harm.

Where to File a Complaint

Different agencies handle different parts of the problem. In many real cases, you may need to file with more than one office because the same incident can involve unfair collection, data privacy violations, and cyber harassment.

Problem	Primary office	What they can usually address
Threats, insults, unreasonable calls, public shaming, contacting non-guarantor contacts	SEC Financing and Lending Companies Department	Administrative action against lending/financing company or collector
Unauthorized use of contacts, photos, IDs, phone data, or personal information	National Privacy Commission	Data privacy complaint, compliance orders, possible recommendation for prosecution
Threats, fake police/NBI notices, blackmail, cyber libel, identity misuse, online scams	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Criminal investigation and cybercrime evidence preservation
A bank, e-wallet, or BSP-supervised financial institution is involved	BSP consumer assistance channels	Financial consumer complaint against BSP-supervised institution
Cooperative lender	Cooperative Development Authority	Complaint involving cooperative financial services

The 2026 DICT-NPC-SEC advisory identifies the SEC iMessage portal for unfair debt collection complaints and lists cybercrime reporting channels for DICT, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

Step-by-Step Guide to Filing a Complaint Against an Abusive Online Lending App

1. Secure your evidence before blocking or deleting anything

Do this immediately. Many abusive collectors delete messages, change display names, or switch numbers.

Save:

Screenshots of SMS, Viber, WhatsApp, Messenger, Telegram, email, app notifications, and call logs
Full screenshots showing date, time, sender name, phone number, profile photo, and message content
Copies of posts, comments, group chat messages, or public shaming materials
The app name, company name, app store link, website, and screenshots of the app page
Loan agreement, disclosure statement, promissory note, repayment schedule, and receipts
Proof of payment, transaction reference numbers, and account names where you paid
Names and numbers of collectors who contacted you
Statements from relatives, co-workers, or friends who received messages about your loan
A short timeline of events

Avoid secretly recording phone calls unless all parties consent. Republic Act No. 4200, the Anti-Wiretapping Law, penalizes unauthorized secret recording of private communications. Screenshots, call logs, written messages, witnesses, and official telco/app records are usually safer evidence. (Lawphil)

2. Identify the lender, not just the app name

Many apps use a brand name that is different from the SEC-registered company name. Check:

The loan agreement
The disclosure statement
Privacy policy
Terms and conditions
App store developer name
Email footer or SMS sender details
Collection messages asking payment to a company account

If you cannot identify the company, write “unknown operator of [app name]” in your complaint and attach screenshots showing why you believe the app is connected to the abusive collection.

For SEC-regulated lenders, it helps to check the SEC’s public information pages on lending and financing companies and recorded online lending platforms. An app being available on Google Play or the App Store does not automatically mean it is authorized by the SEC.

3. File a complaint with the SEC for unfair debt collection

Use the SEC iMessage portal to submit a complaint or report. The portal allows users to open a ticket and check ticket status. (imessage.sec.gov.ph)

In your SEC complaint, include:

Your full name, email, mobile number, and address
App name and company name, if known
Loan account number, if available
Date you borrowed and amount received
Amount demanded and charges imposed
Exact abusive acts committed
Names, phone numbers, or account names of collectors
List of people contacted by the app
Screenshots and other evidence
What you are asking the SEC to do, such as investigate unfair collection, order the company to stop contacting non-guarantors, verify the company’s authority, or impose sanctions

SEC Memorandum Circular No. 18 allows penalties for violations. For lending companies, the circular provides fines starting at ₱25,000 for a first offense and ₱50,000 for a second offense; for financing companies, ₱50,000 for a first offense and ₱100,000 for a second offense. A third offense may lead to a fine up to ₱1,000,000, suspension, or revocation of the certificate of authority, depending on the facts.

4. File a complaint with the NPC for data privacy violations

File with the National Privacy Commission if the app:

Accessed your contacts without a valid purpose
Contacted people who were not guarantors
Posted or shared your photo, ID, address, employer, or family details
Used your phone data beyond what was necessary for the loan
Refused to delete or stop processing your personal data after the lawful purpose ended
Used deceptive consent screens or forced permissions unrelated to the loan

The NPC’s formal complaint process requires a specific complaint form, printing and filling it out, notarization, and submission in person, by courier, or by scanned copy through email. The NPC complaint page also refers users to its schedule of fees and charges. (National Privacy Commission)

A strong NPC complaint should explain:

What personal data was collected
How the app obtained it
Why the processing was unauthorized, excessive, or disproportionate
Who received the data
What harm resulted, such as humiliation, anxiety, reputational damage, or workplace issues
What action you want, such as stopping contact with third parties, deletion of unlawfully processed data, investigation, or appropriate penalties

5. Report criminal conduct to PNP ACG or NBI Cybercrime

Go to PNP Anti-Cybercrime Group or NBI Cybercrime Division when the conduct involves threats, extortion, cyber libel, identity theft, hacking, fake warrants, fake subpoenas, fake police notices, or online posting of defamatory materials.

Possible laws may include:

Revised Penal Code Article 282 on grave threats, when someone threatens harm to your person, honor, property, or family
Article 286 on grave coercions, when violence or intimidation is used to force someone to do something against their will
Article 287 on unjust vexation or other coercions, depending on the facts
Articles 353 and 355 on libel, if false and defamatory accusations are published
Republic Act No. 10175, Cybercrime Prevention Act of 2012, if the offense is committed through a computer system or similar means

The Revised Penal Code provisions on threats and coercions are fact-specific. Article 282 covers threats involving a wrong amounting to a crime; Article 286 addresses coercion by violence; Article 287 includes unjust vexation and other coercions. (Supreme Court E-Library)

Cyber libel may apply when the app or collector publishes false accusations online that dishonor or discredit a person. In Disini v. Secretary of Justice, the Supreme Court explained that cyberlibel under the Cybercrime Prevention Act essentially affirms online defamation as a means of committing libel, although liability has important limits and must be assessed based on the facts. (Supreme Court E-Library)

6. Notify the lender in writing that you dispute the abusive collection

This is not always required before filing with government offices, but it is useful evidence. Send a calm written message through email or the app’s official support channel.

Keep it short:

State that you dispute abusive collection practices.
Ask them to stop contacting non-guarantor third parties.
Ask them to communicate only through official channels.
Request a full statement of account.
Request the name of the SEC-registered company and its Certificate of Authority details.
State that you are preserving evidence for SEC, NPC, and cybercrime authorities.

Do not argue emotionally with collectors. Do not send insults, threats, edited photos, or retaliatory posts. Your own messages can also become evidence.

Evidence Checklist

Evidence	Why it matters	Practical tip
Screenshot of threats	Shows actual abusive language	Capture sender number, date, and time
Screenshot of messages to contacts	Proves third-party harassment	Ask the contacted person to send the full thread
App page and developer name	Helps identify operator	Screenshot before app disappears
Loan agreement and disclosure	Shows amount, charges, and company details	Download PDF copies if available
Proof of amount received	Shows actual loan proceeds	Include bank/e-wallet transaction history
Proof of payments	Prevents false balance claims	Save receipts and reference numbers
Call logs	Shows frequency and timing	Screenshot repeated calls, especially before 6 a.m. or after 10 p.m.
Timeline	Helps investigators understand pattern	Use dates, times, phone numbers, and short descriptions
Witness statements	Supports harassment of relatives/employer	Ask them to preserve their own screenshots

Sample Complaint Narrative You Can Adapt

Use plain language. Agencies do not need dramatic wording; they need clear facts.

I am filing this complaint against [name of online lending app/company, if known] for abusive and unfair debt collection practices and possible data privacy violations. I borrowed [amount] on [date] and received [amount actually disbursed]. Since [date], collectors using the numbers/accounts [list numbers] have been sending threatening and insulting messages to me and to people in my contact list who are not guarantors or co-makers. They disclosed my loan, called me a scammer, threatened arrest, and sent messages to my [family/employer/co-workers/friends]. I attach screenshots, call logs, proof of loan, proof of payment, and messages received by third parties. I respectfully request investigation and appropriate action, including an order to stop unlawful contact with non-guarantors and sanctions for unfair collection and unlawful processing of personal data.

Attach the evidence in organized folders or files. Name files clearly, for example:

01 Loan Agreement.pdf
02 Threats from Collector Number 0917xxxxxxx.pdf
03 Messages Sent to Employer.pdf
04 Proof of Payment - GCash.pdf
05 Timeline of Events.pdf

Practical Timelines and What to Expect

Stage	Usual practical timeline	What may happen
Online submission to SEC iMessage	Same day to several working days for ticket creation or acknowledgement	Ticket number, request for details, referral to proper department
SEC evaluation	Several weeks or longer depending on evidence and caseload	Company may be asked to respond; SEC may investigate patterns of violations
NPC formal complaint	Filing depends on completion and notarization of form	NPC may require proper form, attachments, and proof of identity
Cybercrime report	Initial intake may happen quickly if evidence is complete	Investigators may ask for device, screenshots, account links, and affidavits
Administrative action	Often weeks to months	Possible warning, fine, suspension, revocation, or referral depending on findings
Criminal case	Often months or longer	Requires investigation, affidavits, prosecutor evaluation, and sufficient evidence

Bottlenecks are common when screenshots do not show dates or sender details, the app operator is unclear, the complainant deleted messages, the lender uses many numbers, or witnesses refuse to provide their own screenshots. The more organized your evidence is, the easier it is for the agency to act.

Special Situations

If the app contacted your employer

Save the exact message your employer received. If the message disclosed your loan, insulted you, accused you of a crime, or pressured your employer to discipline you, include it in both SEC and NPC complaints. If the message contains false statements damaging your reputation, ask cybercrime authorities whether the facts support a criminal complaint.

If you are an OFW or living abroad

You can still preserve evidence and file online where the agency allows online submission. For formal complaints requiring notarization, documents signed abroad may need notarization before a local notary and, when required for Philippine use, an apostille or consular acknowledgment depending on the country and document type.

For OFWs, it is helpful to include:

Your Philippine address and current overseas address
Local and overseas contact numbers
Screenshots showing Philippine numbers or app accounts used by collectors
Messages received by relatives in the Philippines
Proof that the transaction involved a Philippine lending app or Philippine-based entity

If you are a foreigner dealing with a Philippine lending app

You may file with Philippine agencies if the lender is a Philippine SEC-regulated company, the transaction has a Philippine link, or the personal data processing is connected to the Philippines. The Data Privacy Act’s implementing rules apply to processing by entities found or established in the Philippines, processing that relates to Philippine citizens or residents, processing done in the Philippines, and certain processing by entities with links to the Philippines. (Supreme Court E-Library)

If the lender is not SEC-registered

Still report it. Unauthorized lending activity is itself a serious regulatory issue. Your complaint should say that you could not find the company’s SEC registration, Certificate of Authority, or recorded online lending platform details despite checking the app, contract, and website.

Do not assume an app is legitimate just because it appears on an app store, has thousands of downloads, uses a professional logo, or sends automated contracts.

If you actually owe the money

You can complain about abuse even if you still owe a valid debt. The complaint is about the collection method, privacy violation, threats, or harassment. It does not automatically erase the principal loan.

A practical approach is to separate the issues:

Ask for a written statement of account.
Pay only through official company channels.
Keep receipts.
Do not pay “settlement” amounts to personal accounts without written confirmation.
Continue your SEC/NPC/cybercrime complaint if the abuse happened.

Common Mistakes That Weaken Complaints

Deleting messages before saving screenshots
Sending only cropped screenshots with no sender, date, or time
Naming only the app but not the company behind it
Failing to include the loan amount, date, and account details
Secretly recording calls without consent
Paying collectors through personal accounts without receipts
Posting the collector’s personal information online in retaliation
Filing only with the barangay when the issue is cyber harassment or data privacy
Ignoring messages sent to relatives or employers instead of preserving them as evidence
Using emotional accusations without a clear timeline

A barangay blotter may help document that you reported harassment, especially if collectors physically visit your home or threaten your household. But online lending abuse usually requires SEC, NPC, PNP ACG, or NBI action because the key issues are regulatory, privacy-related, and cyber-related.

Frequently Asked Questions

Can I file a complaint against an online lending app even if I borrowed money from them?

Yes. A valid loan does not give the lender the right to harass you, shame you publicly, threaten you, or contact people who are not guarantors. Your complaint should focus on the unlawful collection behavior and attach proof.

Can an online lending app message my contacts?

For debt collection, lenders may contact a guarantor or co-maker connected to the loan. The 2026 DICT-NPC-SEC advisory states that contacting persons in the borrower’s contact list other than named guarantors is prohibited. A character reference is not automatically a guarantor.

Can I go to jail for not paying an online loan in the Philippines?

Not for mere non-payment of debt. The Constitution prohibits imprisonment for debt. But fraud, falsification, identity theft, bouncing checks, or other separate criminal acts may be treated differently. (Lawphil)

Where should I file first: SEC, NPC, PNP, or NBI?

File with the SEC for unfair debt collection. File with the NPC for misuse of personal data, contact lists, photos, IDs, or privacy violations. File with PNP ACG or NBI Cybercrime if there are threats, blackmail, fake official documents, online defamation, hacking, or scams. Many serious cases justify filing with more than one office.

Do I need a lawyer to complain to SEC or NPC?

Many complainants file directly, especially when they have clear screenshots, loan documents, and a timeline. For formal NPC complaints, follow the required format, notarization, and submission rules. For criminal cases, investigators or prosecutors may require affidavits and supporting documents.

What if the online lending app already deleted the post or message?

Use screenshots saved by you, your contacts, or witnesses. If the post had a URL, profile link, group name, or account name, include it. Cybercrime investigators may ask for additional details to trace accounts, but deleted material is harder to prove if no one preserved it.

Can my relatives or co-workers file their own complaint?

Yes, especially if their own personal information was used, they were harassed, or they received defamatory or threatening messages. They should preserve their own screenshots and identify how the collector contacted them.

Should I block the collectors?

You may block numbers to protect your peace, but preserve evidence first. Also keep at least one official channel open, such as email, so legitimate account communications and settlement records can be documented.

What if the collector uses fake police, NBI, or court documents?

Save everything and report it to cybercrime authorities. Fake warrants, fake subpoenas, fake case numbers, or false claims of government action may indicate fraud, intimidation, usurpation, falsification, or other criminal conduct depending on the facts.

Can SEC or NPC cancel my loan?

Usually, SEC and NPC complaints focus on regulatory violations, unfair collection, data privacy, and sanctions. They do not automatically cancel a lawful debt. However, findings about unlawful charges, undisclosed fees, unauthorized lending activity, or abusive conduct may help you dispute the amount claimed or defend yourself if a collection case is filed.

Key Takeaways

Abusive online lending collection is not “normal singilan.” Threats, public shaming, obscene language, deceptive tactics, and contacting non-guarantor contacts can violate Philippine law.
File with the SEC for unfair debt collection, the NPC for data privacy violations, and PNP ACG or NBI Cybercrime for threats, fake official documents, online defamation, extortion, or scams.
Preserve evidence before blocking, deleting, or uninstalling the app.
A borrower can complain even if the debt is unpaid.
You cannot be jailed merely for non-payment of a loan, but separate criminal acts are treated differently.
Organized evidence—screenshots with dates, sender details, loan documents, proof of payment, and a clear timeline—makes the complaint much stronger.