The rise of Financial Technology (FinTech) in the Philippines has increased credit accessibility through Online Lending Applications (OLAs). However, this convenience has been overshadowed by widespread reports of unfair debt collection practices, cyber-harassment, and data privacy violations. Under Philippine law, borrowers are protected against abusive behavior, regardless of the validity of the underlying debt.

1. Defining Unfair Collection Practices and Harassment

The Securities and Exchange Commission (SEC) through SEC Memorandum Circular No. 18, Series of 2019, expressly prohibits predatory and abusive collection practices. Acts constituting harassment include:

Threats of Violence: Using or threatening to use physical force or other criminal means to harm the person, reputation, or property of the borrower.
Obscene/Profane Language: Using insults, profanity, or discriminatory language to coerce payment.
Contacting Contacts (Debt Shaming): Accessing a borrower’s contact list and messaging or calling friends, family, or employers to inform them of the debt or to shame the borrower.
False Representations: Claiming to be a lawyer, police officer, or government official, or falsely claiming that a criminal case (such as Estafa) has been filed.
Unreasonable Hours: Calling or messaging between 10:00 PM and 6:00 AM, unless the borrower has given express consent or the debt is more than 30 days past due.

2. Relevant Laws and Regulations

Victims of OLA harassment can invoke several legal frameworks:

Cybercrime Prevention Act of 2012 (R.A. 10175): Covers online libel, identity theft, and computer-related fraud.
Data Privacy Act of 2012 (R.A. 10173): Protects borrowers against the unauthorized processing and disclosure of personal information (e.g., accessing phone galleries or contacts without legitimate purpose).
Revised Penal Code: Applicable for crimes such as Grave or Light Threats, Coercion, and Injustices (Unjust Vexation).
SEC MC No. 18 (2019): Specifically targets the "Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies."

3. Step-by-Step Procedure for Filing a Complaint

Step 1: Documentation and Evidence Gathering

Before filing a formal complaint, secure all digital evidence. Courts and regulatory bodies require proof:

Screenshots: Capture all threatening text messages, emails, and social media posts.
Call Logs and Recordings: Record the date, time, and phone numbers used by the collectors.
Proof of Payment: Keep receipts or transaction records if the harassment involves settled debts or "hidden" interest rates.
App Details: Note the full name of the OLA and its SEC Registration/Certificate of Authority (CA) number.

Step 2: Filing with the Securities and Exchange Commission (SEC)

The SEC is the primary regulator of lending companies. If the OLA is registered, the SEC can impose fines or revoke its license.

Action: Send a formal complaint to the SEC Enforcement and Investor Protection Department (EIPD).
Process: Use the SEC's online complaint portal or email epd@sec.gov.ph. Include your verified statement and the evidence gathered.

Step 3: Filing with the National Privacy Commission (NPC)

If the OLA accessed your contacts or posted your photos online without consent, they violated the Data Privacy Act.

Action: File a "Complaint for Violation of the Data Privacy Act."
Process: Visit the NPC website and follow their "Complaints and Investigation" procedure. The NPC has the power to order the shutdown of apps that violate privacy.

Step 4: Reporting to Cybercrime Authorities

For criminal acts like online libel or death threats, seek assistance from specialized police units:

PNP-ACG: Philippine National Police - Anti-Cybercrime Group.
NBI-CCD: National Bureau of Investigation - Cybercrime Division.
Platform: You can report through their respective "Cyber Titim" or walk-in portals for immediate investigation and "blotter" recording.

4. Key Defense: The "Estafa" Myth

A common harassment tactic is threatening borrowers with Estafa (Art. 315, RPC). Legally, a simple failure to pay a contractual debt is a civil liability, not a criminal one. Under the Philippine Constitution (Art. III, Sec. 20), "No person shall be imprisoned for debt." Unless there is proven fraudulent intent at the inception of the loan (e.g., using a fake identity), these threats are usually baseless and constitute "Grave Threats" or "Coercion" on the part of the lender.

5. Summary Table of Remedies

Agency	Issue Handled	Possible Outcome
SEC	Unfair collection, Unregistered apps	Fines, Revocation of License
NPC	Unauthorized contact access, Shaming	Damages, App shutdown
PNP/NBI	Threats, Libel, Identity Theft	Criminal Prosecution/Arrest
Bsp	Banking-related OLAs	Administrative Sanctions