Online lending app harassment usually starts with repeated texts, threats, calls to your family or employer, public shaming, or messages claiming you will be arrested if you do not pay immediately. In the Philippines, a lender may lawfully collect a valid debt, but it cannot use threats, humiliation, misuse of your contact list, false accusations, or abusive collection tactics. This guide explains what counts as illegal or unfair collection, where to file a complaint, what evidence to prepare, and how to handle the situation without making your legal position worse.

What Counts as Online Lending App Harassment in the Philippines?

Online lending app harassment is not always one single crime. In practice, it may involve several overlapping violations:

Harassing act	Possible legal issue
Threatening violence, arrest, imprisonment, or public humiliation	Unfair debt collection, possible grave threats, coercion, unjust vexation, or cybercrime-related complaint
Calling or messaging your contacts, employer, relatives, neighbors, or Facebook friends about your loan	Data privacy violation and unfair collection practice
Posting your photo, ID, loan details, or insulting captions online	Data privacy violation, cyberlibel, libel, or civil damages
Using insults, profanity, or degrading language	Unfair debt collection, possible unjust vexation or oral defamation depending on facts
Pretending to be a police officer, court sheriff, lawyer, prosecutor, or barangay official	False representation, possible criminal liability, and strong evidence of abusive collection
Contacting you late at night or early morning	Unfair collection practice under SEC rules
Threatening to contact all people in your phonebook even if they are not co-makers or guarantors	Unfair collection and data privacy violation

The key point is this: owing money does not remove your right to privacy, dignity, due process, and lawful treatment. A lender may send reminders, demand letters, and proper notices. It may also sue for collection if the debt is valid. But it cannot shame you, threaten you, or weaponize your personal data.

Your Main Legal Protections Against Online Lending App Harassment

SEC rules on unfair debt collection

Most lending and financing companies are regulated by the Securities and Exchange Commission (SEC), especially if they operate as lending companies or financing companies.

The most important SEC rule is SEC Memorandum Circular No. 18, Series of 2019, titled Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies. It applies not only to lending and financing companies but also to their third-party service providers, including collection agencies.

Under this circular, unfair collection practices include:

using or threatening violence or other criminal means to harm a person, reputation, or property;
threatening an action that cannot legally be taken;
using obscenities, insults, or profane language meant to abuse the borrower;
disclosing or publishing the names and personal information of borrowers who allegedly refuse to pay, except in limited lawful situations;
communicating false loan information to another person, including failure to state that the debt is disputed;
using false representation or deceptive means to collect;
contacting a borrower before 6:00 a.m. or after 10:00 p.m., except in limited cases; and
contacting people in the borrower’s contact list other than those named as guarantors or co-makers.

The SEC circular also says that the lending or financing company remains ultimately responsible even if it outsourced collection to a third-party collector.

Data Privacy Act of 2012

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information such as your name, phone number, address, ID, photo, employer details, contact list, and loan-related personal data.

For online lending apps, the common data privacy issues are:

accessing your phone contacts beyond what is necessary;
using your contact list to pressure you;
telling third parties about your loan without a lawful basis;
sending your ID, photo, or loan details to other people;
posting your personal information online;
using data collected for one purpose, such as loan verification, for another purpose, such as public shaming.

The National Privacy Commission (NPC) has specifically addressed online lending apps and has stated that lenders must not use personal data to engage in unfair collection practices as defined by SEC Memorandum Circular No. 18, Series of 2019.

The Data Privacy Act requires processing of personal information to follow the principles of transparency, legitimate purpose, and proportionality. In plain English: the lender must be clear about what data it collects, must use it for a lawful and legitimate purpose, and must not collect or use more data than necessary.

Financial Products and Services Consumer Protection Act

The Financial Products and Services Consumer Protection Act, or Republic Act No. 11765 of 2022, strengthens the protection of financial consumers. It recognizes the rights of financial consumers to:

equitable and fair treatment;
disclosure and transparency;
protection of consumer assets against fraud and misuse;
data privacy and protection; and
timely handling and redress of complaints.

This law matters because online lending is a financial product or service, including when accessed through digital channels.

Lending Company Regulation Act and Truth in Lending Act

The Lending Company Regulation Act of 2007, or Republic Act No. 9474, requires lending companies to operate under SEC authority. If an online lending app is not properly registered or authorized, that is a separate regulatory problem.

The Truth in Lending Act, or Republic Act No. 3765 of 1963, requires disclosure of the true cost of credit. If the app hides charges, deducts large “processing fees,” or shows misleading interest rates and penalties, include that in your complaint. It may not be the harassment itself, but it helps regulators see the full pattern of abusive lending.

Revised Penal Code and Cybercrime Law

Depending on the exact words and actions used by the collector, the conduct may also fall under the Revised Penal Code or Cybercrime Prevention Act of 2012, or Republic Act No. 10175.

Possible offenses may include:

Grave threats under Article 282 of the Revised Penal Code, if the collector threatens a wrong amounting to a crime against your person, honor, property, or family;
Grave coercions under Article 286, if violence or intimidation is used to compel you to do something against your will;
Unjust vexation under Article 287, for acts that unjustly annoy, irritate, or distress a person;
Libel under Articles 353 and 355, if defamatory statements are made in writing or similar means;
Slander or oral defamation under Article 358, if defamatory statements are spoken;
Cyberlibel under RA 10175, if libel is committed through a computer system, social media, messaging apps, or similar online means.

The Supreme Court in Disini v. Secretary of Justice, G.R. No. 203335 (2014) discussed cyberlibel under RA 10175 and treated online libel as libel committed through a computer system or similar means.

Civil Code remedies

You may also have a civil claim for damages under the Civil Code of the Philippines.

Relevant provisions include:

Article 19, which requires every person to act with justice, give everyone their due, and observe honesty and good faith;
Article 20, which makes a person liable for damages caused willfully or negligently contrary to law;
Article 21, which allows compensation when someone willfully causes injury in a manner contrary to morals, good customs, or public policy;
Article 26, which protects dignity, personality, privacy, and peace of mind;
Article 2219, which allows moral damages in certain cases involving physical suffering, mental anguish, serious anxiety, besmirched reputation, social humiliation, and similar injury.

For most ordinary borrowers, the first practical step is not immediately a civil case, because lawsuits take time and cost money. But these provisions matter if the harassment caused serious reputational, emotional, or financial harm.

Where to File a Complaint Against Online Lending App Harassment

You may file with more than one office because each agency handles a different part of the problem.

Office	File here when	What it can address
SEC	The lender is a lending or financing company, or you want to report abusive debt collection	Unfair debt collection, unregistered lending, regulatory penalties, suspension or revocation of authority
NPC	Your contact list, photo, ID, employer details, relatives, or other personal data were misused	Data privacy violations, unauthorized processing, disclosure, data misuse
PNP Anti-Cybercrime Group or NBI Cybercrime Division	There are threats, blackmail, fake posts, cyberlibel, impersonation, or serious online harassment	Criminal investigation and evidence gathering
City or Provincial Prosecutor’s Office	You are ready to file a criminal complaint with affidavits and evidence	Preliminary investigation for criminal charges
Barangay or local police station	There is an immediate safety concern, threats near your home, or need for blotter	Initial incident record, referral, safety response
Court	You seek damages, injunction, or defense against a collection case	Civil remedies or defense in a filed case

Step-by-Step: How to File a Complaint Against Online Lending App Harassment

1. Stop arguing with collectors and start preserving evidence

Do not rely on memory. Agencies act on documents, screenshots, recordings, affidavits, and traceable details.

Save:

screenshots of text messages, app messages, emails, and chat messages;
call logs showing date, time, number, and frequency;
voice recordings if legally obtained and relevant;
screen recordings showing the sender profile, number, date, time, and message thread;
screenshots of social media posts, comments, tags, or group chats;
copies of messages sent to your contacts, employer, relatives, or neighbors;
names and phone numbers of people contacted by the collector;
proof that the contacted people were not co-makers, guarantors, or character references;
loan agreement, disclosure statement, payment schedule, receipts, proof of deductions, and payment confirmations;
screenshots of app permissions, app name, developer name, Google Play or App Store page, website, and privacy policy;
SEC registration details, if available;
the collector’s name, number, email, or account profile.

For screenshots, include the whole screen when possible. A cropped screenshot may still help, but complete screenshots are stronger because they show the date, time, sender, and context.

2. Identify the lender, not just the app name

Many apps use trade names. The legal respondent may be a corporation with a different registered name.

Check:

the app’s “About,” “Terms,” “Privacy Policy,” and “Contact Us” sections;
the loan agreement or disclosure statement;
SMS sender details;
payment channel recipient name;
SEC registration number or Certificate of Authority;
the SEC’s list of recorded online lending platforms.

You can use the SEC’s official portals, including the SEC iMessage complaint portal and the SEC’s official website pages for lending and financing companies. The SEC has also published online lists for registered lending companies, financing companies, and recorded online lending platforms.

If you cannot identify the company, file anyway and explain what you did to trace it. Include the app name, screenshots, payment account, phone numbers, URLs, and developer information.

3. Send a written notice to stop the privacy violation

For NPC complaints, a common requirement is exhaustion of remedies. This means you should first inform the respondent in writing about the privacy violation and give it a chance to address the issue. The NPC states that the respondent should be given an opportunity to act, and if there is no timely or appropriate response, or no response within 15 calendar days, proof of that written notice should be attached to the complaint.

A short written notice may say:

I am formally objecting to your use and disclosure of my personal information and the personal information of my contacts for debt collection. You have contacted persons who are not my guarantors, co-makers, or authorized representatives. You have also disclosed or threatened to disclose my loan information. Please immediately stop processing and disclosing my personal data for these unauthorized purposes, remove unlawfully obtained contact data, preserve all records of your collection activities, and respond in writing within 15 calendar days.

Send it by email if available. Keep proof of sending, such as email headers, delivery confirmation, or screenshots.

If there is an urgent threat of violence, extortion, or public posting, do not wait 15 days before going to the police, PNP ACG, NBI, or local authorities.

4. File with the SEC for unfair debt collection

File with the SEC if the complaint involves abusive collection by a lending or financing company, whether through its own collectors or third-party agents.

Prepare:

complaint letter or SEC complaint form, if required by the current portal;
your full name, address, email, and contact number;
respondent company name and app name;
SEC registration details, if known;
loan details: amount borrowed, amount disbursed, interest, fees, due date, payments made;
detailed timeline of harassment;
screenshots and evidence;
names and contact details of witnesses, if any;
proof that third parties contacted were not guarantors or co-makers;
copy of valid ID.

Use the SEC iMessage portal or the current complaint channel shown on the SEC website. Older SEC responses have instructed complainants to use a subject format like:

COMPLETE NAME_RESPONDENT COMPANY_SUBJECT OF COMPLAINT

Example:

JUAN DELA CRUZ_ABC LENDING_UNFAIR DEBT COLLECTION

Practical tip: Put your evidence in a clearly named PDF folder or file set. Example:

01_Complaint_Affidavit.pdf
02_Loan_Agreement_and_Disclosure.pdf
03_Screenshots_Threats.pdf
04_Messages_to_Contacts.pdf
05_Payment_Proof.pdf

5. File with the National Privacy Commission for data privacy violations

File with the NPC if the app accessed, used, disclosed, or threatened to disclose personal data unlawfully.

The NPC complaint usually requires:

a filled-out and notarized complaint-assisted form or verified complaint;
copies of evidence;
witness affidavits, if available;
proof that you informed the respondent in writing and allowed it to address the issue, unless circumstances justify urgent action;
your valid ID;
authorization or Special Power of Attorney if a representative files for you.

You can check the official NPC Mechanics for Complaints and the Data Privacy Act of 2012 on the NPC website.

NPC complaints are strongest when you show:

the exact personal data used;
how the lender obtained it;
how it was disclosed or misused;
who received it;
why the receiver was not legally entitled to know about your loan;
screenshots or affidavits from people who received the messages.

6. Report threats, cyberlibel, blackmail, or impersonation to PNP ACG or NBI Cybercrime Division

If the collector threatens harm, posts defamatory content, impersonates authorities, demands money through intimidation, or uses fake online accounts, treat it as a possible criminal matter.

You may report to:

the PNP Anti-Cybercrime Group, including its e-complaint channels and regional anti-cybercrime units;
the NBI Cybercrime Division, which provides investigative assistance for victims of computer crimes;
the nearest police station for urgent blotter and referral.

The NBI Cybercrime Division’s citizen charter describes a process where complainants proceed to the Cybercrime Division, fill out a complaint sheet, undergo preliminary interview and initial investigation, and execute sworn statements or submit prepared affidavits and supporting documents.

Bring both printed and digital copies of evidence. If your evidence is on your phone, do not delete the original messages. Investigators may need to view metadata, original threads, numbers, URLs, or account details.

7. Consider filing with the prosecutor if the evidence is strong

For criminal charges, the case usually goes through the Office of the City Prosecutor or Provincial Prosecutor for preliminary investigation, unless handled through an inquest or other urgent procedure.

You will usually need:

complaint-affidavit;
affidavits of witnesses;
screenshots and printed evidence;
digital copies of evidence;
police or NBI report, if available;
valid IDs;
proof of identity of the respondent, if known.

A complaint-affidavit is your sworn written statement. It should tell the story in chronological order: when you borrowed, when the harassment started, what was said, who was contacted, what was posted, what harm happened, and what evidence supports each point.

Documents and Evidence Checklist

Document or evidence	SEC	NPC	PNP/NBI	Prosecutor
Valid government ID	Yes	Yes	Yes	Yes
Complaint letter or complaint-affidavit	Yes	Yes	Yes	Yes
Loan agreement or disclosure statement	Yes	Helpful	Helpful	Helpful
Proof of disbursement and payments	Yes	Helpful	Helpful	Helpful
Screenshots of threats or abusive messages	Yes	Yes	Yes	Yes
Call logs	Yes	Helpful	Yes	Yes
Messages sent to contacts or employer	Yes	Yes	Yes	Yes
Affidavits from contacted relatives, coworkers, or friends	Helpful	Strongly helpful	Strongly helpful	Strongly helpful
Screenshot of app permissions or contact access	Helpful	Strongly helpful	Helpful	Helpful
Proof of written notice to respondent	Helpful	Usually important	Helpful	Helpful
Police blotter or incident report	Helpful	Helpful	Yes	Helpful
App name, company name, SEC number, website, and payment account	Yes	Yes	Yes	Yes

Practical Timelines and What to Expect

Process	Typical practical timeline	Common bottleneck
Preserving evidence	Same day	Screenshots are incomplete or deleted
Written notice to lender for privacy issue	Same day	No valid company email or respondent hides identity
NPC exhaustion period	15 calendar days from respondent’s receipt of written notice	No proof of sending or receipt
SEC complaint acknowledgment	Often days to weeks, depending on portal volume and completeness	Missing respondent details or unclear evidence
NPC complaint evaluation	Often weeks or longer	Complaint not notarized, insufficient proof, or no exhaustion of remedies
PNP/NBI cybercrime intake	Can begin immediately for urgent matters	Need original device, complete details, or sworn statement
Prosecutor preliminary investigation	Often months, depending on docket and respondent’s participation	Difficulty identifying collector or company officers

Government timelines vary widely. A complete, organized complaint usually moves faster than a vague one-page complaint with scattered screenshots.

Common Mistakes That Weaken Online Lending Harassment Complaints

Deleting the app too early

It is understandable to delete the app out of fear. But before deleting it, capture:

the app name and developer;
permissions granted;
privacy policy;
loan dashboard;
repayment terms;
customer support details;
transaction history.

After preserving evidence, you may review phone permissions and revoke access to contacts, photos, SMS, or location where appropriate.

Paying only because of threats, without documenting the harassment

If you decide to pay, still document the threats first. Payment may stop some collectors, but it can also erase urgency from your complaint if you have no proof of what happened.

Admitting things in anger

Do not reply with threats, insults, or false statements. Keep replies short and factual. A useful response is:

Please communicate only through lawful channels. I dispute your abusive collection methods and object to disclosure of my personal data to third parties.

Filing only with one agency

If the issue is both unfair collection and data misuse, file with both SEC and NPC. If there are threats or fake posts, also report to PNP ACG or NBI. Each office has a different mandate.

Thinking the complaint automatically cancels the loan

A harassment complaint does not automatically erase a valid debt. It challenges the illegal method of collection, data misuse, threats, or abusive conduct. You may still need to settle, dispute, restructure, or defend the loan separately.

Ignoring a real court notice

Collectors often send fake “warrants,” fake subpoenas, or fake police notices. But if you receive an actual summons from a court, do not ignore it. Many loan collection cases may be filed as small claims if the amount falls within the small claims threshold. Small claims proceedings are simplified, but deadlines are strict.

What If the Lending App Contacts Your Family, Employer, or Friends?

This is one of the strongest complaint grounds.

Under SEC Memorandum Circular No. 18, contacting people in the borrower’s contact list other than those named as guarantors or co-makers may be an unfair collection practice. Under the Data Privacy Act, disclosing your loan information to third parties may also be unauthorized processing or disclosure.

Ask the contacted person to save:

the message;
sender number or account;
date and time;
exact words used;
any photo, ID, or loan detail sent;
whether the collector asked them to pay;
whether the collector claimed they were a co-maker, guarantor, or reference.

If possible, ask them to execute a short affidavit stating what they received and that they did not consent to be contacted about your loan.

What If the Collector Threatens Arrest or Barangay Action?

Non-payment of a debt is generally a civil matter. A creditor may sue to collect money, but you are not automatically arrested simply because you failed to pay an online loan.

Be careful, however. If there is fraud, identity theft, use of fake documents, bouncing checks, or other separate criminal conduct, the situation can become different. But ordinary inability to pay a loan is not a license for collectors to threaten immediate arrest, police pickup, or public humiliation.

If a collector says, “May warrant ka na,” ask for:

court name;
case number;
judge name;
copy of the order;
official court contact details.

Fake warrants and fake legal notices should be included in your SEC, PNP/NBI, or prosecutor complaint.

What If You Are an OFW, Abroad, or a Foreigner?

You can still preserve evidence and file complaints, but documents may need additional formalities.

For OFWs and Filipinos abroad:

complaints may often start through email or online portals;
affidavits executed abroad may need notarization before a Philippine Embassy or Consulate, or notarization followed by apostille depending on where the document is executed and how it will be used;
a representative in the Philippines may need a Special Power of Attorney;
keep Philippine phone numbers active if they contain the original messages.

For foreigners:

you may complain if you are the borrower, data subject, recipient of harassment, or person affected by the misuse of data connected to a Philippine lender or Philippine transaction;
the Data Privacy Act has extraterritorial provisions where processing relates to Philippine citizens or residents, or where the entity has links with the Philippines;
if your foreign documents will be submitted to a Philippine agency or court, expect notarization, apostille, or consular authentication requirements depending on the document and country.

There is no special constitutional restriction preventing a foreigner from reporting harassment by a Philippine online lending app. The practical issue is usually evidence, identity verification, and proper authentication of foreign-executed documents.

Sample Structure for a Complaint-Affidavit

A strong complaint-affidavit is clear, chronological, and evidence-based.

Use this structure:

Personal details
- Name, age, citizenship, address, contact details.
Respondent details
- App name, company name, website, phone numbers, collector names, payment accounts.
Loan background
- Date of loan, amount applied for, amount received, fees deducted, due date, payments made.
Harassment timeline
- Date and time of each threat, call, message, post, or third-party contact.
Data privacy violation
- What personal data was accessed, disclosed, posted, or sent to others.
Witnesses
- People contacted by the app, with their contact details and affidavits if available.
Harm suffered
- Anxiety, humiliation, employer issues, family distress, reputational harm, financial loss.
Relief requested
- Investigation, order to stop unlawful processing, penalties, takedown of posts, prosecution if warranted, and other appropriate action.
Attachments
- Numbered evidence list.

Frequently Asked Questions

Can I file a complaint even if I really owe money?

Yes. A valid debt does not give collectors the right to harass, threaten, shame, or misuse your personal data. Your complaint is about the illegal collection method, not necessarily the existence of the loan.

Which agency should I file with first, SEC or NPC?

File with the SEC if the main issue is abusive collection by a lending or financing company. File with the NPC if your personal data or contact list was misused. If both happened, file with both. If there are threats, fake posts, blackmail, or impersonation, also report to PNP ACG or NBI.

Can an online lending app message my contacts?

Not freely. Contacting people in your phonebook who are not guarantors or co-makers is a serious red flag. It may violate SEC rules on unfair debt collection and the Data Privacy Act, especially if your loan information is disclosed.

Can I be arrested for not paying an online loan?

Ordinary non-payment of a debt is generally a civil matter. A lender may file a collection case, but collectors cannot simply have you arrested because you missed payment. Threats of immediate arrest are often used to scare borrowers and should be documented.

What if the app is not SEC-registered?

Report it to the SEC. Operating as a lending company without proper authority may be a separate violation. Still file with NPC or law enforcement if there is data misuse, threats, or online harassment.

Do I need a lawyer to file a complaint?

For SEC, NPC, PNP, or NBI intake, many complainants file on their own. A lawyer becomes more useful if the case involves large amounts, multiple victims, serious criminal charges, employer damage, public posts, a court case, or foreign documents.

Should I block the collectors?

After preserving evidence, you may block abusive numbers for your safety and peace of mind. But keep at least one record of the messages and numbers. If harassment continues through new numbers, keep documenting the pattern.

Can I sue for damages?

Yes, if you can prove legal injury, identity of the responsible party, and damages. Possible bases include Civil Code Articles 19, 20, 21, 26, and provisions on moral damages. In practice, many borrowers first pursue SEC, NPC, and criminal remedies because these are more direct for stopping abusive behavior.

What if they posted my photo or ID online?

Take screenshots immediately, copy the URL, note the account name, and report the post to the platform. Then file with NPC for data privacy violations and consider PNP ACG or NBI if the post is defamatory, threatening, or part of extortion.

What if my employer was contacted?

Save the message sent to your employer. Ask HR or the recipient to preserve the message and, if possible, issue a short statement or affidavit. Contacting an employer to shame or pressure a borrower can be powerful evidence of unfair collection and data privacy violations.

Helpful Official Links

Key Takeaways

A lender may collect a valid debt, but it cannot use threats, insults, public shaming, fake legal notices, or misuse of your contact list.
File with the SEC for unfair debt collection by lending or financing companies.
File with the NPC when your personal data, phone contacts, ID, photo, employer details, or loan information were misused.
Report to PNP ACG or NBI Cybercrime Division if there are threats, cyberlibel, fake posts, impersonation, blackmail, or serious online harassment.
Preserve complete evidence before deleting apps, blocking numbers, or changing phones.
A harassment complaint does not automatically cancel a valid debt, but it can stop unlawful collection methods and support administrative, criminal, or civil remedies.