I. Overview

Online lending apps have become common in the Philippines because they offer fast, app-based loans with minimal paperwork. However, many borrowers have experienced abusive, deceptive, or unlawful practices, such as excessive interest, hidden charges, unauthorized access to contacts, public shaming, threats, harassment, misrepresentation, identity theft, and misuse of personal data.

A borrower who is mistreated by an online lending app is not helpless. Depending on the facts, complaints may be filed with the Securities and Exchange Commission, National Privacy Commission, Bangko Sentral ng Pilipinas, Department of Trade and Industry, Philippine National Police Anti-Cybercrime Group, National Bureau of Investigation Cybercrime Division, or the proper prosecutor’s office.

The proper complaint route depends on the nature of the violation. If the issue is abusive collection or an unregistered lending company, the SEC may be the main agency. If the issue is unauthorized access to contacts, data scraping, disclosure of debt, or harassment through personal information, the NPC may be involved. If the issue involves threats, cyber harassment, identity theft, libelous posts, hacking, or fraudulent use of accounts, cybercrime authorities may be appropriate. If the lender is a bank, financing company, payment service provider, or BSP-supervised entity, the BSP may be relevant.

The most important first step is to preserve evidence before the lender deletes messages, changes its app name, removes its online page, or transfers operations to another entity.

II. Common Complaints Against Online Lending Apps

Complaints against online lending apps usually involve one or more of the following:

Harassing calls and messages;
Threats of arrest, imprisonment, public exposure, or violence;
Calling or messaging the borrower’s contacts;
Accessing the borrower’s phonebook without valid consent;
Posting the borrower’s photo or name online;
Sending defamatory messages to family, friends, co-workers, or employers;
Using humiliating words such as “scammer,” “thief,” or “criminal”;
Sending fake legal notices;
Pretending to be police, court personnel, lawyers, or government officials;
Excessive interest and hidden charges;
Deducting large fees from the loan proceeds;
Giving a shorter repayment period than advertised;
Debiting or collecting amounts without authorization;
Refusing to issue statements of account or receipts;
Misrepresenting the total cost of the loan;
Requiring access to camera, gallery, contacts, SMS, or social media;
Misusing IDs, selfies, and personal information;
Threatening to file criminal cases for ordinary non-payment;
Applying payments incorrectly;
Lending without proper registration or authority.

Some conduct may be merely a civil or regulatory issue. Other conduct may be criminal.

III. Main Agencies That May Receive Complaints

A. Securities and Exchange Commission

The Securities and Exchange Commission, or SEC, is usually the main regulator for lending companies and financing companies.

The SEC may be relevant where the online lending app:

Operates without proper registration or authority;
Uses abusive or unfair debt collection practices;
Charges undisclosed or deceptive fees;
Violates lending company regulations;
Uses misleading advertisements;
Operates under a registered corporation but uses unauthorized lending apps;
Fails to disclose interest, penalties, and charges;
Engages third-party collection agents who harass borrowers;
Uses threatening or abusive collection messages.

If the lender is a corporation or financing company offering loans to the public, check whether it is registered with the SEC and whether it has authority to operate as a lending or financing company.

B. National Privacy Commission

The National Privacy Commission, or NPC, is relevant when the online lending app misuses personal data.

Examples include:

Accessing the borrower’s contact list without valid consent;
Calling or texting contacts who are not co-makers or guarantors;
Disclosing the borrower’s debt to relatives, friends, employer, or co-workers;
Posting the borrower’s name, photo, ID, or loan information online;
Using the borrower’s personal data for shaming;
Collecting unnecessary permissions through the app;
Using photos, IDs, selfies, or address books beyond legitimate purpose;
Failing to provide a privacy notice;
Refusing to delete or correct inaccurate data;
Sharing borrower data with unauthorized collectors.

Debt collection does not give a lender unlimited power to expose a borrower’s private information. A loan obligation does not erase data privacy rights.

C. Bangko Sentral ng Pilipinas

The Bangko Sentral ng Pilipinas, or BSP, may be relevant if the lending service is connected with a BSP-supervised financial institution.

This may include:

Banks;
E-money issuers;
electronic money wallets;
payment service providers;
financing or lending products offered through BSP-supervised entities;
online platforms tied to banks or regulated financial institutions.

If the online lending app is merely a lending company registered with the SEC, the SEC is usually the primary regulator. If the complaint concerns a bank, e-wallet, payment provider, or BSP-supervised financial institution, the BSP may be relevant.

D. Philippine National Police Anti-Cybercrime Group

The PNP Anti-Cybercrime Group may be relevant when the conduct involves cybercrime, such as:

Online threats;
identity theft;
hacking;
unauthorized access;
cyber libel;
fake posts;
use of altered images;
impersonation of government officials;
online harassment;
dissemination of personal information;
use of social media to shame the borrower;
fraudulent apps or phishing.

If collectors send threatening or defamatory messages through SMS, Messenger, Viber, WhatsApp, Telegram, Facebook, email, or other online platforms, preserve the messages and consider reporting to cybercrime authorities.

E. National Bureau of Investigation Cybercrime Division

The NBI Cybercrime Division also handles cybercrime-related complaints. It may be especially useful where:

The lender or collector uses fake accounts;
threats are serious;
the borrower’s identity was misused;
the app accessed data without permission;
defamatory posts were made online;
there are multiple victims;
the app operators are hiding behind changing names or platforms.

F. Prosecutor’s Office

A criminal complaint may be filed with the Office of the City Prosecutor or Office of the Provincial Prosecutor if there is sufficient evidence of a criminal offense.

Possible criminal complaints may involve:

grave threats;
unjust vexation;
coercion;
cyber libel;
identity theft;
computer-related offenses;
violation of privacy laws;
fraudulent representations;
falsification or use of fake legal documents;
other offenses depending on the facts.

A criminal complaint usually requires a sworn complaint-affidavit and supporting evidence.

G. Department of Trade and Industry

The Department of Trade and Industry, or DTI, may be relevant where the complaint involves consumer protection issues, deceptive advertising, unfair sales acts, or misleading digital transactions.

However, lending companies and financing companies are usually more directly regulated by the SEC. DTI may be more relevant if the issue involves a non-financial consumer transaction, misleading online advertising, or merchant-related conduct.

H. Local Police or Barangay

A borrower may go to the local police or barangay if there are immediate threats, harassment, or safety concerns. A blotter may help document the incident.

However, for online lending app abuse, a barangay complaint or blotter is often not enough. Regulatory and cybercrime complaints may still be necessary.

IV. Laws and Rules That May Apply

A. Lending Company Regulation Act

Lending companies in the Philippines must comply with laws and regulations governing lending operations. A lending company generally must be properly registered and authorized.

If an online lending app operates without authority, uses abusive practices, or violates regulatory requirements, the SEC may impose sanctions.

Possible consequences may include suspension, revocation, fines, takedown orders, or referral for prosecution.

B. Financing Company Rules

If the entity is a financing company rather than a lending company, financing company laws and SEC rules may apply.

The name used by the app is not always controlling. The borrower should identify the registered company behind the app.

C. Truth in Lending Principles

Borrowers are entitled to clear disclosure of loan terms. The lender should disclose matters such as:

amount financed;
finance charges;
interest rate;
penalties;
other fees;
total amount payable;
payment schedule;
effective cost of borrowing.

Hidden charges, misleading rates, or unexplained deductions may support a complaint.

D. Data Privacy Act

The Data Privacy Act protects personal information and sensitive personal information.

Online lending apps may collect personal data only for legitimate, specified, and lawful purposes. They must not collect more data than necessary, and they must not use borrower information for harassment, humiliation, or unauthorized disclosure.

Debt collection is not a license to contact everyone in the borrower’s phonebook or shame the borrower publicly.

E. Cybercrime Prevention Act

If the abuse is committed through electronic means, the Cybercrime Prevention Act may apply.

Possible cybercrime issues include:

computer-related identity theft;
cyber libel;
illegal access;
data interference;
system interference;
computer-related fraud;
other crimes committed through information and communications technology.

When collectors use fake social media posts, defamatory group messages, or threats through online platforms, cybercrime remedies may be relevant.

F. Revised Penal Code

Depending on the facts, the Revised Penal Code may apply to:

threats;
coercion;
unjust vexation;
slander or libel;
incriminating innocent persons;
falsification;
estafa;
grave coercions;
other crimes.

Non-payment of a loan is generally a civil matter. But harassment, threats, deception, and public shaming may create separate liability.

G. Anti-Photo and Video Voyeurism, VAWC, or Other Special Laws

In extreme cases, collectors may misuse intimate images, threaten sexual exposure, or harass women in ways that may trigger special protective laws. If the borrower is a woman and the acts involve psychological violence, coercive control, or intimate partner-related abuse, other legal remedies may apply depending on the relationship and facts.

If intimate images are involved, the case should be treated as urgent and reported to cybercrime authorities.

V. Is Non-Payment of an Online Loan a Crime?

Ordinary failure to pay a loan is generally a civil obligation, not automatically a criminal offense.

A borrower cannot usually be jailed simply for inability to pay a debt.

However, criminal liability may arise if there was fraud from the beginning, such as using false identity, fake documents, or deceit to obtain the loan. But a borrower who honestly borrowed and later became unable to pay is generally facing a collection or civil issue, not imprisonment.

Online lending apps or collectors who say, “You will be arrested today if you do not pay,” may be making a misleading or abusive threat unless there is an actual lawful process.

VI. Common Illegal or Abusive Collection Practices

Online lending collectors may cross the line when they:

Use obscene, insulting, or profane language;
Threaten violence or imprisonment;
Pretend to be police, NBI, court staff, or government officers;
Send fake subpoenas, warrants, or court notices;
Contact the borrower’s employer to shame the borrower;
Contact relatives or friends to disclose the debt;
Post the borrower’s photo online;
Create group chats to humiliate the borrower;
Threaten to report the borrower as a criminal without basis;
Publish false statements;
Use the borrower’s contact list for mass messaging;
Call at unreasonable hours repeatedly;
Use intimidation, harassment, or coercion;
Demand payment from people who are not co-makers, guarantors, or legally liable;
Misrepresent the amount due.

A lender may collect a valid debt, but collection must be lawful and respectful of rights.

VII. First Step: Preserve Evidence

Before filing a complaint, preserve all evidence. Online lending apps and collectors often delete messages, change names, use new numbers, or deactivate accounts.

A. Screenshots

Take screenshots of:

app name;
app icon;
app store page;
company name in the app;
loan agreement;
disclosure statement;
amount borrowed;
amount received;
due date;
interest and charges;
payment history;
collection messages;
threats;
messages sent to contacts;
posts made online;
caller numbers;
fake legal notices;
privacy permissions requested by the app;
privacy policy;
customer support conversations.

Screenshots should show date, time, sender, phone number or account name, and full context.

B. Screen Recordings

Screen recordings may help show:

the app interface;
permissions requested;
loan dashboard;
hidden charges;
countdown timers;
collection messages inside the app;
inability to contact support;
refusal to issue statement;
misleading claims.

C. Call Logs and Recordings

Save call logs showing repeated calls. If calls are recorded, ensure they are preserved. Be careful about recording laws and privacy, but for complaint purposes, evidence of harassment may be relevant.

At minimum, keep:

caller number;
date;
time;
duration;
frequency of calls;
identity used by caller;
summary of threats or abusive words.

D. Messages Sent to Contacts

If the app contacted your relatives, friends, co-workers, or employer, ask them to send you screenshots.

Important evidence includes:

message content;
sender number or account;
date and time;
recipient name;
whether the recipient is in your contact list;
whether the recipient was a reference, co-maker, or guarantor;
whether the message disclosed your debt;
whether insults or threats were used.

This is critical for privacy complaints.

E. Loan Documents

Save or request:

loan agreement;
disclosure statement;
promissory note;
repayment schedule;
privacy policy;
terms and conditions;
statement of account;
receipts;
proof of disbursement;
proof of payment;
penalty computation;
collection notices.

If the app does not provide these, screenshot the request and refusal or lack of response.

F. App Details

Record:

app name;
developer name;
package name, if visible;
app store link;
website;
email address;
hotline;
listed office address;
SEC registration number, if shown;
certificate of authority number, if shown;
privacy policy link;
collection agency name;
names used by collectors.

Online lending apps often change names, so preserve details early.

G. Payment Evidence

Save:

bank transfer receipts;
GCash or Maya receipts;
payment gateway confirmations;
reference numbers;
account names;
QR codes;
collector instructions;
official receipts, if any;
repayment confirmation;
messages acknowledging payment.

This helps show overcharging, duplicate collection, or failure to credit payments.

VIII. Secure Your Data and Accounts

If the app has access to your phone data, take protective steps.

A. Revoke App Permissions

Check your phone settings and revoke permissions for:

contacts;
camera;
photos or gallery;
microphone;
SMS;
call logs;
location;
storage;
accessibility;
notification access.

Some apps collect data immediately after installation, so revoking permissions may not erase data already taken, but it may reduce further access.

B. Uninstall the App Carefully

Before uninstalling, preserve screenshots and documents. After preserving evidence, consider uninstalling the app if it is abusive or intrusive.

Do not delete evidence needed for your complaint.

C. Change Passwords

If you gave the app access to email, social media, phone data, or IDs, change passwords for:

email accounts;
e-wallets;
banking apps;
social media;
work accounts;
cloud storage;
government portals.

D. Warn Contacts

If your contacts may be harassed, consider sending a calm warning:

“My phone contacts may have been accessed by an online lending app. Please ignore messages about my private loan or any demand for payment. You are not liable unless you signed as co-maker or guarantor.”

Avoid making defamatory accusations. Keep the warning factual.

IX. Identify the Lending Company Behind the App

Online lending apps may use brand names different from their corporate names. The complaint should identify both if possible.

Check:

app terms and conditions;
privacy policy;
loan agreement;
disclosure statement;
SEC registration details shown in app;
email footer;
SMS sender name;
payment recipient;
customer service response;
app store developer name;
website footer.

If the company name is unclear, include all available names and identifiers in the complaint.

X. Check Whether the App Is Registered

A borrower should determine whether the online lending app or company is properly registered and authorized.

Relevant questions include:

Is the company registered with the SEC?
Does it have a Certificate of Authority to operate as a lending company or financing company?
Is the app registered or disclosed as an online lending platform?
Is the name used by the app the same as the registered company?
Is it using a revoked, suspended, or expired registration?
Is it falsely claiming to be licensed?
Is it using another company’s registration number?

Even if a company is registered, it may still violate rules through abusive collection or data misuse.

XI. Filing a Complaint With the SEC

A. When to File With the SEC

File with the SEC if the complaint involves:

unregistered lending operations;
abusive collection practices;
harassment by lending company or collection agents;
unfair debt collection;
hidden charges;
non-disclosure of loan terms;
excessive or deceptive fees;
unauthorized online lending platform;
misleading app registration claims;
violations by financing or lending companies.

B. What to Include in an SEC Complaint

An SEC complaint should include:

your full name and contact details;
name of lending app;
name of lending company, if known;
app link or website;
loan account number, if any;
loan date;
amount borrowed;
amount actually received;
total amount demanded;
interest, penalties, and charges;
collection messages;
names or numbers of collectors;
description of abusive practices;
evidence attachments;
relief requested.

C. Evidence for SEC Complaint

Attach:

screenshots of the app;
loan agreement;
disclosure statement;
collection messages;
call logs;
payment receipts;
statement of account;
app store listing;
privacy policy;
messages sent to contacts;
fake legal notices;
proof of harassment;
identity of collection agency, if known.

D. Possible SEC Action

The SEC may:

investigate the lending company;
issue show-cause orders;
impose fines;
suspend or revoke authority;
order app takedown;
refer matters for criminal prosecution;
coordinate with other agencies;
issue public advisories;
act against abusive collection agents;
require compliance with disclosure rules.

An SEC complaint may not automatically erase a valid debt, but it may address unlawful conduct by the lender.

XII. Filing a Complaint With the National Privacy Commission

A. When to File With the NPC

File with the NPC if the complaint involves personal data misuse, such as:

unauthorized access to phone contacts;
public disclosure of debt;
sending messages to contacts;
posting borrower’s personal information online;
using borrower’s photo or ID for shaming;
excessive app permissions;
disclosure to employer or co-workers;
sharing borrower data with unknown collectors;
refusal to explain data processing;
failure to honor privacy rights.

B. Data Privacy Rights Involved

A borrower may invoke rights such as:

right to be informed;
right to object;
right of access;
right to correction;
right to erasure or blocking in proper cases;
right to damages, where legally established;
right to file a complaint.

The borrower may ask how the app obtained and used personal data, who received it, and why it was disclosed.

C. What to Include in an NPC Complaint

Include:

your identity and contact details;
name of app and company;
date you installed or used the app;
permissions requested by the app;
personal data collected;
how your data was misused;
names of people contacted;
screenshots of messages sent to contacts;
posts or disclosures made online;
privacy policy of the app;
whether you consented to the use;
why the use exceeded legitimate collection purposes;
harm suffered.

D. Evidence for NPC Complaint

Attach:

screenshots of app permissions;
privacy policy;
loan agreement;
messages sent to your contacts;
affidavits or statements from contacts, if available;
public posts showing your personal information;
screenshots of collector threats to expose you;
app store listing;
proof that contacts were not co-makers or guarantors;
your request to stop using or disclosing data, if any.

E. Prior Contact With the App

In many privacy complaints, it is useful to first send a written request or complaint to the lending app’s data protection officer or customer service, asking them to stop processing or disclosing data unlawfully.

However, if the harm is urgent, severe, or ongoing, a direct complaint may be justified.

XIII. Filing With Cybercrime Authorities

A. When to Go to PNP-ACG or NBI Cybercrime

Go to cybercrime authorities if the online lending app or collectors:

threaten you online;
post your photo or personal data;
create defamatory posts;
impersonate police, court, or government officials;
send fake warrants or subpoenas;
hack or access your accounts;
use your identity;
use altered images;
send malicious messages to contacts;
operate through fake accounts;
commit computer-related fraud.

B. What to Bring

Bring:

valid ID;
complaint-affidavit, if already prepared;
screenshots;
phone containing original messages;
call logs;
app details;
loan documents;
payment evidence;
messages sent to contacts;
links to posts or accounts;
names and numbers of collectors;
timeline of events.

C. Cybercrime Complaint-Affidavit

A complaint-affidavit should narrate:

when you downloaded or used the app;
when you borrowed;
what amount you received;
what amount was demanded;
what abusive acts occurred;
who sent the threats;
what data was disclosed;
who received the messages;
how you were harmed;
what evidence supports the complaint.

XIV. Filing With the BSP

A. When BSP May Be Relevant

The BSP may be relevant if the complaint involves:

a bank;
an e-money issuer;
an electronic wallet;
a payment service provider;
a BSP-supervised financial institution;
a loan product offered through a bank or regulated financial platform.

If the online lending app is not BSP-supervised, the BSP may refer you to the SEC or another agency.

B. What to Include

Include:

name of financial institution;
account or loan reference number;
transaction details;
complaint history with the institution;
amount involved;
screenshots and records;
desired resolution.

For BSP-supervised institutions, it is often useful to first file a complaint with the institution’s customer assistance channel and keep the reference number.

XV. Filing a Criminal Complaint With the Prosecutor

A. When a Criminal Complaint May Be Appropriate

A criminal complaint may be appropriate where collectors or app operators commit acts such as:

threats of harm;
coercion;
cyber libel;
identity theft;
unauthorized access;
data misuse punishable by law;
falsification;
use of fake court or police documents;
extortion-like demands;
fraudulent loan practices.

B. Complaint-Affidavit Requirements

A complaint-affidavit should include:

complainant’s name, age, citizenship, address, and contact details;
respondent’s name, company, app, number, or account, if known;
clear narration of facts;
exact words used in threats or defamatory messages;
dates and times;
screenshots and documents as annexes;
names of witnesses or contacts who received messages;
statement of harm or damage;
request for prosecution.

C. If the Collector’s Real Name Is Unknown

You may identify the respondent by:

phone number;
username;
app name;
company name;
email address;
collection agency name;
payment account;
“John Doe” or “Jane Doe,” if appropriate.

Cybercrime investigators may help identify the person behind the number or account.

XVI. Sample Complaint-Affidavit Outline

A complaint-affidavit may be structured as follows:

Republic of the Philippines City/Province of ________

Complaint-Affidavit

I, [name], of legal age, Filipino, residing at [address], after being sworn, state:

I am filing this complaint against [name of app/company/collector/unknown persons] for abusive online lending collection, threats, harassment, data privacy violations, cyber libel, identity theft, and other offenses as may be found applicable.
On [date], I downloaded the online lending app named [app name]. The app required access to my [contacts/camera/storage/etc.].
On [date], I applied for a loan of ₱. I received only ₱ after deductions. The app required repayment of ₱____ by [date].
On [date], after I was unable to pay or after I requested clarification, collectors using the numbers/accounts [details] sent me threatening and abusive messages.
The collectors also contacted my [mother/employer/friend/co-worker] and disclosed my alleged debt. Screenshots are attached.
The collectors threatened to [post my photo / file fake criminal case / have me arrested / shame me online], as shown in the attached screenshots.
I did not authorize the app or collectors to disclose my debt to persons who were not co-makers, guarantors, or parties to the loan.
Because of these acts, I suffered humiliation, anxiety, damage to reputation, and other harm.
I am attaching the following evidence: screenshots, loan records, payment receipts, call logs, app details, and messages sent to my contacts.
I execute this affidavit to support my complaint and to request investigation and appropriate legal action.

This should be adapted to actual facts and notarized or sworn before the proper officer where required.

XVII. Sample SEC Complaint Narrative

A complaint to the SEC may state:

“I respectfully file this complaint against [online lending app/company] for abusive collection practices, harassment, and possible violations of lending company regulations. I borrowed ₱____ through the app on [date], but I received only ₱____ after deductions. The app demanded ₱____ by [date]. When I failed to pay or requested clarification, collectors repeatedly called and sent threatening messages. They also contacted my relatives and employer, disclosed my alleged debt, and used humiliating language. Attached are screenshots, call logs, the app page, loan details, and payment records. I respectfully request investigation and appropriate regulatory action.”

XVIII. Sample NPC Complaint Narrative

A complaint to the NPC may state:

“I respectfully file this complaint against [online lending app/company] for unauthorized and excessive processing of my personal data. The app accessed my contacts and collectors used that information to contact people who were not parties to my loan. They disclosed my alleged debt and sent humiliating messages. I did not authorize such disclosure. Attached are screenshots of the app permissions, privacy policy, messages sent to my contacts, and the collectors’ threats to expose my personal information. I respectfully request investigation and appropriate action under data privacy laws.”

XIX. Sample Message to the Lending App Before Filing

A borrower may send a written demand to the app:

“I demand that you and your agents immediately stop harassing me and my contacts. I also demand that you stop disclosing my personal information and alleged debt to persons who are not parties to the loan. Please provide a complete statement of account, including principal, interest, penalties, charges, and payments applied. I reserve all rights to file complaints with the SEC, NPC, cybercrime authorities, and other proper offices.”

This message should be calm and factual. Do not threaten violence or use abusive language.

XX. What Evidence Is Strongest?

The strongest evidence usually includes:

screenshots of threats;
messages sent to contacts;
proof that contacts are not co-makers or guarantors;
app permissions showing access to contacts;
loan agreement showing hidden charges;
proof of amount actually received;
proof of amount demanded;
call logs showing repeated harassment;
fake warrants or fake legal notices;
defamatory social media posts;
payment receipts;
app and company details;
statements from affected contacts;
proof of complaint to the company and its response.

XXI. Should You Still Pay the Loan?

Filing a complaint does not automatically cancel a legitimate loan obligation.

If you actually borrowed money, the lender may still have a civil claim for the valid amount legally due. However, abusive collection, illegal processing of data, hidden charges, or regulatory violations may be separately actionable.

Borrowers should distinguish between:

disputing illegal charges;
contesting harassment;
demanding proper accounting;
paying the valid principal and lawful charges;
refusing unlawful penalties;
seeking regulatory action.

Where possible, request a written statement of account and pay only through official channels with receipts.

XXII. What If the App Is Illegal or Unregistered?

Even if the app is unregistered or abusive, the facts must be handled carefully.

An illegal lender may still claim that money was borrowed, but it may face sanctions for operating unlawfully or using abusive methods.

The borrower should:

preserve the loan details;
avoid further app permissions;
request accounting;
report to SEC and NPC;
report threats to cybercrime authorities;
avoid sending payments to suspicious personal accounts without documentation;
keep proof of any payment made.

XXIII. Can Collectors Contact Your References?

A lender may ask for references during a loan application. However, a reference is not automatically a co-maker or guarantor.

Collectors should not:

demand payment from references who did not guarantee the loan;
disclose unnecessary debt information;
shame the borrower through references;
repeatedly harass references;
threaten references;
imply references are legally liable when they are not.

If the reference signed a guarantee or co-maker agreement, the situation may be different. But ordinary contact persons should not be treated as debtors.

XXIV. Can Collectors Contact Your Employer?

Contacting an employer to verify employment may be different from contacting an employer to shame the borrower.

Improper conduct may include:

telling HR or supervisors that the employee is a delinquent debtor;
threatening workplace exposure;
sending defamatory messages to co-workers;
demanding salary deduction without authority;
causing reputational damage;
pretending to be from a court or government office.

Such conduct may support privacy, regulatory, civil, or criminal complaints.

XXV. Can Collectors Post You Online?

Publicly posting a borrower’s name, photo, ID, debt, or accusations such as “scammer” or “thief” may expose the lender or collector to liability.

Possible issues include:

data privacy violation;
cyber libel;
unjust vexation;
harassment;
damages;
regulatory violations.

Take screenshots immediately, including the URL, date, account name, comments, and shares.

XXVI. Fake Warrants, Subpoenas, and Legal Notices

Some online lending collectors send fake documents labeled:

warrant of arrest;
subpoena;
court order;
barangay complaint;
police blotter;
NBI notice;
hold departure order;
cybercrime complaint;
final demand with arrest threat;
legal department notice.

A private lender cannot issue a warrant of arrest. Warrants are issued by courts under legal procedure.

If you receive a suspicious legal document, preserve it and verify with the court or agency named. Fake legal documents may support a complaint.

XXVII. Threats of Imprisonment

Collectors often say, “You will be jailed if you do not pay today.”

Ordinary debt non-payment is generally not punishable by imprisonment. There may be criminal cases if fraud or other crimes are present, but imprisonment does not occur simply because a collector says so.

Threatening jail to coerce payment may be abusive and misleading.

XXVIII. Excessive Interest and Hidden Charges

Online lending apps often advertise low interest but deduct large “processing fees,” “service fees,” “platform fees,” or “verification fees.”

Example:

Advertised loan: ₱5,000 Actual received: ₱3,500 Amount due after 7 days: ₱5,500

This may show a much higher effective cost than advertised.

A complaint should show:

advertised amount;
actual amount received;
deductions;
due date;
total amount demanded;
interest;
penalties;
effective repayment period;
screenshots of disclosure or lack of disclosure.

XXIX. Short Loan Terms

Some apps provide very short loan periods, such as 7 days or 14 days, while implying longer repayment terms.

Short-term loans are not automatically illegal, but deceptive presentation, hidden charges, and abusive collection may violate rules.

The borrower should preserve the screen showing the promised term and the actual due date.

XXX. Repeat Loan Trap

Some borrowers are pushed into repeated borrowing to pay prior loans. This can create a debt cycle.

The borrower should avoid taking new loans from other abusive apps just to pay old ones. Instead:

request a statement of account;
negotiate in writing if appropriate;
document illegal charges;
file complaints for harassment;
prioritize lawful debts and essential expenses;
avoid giving new apps access to contacts and data.

XXXI. Settlement With the Lending App

A borrower may choose to settle a valid debt, but settlement should be documented.

Before paying, request:

updated statement of account;
breakdown of principal, interest, penalties, and fees;
written settlement amount;
official payment channel;
receipt;
confirmation of full payment;
undertaking to stop collection;
deletion or correction of improper data, where appropriate.

Avoid paying to random personal accounts without written confirmation.

XXXII. If You Already Paid but Still Being Harassed

If you already paid, preserve proof of payment and send it to the lender. If harassment continues:

request correction of account status;
demand cessation of collection;
file complaint with SEC;
file privacy complaint if contacts were messaged;
file cybercrime complaint if threats or defamatory posts continue;
notify your contacts that the account was paid and they should ignore harassment.

Attach payment receipts and collector messages to the complaint.

XXXIII. If the Loan Was Taken Using Your Identity

If someone used your identity to borrow from an online lending app:

report immediately to the app;
request account details;
deny the loan in writing;
file an identity theft report with cybercrime authorities;
report to NPC if your personal data was misused;
preserve collection messages;
warn contacts;
check your IDs, SIMs, emails, and accounts;
consider an affidavit of denial;
monitor other loan apps and financial accounts.

Do not pay a debt you did not incur without understanding the consequences.

XXXIV. If Your Contacts Are Being Harassed

Tell your contacts:

they are not liable unless they signed as co-maker or guarantor;
they should preserve screenshots;
they should block abusive numbers if needed;
they may submit statements or screenshots for your complaint;
they should not pay the lender;
they should not share additional personal information.

Contacts who are harassed may also have their own complaints, especially if their personal data was misused.

XXXV. If the App Accessed Your Contact List

Unauthorized or excessive access to contacts is one of the most common privacy issues.

Evidence should show:

the app requested contact permission;
you did not knowingly authorize harassment of contacts;
contacts received collection messages;
contacts were not co-makers or guarantors;
messages disclosed your debt or personal information;
collectors threatened to contact more people.

This is strong evidence for an NPC complaint.

XXXVI. If the App Accessed Photos or Gallery

Some abusive apps require access to photos or storage. If collectors threaten to post your photos or IDs, preserve the threat.

If photos are posted:

take screenshots;
copy the URL;
record the account name;
report to the platform for takedown;
file cybercrime and privacy complaints;
ask affected contacts to preserve evidence.

XXXVII. If the App Uses Your ID or Selfie

Lending apps often collect IDs and selfies for verification. They should not misuse these for shaming, impersonation, or unrelated purposes.

If your ID or selfie is posted or sent to others, this may support:

data privacy complaint;
cybercrime complaint;
identity theft complaint;
damages claim;
regulatory complaint.

XXXVIII. If Collectors Use Multiple Numbers

Collectors often use many SIM cards and messaging accounts. Preserve all numbers.

Create a table:

Date	Time	Number/Account	Message or Call	Evidence
Jan. 5	8:10 AM	09xx xxx xxxx	Threatened to contact employer	Screenshot A
Jan. 5	8:45 AM	09xx xxx xxxx	Called 12 times	Call Log B
Jan. 5	9:30 AM	Messenger account	Sent fake legal notice	Screenshot C

This makes the complaint easier to evaluate.

XXXIX. If the App Changes Name

Many online lending apps change names after complaints. Preserve the old and new identities.

Evidence may include:

app screenshots;
app store history;
developer name;
privacy policy;
website;
collector numbers;
same payment account;
same loan dashboard;
same customer service email;
same corporate name.

Include all aliases in the complaint.

XL. If the App Is No Longer in the App Store

The app may be removed before investigation. If you already preserved screenshots and links, include them.

If you did not, gather:

installed app details from your phone;
old messages;
emails;
payment records;
loan agreement;
app folder or icon screenshots;
website or APK link;
collector messages;
other victims’ screenshots.

XLI. If the App Is an APK Outside Official App Stores

Apps installed through APK files may pose greater security risks.

If you installed an APK:

preserve evidence first;
revoke permissions;
uninstall the app;
scan your phone;
change passwords using a clean device;
monitor e-wallets and bank accounts;
preserve the download link;
report to cybercrime authorities if data was compromised.

XLII. If the App Debited Your Account Without Consent

If the app or linked payment channel deducted money without authorization:

report to your bank or e-wallet immediately;
request blocking of future debits;
ask for transaction investigation;
preserve authorization screens;
file regulatory complaint if needed;
file cybercrime complaint if there was unauthorized access or fraud.

XLIII. If You Receive Threats of Home Visit

Some collectors threaten home visits. Debt collection visits are not automatically illegal, but they must be lawful and peaceful.

Collectors should not:

threaten violence;
trespass;
shame you to neighbors;
pretend to be police;
seize property without court order;
force entry;
harass family members;
use abusive language.

If there are threats of violence or unlawful entry, report to local police and preserve messages.

XLIV. If Collectors Come to Your Home or Workplace

If collectors appear physically:

stay calm;
do not allow forced entry;
ask for identification;
ask for written authority from the lender;
do not surrender property without court order;
record details if safe;
call barangay or police if threatened;
do not sign documents under pressure;
request all communications in writing;
keep copies of any documents given.

A lender generally needs a court process to seize property.

XLV. If They Threaten to File a Case

A lender may file a civil collection case if a debt is unpaid. That is different from threatening immediate arrest.

If you receive a real demand letter or summons, do not ignore it. Verify whether it is genuine.

If the notice is fake, preserve it and include it in your complaint.

XLVI. If You Receive Court Summons

If you receive actual court summons:

verify the court, branch, and case number;
note the date of receipt;
read the complaint;
consult a lawyer or legal aid office;
file the proper answer or response within the deadline;
preserve your defenses, such as excessive charges, payments made, or harassment.

A regulatory complaint does not replace the need to answer a real court case.

XLVII. If You Are Sued in Small Claims

Many debt cases may be filed as small claims.

In small claims, lawyers are generally not allowed to appear for parties during the hearing, subject to exceptions. The defendant must attend and submit the required response and evidence.

Prepare:

loan agreement;
proof of amount actually received;
proof of payments;
screenshots of charges;
statement of account;
evidence of harassment, if relevant;
proof of settlement offers.

Small claims focuses on money owed, but abusive practices may still be reported separately to regulators.

XLVIII. Can You Sue the Lending App?

Depending on the facts, a borrower may have claims for:

damages;
injunction;
violation of privacy rights;
defamation;
harassment;
unfair collection practices;
refund of illegal charges;
correction of records;
civil liability arising from criminal acts.

A civil case may require filing fees, evidence, and legal strategy. For many borrowers, starting with regulatory and cybercrime complaints is more practical.

XLIX. Can You Demand Deletion of Your Data?

A borrower may request deletion, blocking, or correction of personal data in appropriate cases, especially where processing is unlawful, excessive, or no longer necessary.

However, lenders may retain some records for legitimate legal, accounting, regulatory, or collection purposes.

The issue is not always total deletion, but stopping unlawful disclosure, harassment, and excessive processing.

L. Can You Ask App Stores to Remove the App?

You may report the app to the app store or platform if it violates policies, misuses permissions, or engages in abusive lending practices.

Include:

app link;
screenshots of abusive practices;
privacy concerns;
regulatory complaint reference, if available;
explanation of harm.

This does not replace complaints to Philippine authorities.

LI. Can You File a Class or Group Complaint?

Multiple borrowers may file coordinated complaints if the same app or company harmed them.

Group complaints may help show:

pattern of abuse;
common collection scripts;
repeated privacy violations;
similar hidden charges;
common collector numbers;
same payment channels;
widespread harm.

Each victim should ideally provide their own statement and evidence.

LII. What If You Used a Fake Name or Wrong Information?

If you used false information to obtain a loan, the situation becomes more complicated. The lender’s abusive acts may still be reportable, but the borrower may also face issues if fraud was involved.

Be truthful when filing a complaint. Do not fabricate or conceal facts.

LIII. What If You Borrowed From Multiple Apps?

Many borrowers are harassed by multiple apps. Organize evidence separately for each app.

Create a table:

App	Company	Amount Received	Amount Demanded	Due Date	Abusive Acts	Evidence
App A	Unknown	₱3,500	₱5,500	Jan. 10	Contacted employer	Screenshots A
App B	XYZ Lending	₱2,000	₱3,800	Jan. 12	Threatened arrest	Screenshots B

File separate or consolidated complaints depending on agency instructions.

LIV. What If You Cannot Pay?

If you cannot pay, do not ignore the situation. Consider:

requesting a statement of account;
negotiating a realistic payment plan;
paying only through official channels;
documenting all payments;
refusing to pay illegal or unexplained charges;
filing complaints for harassment;
seeking financial counseling;
prioritizing essential expenses;
avoiding new predatory loans.

Inability to pay does not justify harassment by collectors.

LV. What If They Contact Your Family Daily?

If collectors contact family members repeatedly:

ask family members to screenshot every message;
identify whether they were listed as references;
determine whether they signed any guarantee;
send a written demand to stop contacting third parties;
file SEC and NPC complaints;
file cybercrime complaint if threats or defamation are involved.

Family members who are not liable should not be pressured to pay.

LVI. What If They Call Your Employer?

If collectors call or message your employer:

ask HR or the recipient for screenshots or written confirmation;
preserve the number and message;
document any workplace consequence;
file NPC complaint for disclosure of debt;
file SEC complaint for abusive collection;
consider cybercrime complaint if defamatory or threatening.

If the conduct caused suspension, termination, or serious reputational harm, legal advice may be needed.

LVII. What If They Threaten to Post You as a Scammer?

Preserve the threat. If they actually post:

screenshot the post;
copy the URL;
capture comments and shares;
identify the account;
report the post to the platform;
file NPC and cybercrime complaints;
consider a cyber libel complaint if false and defamatory statements were made.

LVIII. What If They Say They Will Contact All Your Contacts?

This threat may show intended misuse of personal data.

Take screenshots and file a privacy and regulatory complaint. If they proceed, gather screenshots from affected contacts.

LIX. What If They Send Obscene or Abusive Messages?

Obscene, degrading, or abusive messages may support complaints for unfair collection, unjust vexation, harassment, or other offenses depending on the content.

Preserve exact messages. Do not respond with threats or insults.

LX. What If They Use Your Photo in a Wanted Poster?

This is serious. Preserve the image, account, URL, date, and recipients.

Possible complaints may include:

SEC complaint for abusive collection;
NPC complaint for unlawful disclosure of personal data;
cybercrime complaint;
cyber libel complaint if false defamatory statements are included;
civil damages claim.

LXI. What If Collectors Pretend to Be Lawyers?

Collectors may say they are from a legal department. That alone is not always unlawful. But they should not falsely claim to be lawyers, courts, prosecutors, police, or government agencies.

If they use names of law offices, verify whether the law office is real. If fake legal documents are used, preserve them.

LXII. What If They Pretend to Be Police or Court Staff?

This may be serious misconduct and possibly criminal.

Preserve:

messages;
caller ID;
name used;
fake badge or document;
threats made;
demand for payment.

Report to cybercrime authorities and the relevant agency being impersonated, if appropriate.

LXIII. What If They Threaten Barangay or Police Action?

A lender may complain to the barangay or police if there is a legitimate issue, but collectors should not misrepresent civil debt as an immediate criminal arrest matter.

If you receive a barangay notice, verify it with the barangay. If it is fake, include it in your complaint.

LXIV. Prescription and Timing

Do not delay. Complaints are stronger when filed promptly because:

numbers may still be active;
app pages may still exist;
posts may still be visible;
logs may still be preserved;
witnesses remember details;
agencies can act faster;
payment records are easier to obtain.

LXV. Remedies You May Request

Depending on the agency, you may request:

investigation;
order to stop harassment;
takedown of abusive app;
deletion or blocking of unlawfully processed data;
correction of records;
sanctions against lender;
refund or adjustment of illegal charges;
recognition of payments made;
prosecution of responsible persons;
damages in proper cases.

Regulators may not always award damages directly, but their findings may support separate legal action.

LXVI. What Filing a Complaint Does Not Automatically Do

A complaint does not automatically:

erase a valid debt;
stop a court case already filed;
guarantee refund;
guarantee immediate arrest of collectors;
guarantee app removal overnight;
prevent lawful collection;
replace the need to answer real court summons;
replace payment of lawful obligations.

But it can trigger investigation, stop abusive conduct, support sanctions, and protect your rights.

LXVII. Practical Step-by-Step Guide

Step 1: Preserve All Evidence

Screenshot messages, loan details, app permissions, payment records, contact harassment, and fake legal notices.

Step 2: Secure Your Phone and Data

Revoke app permissions, change passwords, warn contacts, and uninstall the app after preserving evidence.

Step 3: Identify the App and Company

Record the app name, developer, company, SEC number, website, email, phone numbers, and payment channels.

Step 4: Request a Statement of Account

Ask for a written breakdown of principal, interest, penalties, fees, and payments.

Step 5: Send a Demand to Stop Harassment

Tell the lender to stop contacting third parties and to communicate only through lawful channels.

Step 6: File With the SEC

Use this route for abusive collection, unregistered lending, hidden charges, and lending company violations.

Step 7: File With the NPC

Use this route for contact scraping, disclosure of debt, posting personal data, or misuse of photos and IDs.

Step 8: File With Cybercrime Authorities

Use this route for threats, fake posts, cyber libel, identity theft, hacking, fake legal notices, and online harassment.

Step 9: File With BSP if a BSP-Supervised Entity Is Involved

Use this route for banks, e-wallets, or payment providers.

Step 10: Follow Up and Submit Supplemental Evidence

Keep reference numbers and submit new threats, posts, or messages.

LXVIII. Practical Evidence Checklist

Prepare:

valid government ID;
app name and screenshots;
company name, if known;
SEC registration or certificate number shown by app;
app store or website link;
loan agreement;
disclosure statement;
amount borrowed;
amount received;
amount demanded;
repayment schedule;
payment receipts;
screenshots of threats;
call logs;
messages sent to contacts;
screenshots from contacts;
app permissions;
privacy policy;
fake legal notices;
public posts;
collector numbers and names;
timeline of events;
prior complaint reference numbers;
statement of account, if available;
affidavit or written statement.

LXIX. Sample Timeline Format

Date	Event	Evidence
March 1	Downloaded app and applied for loan	App screenshots
March 1	Loan approved for ₱5,000 but only ₱3,500 received	Disbursement record
March 8	App demanded ₱5,800	Loan dashboard
March 9	Collector threatened to contact employer	SMS screenshot
March 9	Employer received message disclosing debt	HR screenshot
March 10	Collector sent fake warrant	Messenger screenshot
March 10	Complaint filed with SEC/NPC/PNP	Acknowledgment receipt

LXX. Frequently Asked Questions

1. Where should I complain against an online lending app?

Usually, file with the SEC for abusive lending and collection practices. File with the NPC for misuse of personal data. File with PNP-ACG or NBI Cybercrime for threats, cyber libel, identity theft, hacking, or fake online posts.

2. Can I complain even if I really owe money?

Yes. A valid debt does not give collectors the right to harass, threaten, shame, or misuse personal data.

3. Will filing a complaint erase my loan?

Not automatically. A valid loan may still be collectible, but illegal charges, abusive collection, and privacy violations may be challenged.

4. Can I be jailed for not paying an online loan?

Ordinary non-payment of debt is generally a civil matter, not a basis for immediate imprisonment. Criminal issues may arise only if there is fraud or another offense.

5. Can collectors contact my contacts?

They should not harass, shame, or disclose your debt to people who are not legally liable. Contacting references has limits and must comply with privacy and collection rules.

6. Can they post my face online?

Public shaming using your photo, name, ID, or debt information may violate privacy, cybercrime, defamation, and collection rules.

7. What if they send a fake warrant?

Preserve it and report it. A private lender cannot issue a warrant of arrest.

8. Should I delete the app?

Preserve evidence first. After saving loan details, screenshots, and documents, revoke permissions and consider uninstalling the app.

9. What if my employer was contacted?

Get screenshots or written confirmation from the employer or recipient. This may support privacy, SEC, and cybercrime complaints.

10. What if the app is not registered?

Report to the SEC. Also report privacy or cybercrime violations to the appropriate agencies.

11. Can I file without a lawyer?

Yes. You may file regulatory and cybercrime complaints yourself. A lawyer is helpful if you want to file criminal charges, claim damages, or respond to a court case.

12. What if I borrowed from several apps?

Organize evidence by app and file complaints identifying each app, company, amount, and abusive act.

LXXI. Key Takeaways

A complaint against an online lending app in the Philippines may be filed with different agencies depending on the misconduct.

The SEC is usually the main agency for abusive collection, lending company violations, hidden charges, and unregistered lending operations.

The NPC is the main agency for unauthorized access to contacts, disclosure of debt, public shaming, and misuse of personal data.

PNP-ACG and NBI Cybercrime are appropriate for threats, cyber libel, identity theft, fake legal notices, hacking, and online harassment.

The BSP may be relevant if the complaint involves a bank, e-wallet, payment provider, or BSP-supervised entity.

Ordinary non-payment of a loan is generally civil, not automatically criminal. However, fraud, identity misuse, threats, and online defamation may create criminal liability.

A borrower who owes money still has rights. A lender may collect lawfully, but it may not threaten, shame, harass, or misuse personal data.

The strongest complaints include screenshots, loan documents, payment records, app details, call logs, messages sent to contacts, and a clear timeline.

Filing a complaint does not automatically erase a valid debt, but it can stop abusive conduct, trigger regulatory sanctions, support criminal investigation, and protect the borrower’s privacy and dignity.