Abusive collection can make an already stressful loan problem feel frightening and humiliating. Online lenders and their collectors may demand payment, but they cannot threaten violence, invent criminal charges, publish your personal information, message everyone in your phone, or use deception and public shaming to force you to pay. In the Philippines, you may file complaints with the Securities and Exchange Commission, National Privacy Commission, Bangko Sentral ng Pilipinas, or law-enforcement authorities, depending on what happened and who operates the lending service.

What Counts as Abusive Online Lending Collection?

A lender is allowed to remind you about an unpaid obligation, explain the amount due, negotiate payment, send a formal demand, and file a lawful civil case. The problem begins when collection methods become unfair, deceptive, excessive, threatening, or invasive.

Under SEC Memorandum Circular No. 18, Series of 2019, financing and lending companies—and the collection agencies, lawyers, employees, and service providers acting for them—are prohibited from engaging in unfair debt-collection practices. (SEC Appointment System)

Examples include:

Threatening violence, physical harm, property damage, or reputational harm
Threatening arrest, imprisonment, deportation, or criminal prosecution when there is no proper legal basis
Pretending to be a police officer, prosecutor, court employee, lawyer, or government official
Sending fake arrest warrants, subpoenas, court orders, or criminal case notices
Using obscene, insulting, degrading, or profane language
Publishing or threatening to publish a borrower’s name, photograph, loan information, identification documents, or personal circumstances
Contacting people in the borrower’s phonebook who are not guarantors or co-makers
Messaging relatives, friends, co-workers, supervisors, customers, or social-media contacts to shame the borrower
Giving false information about the amount, legal status, or consequences of the debt
Threatening legal action that the lender cannot lawfully take
Repeatedly contacting the borrower at unreasonable hours, generally before 6:00 a.m. or after 10:00 p.m., subject to any express consent or applicable exception
Using false identities, misleading sender names, or deceptive messages to pressure payment

These practices can violate SEC regulations even when the underlying loan is real and unpaid. A lender cannot defend harassment by saying that it outsourced collection to another company. The lender may still be responsible for the conduct of its collection agency or service provider. (ACCRALAW)

Your Rights Under Philippine Law

You have the right to fair and respectful treatment

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act of 2022, recognizes the rights of financial consumers to fair and respectful treatment, protection of personal data, and accessible complaint handling and redress.

The SEC’s implementing rules prohibit SEC-supervised financial service providers from using abusive collection or debt-recovery practices. This prohibition also covers collection agencies, lawyers, and other representatives collecting for the provider. (Lawphil)

Online lenders may also be regulated under Republic Act No. 9474, the Lending Company Regulation Act of 2007, or Republic Act No. 8556, the Financing Company Act. A lending company generally needs SEC authority to operate, and an online lending platform should be connected to an identifiable, properly registered corporate operator. (Lawphil)

Your phone contacts are not a collection list

The Data Privacy Act of 2012, or Republic Act No. 10173, requires personal information to be processed lawfully, fairly, and only for legitimate and proportionate purposes.

National Privacy Commission rules specifically address online lending applications. Access to a borrower’s phone contacts cannot be used as an unrestricted tool for harassment, public shaming, or debt collection against people who did not guarantee the loan. Processing contact information becomes unlawful when it is excessive, disproportionate, or used to collect from persons other than legitimate guarantors. (National Privacy Commission)

A person listed as a “character reference” is not automatically a guarantor. Under the Civil Code, a guarantor must expressly agree to answer for another person’s debt. Merely appearing in someone’s phonebook, being named as a reference, or receiving a verification call does not make that person responsible for payment.

Clicking “Allow access to contacts” when installing an app also does not give the lender unlimited permission to disclose your debt, embarrass your family, or message your employer. Consent under privacy law must relate to a legitimate, specified purpose and does not legalize abusive conduct.

You cannot be imprisoned merely for failing to pay a debt

Article III, Section 20 of the 1987 Constitution states that no person shall be imprisoned for debt or nonpayment of a poll tax. An ordinary unpaid online loan is generally a civil obligation, not a reason for immediate arrest. (Lawphil)

However, this does not erase the loan. Article 1159 of the Civil Code provides that contractual obligations have the force of law between the parties and must be performed in good faith. The lender may send a proper demand, negotiate payment, report accurate information through lawful channels, or file a civil collection case. Separate fraudulent or criminal conduct, if actually committed, is a different matter. (Lawphil)

A collector who says, “Pay tonight or the police will arrest you tomorrow,” is usually using an improper threat unless an actual criminal complaint exists and lawful procedures are being followed. Police officers do not arrest people merely because a collector sent a text message claiming that a loan remains unpaid.

Serious harassment may create criminal or civil liability

Depending on the exact words and conduct, threats and intimidation may fall under provisions of the Revised Penal Code on grave threats, grave coercion, or unjust vexation. Publicly posting false and defamatory accusations through a computer system may also amount to cyberlibel under Republic Act No. 10175, if all legal elements are present. Not every rude message is automatically a crime, so the complete context and evidence matter. (Lawphil)

Civil Code Articles 19, 20, 21, and 26 may support a civil claim for damages when a person abuses a right, unlawfully causes injury, acts contrary to morals or public policy, or intrudes upon another person’s privacy, dignity, reputation, or family relations. (Lawphil)

Where Should You File the Complaint?

You may need to file with more than one agency because each office handles a different type of violation.

What happened	Where to complain	Main purpose
A lending or financing company used threats, insults, deception, unreasonable contact hours, or third-party harassment	Securities and Exchange Commission	Regulatory action against the company and its collection practices
The app accessed contacts, disclosed loan information, sent messages to unrelated people, or publicly exposed personal data	National Privacy Commission	Data-privacy investigation, corrective measures, and possible administrative remedies
The lender is a bank, e-money issuer, digital bank, or another BSP-supervised institution	Financial institution first, then Bangko Sentral ng Pilipinas	Financial consumer assistance and regulatory review
There are threats of violence, extortion, fake warrants, identity theft, account takeover, or potentially criminal online conduct	Philippine National Police or National Bureau of Investigation	Criminal investigation and evidence preservation
You suffered reputational, emotional, business, or financial injury and want damages	Appropriate court, subject to procedural requirements	Civil compensation or other judicial relief

Filing with one agency does not necessarily prevent you from filing with another. For example, sending your loan details to 200 phone contacts may be both an unfair collection practice for SEC purposes and a personal-data violation for NPC purposes.

How to File a Complaint With the SEC

The SEC is usually the primary regulator when the lender is a stand-alone lending or financing company or an online lending platform operated by such a company.

1. Identify the company behind the app

Do not identify the respondent only by its app name. The name displayed in an app store may be different from the corporation that owns or operates the platform.

Look for the legal company name in:

The loan agreement
Disclosure statement
Privacy policy
Terms and conditions
Payment instructions
App-store developer information
Text messages or emails
Official receipts
The lender’s website
SEC registration or Certificate of Authority information

Include both names in the complaint, such as: “ABC Lending Corporation, operator of the QuickPeso mobile application.”

If you cannot identify the company, provide the app name, developer name, website, phone numbers, email addresses, payment accounts, social-media profiles, and screenshots showing how the lender presented itself.

2. Preserve the evidence before deleting the app

Collect evidence while the messages, account details, and transaction history remain accessible.

Keep:

Screenshots showing the entire screen, sender, date, and time
The full message thread, not only the most offensive sentence
Call logs and saved voicemails
Emails with complete headers when available
Social-media posts, comments, profile names, and links
Messages received by family members, friends, co-workers, or employers
The loan agreement and disclosure statement
Payment history, receipts, and account statements
Proof of the amount originally borrowed and amounts already paid
The lender’s payment instructions and destination account
A copy of the app’s permissions and privacy policy
Government-issued identification for complaint verification
A written chronology of events

Ask third parties who received collection messages to save screenshots from their own devices. Their screenshots are often stronger than a forwarded image because they show the original sender and delivery details.

Avoid editing, annotating, or repeatedly compressing the only copy of a screenshot. Keep the original files and create separate working copies. Back them up to another device or secure storage.

3. Prepare a clear chronological statement

Organize the complaint by date and event. A simple table makes it easier for an investigator to understand the pattern.

Date and time	Channel	What the collector did	Evidence
5 July, 8:15 p.m.	SMS	Threatened to post borrower’s ID online	Screenshot A
6 July, 5:32 a.m.	Call	Repeated collection call before 6:00 a.m.	Call log B
6 July, 10:10 a.m.	Messenger	Sent loan information to borrower’s supervisor	Screenshot and supervisor’s statement C
7 July, 3:40 p.m.	SMS	Sent what appeared to be a fake arrest notice	Screenshot D

State the facts calmly. Quote the collector’s exact words when relevant, but avoid exaggeration. Explain who received each message and how you confirmed that the sender was collecting for the lender.

4. File through the SEC iMessage portal

The SEC currently receives public inquiries and complaints through the SEC iMessage portal. The system creates a ticket that you can track and use to submit further information. It requires sign-in through an eSECURE account. (Securities and Exchange Commission)

The basic process is:

Open the SEC iMessage portal.
Select Open a New Ticket.
Review and accept the privacy notice.
Sign in using your eSECURE account.
Choose Complaints on Financing and Lending Companies from the appropriate SEC service category.
Enter the respondent’s legal name, app name, your contact details, and a concise description of the violation.
Upload your complaint narrative and supporting evidence.
Create the ticket and save the ticket number.
Monitor the ticket and respond through the same thread if the SEC asks for additional information.

The SEC service directory places complaints involving financing and lending companies under its Financing and Lending Companies Department. (Securities and Exchange Commission)

5. Describe the remedy you are requesting

You may ask the SEC to:

Investigate the company and its collectors
Order the company to stop abusive communications
Require correction of false representations
Examine whether the company or online platform is properly authorized
Take administrative or enforcement action when warranted
Direct the respondent to communicate only through lawful and appropriate channels

Do not state that you want the SEC to “cancel the loan” unless there is a separate legal basis for disputing the debt. Focus the complaint on the collection violations, disputed charges, lack of disclosures, unauthorized transactions, or other specific conduct.

6. Continue monitoring the ticket

An electronic ticket may be generated promptly, but there is no single guaranteed period for a final SEC resolution. Review time depends on the completeness of the evidence, the company’s response, the seriousness of the allegations, and whether the matter requires enforcement proceedings.

Common causes of delay include:

Naming only the app and not the corporate operator
Submitting cropped or unreadable screenshots
Failing to show dates, sender details, or recipients
Uploading dozens of files without an index or chronology
Filing duplicate complaints containing different facts
Failing to respond to SEC requests for clarification

Keep the ticket number and use the existing thread rather than opening a new complaint for every additional message from the same collector.

How to File a Privacy Complaint With the NPC

File a parallel complaint with the National Privacy Commission when the lender accessed, used, disclosed, or distributed personal data improperly.

This route is particularly relevant when the collector:

Contacted people taken from your phonebook
Sent your photograph, ID, loan balance, or payment status to third parties
Posted personal information online
Created a group chat containing your contacts
Used your social-media connections for collection
Continued processing unnecessary data after you objected
Falsely claimed that a reference or relative was liable for your debt

1. Send a written complaint to the lender first

NPC complaint procedures ordinarily require the data subject to first inform the respondent in writing and give it an opportunity to address the privacy concern.

Your written notice should identify:

The personal data involved
How it was collected, used, or disclosed
Who received it
Why you believe the processing was unauthorized or excessive
What you want the company to do, such as stop contacting third parties, delete unlawfully collected contact data, preserve records, or explain the legal basis for processing

Keep proof that the company received the notice. This may be an email delivery record, support-ticket confirmation, courier receipt, or acknowledged letter.

If the company does not take appropriate action or does not respond within 15 calendar days, you may ordinarily proceed with an NPC complaint. The NPC rules contain procedural requirements and possible exceptions that should be reviewed for urgent or unusual cases. (National Privacy Commission)

2. Complete and notarize the complaint form

The NPC provides a downloadable Complaint-Assisted Form through its official forms page. The complaint must generally be verified or notarized and supported by relevant evidence. (National Privacy Commission)

Attach:

Your valid identification
The written complaint previously sent to the lender
Proof of delivery or receipt
The lender’s response, if any
Screenshots and message exports
A list of third parties contacted
Statements or affidavits from affected contacts when available
The loan agreement and privacy notice
A chronology and evidence index
A special power of attorney if filing through a representative

The complaint may be submitted through the methods stated on the NPC’s official filing instructions, including authorized electronic submission. Electronically submitted documents should follow the NPC’s format and signature requirements. (National Privacy Commission)

3. Pay the applicable filing fee

The NPC’s published fee schedule currently lists a basic complaint filing fee of ₱500. Additional fees apply when the complainant expressly claims damages, based on the amount sought. Applications for provisional remedies, such as a cease-and-desist order, may involve separate fees and bond requirements. Indigent complainants may request an exemption by submitting the required proof, including a barangay certificate of indigency and supporting affidavits. Check the official fee schedule before filing because agency fees may be revised.

4. File through a representative when necessary

The data subject may file personally or through an authorized representative. An individual representative generally needs a special power of attorney. Representatives of corporations or other juridical persons may need a board resolution, secretary’s certificate, or equivalent proof of authority. (National Privacy Commission)

A borrower living abroad may still complain about a Philippine lender or Philippine-based processing activity. When an authorization document is signed outside the Philippines, the receiving agency may require notarization and an apostille or other authentication, depending on where and how it was executed. Confirm the required format before sending the original document.

When the Lender Is Regulated by the BSP

If the loan or credit service was provided by a bank, digital bank, e-money issuer, or another institution supervised by the Bangko Sentral ng Pilipinas, first file a complaint through the institution’s Financial Consumer Protection Assistance Mechanism.

Give the institution a reasonable opportunity to respond and retain:

Your complaint reference number
A copy of the complaint
The institution’s written response
Proof that the complaint was closed, rejected, or left unresolved

You may then escalate the matter through the BSP Consumer Assistance Channels, including the BSP Online Buddy chatbot. Where the chatbot is unavailable, the BSP’s published procedure allows submission of a completed Consumer Information and Request form through its designated consumer-affairs channel, together with proof that the complaint was first raised with the institution.

BSP-supervised institutions are also prohibited from using abusive collection or debt-recovery practices. (Bangko Sentral ng Pilipinas)

When to Report the Collector to the Police or NBI

Seek prompt law-enforcement assistance when the messages involve:

Credible threats to kill or physically harm someone
Threats to damage a home, workplace, or property
Extortion or demands unrelated to the legitimate loan
Fake warrants, subpoenas, court orders, or police notices
Impersonation of police officers, prosecutors, judges, or government agencies
Identity theft or unauthorized use of identification documents
Hacking, account takeover, or unauthorized access to devices
Publication of potentially criminally defamatory accusations
Stalking or repeated conduct creating an immediate safety risk

You may approach the nearest police station, a PNP cybercrime unit, or the NBI Cybercrime Division. Republic Act No. 10175 requires the PNP and NBI to maintain cybercrime capabilities for investigating offenses involving computer systems. (National Bureau of Investigation)

Bring printed and electronic copies of your evidence, a valid ID, the phone or device containing the original messages when practicable, and a chronological statement. Law-enforcement personnel may ask you to execute a complaint-affidavit describing the facts under oath.

For immediate threats, prioritize personal safety. Avoid meeting a collector alone, giving your home location, or confronting the sender. Preserve the messages and report the threat promptly.

A Practical Evidence Checklist

Document or evidence	Why it matters
Loan agreement and disclosure statement	Identifies the creditor, amount, charges, and contractual terms
Payment receipts and transaction history	Shows what was borrowed and what has already been paid
Full screenshots	Establishes the words used, sender, date, time, and recipient
Original message exports	Preserves context and reduces disputes about altered screenshots
Call logs and voicemails	Shows frequency, timing, and identity of callers
Statements from family, friends, or employers	Confirms third-party disclosure and harassment
App-store page and developer details	Helps identify the company behind the platform
Privacy policy and app permissions	Shows what data the app claimed it would process
Written complaint sent to the lender	Essential for demonstrating prior notice, especially before an NPC filing
SEC, NPC, BSP, or company ticket numbers	Allows follow-up without creating duplicate cases
Chronology and evidence index	Helps investigators understand a large volume of evidence

Keep the original evidence even after submitting copies. Do not delete the lending application until you have preserved the loan documents, account history, privacy policy, company information, and relevant messages.

Do not secretly record private telephone conversations without first considering Republic Act No. 4200, the Anti-Wiretapping Act. Call logs, voicemails voluntarily left by the caller, contemporaneous written notes, and follow-up messages may be safer forms of evidence when the legality of recording is uncertain.

Sample Complaint Narrative

I obtained a loan through the FastLoan mobile application operated by XYZ Lending Corporation. Beginning on 5 July 2026, persons identifying themselves as collectors for the company sent repeated threatening and insulting messages from the numbers listed in Annex A. On 6 July 2026, the collectors disclosed my loan balance and photograph to my supervisor and three relatives, none of whom signed as guarantors or co-makers. The collectors also threatened to post my identification card online and sent a document falsely presented as an arrest notice. I informed the company in writing on 7 July 2026 and requested that it stop contacting third parties, preserve its collection records, and investigate the collectors. Copies of my notice, delivery confirmation, messages, call logs, and statements from the recipients are attached. I respectfully request an investigation and appropriate action for unfair collection and unauthorized processing and disclosure of personal data.

Adapt the statement to what actually happened. Do not include conduct you cannot support with evidence.

Common Mistakes That Weaken a Complaint

Assuming that harassment automatically cancels the debt

The collection method and the loan obligation are separate issues. You may challenge abusive conduct while still addressing any lawful balance. Continue asking for a complete statement of account and pay only through verified official channels.

Paying a collector’s personal account without verification

Before sending money, confirm that the payment destination is authorized by the lender. Ask for an official payment channel, reference number, and receipt. Fraudsters sometimes pose as collectors or replace legitimate payment instructions.

Deleting everything after blocking the collector

Blocking may protect your peace of mind, but preserve the messages first. Once the app, account, or conversation disappears, recovering evidence may be difficult.

Responding with threats or insults

Hostile replies can distract from the original violation and may expose you to a counter-complaint. Keep your responses factual: dispute inaccurate amounts, request written communication, object to third-party contact, and demand that harassment stop.

Posting all evidence publicly

Public posting may expose your own identification documents, account numbers, relatives, or private correspondence. It can also create unnecessary privacy or defamation disputes. Submit unredacted evidence securely to the proper agency and redact sensitive information from any copy shared publicly.

Filing a complaint with no chronology

Investigators should not have to reconstruct events from hundreds of unsorted screenshots. Number each attachment and connect it to a dated event in your narrative.

Treating a reference as a guarantor

A person does not become liable merely because the borrower listed a name or number as a reference. Unless that person expressly agreed to guarantee or co-sign the debt, collectors should not demand payment from that person.

Frequently Asked Questions

Can an online lender contact my family or employer?

A lender should not contact people taken from your phone contacts merely to shame or pressure you. SEC and NPC rules restrict contacting unrelated persons and using contact-list information for collection. A genuine guarantor or co-maker may be contacted regarding the obligation, but a relative, co-worker, supervisor, or character reference is not automatically a guarantor. (labanph.org)

Can the lender post my name and photograph on Facebook?

Publicly disclosing or threatening to disclose a borrower’s identity and personal information as a collection tactic may violate SEC unfair-collection rules and the Data Privacy Act. False defamatory accusations posted online may create additional cyberlibel issues when the legal elements are present. Preserve the post, profile link, date, comments, and sharing history before reporting it. (ACCRALAW)

Can I be arrested for an unpaid online loan?

You cannot be imprisoned merely for debt. A lawful arrest requires a separate criminal basis and proper legal process. The lender may pursue civil collection, but a text message claiming that an arrest will occur does not itself create an arrest warrant. (Lawphil)

What if I allowed the app to access my contacts?

Granting technical access does not authorize unlimited processing, public disclosure, or harassment. The lender must still comply with data-protection principles of legitimate purpose, proportionality, fairness, and security. Contact information cannot be processed in an unbridled manner or used to collect from people who are not guarantors. (National Privacy Commission)

Should I stop paying after filing a complaint?

A complaint does not automatically suspend or cancel a legitimate obligation. Request a detailed statement of account, challenge unauthorized charges in writing, and use only verified payment channels. You may negotiate a payment arrangement without giving up your right to complain about abusive collection.

Can I complain against an unregistered or unidentified lending app?

Yes. Provide every available identifying detail: app name, developer, website, collection numbers, email addresses, payment accounts, loan documents, and screenshots. The possible lack of registration is itself relevant to SEC review. Do not assume that the absence of a familiar company name means no complaint can be filed.

Do I need a lawyer?

A lawyer is not ordinarily required to submit an initial complaint through SEC iMessage or to use the NPC complaint form. More complex cases—particularly those involving substantial damages, disputed contracts, criminal accusations, or court proceedings—may require formal pleadings and closer procedural analysis.

Does an SEC or NPC complaint immediately stop collection calls?

Not necessarily. You may send the lender a written demand to stop unlawful conduct and restrict communications to a reasonable written channel, but the agency may need time to assess the complaint and obtain the respondent’s explanation. Report every serious new incident through the existing complaint ticket and seek law-enforcement help for immediate threats.

Can an OFW or foreign borrower file from outside the Philippines?

Yes, particularly when the lender, online platform, data processing, or collection activity is connected to the Philippines. Online SEC filing may be completed from abroad. An NPC complaint may also be filed through an authorized representative, subject to special-power-of-attorney and authentication requirements. Include your current location and timezone so investigators can accurately interpret message timestamps.

How long does a complaint take?

There is no universal resolution period. A simple complaint with a clearly identified company and organized evidence may move faster than one requiring corporate identification, technical investigation, multiple witnesses, or formal enforcement proceedings. The NPC’s ordinary pre-filing process also requires written notice to the respondent and generally allows 15 calendar days for a response before filing. (National Privacy Commission)

Key Takeaways

A real unpaid loan does not give a lender the right to threaten, deceive, insult, publicly shame, or harass you.
File with the SEC for unfair collection by lending and financing companies.
File with the NPC when contacts, photographs, loan information, or other personal data were improperly accessed or disclosed.
Use the provider’s complaint mechanism first, then escalate to the BSP, when the creditor is a BSP-supervised financial institution.
Report credible threats, fake warrants, extortion, identity theft, or other potentially criminal conduct to the PNP or NBI.
Preserve original messages, identify the company behind the app, prepare a dated chronology, and organize every attachment.
A character reference, relative, friend, or co-worker is not automatically a guarantor.
Filing a complaint does not by itself cancel a lawful debt, but it can hold the lender and its collectors accountable for unlawful collection practices.