If relentless calls, text messages, or other contacts from an online lending app have started reaching your parents, siblings, spouse, employer, or friends, you are not powerless. This form of harassment—often involving repeated outreach to third parties on your contact list—is a common complaint among borrowers in the Philippines, but it violates specific legal protections designed to prevent exactly this kind of pressure and unauthorized use of personal information.

Philippine law treats the misuse of your data to shame or coerce repayment through family and contacts as a serious issue. You have clear rights and multiple practical channels to stop the behavior, document what happened, and seek accountability. This guide explains the relevant laws, your options, and the precise steps to file complaints effectively with the agencies best equipped to handle these cases.

Understanding the Issue: When Debt Collection Becomes Harassment

Online lending apps (often called OLAs) frequently require borrowers to grant access to phone contacts, photos, or social media during the loan application. When payments are missed, some collectors exploit this by calling or messaging relatives, friends, and workplaces with details of the debt, demands for payment, or embarrassing statements. Common tactics include repeated calls at odd hours, threats of legal action or public exposure, and messages that disclose the borrower’s financial situation to third parties.

These practices go beyond legitimate collection. They often involve the unauthorized processing or disclosure of personal data and cause real harm—stress, damaged relationships, workplace issues, and reputational harm. Philippine regulators and courts have recognized that such conduct crosses legal lines.

Your Legal Rights and Protections

Data Privacy Act of 2012 (Republic Act No. 10173)

This law governs how personal information may be collected, processed, and shared. It requires that processing be lawful, fair, and limited to what is necessary for a declared purpose. Key principles include purpose limitation, data minimization, and the rights of data subjects to be informed, to object, and to seek redress for violations.

The National Privacy Commission (NPC) has issued specific rules for lending. NPC Circular No. 20-01 (Guidelines on the Processing of Personal Data for Loan-Related Transactions, as amended by Circular No. 2022-02) prohibits online lenders from harvesting or using phone contact lists, email lists, or social media contacts to harass borrowers or their contacts. Contacting third parties who are not formal guarantors or co-makers generally lacks a valid legal basis under the law. Disclosing a borrower’s debt or personal details to family members without consent or necessity violates these rules. Violations can result in NPC investigations, orders to stop the practices, administrative fines, awards of damages to affected individuals, and referral for criminal prosecution.

Revised Penal Code

Certain acts of harassment fall under criminal provisions:

Article 287 punishes unjust vexation—any act that unjustly annoys, irritates, torments, or distresses another person without causing physical injury. Repeated calls, persistent messaging to family, or shaming tactics often qualify. It is classified as a light offense.
Article 286 covers grave coercion when violence, intimidation, or threats are used to compel someone to do or omit an act (for example, pressuring family members to pay on your behalf).
Other possible charges include grave threats (Article 282) or, in cases of public false statements, libel or slander, depending on the facts.

These criminal remedies focus on the conduct itself, separate from any underlying debt.

Civil Code Protections

Articles 19, 20, and 21 of the Civil Code prohibit the abuse of rights and acts that are contrary to law, morals, good customs, or public policy. When collection practices cause damage through harassment or privacy violations, you may claim moral damages (for mental anguish, besmirched reputation, or social humiliation), exemplary damages (to deter similar conduct), and other relief in a civil case. A civil action for damages or injunction can proceed independently or alongside criminal or administrative complaints.

These protections apply whether you are a Filipino in the Philippines or abroad, or a foreigner whose family or data in the Philippines is affected. The focus is on the processing of data or the harassing acts occurring in or impacting the country.

Practical Step-by-Step Guide to Filing Complaints

Step 1: Document Everything Thoroughly

Strong evidence is the foundation of any successful complaint. Act quickly to preserve it:

Take clear screenshots of every message, call log entry, or social media post, including timestamps, phone numbers, usernames, and full content. Do not delete chats or clear logs.
Record the frequency and pattern (for example, “15 calls in two days to my mother’s number”).
Ask affected family members or contacts to provide sworn affidavits describing what they received, how it affected them (embarrassment at work, anxiety, family conflict), and any resulting harm.
Gather medical or psychological records if the harassment caused documented stress, anxiety, or other health effects.
Keep copies of the loan agreement, app permissions requested, and any terms you accepted.
Note the app name, developer information, Google Play or App Store links, and any company details visible in the app or messages.

Send a formal written demand (email or letter) to the app’s official support address or any known company address. State clearly that all contact with you and your listed contacts must cease immediately, that any unauthorized data must be deleted or no longer processed, and that you will pursue legal remedies if they continue. Keep proof of sending and any response (or lack of response). This creates a paper trail and can strengthen later complaints.

Step 2: File with the National Privacy Commission (Strongest Starting Point for Contact Harassment)

The NPC is often the most direct and effective channel because it specifically addresses the unauthorized access to and use of contact lists and the disclosure of personal data to third parties.

How to file:

Download the official Complaint-Affidavit form from the NPC website (privacy.gov.ph/filing-a-complaint/).
Complete the form with a clear narrative of the facts: what the app did, which family members or contacts were targeted, examples of messages or calls, and the impact on you and them.
Attach all your evidence (screenshots, logs, affidavits, loan documents).
Have the completed form notarized.
Submit it by email to complaints@privacy.gov.ph, by courier, or in person at the NPC office (Philippine International Convention Center complex in Pasay City).

You (as the data subject) or affected family members can file. Authorized representatives may file with a Special Power of Attorney. The NPC may investigate, conduct hearings, issue cease-and-desist orders, impose penalties on the company or individuals involved, award damages in appropriate cases, and refer matters for criminal prosecution. Many past complaints against online lending apps have led to regulatory action.

Check the current schedule of fees under NPC Circular No. 2023-01 on the NPC website. Notarization costs are modest. Processing involves investigation and possible mediation or formal proceedings; timelines vary but complaints are actively handled.

Step 3: Report to Law Enforcement and File a Criminal Complaint

For acts that constitute unjust vexation, coercion, or threats:

Visit your nearest Philippine National Police (PNP) station to have the incident recorded in the blotter. Bring your evidence. You can also contact the PNP Anti-Cybercrime Group (ACG) directly (acg@pnp.gov.ph or through regional offices) or the National Bureau of Investigation (NBI) Cybercrime Division, especially if there are online elements, manipulated images, or organized patterns.
The Cybercrime Investigation and Coordinating Center (CICC) operates a 24/7 hotline at 1326 for reporting abusive online lending practices.
After the blotter (or directly for more serious cases), prepare and file a sworn Complaint-Affidavit at the Office of the City or Provincial Prosecutor where you reside. Use standard forms available at Halls of Justice. Include the same detailed narrative and attach all evidence plus witness affidavits.
The prosecutor will conduct a preliminary investigation. If probable cause is found, an Information is filed in court (typically Municipal Trial Court for unjust vexation as a light offense).

Note on timing: Unjust vexation prescribes in two months from discovery (Article 90, Revised Penal Code), though the period is interrupted by the filing of a complaint. For ongoing or repeated acts, document each incident. Act promptly.

Step 4: File with the Securities and Exchange Commission (When Applicable)

If you can identify the registered lending or financing company behind the app, file a complaint with the SEC for unfair or abusive debt collection practices. Many registered entities are subject to SEC oversight, and violations can lead to fines, suspension of operations, or other sanctions.

Check the SEC website (sec.gov.ph) for complaint forms and submission channels (often via email to designated addresses such as those for financing and lending company complaints). Provide the same evidence package. This channel complements NPC and criminal complaints.

Step 5: Explore Civil Remedies and Free or Low-Cost Legal Help

You may file a separate civil case for damages and injunctive relief in the appropriate court (Municipal Trial Court or Regional Trial Court depending on the amount involved). This can be done alongside or after administrative or criminal actions.

If your income and assets qualify you as indigent under Public Attorney’s Office (PAO) guidelines (generally modest net monthly income thresholds that vary slightly by location, such as around P12,000–P14,000 in many areas—confirm current figures), you can receive free legal assistance, including help preparing and filing complaints and representation. Bring a Barangay Certificate of Indigency, valid ID, and your documents to the nearest PAO office (usually located in or near Halls of Justice). PAO handles criminal, civil, and administrative matters of this nature.

Common Challenges and How to Address Them

Many apps operate through hard-to-trace entities or change names frequently. NPC and criminal complaints focus on the specific conduct and evidence rather than requiring perfect identification of the company upfront; investigations can help trace responsibility.

Harassment sometimes continues after an initial filing. Provide updates and additional evidence to the agency; continued acts become stronger proof. Parallel filings with NPC, police/prosecutor, and SEC (when possible) are generally allowed and often more effective than a single channel.

Emotional and relational strain is real. Keep records of the impact for damages claims. Consider professional support for stress or anxiety.

Unregistered or seemingly “offshore” apps do not escape liability. Privacy violations and criminal acts committed in or affecting the Philippines remain actionable.

Documents, Evidence, Fees, and Typical Timelines

Core evidence package (use across channels):

Notarized Complaint-Affidavit or sworn statements.
Screenshots and logs of all harassing communications (to you and third parties).
Affidavits from affected family members or contacts.
Loan-related documents and app permission records.
Proof of any demand letter sent.
Government-issued ID of the complainant.
Medical/psychological documentation (if claiming harm for damages).

Fees: Notarization is the main out-of-pocket cost for most initial filings (typically a few hundred pesos). NPC has a published schedule of fees. Criminal complaints at the prosecutor level usually involve no filing fee for the preliminary investigation stage. Civil cases have docket fees scaled to the amount claimed.

Timelines (approximate and variable):

Police blotter: Same day.
NPC investigation and possible orders: Weeks to several months, depending on complexity and volume of cases.
Prosecutor preliminary investigation: Statutory periods apply but real-world duration often ranges from weeks to a few months.
Court resolution (if case proceeds): Longer, especially if contested.
Follow-up and enforcement of any orders: Additional time.

Agencies may mediate or encourage settlement in appropriate cases, but you are not required to accept terms that do not address the harassment.

Frequently Asked Questions

Can family members or other contacts who received the harassing calls or messages file their own complaints?
Yes. They are data subjects whose personal information or peace may have been violated, and they can independently file with the NPC or pursue criminal complaints for unjust vexation or related offenses if the acts targeted them.

Will filing these complaints cancel or reduce what I owe on the loan?
No. These remedies address illegal collection methods and privacy violations. A valid debt remains a separate obligation. You can still negotiate repayment terms directly or through proper channels while pursuing complaints about the harassment.

How soon after filing can I expect the calls and messages to stop?
It varies. Some entities reduce or stop outreach once they receive formal notice of a complaint. Others require an NPC order or further enforcement. Document any continuation as additional evidence and follow up with the agency handling your case.

Do I need a lawyer to file a complaint?
You can file initial complaints yourself using the standard forms and your evidence. However, legal assistance helps ensure completeness, especially for damages claims or complex cases. The Public Attorney’s Office provides free help if you qualify as indigent. Private counsel is an option if you prefer.

What if the app is unregistered or I cannot identify the exact company?
You can still file strong complaints. The NPC addresses privacy violations based on the conduct and evidence. Criminal complaints target the specific acts (calls, messages, threats). Regulators have tools to investigate and trace responsibility even when entities attempt to obscure their identity.

Can I file complaints with more than one agency at the same time?
Yes. Parallel or complementary filings are common and often advisable because each agency addresses different aspects (privacy, criminal conduct, corporate regulation). Coordinate your evidence package across submissions.

Is there a time limit for filing?
For criminal complaints such as unjust vexation, the prescriptive period is generally two months from discovery for this light offense, though it is interrupted by filing a complaint. For ongoing harassment, each new incident can support the case. NPC and civil claims generally allow more time. File as soon as you have gathered basic evidence to protect your options.

What is the strongest evidence in these cases?
Contemporaneous screenshots with timestamps, detailed patterns of contact to third parties, sworn statements from affected family members describing the impact, and records showing the app requested or accessed contact data without a proper ongoing legal basis for disclosure.

If I or my family live abroad, can we still file?
Yes. The NPC accepts submissions by email or courier. Affected family members in the Philippines can file locally. Documents executed abroad may need apostille (under the Hague Apostille Convention for member countries) or consular authentication for use in Philippine proceedings. Consult the nearest Philippine embassy or consulate for assistance with notarization or authentication if needed.

Key Takeaways

Harassment of family and contacts by online lending apps frequently violates the Data Privacy Act of 2012 (RA 10173) and NPC Circular No. 20-01, as well as provisions of the Revised Penal Code on unjust vexation and coercion.
Begin by preserving detailed evidence and sending a formal demand to cease all third-party contact.
File first with the National Privacy Commission using their notarized Complaint-Affidavit form for the most targeted relief on data misuse and contact harvesting.
Secure a police blotter and file a sworn complaint-affidavit with the prosecutor’s office for criminal aspects under Article 287 and related provisions.
Report to the SEC when the lending entity is identifiable and registered.
Use parallel channels where appropriate, gather family witness statements, and consider free assistance from the Public Attorney’s Office if you qualify.
Your right to challenge illegal collection tactics exists independently of any debt you may owe. Prompt, well-documented action gives you the best chance of stopping the harassment and obtaining accountability.

The process requires persistence and organization, but thousands of similar complaints have been successfully pursued through these government channels. Start with documentation today and choose the filing path that best matches your situation.