If online lending apps have flooded your phone with calls and texts at all hours, threatened you or your family, contacted your employer or friends without permission, or posted shaming messages and photos on social media, you are facing illegal harassment — and Philippine law gives you concrete ways to stop it and hold the responsible parties accountable.

This kind of aggressive collection turns a financial difficulty into an emotional and privacy nightmare. Borrowers, including many overseas Filipino workers, commonly experience these tactics from both licensed and unlicensed online lending apps (OLAs). The good news is that regulators and law enforcement treat these practices seriously. You can file complaints with multiple agencies at the same time, and many victims have seen apps ordered to stop, fined heavily, or even shut down.

This guide walks you through exactly what counts as illegal harassment, the specific laws that protect you, and the practical steps to file effective complaints with the right government offices.

What Counts as Illegal Harassment by Online Lending Apps

Lending apps and their collectors often go beyond reasonable reminders. Common illegal tactics include:

Repeated calls or texts at unreasonable hours (typically before 6 a.m. or after 10 p.m., or excessively frequent).
Use of profane, threatening, or abusive language.
Threats of harm to you, your reputation, job, or family.
Public shaming by posting your photo, debt amount, or personal details on social media, Facebook groups, or by sending messages to your contacts.
Contacting your employer, colleagues, relatives, or friends to pressure repayment or disclose your debt.
Accessing and using your phone contacts, photos, or other personal data without proper, informed consent.
Misrepresenting who they are, the consequences of non-payment, or legal processes.

These actions violate rules on fair collection, invade your privacy, and can cross into criminal territory. Even if you owe money, collectors must act in good faith and within legal limits. Harassment does not erase your debt obligation, but it gives you strong grounds to complain and, in some cases, claim damages.

Key Laws Protecting Borrowers

SEC Memorandum Circular No. 18, Series of 2019 (Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies)

This is the primary rule for lending and financing companies registered with the Securities and Exchange Commission (SEC), including their agents and third-party collectors. It requires companies to use only reasonable, good-faith, and legally permissible collection methods.

Prohibited unfair practices explicitly include threats or violence, profane or abusive language, public disclosure or shaming of the borrower’s debt, contacting or disclosing information to third parties without authority, and other harassing or deceptive tactics. Companies must also maintain confidentiality of borrower information.

Violations can lead to investigations, cease-and-desist orders, administrative fines, suspension or revocation of the company’s Certificate of Authority to operate, and referral for criminal prosecution in serious cases. The SEC has applied this circular in numerous actions against OLAs.

Data Privacy Act of 2012 (Republic Act No. 10173)

This law protects your personal information. Online lending apps often require broad access to contacts, photos, and location. Using that data to harass you or your contacts — or disclosing your debt to third parties — constitutes unauthorized processing or malicious disclosure.

The National Privacy Commission (NPC) has issued circulars and taken action specifically against OLAs for harvesting contact lists and using them for shaming. Violations can result in orders to stop processing data, deletion of information, fines, and criminal referrals. Several apps have faced investigations and sanctions for these exact practices.

Revised Penal Code and Cybercrime Prevention Act of 2012 (Republic Act No. 10175)

Certain acts qualify as crimes:

Grave threats (Article 282) — threatening to commit a wrong (such as publishing defamatory material or causing harm) unless you pay.
Unjust vexation (Article 287) — any act that annoys or vexes without legal justification, commonly applied to repeated harassing calls and texts.
Libel or cyber libel — if false or defamatory statements are made publicly or online.

The Cybercrime Prevention Act covers online versions of these offenses and other computer-related acts. Law enforcement agencies, particularly the PNP Anti-Cybercrime Group, actively investigate OLA-related complaints.

Additional support comes from the Civil Code provisions on abuse of rights and the constitutional right to privacy, which courts have recognized in harassment and data cases.

Step-by-Step: How to File Complaints

1. Document Everything Thoroughly

Strong evidence makes complaints effective. Before deleting or blocking anything:

Take clear screenshots of all messages, posts, and app screens showing the sender/number, full text, dates, and times.
Keep call logs and, where possible, recordings of conversations (Philippine law generally permits recording when you are a participant).
Collect written statements from anyone contacted by the app (family, friends, employer).
Save copies of your loan agreement, app terms, and any payment records.
Note the exact timeline of events and any impact (stress, lost work, damaged relationships).
Back up everything in multiple places and do not alter originals.

The more specific and timestamped your evidence, the stronger your case.

2. Check the Company’s Status with the SEC

Visit the SEC website and look for the list of recorded online lending platforms or revoked/suspended companies. If the app or company is not properly registered or has a revoked Certificate of Authority, this is an additional violation you can highlight in your complaints.

3. File with the Securities and Exchange Commission (SEC)

The SEC handles unfair collection practices and licensing issues.

Prepare a clear written complaint that includes:

Your full name and contact details.
The exact name of the app and company (plus any SEC registration number if known).
A factual narrative of the harassment incidents with dates and descriptions.
How the actions violate SEC MC No. 18, s. 2019.
The relief you want (investigation, order to stop all contact and shaming, sanctions, revocation of authority).

Attach your evidence (screenshots, etc.). Submit via:

Email to cgfd@sec.gov.ph or complaints@sec.gov.ph (or the Enforcement and Investor Protection Department for unlicensed operators).
The SEC’s online complaint system (i-Message or FinCare portal on sec.gov.ph).
In person at the SEC office if preferred.

The SEC investigates and can issue orders against the company. In serious or widespread cases, it coordinates with the NPC, PNP, and NBI.

4. File a Data Privacy Complaint with the National Privacy Commission (NPC)

If contacts were accessed or your information was misused or disclosed:

Download the official Complaint-Affidavit form from the NPC website (privacy.gov.ph).
Fill it out in detail, identifying the respondent (company/app), describing the facts, and citing specific violations of the Data Privacy Act (unauthorized processing, purpose limitation, malicious disclosure).
Have the completed affidavit notarized by a notary public.
Submit by email to complaints@privacy.gov.ph, in person at the NPC office (5th Floor, Delegation Building, PICC Complex, Pasay City), or via courier.

The NPC investigates privacy violations, can order companies to stop processing data or delete information, impose fines, and refer cases for criminal prosecution. They have taken strong action against many OLAs for contact harvesting and shaming.

5. Report Criminal Acts to the PNP Anti-Cybercrime Group or NBI

For threats, repeated harassment, public shaming, or cyber elements:

First, file a blotter report at your local police station for an official record.
Then file with the PNP Anti-Cybercrime Group (ACG), which handles many OLA cases:
- Email: acg@pnp.gov.ph
- Check the official PNP ACG website or published hotlines for the current e-complaint system or direct numbers.
You may also report to the NBI Cybercrime Division.

Provide your evidence and a sworn statement. The prosecutor’s office conducts preliminary investigation for possible criminal charges. Agencies sometimes conduct joint operations leading to arrests or office raids in large-scale cases.

6. Consider Civil Action for Damages

You can file a civil case for moral and exemplary damages arising from invasion of privacy, emotional distress, or abuse of rights. For smaller claims, small claims court offers a faster track. A lawyer can help assess this option; qualified individuals may obtain assistance from the Public Attorney’s Office (PAO).

Common Challenges and Practical Realities

Many people delay reporting because they feel overwhelmed or fear retaliation. Document new incidents if harassment continues after you file — this strengthens your position and can prompt faster agency action.

Unlicensed or frequently changing apps make tracing harder, but patterns of behavior and any identifying information still help investigators. Borrowers abroad (including OFWs) can file the same way through email and online portals. For notarization when outside the Philippines, visit a Philippine embassy or consulate or execute a Special Power of Attorney authorizing someone in the country to file on your behalf.

Evidence is everything. Vague complaints or missing documentation often lead to slower or weaker responses. Parallel filing with SEC, NPC, and PNP is common and effective because the agencies sometimes share information.

Documents, Offices, and Typical Timelines

Key offices and contacts:

SEC — Unfair collection and licensing: cgfd@sec.gov.ph or online portals.
NPC — Privacy violations: complaints@privacy.gov.ph; notarized Complaint-Affidavit required.
PNP ACG — Criminal/cyber harassment: acg@pnp.gov.ph and local cyber desks.

Filing complaints themselves usually involves minimal or no government fees (notary fees for affidavits are modest). Check the latest schedules on agency websites.

Timelines vary. Initial responses or cease orders can come within days or weeks in urgent cases. Full investigations and resolutions often take several months. Police can act more quickly on active threats. Outcomes have included fines, license revocations, data deletion orders, and criminal prosecutions.

Frequently Asked Questions

Can lending apps legally contact my family, friends, or employer about my debt?
Generally no. SEC MC No. 18, s. 2019 and the Data Privacy Act prohibit unauthorized disclosure and unfair third-party contact in most situations.

Do I still owe the loan if I complain about harassment?
Yes. Your obligation to repay legitimate principal and lawful charges remains. However, you can separately challenge illegal fees or interest, and harassment can support claims for damages or defenses against abusive collection.

How much evidence do I really need to start?
Start with what you have — clear screenshots with timestamps are the most common and effective. Add witness statements and call logs as you can. Agencies can guide you on supplementing later.

Can I file with more than one agency?
Yes. Many people file with the SEC, NPC, and PNP simultaneously. The agencies sometimes coordinate, especially in serious cases.

What if the app is not registered with the SEC or keeps changing numbers?
Still report it. Operating without authority is itself a violation, and investigators can trace operators through other means.

How long do I have to file a complaint?
Act as soon as possible. Criminal actions have prescriptive periods (for example, cyber libel is generally one year from discovery). Regulatory complaints to the SEC and NPC have more flexibility, but fresh evidence leads to stronger cases.

Do I need a lawyer to file these complaints?
No for the administrative complaints to SEC and NPC — you can prepare and submit them yourself with proper documentation. For court proceedings or complex criminal aspects, a lawyer is helpful. The Public Attorney’s Office assists qualified individuals.

What can happen to the company or collectors?
Possible consequences include administrative fines, orders to stop all contact and shaming, revocation of operating authority, deletion of improperly obtained data, and in serious cases, criminal charges against officers, employees, or the company itself.

Can foreigners or people living abroad file complaints?
Yes. The same processes apply. Use email and online portals. Philippine embassies or consulates can assist with notarization or document authentication when needed.

Will complaining stop the harassment immediately?
Not always instantly, but agencies can issue directives to cease contact. Document any continuation — it becomes additional evidence of bad faith.

Key Takeaways

Harassment tactics such as threats, public shaming, and unauthorized use of your contacts violate SEC MC No. 18, s. 2019, the Data Privacy Act, and criminal laws.
Document incidents thoroughly with screenshots, logs, and witness statements before and while reporting.
File complaints in parallel with the SEC (unfair collection), NPC (privacy violations), and PNP Anti-Cybercrime Group or NBI (criminal acts) for the most effective response.
You can start the process yourself without a lawyer for the main administrative complaints.
Prompt action preserves evidence and increases the chances of meaningful sanctions, including orders to stop, fines, license revocation, or criminal prosecution.
Your right to privacy and freedom from abusive collection stands independently of your debt. Legitimate repayment discussions must remain respectful and private.

Government agencies have increased enforcement against abusive online lending practices in recent years, with thousands of complaints leading to investigations and sanctions. By filing well-documented complaints, you not only protect yourself but also help curb these practices for others. Start with evidence gathering today and submit your complaints through the official channels outlined above.