If repeated calls and messages from lending apps or their collectors are disrupting your life — ringing at all hours, pressuring your family, or using threats and shaming tactics — you have clear legal rights and practical remedies under Philippine law. While repaying a legitimate debt remains a civil obligation, no lender or collector may harass you to collect it. This guide explains exactly what counts as illegal behavior, the specific laws protecting you, and the step-by-step actions you can take to stop the calls, from immediate phone settings to formal complaints that regulators and law enforcement routinely act on.

Lending apps, often operated by SEC-registered lending or financing companies (or sometimes unregistered entities), must follow strict rules on debt collection. Excessive or abusive contact crosses into prohibited territory and can violate your rights to privacy, dignity, and freedom from unjust vexation.

What Counts as Illegal Harassment from Lending Apps

Philippine law distinguishes between reasonable collection efforts and harassment. Legitimate reminders — such as occasional polite calls or texts during reasonable hours asking about payment — are generally allowed. What crosses the line includes:

Repeated calls or texts multiple times a day or at unreasonable hours (typically before 6:00 a.m. or after 10:00 p.m., unless you have specifically consented or other narrow exceptions apply).
Use of threats, profane or abusive language, insults, or intimidation.
False claims that you face arrest, jail time, a hold-departure order, NBI blacklist, or criminal charges for simple non-payment (non-payment of a loan is a civil matter, not criminal, under the Constitution).
Contacting your family, friends, employer, or other contacts in your phonebook or social media to shame or pressure you.
Public shaming through social media posts, “wanted” posters, or messages disclosing your debt or personal information.
Misrepresenting themselves as lawyers, court officers, police, or government agents.
Harvesting or using your phone contacts, photos, or other data beyond what is strictly necessary for the loan process.

These practices cause real harm — stress, anxiety, damaged relationships, and reputational harm — and the law provides strong tools to stop them.

Your Legal Protections Under Philippine Law

SEC Rules on Fair Debt Collection

Most online lending apps fall under the supervision of the Securities and Exchange Commission (SEC) as lending companies (RA 9474) or financing companies (RA 8556). SEC Memorandum Circular No. 18, Series of 2019 explicitly prohibits unfair debt collection practices by these companies and their agents or third-party collectors.

Prohibited acts include using or threatening violence or criminal means against any person’s body, reputation, or property; threatening actions that cannot legally be taken; using obscenities or abusive language; disclosing or publishing the borrower’s personal information; contacting persons in the borrower’s contact list who are not named guarantors or co-makers (this remains unfair even if the borrower previously consented); and other deceptive or oppressive tactics. Violations can lead to fines from ₱25,000 to ₱1,000,000 per violation, suspension, or revocation of the company’s license to operate. The SEC has revoked licenses of several abusive platforms in recent years.

The Financial Products and Services Consumer Protection Act (RA 11765, 2022) further empowers regulators to act against unfair, deceptive, or abusive acts and practices (UDAAP) in financial services, including aggressive collection.

Data Privacy Protections

Republic Act No. 10173 (Data Privacy Act of 2012) gives you strong rights over your personal information. Lending apps must process data only for legitimate, specified purposes and cannot use it to harass you or others.

NPC Circular No. 20-01 (Series of 2020) specifically bars online lending apps from requiring or using unnecessary permissions such as full access to your phone’s contact list, social media contacts, gallery, or camera for debt collection or shaming purposes. Camera access is limited to know-your-customer (KYC) verification, and photos cannot be used to embarrass or pressure you. Apps must disable unnecessary permissions once the purpose is fulfilled and securely dispose of unlawfully held contact data.

The Supreme Court reinforced these protections in Grace M. Trimillos v. FCash Global Lending Inc. (G.R. No. 271360, August 13, 2025), upholding liability for unauthorized access to contact lists and shaming tactics, including damages and referral for criminal prosecution under the Data Privacy Act.

You have the right to object to processing, request erasure or blocking of your data, and be informed of how your information is used.

Criminal Remedies for Serious Cases

Persistent harassing calls that cause annoyance, irritation, or distress can constitute unjust vexation under Article 287 of the Revised Penal Code, punishable by arresto menor (imprisonment of 1 to 30 days) or a fine.

If calls involve threats of harm, grave threats under Article 282 or light threats under Article 283 may apply. Public shaming or false statements can lead to cyber libel charges under the Cybercrime Prevention Act (RA 10175). The SIM Registration Act (RA 11934) helps authorities trace numbers used in harassment.

Step-by-Step Guide to Legally Stop the Harassment

Preserve every piece of evidence immediately. Do not delete messages, call logs, or app notifications. Take clear screenshots showing the phone number or profile, exact date and time, full message content or call duration, and any threats or third-party contacts. Export or photograph your call history. Ask affected family members or friends for written statements or screenshots of messages they received. Keep records of the original loan agreement or app screenshots.
Block the numbers and secure your device. Use your phone’s built-in block feature or “Silence Unknown Callers” / spam filter settings. Revoke all app permissions in your phone settings — especially Contacts, Call Logs, SMS, Camera, Location, and Storage. Uninstall the app if you no longer need it, but first screenshot any remaining account or transaction details. Consider third-party call-blocking apps available on official stores.
Send a formal cease-and-desist and data objection notice. Email (and send via registered mail or app message if possible) a clear written demand to the lender’s customer service and compliance email. State that you object to further processing of your personal data and that of your contacts under the Data Privacy Act and NPC Circular No. 20-01. Demand they immediately stop all calls and messages (except formal legal collection notices served properly), cease contacting third parties, and delete or cease using any harvested contact data. Give a reasonable deadline, such as five business days. Keep a copy and proof of sending. This creates an official record and often prompts compliance.
File complaints with the appropriate regulators and authorities if the calls continue. Provide your evidence package with each complaint. You can file multiple complaints in parallel.
Address the underlying debt separately and strategically. Harassment does not erase the debt, but you can negotiate repayment terms in writing once the abusive contact stops. Consider seeking professional advice on restructuring or settlement. Never pay under verbal pressure without documentation.

Where and How to File Complaints

Use this overview of the main channels:

Securities and Exchange Commission (SEC) — Primary agency for unfair debt collection practices under MC No. 18. File online through their portal or contact the Financing and Lending Companies Department. Strong for license-related sanctions.
National Privacy Commission (NPC) — For data privacy violations, contact harvesting, and unauthorized disclosure. File the Privacy Complaint Form online at privacy.gov.ph or email complaints@privacy.gov.ph. They can order companies to stop processing your data and refer cases for prosecution.
Philippine National Police (PNP) or Anti-Cybercrime Group (ACG) — For criminal acts such as threats, unjust vexation, or extortion. Report at your nearest police station for a blotter entry, then proceed to the prosecutor’s office, or directly to PNP-ACG at Camp Crame. The DICT Cyber Hotline (1326) can also assist.
Barangay — For initial mediation in appropriate cases before escalating to court (Katarungang Pambarangay process usually aims for resolution within 15–30 days).
Office of the Prosecutor (fiscal) — For filing a formal criminal complaint-affidavit for unjust vexation or related offenses after police blotter.

Most filings have no or minimal fees. Notarization of affidavits (typically ₱100–300) strengthens formal complaints. You generally do not need a lawyer to file, though one can help draft strong documents or represent you in court.

Common Challenges and Practical Realities

Many people delay action because they feel overwhelmed or fear retaliation. Documenting everything and acting promptly strengthens your position. Lenders sometimes use unknown or changing numbers — your evidence of patterns and content still matters.

Unregistered or “fly-by-night” apps are still subject to NPC and PNP action even if the SEC cannot revoke a non-existent license; report them anyway.

For overseas Filipino workers (OFWs) or foreigners: The same laws apply. File complaints online or by email where possible; many agencies accept digital submissions. If court appearance becomes necessary, you may execute a special power of attorney for a Philippine-based representative. Constitutional privacy and due process protections extend to everyone in the Philippines or whose data is processed here.

Multiple apps harassing you? File separate or consolidated complaints — each violation stands on its own. Emotional distress from prolonged harassment can support claims for moral damages in a civil case alongside regulatory complaints.

Frequently Asked Questions

Can lending apps legally call me repeatedly or at night?
No. Repeated excessive calls or contact outside reasonable hours (generally before 6:00 a.m. or after 10:00 p.m.) violate SEC rules on fair collection and can constitute unjust vexation. Reasonable, non-harassing contact during proper hours is different from bombardment.

Is it illegal for them to call or message my family, friends, or employer?
Yes, in almost all cases. Contacting third parties who are not guarantors or co-makers to shame or pressure you violates both SEC MC No. 18 and the Data Privacy Act, even if the app previously accessed your contacts. Get statements from those contacted.

What if the calls come from private or frequently changing numbers?
Still document the pattern, times, and content. Screenshots of notifications or call logs help. Regulators and police can investigate patterns; the SIM Registration Act aids tracing.

Do I still have to pay the debt if they are harassing me?
Yes, a legitimate debt remains a civil obligation. However, you can demand they stop the illegal tactics while you address repayment through proper channels, such as written negotiation or formal restructuring.

How long does it take for the harassment to stop after I complain?
It varies. A strong cease-and-desist letter sometimes brings quick results. SEC and NPC investigations can take weeks to months, but they have issued cease orders and sanctions in many cases. Criminal complaints move through preliminary investigation (often 1–3 months or longer) before court. Keep records of continued violations after complaints — this strengthens your case.

Can I file complaints without a lawyer?
Yes. Most agencies provide forms and accept simple submissions with evidence. A lawyer can strengthen complex cases or handle court proceedings, but it is not required to start the process.

What evidence works best?
Clear screenshots with timestamps and sender details, call logs, messages showing threats or third-party contact, your written cease-and-desist, and affidavits from affected family or friends. The more organized and contemporaneous your evidence, the stronger the complaint.

Are there risks to reporting?
Reporting legitimate violations is protected. Lenders cannot lawfully retaliate with further illegal harassment. In practice, many borrowers report that complaints lead to the aggressive tactics stopping.

Key Takeaways

You have the right to stop harassment even while a legitimate debt exists — the two issues are separate.
Start today by preserving evidence, blocking numbers on your device, revoking app permissions, and sending a formal cease-and-desist citing the Data Privacy Act and SEC rules.
Report ongoing violations to the SEC for unfair collection practices and the National Privacy Commission for data privacy breaches; use PNP or the prosecutor for criminal aspects such as unjust vexation or threats.
Strong documentation is your most powerful tool — screenshots, logs, and third-party statements turn complaints into actionable cases.
Regulators have revoked licenses and pursued cases against abusive lenders; the Supreme Court has upheld liability for contact harvesting and shaming.
Address the debt calmly and in writing once abusive contact stops, or seek professional advice on options.
You are not powerless. Philippine law provides practical, enforceable remedies designed to protect ordinary people from exactly this kind of pressure.

Take the first step with evidence and a formal notice today. Many borrowers in your situation have successfully stopped the calls and held lenders accountable through these exact processes.