I. Introduction

Online lending has become common in the Philippines because loan apps make borrowing fast, convenient, and accessible. Many legitimate financing and lending companies use digital platforms to process applications, verify borrowers, release loan proceeds, and collect payments.

However, some online loan apps engage in abusive, deceptive, or unlawful practices. Common complaints include harassment, public shaming, unauthorized access to contacts, threats, excessive interest, hidden charges, misuse of personal data, and collection tactics that humiliate borrowers or pressure their family, friends, co-workers, or employers.

A borrower who has been mistreated by an online loan app is not without remedies. Philippine law provides several avenues for complaint, including the Securities and Exchange Commission, the National Privacy Commission, the Bangko Sentral ng Pilipinas in certain cases, the Department of Trade and Industry in limited consumer situations, the Philippine National Police Anti-Cybercrime Group, the National Bureau of Investigation Cybercrime Division, prosecutors’ offices, and the courts.

This article explains the legal framework, common violations, evidence to gather, where to file, how to file, and what remedies may be available in the Philippine context.

II. What Is an Online Loan App?

An online loan app is a mobile or web-based platform that offers loans through digital means. In the Philippines, many online loan apps are operated by lending companies or financing companies. They may advertise quick approval, minimal requirements, no collateral, or instant cash release.

The important legal point is this: an app is only a platform. The real party responsible is usually the company behind the app. When filing a complaint, the borrower should try to identify the company name, SEC registration number, business address, app name, website, customer service number, email address, and the names or numbers used by collectors.

Some illegal operators hide behind multiple app names, fake company names, or changing contact numbers. That does not prevent a complaint, but it makes documentation more important.

III. Is the Online Loan App Legal?

Not every online loan app is illegal. A lending or financing company may legally operate if it is properly registered and authorized. In the Philippines, lending companies and financing companies are generally regulated by the Securities and Exchange Commission.

A lawful operator should normally have:

A valid SEC registration as a corporation or company.
Authority to operate as a lending company or financing company, if applicable.
Clear disclosure of loan terms, interest, fees, penalties, and repayment obligations.
Lawful and fair collection practices.
Compliance with the Data Privacy Act.
A privacy notice explaining how borrower data is collected, used, stored, shared, and protected.

A loan app may be suspicious if it has no identifiable company behind it, no physical office, no SEC registration details, vague or hidden charges, very short repayment periods with high fees, aggressive access to phone contacts, or collectors who threaten public exposure.

IV. Common Complaints Against Online Loan Apps

Borrowers often complain about the following:

1. Harassment and Threats

Collectors may repeatedly call or text the borrower, use abusive language, threaten criminal charges, threaten arrest, threaten barangay action, or threaten to shame the borrower publicly.

Debt itself is generally a civil obligation. Non-payment of a loan does not automatically make a borrower a criminal. Threatening immediate arrest for ordinary loan non-payment may be misleading or abusive unless there is a separate criminal act, such as fraud, falsification, or issuance of bouncing checks under applicable circumstances.

2. Public Shaming

Some collectors send messages to the borrower’s contacts, employer, relatives, or social media connections claiming that the borrower is a scammer, criminal, or intentionally refusing to pay. They may post the borrower’s face, ID, or personal information online.

This may violate privacy rights, cybercrime laws, civil law protections, and rules against unfair debt collection practices.

3. Unauthorized Access to Contacts, Photos, or Files

Some apps request permission to access contacts, photos, camera, microphone, SMS, location, or files. If the app collects or uses personal data beyond what is necessary, or if it uses contacts for harassment or shaming, this may violate the Data Privacy Act.

Consent is not always valid simply because a borrower clicked “allow.” Consent must be informed, specific, and freely given. The processing of personal data must still be lawful, fair, proportionate, and limited to a legitimate purpose.

4. Contacting Third Parties

Collectors often contact relatives, friends, co-workers, or employers to pressure the borrower. In legitimate debt collection, contacting third parties may be highly limited and must not involve harassment, disclosure of unnecessary personal information, threats, or public humiliation.

Telling third parties about the borrower’s debt may raise privacy and reputational issues.

5. Excessive Interest, Penalties, or Hidden Charges

Borrowers may discover that the amount released is much lower than the principal stated, because the app deducts “processing fees,” “service fees,” “membership fees,” or other charges upfront. Some loans impose very high daily penalties or rollover charges.

A complaint may be filed if the loan terms were deceptive, undisclosed, unconscionable, or contrary to applicable rules. Courts may also reduce unconscionable interest or penalties in proper cases.

6. Misrepresentation

An online loan app may misrepresent its authority to operate, falsely claim to be affiliated with the government, falsely claim that a borrower has committed a crime, or falsely claim that legal action has already been filed.

Misleading representations may support administrative, civil, or criminal complaints, depending on the facts.

7. Defamation, Libel, or Cyberlibel

If the app or its collectors publish false or malicious statements about the borrower, especially online or through electronic means, this may give rise to a complaint for libel or cyberlibel. Even private messages to multiple people may become relevant if defamatory statements are circulated electronically.

8. Identity Misuse and Data Breach

Some borrowers report that their identity documents, selfies, phone numbers, or contact lists were misused. This may involve privacy violations, identity theft, unauthorized processing of personal information, or cybercrime-related offenses.

V. Applicable Philippine Laws and Rules

Several laws may apply depending on the facts.

1. Lending Company Regulation Act

The Lending Company Regulation Act governs lending companies. Lending companies must comply with registration and operational requirements. An online loan app operated by a lending company may be subject to SEC supervision.

Complaints involving unauthorized lending, abusive collection, hidden charges, or violations by lending companies may be brought to the SEC.

2. Financing Company Act

If the operator is a financing company, it may also fall under SEC regulation. Similar issues may arise concerning registration, authority, disclosure, and collection conduct.

3. Securities Regulation and SEC Rules

The SEC has issued rules and enforcement actions involving online lending operators. The SEC may suspend, revoke, penalize, or issue orders against erring lending or financing companies.

SEC complaints are especially relevant when the issue involves:

Unregistered lending operations.
Unauthorized online lending platforms.
Abusive collection practices.
Failure to disclose loan terms.
Misleading or deceptive conduct.
Violations by a lending or financing company.

4. Data Privacy Act of 2012

The Data Privacy Act protects personal information and sensitive personal information. Online loan apps often collect names, addresses, IDs, selfies, phone numbers, employment details, bank or wallet information, contacts, and device data.

The law requires personal information controllers and processors to observe principles such as transparency, legitimate purpose, and proportionality.

A complaint with the National Privacy Commission may be appropriate when the app:

Accessed contacts without proper authority.
Used contacts to shame or harass the borrower.
Collected excessive personal data.
Shared personal data with third parties without lawful basis.
Posted IDs, photos, or private information online.
Failed to provide a proper privacy notice.
Refused to address a data subject request.
Failed to secure personal data.

5. Cybercrime Prevention Act

The Cybercrime Prevention Act may apply when harassment, threats, identity misuse, libel, or unauthorized access is committed through computers, mobile phones, online platforms, or electronic communication.

Possible cybercrime-related concerns include cyberlibel, identity theft, illegal access, computer-related fraud, and other computer-facilitated offenses, depending on the facts.

Complaints may be brought to law enforcement agencies such as the PNP Anti-Cybercrime Group or the NBI Cybercrime Division.

6. Revised Penal Code

The Revised Penal Code may apply to threats, unjust vexation, grave coercion, slander, libel, or other offenses, depending on what the collectors did or said.

Examples:

Threatening harm may be treated as threats.
Forcing a person to do something against their will may involve coercion.
Insults and defamatory statements may give rise to defamation-related complaints.
Repeated abusive communications may potentially support other criminal complaints depending on the circumstances.

7. Civil Code

The Civil Code may provide civil remedies where the borrower suffered damages due to abuse of rights, invasion of privacy, defamation, bad faith, or acts contrary to morals, good customs, or public policy.

A borrower may seek actual damages, moral damages, exemplary damages, attorney’s fees, and other relief if justified by evidence.

8. Consumer Protection Laws

Consumer protection principles may apply when the borrower was misled, deceived, or subjected to unfair practices. The proper agency depends on the nature of the business and transaction. For lending and financing companies, the SEC is usually the primary regulator.

9. BSP Rules, if a BSP-Supervised Entity Is Involved

If the lending activity involves a bank, e-money issuer, remittance company, financing product of a BSP-supervised financial institution, or payment system issue, the Bangko Sentral ng Pilipinas may be relevant.

However, many online lending apps are not directly supervised by the BSP unless they are connected to or operated by a BSP-supervised financial institution.

VI. Where to File a Complaint

The proper forum depends on the nature of the complaint.

A. Securities and Exchange Commission

File with the SEC if the complaint involves an online lending company, financing company, or loan app operator engaging in:

Unregistered lending.
Unauthorized operation.
Abusive debt collection.
Threats and harassment by collectors.
Misleading loan terms.
Hidden charges.
Failure to disclose interest, fees, and penalties.
Use of multiple loan apps to avoid regulation.
Violation of SEC rules governing lending or financing companies.

The SEC may investigate the company, issue show-cause orders, impose penalties, suspend or revoke authority, or take other regulatory action.

B. National Privacy Commission

File with the NPC if the complaint involves:

Unauthorized access to contacts.
Use of the borrower’s contact list for collection.
Disclosure of debt to third parties.
Posting or sharing IDs, selfies, photos, addresses, or private information.
Excessive data collection.
Failure to provide a privacy notice.
Refusal to delete or correct data when legally required.
Data breach or unauthorized sharing of personal information.

The NPC may investigate, order compliance, recommend prosecution, or impose administrative penalties where appropriate.

C. PNP Anti-Cybercrime Group

File with the PNP Anti-Cybercrime Group if the conduct involves:

Online threats.
Cyberlibel.
Identity theft.
Unauthorized access.
Harassment through electronic means.
Use of fake accounts.
Public posting of private information.
Fraudulent loan app activity.

D. NBI Cybercrime Division

The NBI Cybercrime Division may also receive complaints involving online harassment, cyberlibel, identity theft, scams, unauthorized access, and related cyber offenses.

E. Prosecutor’s Office

A criminal complaint may be filed with the Office of the City or Provincial Prosecutor if there is enough evidence of a criminal offense. This may include threats, coercion, libel, cyberlibel, identity theft, unjust vexation, or other offenses depending on the facts.

F. Regular Courts

A civil action may be filed in court to seek damages, injunction, or other relief. Court action may be appropriate if the borrower suffered serious reputational damage, emotional distress, financial loss, or privacy violations.

G. Small Claims Court

If the issue is purely about money owed, the lender may file a small claims case against the borrower. Borrowers should know that harassment is not the lawful method for collecting debts. A lender’s remedy is generally to pursue lawful collection or file the proper civil case.

Borrowers may also need to defend themselves if a legitimate case is filed.

VII. What Evidence Should Be Gathered?

Evidence is critical. A complaint is stronger when supported by clear documentation.

Borrowers should preserve:

Screenshots of messages, chats, emails, and app notifications.
Call logs showing repeated calls.
Audio recordings, if lawfully obtained and usable.
Names, numbers, and profiles of collectors.
Screenshots of posts made on social media.
Messages sent to family, friends, co-workers, or employers.
Statements from third parties who received messages.
The loan agreement or terms and conditions.
Screenshots of the app page, app permissions, privacy policy, and loan disclosure page.
Proof of amount borrowed and amount received.
Proof of payments made.
Bank, e-wallet, or remittance receipts.
The app name and developer name from the app store.
The company name, SEC registration number, address, email, or website.
Any demand letters or collection notices.
Evidence of threats, insults, defamatory statements, or public shaming.
Evidence that the app accessed contacts or sent messages to contacts.
Copies of IDs or documents submitted to the app.
Timeline of events.

Do not delete the app immediately if it contains important loan details, payment records, or terms. First, take screenshots or export whatever information is available.

VIII. How to Prepare a Complaint

A complaint should be clear, factual, organized, and supported by evidence.

It should include:

1. Complainant Information

State the borrower’s full name, address, contact number, and email address.

2. Respondent Information

Identify the online loan app and the company behind it, if known. Include:

App name.
Company name.
SEC registration number, if known.
Website.
Email address.
Phone numbers.
App store link.
Names or aliases of collectors.
Collection numbers used.

If the company is unknown, state that the operator’s identity is unknown and provide all available identifiers.

3. Statement of Facts

Narrate what happened in chronological order.

Example structure:

Date loan was applied for.
Amount applied for.
Amount approved.
Amount actually received.
Fees deducted.
Due date.
Payment made, if any.
When harassment began.
What collectors said.
Who was contacted.
What personal data was disclosed.
What threats were made.
What harm resulted.

4. Legal Violations

The complaint may mention possible violations of lending regulations, data privacy rights, cybercrime laws, penal laws, civil rights, or consumer protection rules. The complainant does not need to perfectly identify every legal provision, but should clearly describe the wrongful acts.

5. Reliefs Requested

The borrower may request:

Investigation.
Cease-and-desist action.
Sanctions against the company.
Deletion or correction of personal data.
Stopping unlawful processing of data.
Removal of defamatory posts.
Assistance in identifying offenders.
Referral for criminal prosecution.
Damages, if filing in court.
Other appropriate relief.

6. Attachments

Attach screenshots, receipts, loan records, affidavits, and other proof.

IX. Sample Complaint Format

Subject: Complaint Against [Name of Online Loan App] for Harassment, Unauthorized Use of Personal Data, and Abusive Collection Practices

Complainant: [Full Name] [Address] [Contact Number] [Email Address]

Respondent: [Name of Online Loan App] [Company Name, if known] [Address, if known] [Email / Contact Number / Website, if known]

Statement of Facts:

I respectfully file this complaint against [Name of Online Loan App] and its operators, agents, collectors, and representatives.

On [date], I applied for a loan through the [app name] mobile application. The app represented that I was borrowing the amount of PHP [amount]. However, I only received PHP [amount received] because the app deducted fees and charges.

The loan was due on [date]. On or about [date], I began receiving messages and calls from persons claiming to be collectors of the said app. They used the following numbers: [list numbers].

The collectors sent threatening, insulting, and harassing messages. They stated, among others, that [quote or summarize threats]. They also contacted my [relatives/friends/co-workers/employer] and disclosed my alleged debt without my consent. They sent messages stating that [quote or summarize]. They also threatened to post my photo and personal information online.

I did not authorize the app or its collectors to access, use, disclose, or send messages to my contacts for the purpose of shaming, threatening, or harassing me. Their actions caused me distress, embarrassment, reputational damage, and fear.

Attached are screenshots of the messages, call logs, proof of loan, proof of payment, and messages sent to third parties.

Possible Violations:

The acts complained of may constitute abusive collection practices, unauthorized processing and disclosure of personal information, violation of privacy rights, cyber harassment, defamation, threats, coercion, or other violations under Philippine law.

Reliefs Requested:

I respectfully request that your office investigate the respondent, order the cessation of unlawful collection and data processing practices, require the deletion or removal of unlawfully disclosed personal information, impose appropriate penalties or sanctions, and refer the matter for criminal prosecution if warranted.

Respectfully submitted.

[Name] [Date]

X. Filing a Complaint with the SEC

A complaint with the SEC is appropriate when the online loan app is operated by or appears to be operated by a lending or financing company.

Steps

Identify the app and company.
Check if the company claims to be SEC-registered.
Gather screenshots of the app, loan terms, messages, and collection conduct.
Prepare a written complaint.
Attach evidence.
Submit the complaint through the SEC’s designated complaint channels or office.
Keep proof of submission.
Cooperate with any requests for additional information.

What to Emphasize

For SEC complaints, emphasize:

The app name and company name.
Whether the company is registered or not.
Abusive collection practices.
Threats and intimidation.
Public shaming.
Excessive or hidden charges.
Failure to disclose terms.
Use of personal contacts for collection.
Repeated calls and messages.
Evidence that the app is still operating.

Possible Outcomes

The SEC may:

Investigate the company.
Require an explanation.
Penalize the company.
Suspend or revoke its authority.
Issue orders against abusive practices.
Coordinate with other agencies.
Refer matters for prosecution where appropriate.

XI. Filing a Complaint with the National Privacy Commission

A complaint with the NPC is especially important where the online loan app misused personal data.

Data Privacy Issues in Online Lending

Online loan apps often collect large amounts of personal data. Some data collection may be necessary to verify identity and assess creditworthiness. However, the collection and use of data must be proportionate.

An app should not collect or use personal data in a manner that is excessive, deceptive, unfair, or unrelated to the loan transaction. Accessing a borrower’s contact list and using it to shame or pressure the borrower is a serious privacy concern.

Steps

Document the personal data involved.
Identify how the data was collected.
Identify how the data was misused or disclosed.
Prepare a complaint or request for assistance.
Attach screenshots and affidavits from affected contacts.
Submit the complaint to the NPC through its official complaint process.
Keep records of all submissions.

Important Evidence for NPC

App permission screenshots.
Privacy policy or lack of privacy policy.
Messages sent to contacts.
Screenshots showing disclosure of debt.
Posts containing personal information.
Copies of IDs or selfies used or shared.
Proof that the borrower requested deletion or correction, if applicable.
The app’s response or refusal.

Possible Remedies

The NPC may order or recommend:

Stopping unlawful processing.
Deleting unlawfully processed data.
Correcting inaccurate data.
Strengthening privacy controls.
Administrative penalties.
Referral for criminal prosecution.
Other appropriate action.

XII. Filing a Cybercrime Complaint

A cybercrime complaint may be appropriate when the online loan app or its collectors used electronic means to threaten, defame, harass, impersonate, or misuse personal information.

Possible Cyber-Related Acts

Posting the borrower’s photo and calling the borrower a scammer.
Sending defamatory messages to group chats.
Creating fake posts or fake accounts.
Using the borrower’s ID or selfie without permission.
Accessing accounts or data without authority.
Sending threats through SMS, messaging apps, email, or social media.
Using multiple numbers to intimidate the borrower.

Where to Go

The borrower may report to:

PNP Anti-Cybercrime Group.
NBI Cybercrime Division.
Local police cybercrime desk, if available.
Prosecutor’s office for preliminary investigation.

What to Bring

Government ID.
Printed screenshots.
Digital copies of screenshots.
Links to posts or accounts.
Phone numbers used.
Names or aliases used.
Original device where messages were received.
Timeline of events.
Witness statements.

Do not merely screenshot and then delete everything. Investigators may need metadata, URLs, account names, phone numbers, and the device itself.

XIII. When Can a Borrower File a Criminal Complaint?

A borrower may consider a criminal complaint if collectors made threats, used defamatory statements, impersonated officials, misused personal data, or engaged in cyber-related offenses.

Examples:

Threats

A collector says they will physically harm the borrower, send people to the borrower’s house, or expose the borrower unless payment is made.

Coercion

A collector forces or pressures the borrower to do something against their will through intimidation.

Defamation or Cyberlibel

A collector tells third parties or posts online that the borrower is a scammer, thief, criminal, or other defamatory accusation, especially if false or malicious.

Identity Theft

A collector or app uses the borrower’s identity documents, photo, or personal details for unauthorized purposes.

Unjust Vexation or Other Offenses

Repeated harassment, insults, and oppressive conduct may be evaluated by prosecutors under applicable penal provisions.

Whether a criminal case will prosper depends on evidence, intent, wording of messages, publication, identity of the offender, and applicable law.

XIV. Can a Borrower Refuse to Pay Because the App Harassed Them?

Harassment by a lender does not automatically erase a valid debt. If the borrower actually received money under a valid loan, the obligation to repay may still exist.

However, abusive collection practices may give rise to separate complaints and liability against the lender or collectors. Also, unlawful, hidden, excessive, or unconscionable charges may be challenged.

The proper approach is to separate the issues:

Is there a valid loan?
How much was actually received?
What interest, fees, and penalties were disclosed?
Are the charges lawful and conscionable?
Did the lender engage in unlawful collection?
Did the app violate data privacy or cybercrime laws?

A borrower may still dispute the amount claimed while also filing a complaint for harassment.

XV. Can an Online Loan App Have a Borrower Arrested?

Ordinary non-payment of debt is generally not a crime. The Philippine Constitution prohibits imprisonment for debt.

However, criminal liability may arise if there are separate criminal acts, such as fraud, falsification, use of false documents, identity theft, or issuance of bouncing checks under applicable circumstances. The mere inability to pay a loan is different from criminal fraud.

Collectors who threaten immediate arrest for simple non-payment may be engaging in intimidation or misrepresentation.

XVI. Can Collectors Contact a Borrower’s Employer?

Collectors should not use an employer as a tool for public shaming or harassment. Contacting an employer and disclosing the borrower’s debt may violate privacy rights and may be abusive, especially if the purpose is to embarrass, pressure, or damage the borrower’s employment.

If a borrower’s employer receives messages, the borrower should ask for screenshots, the sender’s number, the date and time, and a short written statement from the recipient, if possible.

XVII. Can Collectors Contact Family and Friends?

Collectors may attempt to contact references, but they should not disclose unnecessary personal information, threaten contacts, shame the borrower, or pressure third parties to pay. If the app harvested the borrower’s contact list and messaged people who were not listed as references, that strengthens a privacy complaint.

The borrower should gather screenshots from every contacted person.

XVIII. Can the Borrower Demand Deletion of Personal Data?

Under data privacy principles, a borrower may request access, correction, deletion, blocking, or withdrawal of consent in appropriate circumstances. However, a company may retain certain data if required by law, contract, legitimate claims, accounting rules, or regulatory obligations.

What the borrower may challenge is excessive, unnecessary, unlawful, or abusive processing. Even if a company may retain basic loan records, it does not mean it can use the borrower’s contacts for harassment or publish private information.

XIX. What If the Online Loan App Is Not SEC-Registered?

If the app is not registered or not authorized, that fact should be reported to the SEC. The borrower should still preserve evidence and file complaints with other agencies if there are privacy, cybercrime, or criminal issues.

An unregistered operator may be harder to trace, but evidence such as app store pages, wallet accounts, bank accounts, phone numbers, websites, and collection messages may help investigators.

XX. What If the App Has Been Removed from the App Store?

Even if the app has been removed, the borrower may still file a complaint. The borrower should preserve:

Old screenshots.
App name.
Developer name.
Download history.
APK file, if safely available and relevant.
Messages from collectors.
Payment channels.
Bank or e-wallet account names.
URLs.
Company names used.

Removal from the app store does not necessarily end liability for past conduct.

XXI. Should the Borrower Pay the Loan?

This depends on the facts. A borrower should review the actual amount received, terms disclosed, interest, fees, and penalties. If the debt is valid, repayment of the lawful amount may avoid additional legitimate collection action. However, the borrower should not tolerate threats, shaming, or privacy violations.

Borrowers should avoid making payments to suspicious accounts without proof that the payment will be credited to the loan. Always keep receipts.

A borrower may send a written message such as:

I acknowledge your message. I am willing to discuss any lawful obligation. However, I demand that you stop contacting my relatives, friends, employer, and other third parties, and that you stop using threats, insults, public shaming, or unauthorized disclosure of my personal information. Please send a proper statement of account showing the principal, amount released, interest, fees, penalties, payments, and legal basis for the amount claimed.

This does not admit the full amount claimed. It asks for accounting and demands lawful conduct.

XXII. Practical Steps for Borrowers Experiencing Harassment

Step 1: Stay Calm and Do Not Engage in Insults

Responding with threats or insults may complicate the situation. Keep communications factual.

Step 2: Preserve Evidence

Take screenshots, save call logs, download conversations, and gather statements from contacts.

Step 3: Identify the Company

Look for the app name, developer, SEC registration, email, website, privacy policy, and payment channels.

Step 4: Revoke Unnecessary App Permissions

On the phone settings, revoke access to contacts, photos, location, SMS, microphone, and other unnecessary permissions. Consider uninstalling only after preserving evidence.

Step 5: Secure Accounts

Change passwords, secure e-wallets, enable two-factor authentication, and monitor unauthorized transactions.

Step 6: Notify Contacts

Tell family, friends, and co-workers not to respond to harassment and to forward screenshots.

Step 7: Send a Written Demand to Stop Harassment

A concise message to the company may help establish that they were informed and refused to stop.

Step 8: File Complaints

File with the proper agencies depending on the violation: SEC, NPC, PNP ACG, NBI Cybercrime Division, prosecutor’s office, or court.

XXIII. Sample Demand to Stop Harassment and Data Misuse

Subject: Demand to Stop Harassment, Third-Party Contact, and Unauthorized Use of Personal Data

To [Company/App Name]:

I am writing regarding your collection activities in relation to the alleged loan account under my name.

I demand that you and your agents immediately stop the following acts:

Contacting my relatives, friends, co-workers, employer, or other third parties regarding my alleged debt.
Disclosing my personal information or alleged loan obligation to unauthorized persons.
Sending threats, insults, defamatory statements, or humiliating messages.
Posting or threatening to post my photo, ID, address, contact details, or other personal information.
Using personal data obtained from my device, including my contact list, for harassment or public shaming.

Please send a complete statement of account showing the amount released, interest, fees, penalties, payments, and the legal basis for the amount you claim.

This letter is without prejudice to my rights and remedies under applicable laws, including the filing of complaints with the Securities and Exchange Commission, National Privacy Commission, law enforcement agencies, and the courts.

[Name] [Date]

XXIV. What Relief Can a Borrower Obtain?

Depending on where the complaint is filed, possible relief includes:

Administrative Relief

Investigation of the company.
Suspension or revocation of authority.
Fines and penalties.
Orders to stop abusive practices.
Compliance orders.
Data privacy corrective measures.

Criminal Relief

Investigation of collectors or operators.
Filing of criminal charges.
Prosecution for threats, cyberlibel, identity theft, coercion, or other offenses.

Civil Relief

Damages for embarrassment, mental anguish, reputational harm, or financial loss.
Injunction to stop publication or harassment.
Removal of defamatory or private posts.
Attorney’s fees and costs, if justified.

Data Privacy Relief

Deletion or blocking of unlawfully processed data.
Correction of inaccurate data.
Stopping unauthorized processing.
Accountability for data misuse.

XXV. Defenses Commonly Raised by Online Loan Apps

Online loan apps may claim:

The borrower consented to the privacy policy.
The borrower voluntarily gave references.
The borrower failed to pay.
The messages were sent by third-party collectors, not the company.
The company did not authorize the collector’s abusive conduct.
The borrower agreed to all fees.
The app only used lawful collection methods.

These defenses are not automatically valid. Consent does not authorize harassment, public shaming, excessive data processing, or unlawful disclosure. A company may still be accountable for its agents, service providers, or collectors, depending on the facts.

XXVI. Borrower Mistakes to Avoid

Borrowers should avoid:

Deleting messages before saving evidence.
Ignoring legitimate notices from courts or prosecutors.
Paying without receipts.
Sending fake documents.
Making threats against collectors.
Posting the collector’s private information online in retaliation.
Admitting an inflated amount without checking the computation.
Letting fear of arrest force payment of unlawful charges.
Filing a vague complaint without evidence.
Using only verbal complaints without written records.

XXVII. Special Issues Involving Interest and Charges

Philippine courts have authority to reduce unconscionable interest, penalties, and charges in proper cases. Online loan apps sometimes structure charges as “service fees” rather than interest, but the substance of the transaction may still be examined.

Important questions include:

How much did the borrower actually receive?
How much must be repaid?
What is the repayment period?
Were charges disclosed before acceptance?
Were fees deducted upfront?
Were penalties clearly explained?
Are rollover charges imposed?
Are charges grossly disproportionate to the amount received?

A borrower disputing charges should ask for a full statement of account and preserve screenshots showing what terms were displayed at the time of borrowing.

XXVIII. Privacy and Consent in Loan Apps

Consent is a common issue. Loan apps may argue that the borrower agreed to the terms and privacy policy. But under data privacy principles, consent must be meaningful. The borrower must understand what data will be collected, why it will be used, who will receive it, how long it will be stored, and how rights may be exercised.

Even with consent, processing must be proportionate. An app that collects a full contact list and uses it to shame the borrower may go beyond what is necessary for loan processing.

Sensitive personal information, such as government ID details, financial information, and other protected data, requires stricter handling.

XXIX. Harassment by Third-Party Collection Agencies

Some loan apps hire third-party collectors. The lender may argue that the abusive messages came from independent collectors. This does not always absolve the lender.

A company may be responsible if it authorized, tolerated, benefited from, failed to supervise, or failed to stop abusive collection conduct. The borrower should include both the loan app/company and the collectors in the complaint where possible.

Evidence that collectors identify themselves as representatives of the app, use loan details, know private borrower information, or demand payment through app-linked channels may connect them to the company.

XXX. Can the Borrower Sue for Damages?

Yes, if supported by facts and evidence. A civil action may be considered when the borrower suffered:

Public humiliation.
Loss of employment or business opportunity.
Emotional distress.
Damage to reputation.
Family conflict caused by unlawful disclosure.
Financial loss.
Anxiety, sleeplessness, or mental anguish.
Exposure of private information.

Moral damages may be available in proper cases involving bad faith, privacy invasion, defamation, or acts contrary to morals and public policy. Exemplary damages may be awarded where the defendant’s conduct is wanton, fraudulent, reckless, oppressive, or malevolent, subject to judicial determination.

XXXI. Can a Barangay Handle the Complaint?

A barangay may help mediate simple disputes between residents within its jurisdiction, but online loan app complaints often involve corporations, unknown collectors, cybercrime, data privacy, and regulatory violations. These are usually better handled by the SEC, NPC, law enforcement, prosecutors, or courts.

If collectors threaten to “send the case to barangay,” the borrower should understand that barangay proceedings do not authorize harassment, public shaming, or arrest for debt.

XXXII. What to Do If the App Threatens Legal Action

A lender has the right to pursue lawful remedies. A borrower should not ignore a legitimate court notice, subpoena, or prosecutor’s notice.

However, many collection messages falsely claim that a case has already been filed. Borrowers should ask for:

Case number.
Court or prosecutor’s office.
Copy of complaint.
Official notice.
Name of complainant.
Contact details of counsel.

A real legal proceeding is served through proper channels, not merely through threatening text blasts.

XXXIII. What to Do If Personal Information Was Posted Online

If the borrower’s photo, ID, address, or defamatory content was posted:

Screenshot the post.
Save the URL.
Record the account name and profile link.
Note the date and time.
Ask witnesses to screenshot what they saw.
Report the post to the platform.
File a complaint with the NPC if personal data was exposed.
File a cybercrime complaint if defamatory or criminal content is involved.
Consider seeking legal assistance for takedown and damages.

Do not rely only on platform reporting. Preserve evidence first.

XXXIV. What to Do If Contacts Are Being Harassed

The borrower should ask contacts to forward screenshots and avoid arguing with collectors. Contacts may respond once with:

Please stop contacting me. I am not the borrower and I do not consent to receiving messages about another person’s alleged loan. Further messages will be documented and reported to the proper authorities.

Contacts who were harassed may also be witnesses or separate complainants, especially if their own privacy or peace was disturbed.

XXXV. How to Strengthen the Complaint

A strong complaint has:

Specific dates.
Exact words used by collectors.
Screenshots with visible numbers and timestamps.
Proof that third parties were contacted.
Proof of personal data misuse.
Proof of loan terms and deductions.
Identification of the app and company.
Clear statement of harm suffered.
Organized attachments.

A weak complaint merely says “they harassed me” without evidence, names, screenshots, or dates.

XXXVI. Possible Legal Theories

Depending on the facts, the complaint may involve one or more of the following theories:

Violation of lending company regulations.
Unfair or abusive debt collection.
Unauthorized lending or financing activity.
Misleading or deceptive loan disclosures.
Violation of the Data Privacy Act.
Unauthorized processing of personal information.
Unauthorized disclosure of personal information.
Cyberlibel.
Grave threats or light threats.
Coercion.
Unjust vexation.
Civil damages for abuse of rights.
Civil damages for defamation or privacy invasion.
Violation of consumer protection principles.
Identity theft or computer-related offenses.

The correct theory depends on the evidence.

XXXVII. The Role of Lawyers

A borrower may file administrative complaints without a lawyer, but legal assistance is helpful when:

The borrower wants to file a criminal complaint.
The borrower wants damages.
The borrower received a subpoena or court notice.
The app filed a collection case.
The harassment caused serious reputational or employment harm.
The facts involve cyberlibel or complex privacy issues.
The borrower needs an affidavit or formal pleading.

Free or low-cost legal assistance may be available through the Public Attorney’s Office for qualified individuals, law school legal aid clinics, Integrated Bar of the Philippines legal aid programs, or local government legal assistance offices.

XXXVIII. Frequently Asked Questions

1. Is non-payment of an online loan a crime?

Generally, non-payment of debt is not a crime. However, separate criminal acts such as fraud, falsification, or issuance of bouncing checks may create criminal liability under specific facts.

2. Can collectors shame me online?

No. Public shaming, defamatory posting, and unauthorized disclosure of personal information may expose collectors and the company to liability.

3. Can they message my contacts?

Using a borrower’s contacts for harassment, shaming, or pressure may violate privacy rights and collection rules. It should be documented and reported.

4. Can they call my employer?

They should not use the employer to shame or pressure the borrower. Disclosure of the debt to an employer may raise privacy and reputational issues.

5. Should I uninstall the app?

Preserve evidence first. Take screenshots of loan terms, account details, payment history, privacy policy, app permissions, and messages. Then revoke unnecessary permissions and consider uninstalling.

6. What if I really owe money?

A valid debt should be addressed, but the lender must collect lawfully. Owing money does not give collectors the right to threaten, insult, shame, or misuse personal data.

7. What if the app says I agreed to access my contacts?

Consent does not automatically justify abusive or excessive processing. Data use must still be lawful, fair, transparent, proportionate, and tied to a legitimate purpose.

8. Can I complain even if I have not paid?

Yes. The right to complain about harassment, privacy violations, or unlawful collection does not depend on full payment.

9. Can the SEC cancel the app’s authority?

The SEC may take regulatory action against lending or financing companies that violate applicable rules, including suspension, revocation, penalties, or other measures.

10. Can I get damages?

Possibly, through a civil case, if there is proof of unlawful conduct and resulting injury such as reputational harm, emotional distress, or financial loss.

XXXIX. Checklist Before Filing

Before filing, prepare the following:

Full name and contact details of complainant.
Name of online loan app.
Company name, if known.
SEC registration details, if available.
App store link or website.
Screenshots of loan offer and terms.
Proof of amount received.
Proof of deductions.
Proof of payments.
Statement of account, if any.
Screenshots of threats or harassment.
Call logs.
Numbers used by collectors.
Messages sent to contacts.
Affidavits or statements from contacts.
Screenshots of social media posts.
Privacy policy or app permissions.
Timeline of events.
Written demand to stop harassment, if sent.

XL. Conclusion

Filing a complaint against an online loan app in the Philippines requires identifying the misconduct, preserving evidence, and choosing the proper forum. The SEC is usually the main agency for complaints against lending and financing companies, especially for abusive collection and unauthorized lending. The National Privacy Commission is the proper forum for misuse of personal data. Cybercrime complaints may be filed with the PNP Anti-Cybercrime Group or NBI Cybercrime Division when threats, cyberlibel, identity theft, or online harassment are involved. Civil or criminal cases may also be filed where the facts justify them.

Borrowers should remember that a debt, if valid, may still be enforceable. But lenders and collectors must use lawful methods. Debt collection does not authorize harassment, threats, public shaming, privacy violations, or abuse. In the Philippine legal system, the borrower’s obligation to pay and the lender’s obligation to obey the law are separate matters. Both can be addressed, and abusive online lending practices can be reported through the proper legal channels.