If an online lending app is threatening you, calling your contacts, posting your photo, shaming you on Facebook, or adding surprise charges you never clearly agreed to, you can report it in the Philippines. The right agency depends on the problem: the SEC handles lending and unfair debt collection issues, the National Privacy Commission handles misuse of personal data, and cybercrime authorities handle threats, scams, impersonation, sexualized harassment, and similar online abuse. The important first move is to save evidence before the app, collector, or account disappears.

What counts as an abusive online lending app?

Online lending apps are not automatically illegal. Many people borrow through mobile apps because they need fast cash for medical bills, rent, tuition, or emergencies. The legal problem starts when the lender or its collectors use unlawful, abusive, deceptive, or privacy-invasive methods.

Common reportable conduct includes:

Accessing or uploading your phone contacts without a lawful and proportionate reason
Calling or texting your family, employer, neighbors, or friends who are not guarantors
Threatening to post your photo, ID, address, workplace, or loan details online
Sending “wanted,” “scammer,” “magnanakaw,” or sexually degrading messages
Threatening arrest, imprisonment, barangay action, or police action when they have no lawful basis
Collecting hidden charges, excessive penalties, or fees not clearly disclosed before loan release
Operating as an online lending platform without SEC authority or without being recorded with the SEC
Using fake names, fake law firms, fake police documents, or fake court notices
Harassing a person who is only a contact reference and not the borrower or guarantor

A 2026 joint public advisory of the DICT, NPC, and SEC specifically warned against online lending platforms engaging in harassment, intimidation, public shaming, and unlawful use of personal data in collection practices. It also states that contacting people in the borrower’s contact list other than named guarantors is prohibited for debt collection purposes.

Which agency should you report to?

Use this table to decide where to file. In serious cases, file with more than one agency because one incident can involve lending violations, privacy violations, and criminal conduct at the same time.

Problem	Main agency to report to	Why this agency
Harassment, shaming, threats, unfair collection, fake legal threats, unregistered lending activity	Securities and Exchange Commission (SEC)	The SEC regulates lending and financing companies and accepts complaints through the SEC iMessage portal. (Securities and Exchange Commission)
App accessed contacts, used your photo or ID, messaged your contacts, exposed personal data, refused deletion of unnecessary data	National Privacy Commission (NPC)	The NPC handles Data Privacy Act complaints and requires a formal complaint in a specific format. (National Privacy Commission)
Death threats, rape threats, extortion, fake sex scandal threats, identity theft, scam, impersonation, hacking, cyber libel	CICC / PNP Anti-Cybercrime Group / NBI Cybercrime Division / DOJ Office of Cybercrime	Cybercrime and criminal harassment concerns are handled by cybercrime authorities; the 2026 advisory lists DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group channels.
Loan came from a bank, e-wallet, payment provider, or BSP-supervised financial institution, and your first complaint to that institution was unresolved	Bangko Sentral ng Pilipinas (BSP)	BSP handles consumer assistance for BSP-supervised financial institutions after the consumer first raises the concern with the institution. (Bangko Sentral ng Pilipinas)
Wrong credit reporting or negative credit information from a lender	Credit Information Corporation (CIC), plus the reporting lender	CIC directs consumers to SEC for lending and online lending apps, BSP for banks and credit cards, and NPC/cybercrime authorities for privacy violations. (Credit Information Corporation (CIC))

Legal basis: your rights against abusive online lending apps

Lending companies must be registered and authorized

Under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, lending companies are regulated because the State wants lending operations to be sound, stable, and protected from practices prejudicial to public interest. The law requires lending companies to operate under SEC regulation. (Supreme Court E-Library)

In practical terms, do not rely only on the app name. Many apps use a different brand name from the corporate name behind the loan. When reporting, try to identify:

App name shown in Google Play, App Store, APK site, Facebook ad, SMS, or website
Corporate name in the loan agreement, disclosure statement, privacy notice, or collection messages
SEC registration number, certificate of authority number, or address, if shown
Payment account name used to collect from you
Collector’s phone number, Viber, Messenger, WhatsApp, Telegram, or email address

If you cannot identify the corporate name, still report. Regulators can use app screenshots, payment channels, phone numbers, URLs, and messages to trace patterns.

Debt collection has legal limits

The SEC issued Memorandum Circular No. 18, Series of 2019, on the prohibition of unfair debt collection practices by financing and lending companies. The SEC’s own issuances page lists this circular together with Memorandum Circular No. 19, Series of 2019, which covers disclosure requirements in advertisements and reporting of online lending platforms. (SEC Appointment System)

The important point is simple: a lender may collect a valid debt, but it cannot collect by threatening harm, using deceptive means, shaming you publicly, contacting unrelated third persons, or pretending to have powers it does not have.

You have a right to clear loan disclosures

Under Republic Act No. 3765, or the Truth in Lending Act, creditors must give a clear written statement before the credit transaction is completed, including the finance charge in pesos and centavos and the percentage that the finance charge bears to the total amount financed as a simple annual rate. (Lawphil)

For online lending app complaints, this matters when:

The app advertised “0% interest” but deducted large processing fees before releasing the loan.
You borrowed ₱3,000 but received only ₱2,100 because charges were deducted upfront.
The due date, interest, penalties, or rollover fees were hidden or misleading.
The app made it hard to view or download the loan agreement.

Your phone contacts are not free collection tools

Under Republic Act No. 10173, or the Data Privacy Act of 2012, the State protects the fundamental human right of privacy while recognizing the role of information technology. (National Privacy Commission)

The 2026 DICT-NPC-SEC advisory is very specific for online lending platforms: unnecessary app permissions are prohibited; unauthorized, excessive, or disproportionate processing of personal data is prohibited; and unbridled processing of contact lists is prohibited. It also says character references and guarantors must be treated separately: a character reference is for identification or verification, while a guarantor must separately consent to be responsible for the loan.

This means your friend, officemate, relative, or employer does not become liable for your loan just because their name or number was in your phone.

Threats and online abuse may be criminal

Some online lending app conduct goes beyond an administrative complaint. Depending on the facts, it may involve the Revised Penal Code, Republic Act No. 10175 or the Cybercrime Prevention Act of 2012, the Safe Spaces Act, or other special laws.

Examples:

“Ipapapatay kita” or “pupuntahan ka namin” may be treated as threats.
“Gagawa kami ng sex scandal gamit mukha mo” may require urgent cybercrime reporting.
Posting edited sexual images, sexual insults, or gender-based online attacks may implicate Republic Act No. 11313, or the Safe Spaces Act. (Lawphil)
Using your name, photo, ID, or account to deceive others may involve computer-related identity misuse under cybercrime laws.
Publicly posting false accusations may raise cyber libel or civil damages issues, depending on the exact words, publication, and parties involved.

Civil remedies may also be available. The Civil Code provides that every person must act with justice, give everyone his due, and observe honesty and good faith; a person who causes damage contrary to law, morals, good customs, or public policy may be liable for compensation. (Lawphil)

What to do before you file a complaint

Before uninstalling the app or blocking everyone, preserve evidence. Online lending app cases often fail or slow down because the borrower only has a story but no screenshots, app details, or proof of payment.

Evidence checklist

Evidence	Why it matters
Screenshots of threatening messages	Shows exact words, sender number, date, and time
Screen recording of app permissions	Shows whether the app requested contacts, camera, gallery, SMS, location, or microphone
App page screenshot	Shows app name, developer, package name, reviews, download link, and privacy policy
Loan agreement or disclosure statement	Shows principal, released amount, interest, fees, penalties, due date, and corporate name
Proof of disbursement	Shows how much you actually received
Proof of payment	Shows whether the lender continued collecting despite payment
Messages sent to your contacts	Shows third-party harassment and privacy violation
Call logs	Shows frequency and pattern of collection calls
Social media posts	Shows public shaming, defamation, use of photo, or threats
Valid ID and contact details	Usually needed for government complaint verification
Timeline of events	Helps the agency understand what happened without reading hundreds of screenshots

Use filenames that make sense, such as:

2026-04-12_SMS_threat_from_09xx.png
LoanAgreement_AppName_2026-04-10.pdf
PaymentReceipt_GCash_2026-04-15.jpg
MessageToEmployer_2026-04-16.png

This small step makes your complaint easier to evaluate.

Step-by-step guide: how to report an online lending app in the Philippines

1. Secure your phone and accounts

Do this immediately if the app is accessing your contacts or files:

Turn off app permissions for contacts, camera, photos, location, SMS, and microphone.
Take screenshots of the permissions page before changing it.
Change passwords for email, e-wallet, banking apps, and social media.
Enable two-factor authentication.
Tell close contacts not to respond to collectors and not to send money to anyone claiming to collect for you.
Do not click links sent by collectors, especially APK download links or “settlement” links.

If the threats are urgent, report to cybercrime authorities first while also preserving evidence.

2. Identify whether the app is SEC-related, BSP-related, or a scam

Look at the loan documents and app pages. Most online lending apps in the Philippines are tied to lending or financing companies regulated by the SEC, not the BSP. CIC’s consumer guidance also directs complaints involving lending companies, financing companies, online lending apps, and microfinance institutions to the SEC. (Credit Information Corporation (CIC))

However, if the loan was offered by a bank, credit card issuer, e-wallet, payment operator, or other BSP-supervised financial institution, complain first to that institution’s consumer assistance channel, then escalate to the BSP if unresolved. BSP’s consumer page says consumers may file through BSP Online Buddy or submit a Complaints, Inquiries and Requests form by email. (Bangko Sentral ng Pilipinas)

3. File a complaint with the SEC for unfair collection or illegal lending activity

File with the SEC when the complaint involves:

Unfair debt collection
Harassment by collectors
Threats to shame you or contact third persons
Undisclosed charges or misleading loan terms
Unregistered or unauthorized lending operations
Online lending platform issues involving lending or financing companies

The SEC iMessage portal is the SEC’s web-based system for public inquiries, complaints, incidents, and requests. The portal allows users to open a new ticket and check ticket status. (Securities and Exchange Commission)

When writing the complaint, keep it factual:

State your full name, contact number, email, and location.
State the app name and corporate name, if known.
State the loan date, amount applied for, amount released, due date, and total amount demanded.
Describe the abusive acts in chronological order.
Identify the collector numbers or accounts.
Attach evidence.
State what you are asking the SEC to do, such as investigate unfair debt collection, verify authority to operate, stop harassment, or review disclosure violations.

A practical complaint summary can look like this:

I borrowed ₱5,000 from [App Name] on [date] and received only ₱3,850 after deductions. Starting [date], collectors using [numbers/accounts] sent threats to me and contacted my mother, employer, and friends who are not guarantors. They also threatened to post my photo online. Attached are screenshots, call logs, the loan disclosure, proof of release, and messages sent to my contacts. I request investigation for unfair debt collection, possible unauthorized online lending activity, and violation of SEC rules on online lending platforms.

4. File a complaint with the NPC for privacy violations

File with the National Privacy Commission when the app:

Accessed or used your contacts beyond what was necessary
Contacted people who were not guarantors
Used your photo, ID, address, employer, or phone number to shame or threaten you
Processed your personal data after the purpose was already finished
Refused to correct, delete, or stop improper processing of your personal data
Used deceptive consent screens or pre-ticked permissions

The NPC says a formal complaint must be filed in a specific format: download the form, print and fill it out, have it notarized, then submit it in person, by courier, or by scanned email to the NPC complaints address. (National Privacy Commission)

For privacy complaints, focus on the data misuse:

What personal data was collected?
How did the app get it?
Was permission required before you could borrow?
Were contacts harvested or messaged?
Were photos, IDs, addresses, or employer details exposed?
Did you ask them to stop?
What harm resulted?

If you are abroad, notarization can be a bottleneck. Philippine agencies may require a properly notarized or consularized sworn complaint, depending on the filing. For documents executed outside the Philippines, Filipinos and foreigners commonly use a Philippine Embassy/Consulate acknowledgment or a local notarization with apostille, depending on the country and document requirement.

5. Report threats, scams, or cyber harassment to cybercrime authorities

Report to cybercrime authorities when the conduct involves:

Death threats or threats of physical harm
Threats to create or spread fake nude photos, sex videos, or deepfakes
Extortion
Identity theft or impersonation
Fake warrants, fake court orders, or fake police documents
Unauthorized access to accounts
Public posts intended to shame, defame, or sexually harass you

The DICT-NPC-SEC advisory lists reporting channels for other forms of harassment, threats, frauds, and scams, including DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group. It also lists SEC FINLEND for unfair debt collection complaints.

When reporting criminal threats, include:

Exact threatening words
Sender number or account
Date and time
Screenshots showing the full number/account
Link to the social media post, if any
Names of witnesses or contacts who received messages
Whether you fear immediate harm

If there is a direct threat to your safety, also go to the nearest police station or barangay for immediate assistance and documentation. A barangay blotter does not replace an SEC, NPC, or cybercrime complaint, but it helps create a record.

6. Report app store abuse and preserve the app listing

Also report the app to the platform where it is distributed, such as Google Play, Apple App Store, Facebook, or a website host. This does not replace government reporting, but it can help stop more victims from downloading the app.

Before reporting the listing, screenshot:

App name
Developer name
Package name or URL
Privacy policy link
Reviews mentioning harassment
Permissions requested
Download page date

What happens after you file?

Government action is usually not instant. Expect these practical stages:

Stage	What usually happens
Acknowledgment or ticket creation	SEC iMessage and similar systems may generate a ticket or reference number. Save it.
Initial review	The agency checks whether the complaint falls under its jurisdiction and whether evidence is sufficient.
Request for clarification	You may be asked for missing documents, clearer screenshots, proof of identity, or a sworn statement.
Referral or coordination	SEC, NPC, DICT, NBI, PNP, BSP, or other agencies may refer parts of the complaint to the proper office.
Investigation or enforcement	The agency may investigate the company, platform, collector, phone numbers, or data processing activity.
Administrative or criminal action	Possible outcomes include warnings, fines, suspension, revocation, takedown coordination, or criminal investigation, depending on the facts.

The 2026 advisory warns that violations of applicable laws, implementing rules, and SEC regulations may subject erring financing and lending companies to administrative sanctions, including fines, suspension, revocation of authority to operate, and other penalties.

Common mistakes that weaken complaints

Deleting the app too early

Uninstalling may remove loan details, in-app messages, and proof of permissions. Screenshot or screen-record first.

Sending only emotional statements

It is understandable to feel angry or scared, but agencies need facts. Give dates, numbers, screenshots, names, amounts, and a clear timeline.

Ignoring the difference between a reference and a guarantor

A contact reference is not automatically liable. A guarantor must separately consent to assume responsibility for the loan. The 2026 advisory makes this distinction clear.

Believing every “legal notice” sent by a collector

Collectors often send fake court threats. A real court case has a case number, court branch, official process, and proper service. A collector cannot issue a warrant. Nonpayment of an ordinary loan is generally a civil matter, although separate facts like fraud, fake identity, or bouncing checks can create different legal issues.

Paying “extension fees” without written confirmation

Some apps push borrowers into endless rollovers. If you pay, save the receipt and ask for written confirmation of how the payment is applied: principal, interest, penalty, or full settlement.

Letting collectors talk to your employer

If collectors contact your employer, HR, school, or clients, save the messages and tell the recipient not to engage. Ask them to send you screenshots. Third-party harassment is often stronger evidence than messages sent only to the borrower.

Special situations for OFWs, foreigners, and people outside the Philippines

You can still report an online lending app even if you are abroad, especially if:

The app is operating in the Philippines.
The borrower is in the Philippines.
Your Philippine number, contacts, family, employer, or e-wallet was used.
The lender or collector is using Philippine channels.

Practical issues to prepare for:

Time zone delays: Agencies operate on Philippine time.
Notarization: Formal complaints or affidavits may need notarization. If signed abroad, ask whether the agency will accept a consular acknowledgment or apostilled document.
Foreign-language evidence: Translate important non-English messages if the agency requests it.
Philippine contact person: If you are abroad, give an email address and Philippine mobile number if available.
Payment records: Save remittance, bank, e-wallet, or international transfer proof.

Foreigners should also keep passport or visa details private unless specifically required by the agency. Blur unrelated sensitive information when submitting screenshots, but do not alter the threatening words, sender details, date, or time.

Frequently Asked Questions

Can I report an online lending app even if I really owe money?

Yes. A valid debt does not give collectors the right to harass you, shame you, threaten you, or contact unrelated people. Your complaint is about unlawful collection practices, privacy violations, or criminal threats. The debt issue and the harassment issue are separate.

Can an online lending app contact my contacts?

For debt collection, the 2026 DICT-NPC-SEC advisory says lending and financing companies, or persons acting as such, may only contact the guarantor. Contacting people in your contact list other than named guarantors is prohibited.

What is the difference between a character reference and a guarantor?

A character reference is someone used for identification or verification. A guarantor is someone who separately consented to be responsible if the borrower defaults. A person does not become a guarantor just because their number was in your phone or placed in an app form.

Where do I report online lending app harassment in the Philippines?

Report unfair collection and lending violations to the SEC. Report misuse of contacts, photos, IDs, and personal data to the NPC. Report threats, scams, identity theft, sexualized abuse, and extortion to cybercrime authorities such as CICC, PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DOJ Office of Cybercrime. (Securities and Exchange Commission)

Can I file with both SEC and NPC?

Yes. Many online lending app cases involve both unfair debt collection and privacy violations. For example, if a collector threatens you and messages your employer using your contact list, the SEC side is unfair collection, while the NPC side is unauthorized or excessive processing of personal data.

What if the app is not on the SEC list?

Still report it. An unrecorded or unauthorized online lending platform can be more serious. Attach the app link, screenshots, phone numbers, payment accounts, and messages so the SEC and cybercrime authorities can evaluate it.

Can I go to the barangay?

You can go to the barangay to document harassment, seek mediation for local disputes, or get immediate community assistance. But barangay proceedings do not replace SEC, NPC, BSP, NBI, PNP, or CICC complaints. Online lending app abuse often needs regulator or cybercrime action.

Can collectors have me arrested for not paying an online loan?

A collector cannot order your arrest. A warrant comes from a court, not from a lending app. Ordinary nonpayment of a loan is generally handled as a civil collection matter, but separate acts like fraud, falsification, identity misuse, or bouncing checks can create different legal issues.

Should I block the collectors?

After saving evidence, you may block abusive numbers for your safety and peace of mind. Before blocking, capture screenshots showing the number, date, time, and message content. Also warn your contacts not to reply or pay.

How long does a complaint take?

Timelines vary. Simple ticket acknowledgment can be quick, but investigation and enforcement may take weeks or months, especially if multiple apps, fake identities, or cybercrime tracing are involved. Your response time matters: promptly submit clearer screenshots, IDs, affidavits, or additional evidence when requested.

Key Takeaways

Report unfair debt collection and illegal lending activity to the SEC.
Report contact list misuse, unauthorized data use, and privacy violations to the NPC.
Report threats, extortion, fake sex scandal threats, scams, and identity theft to cybercrime authorities.
A valid debt does not justify harassment, public shaming, or contacting unrelated third persons.
Character references are not guarantors unless they separately consented to be responsible for the loan.
Save screenshots, app details, loan documents, proof of payment, call logs, and messages to contacts before deleting anything.
Use clear timelines, exact dates, phone numbers, app names, corporate names, and proof when filing.
If you are abroad, prepare for notarization, apostille or consular acknowledgment requirements if a sworn complaint is needed.