If you're being bombarded with aggressive calls, threatening text messages, or humiliating posts and messages sent to your family, friends, or employer by an online lending app, you are not powerless. These tactics are often illegal under Philippine law, and you have clear avenues to stop them and hold the responsible parties accountable. This guide walks you through exactly what counts as prohibited harassment, the specific laws that protect you, and the practical step-by-step process to file effective complaints with the right government agencies.

Many borrowers face these situations when they fall behind on repayments. Collectors may call at odd hours, use profane language, threaten arrest or lawsuits they cannot actually file, or blast messages to your entire contact list to shame you into paying. These practices violate multiple layers of regulation designed to protect ordinary Filipinos from abusive debt collection.

What Counts as Harassment from Online Lending Apps

Common prohibited tactics include repeated calls or messages at unreasonable times, use of threats or intimidation, public shaming through social media or group chats, contacting your employer or relatives without proper authorization, and misusing your personal data (such as phone contacts or photos) to pressure or embarrass you.

Even if you owe money, the debt itself is a civil matter. Collectors cannot use criminal threats, deception, or privacy violations to collect it. Philippine regulators have repeatedly sanctioned apps and companies for these exact behaviors, including license revocations and criminal referrals.

Legal Basis and Your Key Protections

Several specific laws and regulations directly address this issue.

SEC Memorandum Circular No. 18, Series of 2019 (Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies) is the primary rule for lending and financing companies, including most online lending apps. It requires good faith and reasonable conduct in collections. Explicitly prohibited acts include:

Use or threat of violence or other criminal means against any person’s body, reputation, or property.
Use of obscene, profane, or abusive language.
Publication (or threat of publication) of a borrower’s name or personal information to shame or embarrass them.
False, deceptive, or misleading representations — such as pretending to be a lawyer, police officer, or court official, or sending fake warrants or subpoenas.
Communication with third parties (family, employer, friends) in a harassing manner or disclosing the debt without lawful basis.
Contacting the borrower at unreasonable hours or in unreasonable places.
Accessing or using the borrower’s phone contacts, social media lists, or other personal data to harass or shame.

Violations can lead to fines from ₱25,000 to ₱1,000,000 per instance (or higher depending on gravity and frequency), suspension or revocation of the company’s authority to operate, and referral for criminal or civil liability.

Republic Act No. 10173 (Data Privacy Act of 2012) protects against unauthorized collection, processing, or disclosure of your personal data. The National Privacy Commission has specifically prohibited online lenders from harvesting phone or social media contact lists for debt collection and from using photos or other data to shame borrowers. Violations (especially unauthorized processing under Section 25) can result in administrative fines, cease-and-desist orders, damages, and criminal prosecution with penalties of imprisonment and fines up to millions of pesos. The Supreme Court has upheld NPC decisions against lending apps in several cases involving contact-list shaming.

Revised Penal Code provisions apply when acts cross into criminal territory:

Article 282 (Grave Threats) — serious threats of harm or injury.
Article 287 (Unjust Vexation) — any coercion or vexatious acts that annoy, distress, or disturb without legal justification.
Other possible offenses include coercion or, when statements are published online to third parties, libel or slander.

Republic Act No. 10175 (Cybercrime Prevention Act of 2012) covers online versions of these crimes, including cyber libel when defamatory statements about your debt are sent electronically to multiple people.

Republic Act No. 11765 (Financial Products and Services Consumer Protection Act of 2022) strengthens overall consumer safeguards and allows regulators to impose stronger sanctions, including triple damages in some cases of willful abuse.

Civil Code Articles 19, 20, and 21 allow you to sue for damages when rights are abused in a manner contrary to good faith or that causes damage to another.

These laws work together. One incident of shaming via your contacts can violate SEC rules, the Data Privacy Act, and potentially the Revised Penal Code or Cybercrime Prevention Act at the same time.

Step-by-Step Practical Guide to Filing Complaints

Follow these steps in order. Many people file with multiple agencies in parallel for faster results.

1. Gather and Preserve Strong Evidence

Do this immediately before deleting anything or responding emotionally.

Strong evidence includes:

Clear screenshots of all messages and posts (show full conversation, date, time, phone number or username, and the lending app name if visible).
Call logs or screenshots of call history showing frequency and timing.
Screenshots of the app requesting or accessing your contacts, camera, or other permissions.
Copies of the loan agreement, promissory note, and any privacy policy or terms.
Affidavits from family members, friends, or colleagues who received harassing messages (they can file their own complaints too).
Records of any previous polite requests you made for them to stop.
Proof of the company or app details (developer name, website, SEC registration number if known, email addresses used).

Store everything securely with backups. For audio recordings, note that the Anti-Wiretapping Act (RA 4200) generally requires consent of all parties for private conversations; screenshots, logs, and witness statements are safer and often sufficient.

2. Send a Formal Cease-and-Desist or Demand Letter

Email or send via registered mail (keep proof of sending and receipt) a clear written notice to the app’s customer service, grievance officer, or registered email. State the facts, list the harassing acts with dates, demand they immediately stop all contact and harassment, delete your data and that of your contacts, and confirm in writing within a specific deadline (e.g., 5–7 days).

This creates a paper trail and is often required before filing with the NPC.

3. File with the Securities and Exchange Commission (SEC)

This is usually the most direct first stop for unfair collection practices.

Download the SEC Complaint Form or use their online system.
Prepare a sworn complaint-affidavit (notarized) detailing the facts, violations of MC 18, and relief requested (investigation, sanctions, order to stop).
Attach all evidence as organized PDFs.
Submit online through the SEC iMessage portal (imessage.sec.gov.ph), by email to enforcement@sec.gov.ph or cgfd_md@sec.gov.ph, or in person at the SEC head office in Pasay or satellite offices.
No filing fee for consumer complaints.

Processing typically takes 30–60 days for initial action, though complex cases take longer. The SEC can impose fines, suspend or revoke authority, and coordinate with other agencies.

4. File with the National Privacy Commission (NPC)

Use this when the app harvested or misused your personal data or contacts.

First, send written notice to the company’s Data Protection Officer (usually listed in the app or privacy policy) describing the violation and demanding corrective action. Keep proof.
Wait 15 calendar days. If no adequate response, proceed.
Prepare and notarize a complaint-affidavit using the NPC’s form or a verified complaint. Include evidence and witness affidavits.
Submit in person at NPC offices, by registered mail/courier, or electronically (PDF, digitally signed where required) to complaints@privacy.gov.ph or through their portal.
The NPC evaluates quickly (often within days) and may conduct hearings (sometimes remote). Outcomes can include cease-and-desist orders, fines, damages, data deletion orders, and referral for criminal prosecution to the DOJ.

5. Report to Law Enforcement for Criminal Aspects (PNP or NBI)

If there are clear threats, grave coercion, unjust vexation, or online publication of defamatory content:

Go to your local PNP station or, preferably for online cases, the PNP Anti-Cybercrime Group (ACG).
File a sworn complaint or blotter report with complete evidence and timeline.
You can also use PNP ACG online channels or email acg@pnp.gov.ph.
Alternatively or additionally, file with the NBI Cybercrime Division.
The police or NBI will investigate, gather more evidence (they can subpoena records), and refer the case to the prosecutor’s office for preliminary investigation.
If probable cause is found, criminal charges are filed in court.

There are also coordinated one-stop help desks involving PNP, SEC, and other agencies for online lending complaints.

6. Consider a Civil Case for Damages

You can file a separate civil action (or join it with the criminal case as an independent civil action) in the appropriate court (usually MTC or RTC depending on the amount of damages claimed) for moral damages, exemplary damages, and attorney’s fees under the Civil Code. This can also seek an injunction to permanently stop the harassment.

Free or low-cost legal assistance is available through the Public Attorney’s Office (PAO) if you qualify based on income, or through IBP chapters and some NGOs.

Common Pitfalls, Challenges, and Scenarios

Weak evidence or inability to identify the exact persons/company — Many apps use multiple unregistered numbers. Strong screenshots linking the harassment to the specific app, plus SEC registration details when available, help. Unregistered apps can still be reported; regulators and law enforcement can investigate.

Delay — Light offenses like unjust vexation have short prescription periods (often two months from discovery). Act promptly while preserving evidence.

NPC dismissal for failure to exhaust internal remedies — Always notify the company’s DPO first and document it.

Emotional or incomplete filings — Stick to facts, organize evidence clearly, and use sworn affidavits. Multiple parallel filings (SEC + NPC + PNP) are common and effective.

Scenarios for ordinary Filipinos — A borrower receives dozens of daily texts and calls, plus messages to her mother and employer calling her a “scammer.” She files with SEC and NPC, provides screenshots and her mother’s affidavit, and the harassment stops after regulatory action.

For Filipinos abroad or foreigners — You can file most complaints electronically. For notarized affidavits, execute them before a Philippine Embassy or Consulate officer, or apostille them (if your country participates in the Hague Apostille Convention) and have a trusted representative or lawyer in the Philippines file using a Special Power of Attorney. Philippine courts and agencies generally have jurisdiction when the harassing acts target someone in the Philippines or involve Philippine-registered companies or infrastructure.

Frequently Asked Questions

Can an online lending app legally contact my family or employer?
Generally no. Contacting third parties to shame or pressure you violates SEC MC 18 and the Data Privacy Act unless they are named guarantors or co-makers with proper consent and the contact is reasonable and non-harassing.

Is non-payment of a loan a criminal offense?
No. Ordinary debt is a civil obligation. Threats of arrest or criminal cases solely for non-payment are usually false and themselves constitute prohibited harassment or even criminal threats.

Do I need a lawyer to file these complaints?
Not required for initial complaints with SEC, NPC, or PNP, but highly recommended for complex cases, civil suits, or if you want to maximize damages. PAO can assist qualified individuals.

How long does the process take?
Initial responses from SEC or NPC can come within weeks to a couple of months. Full investigations and enforcement take longer. Criminal preliminary investigation varies but can move faster with strong evidence. Starting multiple complaints at once often produces quicker relief from the harassment itself.

What if the app is already banned or the company has changed names?
Still file. Regulators maintain records, and new entities operating the same app or using similar tactics can be pursued. Evidence of continuity helps.

Can I file anonymously?
Most formal complaints require your identity for verification and due process, but agencies protect complainant privacy to the extent possible. Third parties who received messages can file separately.

What evidence works best against contact-list shaming?
Screenshots of the messages received by your contacts, affidavits from those contacts, and proof that the app accessed your contacts list (permission screenshots or patterns of messages only possible through your data).

If I settle the loan, can I still complain about past harassment?
Yes. The harassment is a separate wrong. Many people settle the debt while pursuing complaints or damages for the abusive collection tactics.

Are there differences if the lender is a bank or under BSP supervision?
Slightly — file consumer complaints with BSP instead of or in addition to SEC. The core prohibitions on harassment remain similar.

Key Takeaways

Aggressive harassment, shaming via contacts, fake legal threats, and misuse of your personal data by online lending apps violate SEC MC 18 s. 2019, the Data Privacy Act, and often the Revised Penal Code or Cybercrime Prevention Act.
Start by preserving clear, timestamped evidence and sending a formal written demand to stop.
File with the SEC for unfair collection practices (easy online portal, no fee).
File with the NPC for data privacy violations after first notifying the company’s Data Protection Officer.
Report serious threats or online crimes to PNP Anti-Cybercrime Group or NBI.
You can pursue regulatory, administrative, criminal, and civil remedies at the same time.
Act promptly, organize your evidence well, and consider free legal aid if needed.
Even if you are abroad, electronic filing and proper notarization/apostille processes allow you to protect your rights.

You have strong legal protections. Systematic documentation and filing with the proper agencies has stopped harassment and led to sanctions against many abusive apps and collectors. Take the first step of gathering your evidence today — the process is designed to be accessible to ordinary people facing these situations.