If a lending app has been calling, messaging, or publicly shaming your family members, relatives, or even your children’s contacts to pressure you over a loan, you are facing a serious violation of your and your family’s privacy rights under Philippine law — and you can take concrete steps to stop it through the National Privacy Commission (NPC) or the Philippine National Police (PNP).

This kind of harassment often involves unauthorized access to your phone’s contact list, disclosure of your loan details to third parties without consent, repeated calls at odd hours, edited photos posted online, or threats of public embarrassment. These tactics are not just aggressive debt collection — they frequently breach the Data Privacy Act of 2012 and can cross into criminal territory when threats or public shaming occur. Many Filipino families experience sleepless nights, anxiety, strained relationships, and social stigma because of these practices. The good news is that regulators and law enforcement have been actively addressing these cases, especially with recent joint warnings and crackdowns in 2026.

What Constitutes Lending App Harassment Affecting Your Family

Lending apps (often called online lending applications or OLAs) commonly engage in these prohibited acts when collecting debts:

Accessing and using your phone’s contact list without clear, informed consent to call or message your spouse, parents, siblings, children, friends, or coworkers.
Disclosing your personal loan information, outstanding balance, or payment status to these third parties.
Sending shaming messages, edited photos, or “public exposure” threats via text, social media, or group chats.
Making repeated calls or messages that cause distress, especially late at night or in front of family.
Using third-party collectors or automated systems that continue even after you ask them to stop.

These actions violate core principles of the Data Privacy Act of 2012 (Republic Act No. 10173), which requires personal information controllers (the app or its operators) to obtain valid consent, limit processing to declared purposes, and protect data from unauthorized disclosure. Contacting your family without a legal basis or their consent is classic unauthorized processing and disclosure.

When threats, public shaming with manipulated images, or online defamation are involved, these can also constitute criminal offenses under the Revised Penal Code (such as grave threats under Article 282 or unjust vexation under Article 287) and the Cybercrime Prevention Act of 2012 (RA 10175) for cyber libel or related acts.

Recent 2026 joint advisories from the Securities and Exchange Commission (SEC), Department of Information and Communications Technology (DICT), and NPC have explicitly warned online lending platforms against these exact practices, noting they lead to harassment and privacy violations.

NPC vs. PNP: Which Agency Should You Approach First?

File with the National Privacy Commission (NPC) when the core issue is privacy violation — unauthorized access to contacts, disclosure of your loan details to family, or misuse of personal data. The NPC handles administrative complaints, can order the app to stop the practices, delete data, and impose fines on the company. It is often the most direct route for family-contact cases.

File with the Philippine National Police (PNP), particularly the Anti-Cybercrime Group (ACG), when there are threats, public shaming posts, blackmail, or other criminal elements. The PNP can investigate for possible criminal charges, coordinate with telecom companies to trace numbers, and provide faster response for immediate safety concerns. Many victims file with both agencies at the same time because the cases often overlap, and agencies sometimes share information.

You can also file a separate complaint with the SEC’s Financing and Lending Companies Department if the app or company is registered, for unfair collection practices. Parallel filing is common and effective in these cases.

Step-by-Step Guide to Filing with the National Privacy Commission (NPC)

Document everything thoroughly. Take clear screenshots of all messages, call logs showing family contacts, timestamps, phone numbers used by the app or collectors, and any social media posts. Ask affected family members to write their own statements describing what happened, when, and how it affected them (emotionally, socially, or financially). Back up everything securely.
Consider sending a formal cease-and-desist notice first. Email or message the app’s official support channel demanding they stop contacting your family and delete any unauthorized data. Keep records of this communication. While not always mandatory, it strengthens your case and shows you tried to resolve it directly.
Download and prepare the Complaint Affidavit. Go to the official NPC website at privacy.gov.ph and download the latest Complaint Affidavit form (currently the 2026 version available under the filing section). Fill it out completely in English or Filipino. Clearly state the facts, identify the respondent (app name, company name if known, or “unknown operators”), describe which rights under RA 10173 were violated (e.g., lack of consent, unauthorized disclosure, purpose limitation), and state what relief you want (investigation, cease-and-desist order, data deletion, etc.).
Have the form notarized. Bring your valid government-issued ID (passport, driver’s license, UMID, or PhilID) to any notary public. Notarization typically costs ₱200–₱500 depending on location.
Submit your complaint. You have three options:
- Email a clear scanned copy of the notarized form and all supporting evidence (screenshots, family affidavits, etc.) to complaints@privacy.gov.ph.
- Send via courier or deliver in person to the NPC office at 25th–27th Floors, The Upper Class Tower, Quezon Avenue corner Scout Reyes Street, Quezon City.
- Call the NPC trunkline (+63) 2 5322 1322 local 114 or 115, or mobile numbers +63 970 818 0555 (Smart) / +63 905 506 1478 (Globe) for guidance on urgent cases.

There is a schedule of fees (see NPC Circular No. 2023-01), but individual complainants in straightforward privacy cases often face minimal or no filing fees. The NPC will issue an acknowledgment and may request additional information or a company response during investigation.

Step-by-Step Guide to Filing with the PNP Anti-Cybercrime Group (ACG) or Local Police

Secure your evidence the same way — screenshots, call logs, family witness statements, and any threats or shaming content.
If there is an immediate threat to safety or ongoing severe harassment, go to your nearest police station first and file a blotter report. Request referral to the cybercrime desk or women’s and children’s protection desk if relevant (especially if minors are affected).
File with the PNP ACG for cyber-related harassment.
- Email acg@pnp.gov.ph with your details, a narrative of events, and attached evidence.
- Call or text the hotlines 0917-847-5757 or 0968-868-1810.
- Visit in person at Camp Crame, Quezon City, or check for the PNP e-Complaint System on the official PNP website.
- Local police stations with cyber desks can also receive reports and forward them.
Execute a sworn statement. The PNP will guide you in preparing an affidavit. Affected family members should also provide statements if they received direct harassment.
Follow up. The ACG investigates, may coordinate with the NPC, NBI, or telecom providers, and can build a case for filing with the prosecutor’s office. Urgent cases involving threats often receive faster attention, especially following the 2026 PNP directive to crack down on abusive lending apps.

Required Documents and Practical Tips

Core evidence package for both NPC and PNP:

Your valid ID and contact details.
Screenshots or printouts of all harassing messages/calls/posts (include dates, times, sender numbers or accounts, and content showing family involvement).
Affidavits or written statements from affected family members.
Records of any prior complaints to the app or attempts to stop the harassment.
Loan details or app screenshots showing the account (helpful for context, though the complaint focuses on collection methods).
For PNP: Police blotter if already filed.

Practical realities:

Act quickly — apps sometimes change numbers or delete old messages.
Do not delete original evidence from your phone; take screenshots and back them up.
If you are an overseas Filipino worker (OFW) or foreigner, you can file via email or through a representative in the Philippines. Digital evidence is accepted; apostille is rarely required for these complaints.
Many apps operate through unregistered entities or third-party collectors. Regulators can still trace them through payment records, app stores, and server data.
Filing a complaint will not automatically erase your debt, but it addresses illegal collection tactics separately from any civil obligation you may have.

Common Pitfalls and How to Handle Them

Many people delay filing because they fear retaliation, worry about their outstanding loan, or feel overwhelmed. Retaliatory harassment after filing is itself a violation and can be reported as an additional offense. Outstanding loans and privacy/harassment complaints are treated as separate matters — paying (or negotiating) the loan does not waive your right to complain about illegal tactics.

Evidence can sometimes be incomplete if family members are reluctant to get involved. Reassure them that their statements help protect everyone and that complaints are confidential during investigation. Backlogs exist at both agencies, so complete documentation and polite follow-ups speed things up. Unregistered or foreign-operated apps can be harder to penalize, but successful enforcement actions and fines have been issued in many similar cases.

Frequently Asked Questions

Can I file a complaint if the lending app only contacted my family and not me directly?
Yes. The unauthorized processing and disclosure of your personal data to third parties (your family) violates the Data Privacy Act. Your family members can also file or support the complaint as affected data subjects or witnesses.

Do I need a lawyer to file with the NPC or PNP?
No. Both agencies accept complaints from individuals without lawyers. The forms are straightforward, and staff can guide you on basic requirements. For complex cases or if you want to pursue civil damages later, consulting a lawyer is helpful but not required to start.

How long does the process take?
NPC acknowledgment is usually quick (days to a couple of weeks). Full investigation and resolution can take several months depending on complexity and agency workload. PNP ACG often acts faster on urgent threat cases. Follow up regularly with your reference number.

Will the lending app know who filed the complaint?
The agencies share the complaint details with the respondent company during investigation so they can respond. However, your personal safety is prioritized, and further harassment can be reported as a new violation.

What if the harassment continues after I file?
Document the new incidents immediately and report them to the same agency (or the other one) as a supplemental complaint. Continued violations strengthen your case and can lead to stronger orders or charges.

Can affected family members file their own separate complaints?
Yes. Each person whose privacy was violated or who received harassing calls/messages has standing to file. Joint or coordinated complaints are also effective.

Is it better to settle or pay the loan before complaining?
You can address the debt separately through negotiation or legal channels. The harassment complaint focuses on illegal collection methods and stands on its own. Paying does not prevent you from seeking relief for privacy violations or threats.

What evidence works best for cases involving family contacts?
Clear screenshots showing the app or collector reaching out to specific family members, combined with affidavits from those family members describing the calls or messages and their impact. Timestamped records and patterns of repeated contact are particularly persuasive.

Can foreigners or OFWs file these complaints?
Yes. The Data Privacy Act protects all individuals in the Philippines or whose data is processed here. OFWs and foreigners use the same email or representative filing process. Jurisdiction applies when the app targets Philippine residents or processes their data.

Key Takeaways

Lending app harassment that reaches your family through unauthorized contact lists or disclosure of your loan details violates the Data Privacy Act of 2012 (RA 10173) and can also be criminal.
File with the NPC for privacy violations and data misuse; file with the PNP Anti-Cybercrime Group for threats, public shaming, or other criminal acts. Many people file with both.
Strong evidence — especially screenshots plus family member statements — is the foundation of a successful complaint. Notarize the NPC Complaint Affidavit and submit via email, courier, or in person at the Quezon City office.
Act promptly, keep records of everything, and follow up. Recent government crackdowns mean authorities are paying closer attention to these cases.
You have real rights and practical remedies. Documenting the harassment and filing formal complaints through the proper channels is the most effective way to make it stop and hold the responsible parties accountable.

The process may feel daunting at first, but thousands of Filipinos have successfully used these avenues to regain peace of mind for themselves and their families. Start with gathering your evidence today — that single step already puts you in a stronger position.