How to File a Complaint Against an Online Lending App for Harassment and Data Privacy Violations

The proliferation of Online Lending Apps (OLAs) in the Philippines has brought convenience to many, but it has also birthed a surge in predatory practices. Borrowers frequently fall victim to unfair debt collection practices and gross violations of the Data Privacy Act. This article outlines the legal remedies and the step-by-step process for holding these entities accountable under Philippine law.


I. Relevant Laws and Regulations

Before filing a complaint, it is essential to understand the legal pillars that protect borrowers:

  1. SEC Memorandum Circular No. 18, Series of 2019: Explicitly prohibits unfair debt collection practices, including harassment, threats, and use of profane language.
  2. Republic Act No. 10173 (Data Privacy Act of 2012): Protects the personal information of borrowers. Accessing a borrower's contact list or posting their details on social media without consent is a criminal offense.
  3. Republic Act No. 10175 (Cybercrime Prevention Act of 2012): Covers online libel, identity theft, and online threats.
  4. Revised Penal Code: Pertains to crimes such as Grave Coercion, Grave Threats, and Libel.

II. Identifying Violations

1. Unfair Debt Collection Practices

Under the SEC guidelines, the following acts are considered prohibited:

  • Threats of violence or other criminal means to harm the person, reputation, or property of the borrower.
  • Use of profanity, obscenities, or insults.
  • Disclosure of names or personal information of borrowers who allegedly refuse to pay (Debt Shaming).
  • Contacting people in the borrower’s contact list who are not co-makers or guarantors.
  • Misrepresenting themselves as lawyers, police officers, or government agents to intimidate.

2. Data Privacy Violations

OLAs often require "permissions" to access your contacts, gallery, and location. However, using this data to harass you or your contacts is illegal.

  • Unauthorized Processing: Accessing your phonebook to message your friends and family about your debt.
  • Malicious Disclosure: Posting your ID or photo on social media with "Scammer" or "Magnanakaw" labels.

III. Step-by-Step Filing Process

Step 1: Secure and Preserve Evidence

A legal complaint is only as strong as its evidence. Do not delete messages.

  • Screenshots: Capture all threatening SMS, Viber messages, or emails.
  • Call Logs and Recordings: Record harassing phone calls if possible (keeping in mind the Anti-Wiretapping Act; however, for criminal harassment, these are vital).
  • Social Media Posts: Take screenshots of public posts or comments where you were shamed.
  • Contact Verification: Document instances where your friends or family were contacted.

Step 2: File a Complaint with the Securities and Exchange Commission (SEC)

The SEC regulates Finance Companies (FCs) and Lending Companies (LCs).

  1. Verify Registration: Check if the OLA is registered on the SEC website. Even if they are not registered, you should still report them.
  2. Contact the CGFD: Direct your complaint to the Corporate Governance and Finance Department (CGFD).
  3. Submit the Formal Complaint: You may use the SEC’s online complaint portal or email cgfd_enforcement_compliance@sec.gov.ph. Include the OLA's name, the specific violations of SEC MC No. 18, and your evidence.

Step 3: File a Complaint with the National Privacy Commission (NPC)

If the OLA accessed your contacts or shamed you online, they violated the Data Privacy Act.

  1. File via the NPC Website: Use the Complaints and Investigation Division portal.
  2. Required Info: You must show that you attempted to resolve the issue with the OLA’s Data Protection Officer (DPO) first, or explain why that was not possible.
  3. Focus: Highlight the "unauthorized disclosure" and "malicious processing" of your personal data.

Step 4: Report to the PNP-ACG or NBI-CCD

For criminal acts like Online Libel or Grave Threats, go to the cybercrime divisions:

  • Philippine National Police - Anti-Cybercrime Group (PNP-ACG)
  • National Bureau of Investigation - Cybercrime Division (NBI-CCD)

These agencies can help track the perpetrators, especially if the OLA is operating "underground" without a physical office or SEC registration.


IV. Summary of Redress Agencies

Agency Focus of Complaint Contact Method
SEC Unfair Collection, No License to Operate cgfd_enforcement_compliance@sec.gov.ph
NPC Data Privacy Breaches, Contact List Harassment complaints@privacy.gov.ph
PNP-ACG Cyber-harassment, Libel, Threats acg@pnp.gov.ph
NBI-CCD Identity Theft, Online Fraud ccd@nbi.gov.ph

V. Key Takeaways for Borrowers

Important Note: A debt is a civil obligation, but harassment is a criminal matter. Defaulting on a loan does not give a lender the right to violate your human rights or privacy.

  • Cease Communication: Once you have documented the harassment, stop engaging with the collectors.
  • Privacy Settings: Set your social media accounts to private to prevent them from "scraping" your friend list or photos.
  • Legal Action: If the harassment is severe, consult with a lawyer to file a formal "Petition for Habeas Data" or a criminal case for Libel and Coercion.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.