When a lending app, online casino, Telegram “agent,” or Facebook group appears to be working together to push you into debt, threaten you, expose your contacts, or block withdrawals, treat it as more than an ordinary customer-service problem. In the Philippines, coordinated lending app and online gambling scams may involve several legal issues at the same time: illegal lending, unfair debt collection, data privacy violations, cybercrime, estafa, illegal gambling, money muling, and unauthorized use of bank or e-wallet accounts. This guide explains where to report, what evidence to save, which agency handles which part of the case, and how to avoid common mistakes that can weaken your complaint.

What “coordinated lending app and online gambling scam” usually means

These cases often look confusing because several actors appear in one scheme:

An online gambling site or “casino agent” encourages you to keep playing.
A lending app offers fast cash, sometimes through the same chat group or referral link.
A collector later threatens to message your family, employer, or phone contacts.
The gambling site refuses withdrawals unless you “top up,” “verify,” “pay tax,” or “unlock” the account.
Payments move through multiple e-wallets, bank accounts, QR codes, or personal accounts.
The same names, numbers, scripts, or payment channels appear across different apps or gambling platforms.

Legally, you should separate the complaint into issues, not just “one scam.” A single incident may require reports to the PNP Anti-Cybercrime Group or NBI Cybercrime Division, SEC, National Privacy Commission, BSP, PAGCOR, and sometimes the prosecutor’s office.

The main Philippine laws involved

Cybercrime and online fraud

Republic Act No. 10175, the Cybercrime Prevention Act of 2012, covers computer-related fraud, identity misuse, illegal access, and crimes under the Revised Penal Code when committed through information and communications technology. It also created a legal framework for cybercrime investigation, including the role of the DOJ Office of Cybercrime and cybercrime units of the PNP and NBI. See the full text of RA 10175 on Lawphil. (Lawphil)

For ordinary victims, this matters because screenshots, URLs, device details, transaction records, phone numbers, e-wallet accounts, and chat logs may help investigators connect multiple accounts to one coordinated operation.

Estafa, threats, coercion, and related crimes

Even if the scam happened online, traditional crimes under the Revised Penal Code may still apply.

Common provisions include:

Estafa under Article 315 — when someone defrauds another through deceit, false pretenses, or fraudulent means.
Grave threats under Article 282 — when threats of harm are used to pressure someone.
Grave coercion under Article 286 — when violence, intimidation, or force is used to compel someone to do something against their will.
Unjust vexation under Article 287 — sometimes used for repeated harassment that may not fit a heavier offense.
Libel under Article 355, and cyberlibel under RA 10175, if false and defamatory accusations are posted or sent online.

For lending app harassment, the most common real-world evidence includes threats to post your ID, fake “wanted” posters, messages accusing you of fraud, calls to your employer, and group chats created to shame you.

Data privacy violations

Republic Act No. 10173, the Data Privacy Act of 2012, protects personal information and sensitive personal information. It applies when an app, company, collector, or operator collects, uses, shares, stores, or exposes personal data without a lawful basis or beyond what the borrower actually consented to. See the Data Privacy Act on Lawphil and the National Privacy Commission’s complaint page. (Lawphil)

This is especially important when a lending app:

accesses your phone contacts;
sends messages to people who are not part of the loan;
posts your name, face, ID, address, or employer online;
uses your data for public shaming;
threatens to disclose your debt to relatives or coworkers;
uses contact lists or photos for collection pressure.

Lending company regulation and abusive collection

Republic Act No. 9474, the Lending Company Regulation Act of 2007, regulates lending companies and places them under SEC supervision. Lending companies generally need proper corporate registration and authority from the SEC before operating. See RA 9474 on the Supreme Court E-Library. (Supreme Court E-Library)

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing companies, lending companies, and their third-party collection agents. The circular covers practices such as threats, harassment, profane language, false representations, and disclosure or publication of borrower information to shame or pressure payment. (ADB Law and Policy Reform)

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, also protects financial consumers by recognizing rights to fair treatment, disclosure, data privacy, protection against fraud and misuse, and timely complaint handling. It strengthens the powers of regulators such as the BSP, SEC, Insurance Commission, and CDA. (Supreme Court E-Library)

Financial account scams and money mule accounts

Republic Act No. 12010, the Anti-Financial Account Scamming Act (AFASA), penalizes financial account scamming and related conduct involving bank accounts, e-wallets, and other financial accounts. It is relevant when scammers use mule accounts, recruited account holders, fake accounts, phishing, social engineering, or coordinated transfers. See RA 12010 on Lawphil. (Lawphil)

Under AFASA-related BSP rules, disputed transactions may involve temporary holding of funds and coordinated verification among financial institutions, so reporting quickly to your bank or e-wallet provider is important. (Bureau of the Treasury)

Illegal online gambling

Illegal gambling may involve Presidential Decree No. 1602, which penalizes illegal gambling, and Republic Act No. 9287 for illegal numbers games. See PD 1602 on Lawphil and RA 9287 on Lawphil. (Lawphil)

Executive Order No. 13, Series of 2017 strengthened the fight against illegal gambling and clarified the authority of agencies involved in regulating and licensing gambling activities. See EO No. 13 on Lawphil. (Lawphil)

For offshore gambling, Executive Order No. 74, Series of 2024 imposed an immediate ban on Philippine Offshore Gaming Operators, Internet Gaming Licensees, and other offshore gaming operations, and classified unlicensed offshore gaming operations as illegal gambling entities. (Supreme Court E-Library)

Where to report coordinated lending app and online gambling scams

Use the agency that matches the specific harm. Filing with the wrong office is common, and it often causes delay.

Problem	Primary office to report to	Why
Online scam, phishing, fake casino, threats, identity misuse, cyber fraud	PNP Anti-Cybercrime Group or NBI Cybercrime Division	They investigate cybercrime and can prepare cases for prosecution
Harassment by online lending app or abusive collection	SEC	SEC supervises lending and financing companies and handles unfair debt collection complaints
Accessing contacts, debt shaming, posting IDs, misuse of personal data	National Privacy Commission	NPC handles Data Privacy Act violations
Unauthorized bank or e-wallet transfers	Your bank/e-wallet first, then BSP if unresolved	BSP handles complaints against BSP-supervised financial institutions
Illegal online gambling site or unlicensed casino platform	PAGCOR and law enforcement	PAGCOR regulates licensed gaming; illegal operations may need police/NBI action
Threats of physical harm, extortion, blackmail, or ongoing danger	Nearest police station, PNP ACG, or NBI	Immediate safety issues should not wait for administrative complaint processing
Money mule accounts, suspicious receiving accounts, laundering pattern	Bank/e-wallet fraud unit, BSP, PNP/NBI, possibly AMLC referral through authorities	Fast reporting may help trace and freeze funds

Step-by-step guide: what to do first

1. Stop communicating through unofficial channels

Do not negotiate through Telegram, Messenger, Viber, WhatsApp, or SMS accounts that cannot be verified. Scammers often use pressure tactics such as:

“Pay within 10 minutes or we will post your ID.”
“Deposit more to release your casino winnings.”
“You need to pay tax before withdrawal.”
“Borrow from this app to continue your game.”
“Send your OTP so we can verify your account.”
“Use your friend’s GCash if your account is blocked.”

Do not send OTPs, passwords, selfie videos, new IDs, or additional “verification fees.” A legitimate bank, e-wallet, lending company, or regulator will not ask for your password or OTP.

2. Preserve evidence before blocking everyone

Blocking immediately may stop harassment, but it can also make you lose access to useful evidence. Before blocking, save:

screenshots of the app profile, website, URL, QR code, referral link, and chat group;
screenshots of all threats, messages, and collection notices;
call logs with date, time, and phone number;
transaction receipts from GCash, Maya, banks, crypto wallets, or remittance centers;
bank/e-wallet reference numbers;
loan agreement, disclosure statement, payment schedule, and app screenshots;
gambling account username, player ID, wallet ID, betting history, and withdrawal history;
names of agents, collectors, admins, and group moderators;
app permissions requested by the lending app;
proof that third parties were contacted, such as screenshots from relatives or coworkers;
copies of IDs or documents you submitted to the app or casino.

Export chat histories where possible. Save original files, not just compressed screenshots. If you are preparing a formal affidavit, include dates, times, amounts, account names, and account numbers exactly as shown.

3. Secure your accounts and devices

Before filing complaints, reduce further damage:

Change passwords for your email, e-wallets, online banking, and social media.
Turn on two-factor authentication.
Remove unknown devices from your accounts.
Call your bank or e-wallet provider through official channels only.
Ask for temporary blocking, card replacement, password reset, or device unlinking if needed.
Revoke suspicious app permissions.
Uninstall suspicious lending or gambling apps only after saving evidence.
Warn close contacts that they may receive scam messages and should not respond.

If your SIM may have been compromised, report to your telco immediately. If your phone was stolen or remotely accessed, tell the bank/e-wallet and cybercrime investigators.

How to report to the PNP Anti-Cybercrime Group or NBI Cybercrime Division

Report to law enforcement when the case involves cyber fraud, coordinated scam operations, extortion, threats, identity misuse, fake websites, or unauthorized financial transactions.

The DOJ Office of Cybercrime lists contact information for cybercrime concerns, including cybercrime@doj.gov.ph and telephone contact details. The NBI Cybercrime Division also provides investigative assistance for victims of computer crimes through its citizens’ charter. (Cybercrime Division)

What to prepare

Bring or submit:

government ID;
written complaint narrative;
screenshots and printed copies of key evidence;
transaction receipts;
bank/e-wallet statements;
phone numbers, emails, URLs, usernames, QR codes, and account names used by scammers;
names and contact details of witnesses;
proof of threats, harassment, or data exposure;
device used, if investigators need to inspect it;
affidavit, if required.

Practical filing process

Prepare a chronological summary. Start from the first contact, then list each payment, threat, blocked withdrawal, loan release, collection message, and report made to a bank or platform.
Go to the nearest PNP Anti-Cybercrime Group office, Regional Anti-Cybercrime Unit, or NBI office. In urgent cases, go to the nearest police station first.
Submit evidence and execute a complaint affidavit if required. A complaint affidavit is a sworn statement of facts. It is usually notarized or subscribed before an authorized officer.
Ask for a reference number or receiving copy. Keep it for follow-ups and for bank/e-wallet escalation.
Follow up with additional evidence. Scam accounts often change quickly. Send new numbers, account names, and screenshots as they appear.

Timeline in practice

Initial intake may happen the same day, but tracing, subpoenas, preservation requests, bank coordination, and referral for preliminary investigation can take weeks or months. Delays often happen because victims submit incomplete transaction details, screenshots without URLs, or messages without visible dates and sender information.

How to report an abusive or illegal lending app to the SEC

Report to the SEC when the issue involves:

online lending app harassment;
excessive or hidden charges;
misleading loan terms;
collection threats;
contacting your phone contacts;
false claims of criminal case filing;
operating without SEC registration or authority;
mismatch between the app name and registered company;
failure to provide a clear loan disclosure statement.

The SEC’s online complaint portal is available through SEC i-Message, which accepts complaints and allows ticket tracking. The SEC also maintains contact details for complaints and inquiries. (Securities and Exchange Commission)

Check if the lending app is registered

Before filing, search the SEC’s lists of:

registered lending companies;
registered financing companies;
recorded online lending platforms.

If the app is not listed, include that in your complaint. If it is listed, identify the registered company behind the app. Many borrowers make the mistake of naming only the app brand, but the SEC usually needs the corporate name, app name, and platform link.

What to include in an SEC complaint

Include:

your full name and contact details;
name of the lending app;
registered company name, if known;
app store link or APK source;
loan amount, amount actually received, charges deducted, due date, and amount demanded;
screenshots of loan terms;
screenshots of threats or abusive messages;
proof that collectors contacted third parties;
list of phone numbers or accounts used by collectors;
copy of your ID;
clear statement of the relief requested, such as investigation, sanctions, correction of account, or stopping abusive collection.

Common SEC-related violations

Examples of possible unfair collection practices include:

using threats of violence or criminal prosecution to force payment;
using obscene, insulting, or abusive language;
contacting people who are not loan parties;
posting or threatening to post borrower information;
pretending to be police, lawyers, court staff, or government officers;
using fake warrants, fake subpoenas, or fake barangay notices;
collecting amounts not supported by the loan agreement.

A real debt does not give a lender the right to harass, shame, threaten, or misuse personal data.

How to report data privacy violations to the National Privacy Commission

Report to the NPC if the app or collector misused your personal information.

The NPC explains that a formal complaint must be filed in a specific format, using a downloadable form, notarized, and submitted in person, by courier, or by scanned email. (National Privacy Commission)

Examples of data privacy issues

File with the NPC when:

your contacts were accessed or messaged;
your photo, ID, or address was posted;
your employer or relatives were informed of your debt;
the app used your contact list for collection;
your personal data was shared with other collectors or groups;
fake posters, defamatory notices, or “wanted” images used your personal data;
the app collected more data than necessary for a loan.

What to prepare for the NPC

Prepare:

notarized complaint-affidavit or NPC complaint form;
proof of identity;
screenshots of the personal data exposed;
screenshots from third parties who received messages;
proof that the app had access to your contacts or files;
loan documents and privacy policy, if available;
dates when the data misuse happened;
names, numbers, emails, app names, and company names involved.

Practical tip

Ask affected relatives, coworkers, or friends to send you screenshots showing the sender, message, date, and time. A screenshot from your own phone saying “they messaged my contacts” is weaker than actual screenshots from the people who received the messages.

How to report unauthorized bank or e-wallet transactions

If money was transferred from your bank or e-wallet, report to the financial institution immediately. Do not wait for the police complaint before calling the bank or e-wallet.

The BSP says new complaints should first be reported to the financial institution’s own Financial Consumer Protection Assistance Mechanism or customer service channel. If unresolved or unsatisfactory, the consumer may escalate to BSP through the BSP Online Buddy or other BSP consumer assistance channels. (Bureau of the Treasury)

What to say to the bank or e-wallet

Use clear language:

“I am disputing these transactions as unauthorized. Please block further access, investigate, coordinate with the receiving institution, preserve records, and provide a case number.”

Ask for:

case/reference number;
date and time of report;
name or ID of the representative;
written confirmation;
list of required documents;
status of any fund-holding or recovery process;
expected resolution timeline.

Evidence for bank/e-wallet complaints

Evidence	Why it matters
Transaction receipt	Shows amount, date, reference number, and destination account
Account statement	Confirms official account activity
SMS or email alerts	Shows when you were notified
Scam messages or links	Helps connect the transfer to the fraud
Police/NBI/PNP report number	Helps escalation and investigation
Prior report to bank/e-wallet	Required before BSP escalation in many cases

How to report illegal online gambling sites to PAGCOR

PAGCOR warns the public against unauthorized online betting operations and notes that participation in unauthorized gaming activities is punishable by law and exposes players to unscrupulous groups. (PAGCOR)

Report to PAGCOR when the issue involves:

unlicensed online casino or betting site;
fake PAGCOR license or seal;
gambling site pretending to be government-approved;
refusal to release withdrawals after repeated top-ups;
“agent” using PAGCOR’s name falsely;
suspicious offshore gaming operation;
online gambling operation connected to scam messages or lending apps.

PAGCOR’s regulatory contact page lists departments and contact details, including electronic gaming and remote operations contacts. General concerns may also be sent through PAGCOR’s official support contact channels. (PAGCOR)

What to include in a PAGCOR report

Include:

website URL or app link;
screenshots of the platform;
claimed license number or PAGCOR logo;
account username or player ID;
deposit and withdrawal records;
e-wallet or bank accounts used for deposits;
names and numbers of agents;
chat logs showing promises, withdrawal blocks, or top-up demands;
proof that the operator is targeting Philippine users.

Important practical point

PAGCOR may handle regulatory concerns, but if you lost money through fraud, threats, hacking, or mule accounts, also report to PNP/NBI and your bank/e-wallet. PAGCOR is not a substitute for a criminal complaint.

Should you file with the barangay?

Usually, barangay conciliation is not the main route for online lending app and online gambling scams, especially if the respondent is unknown, located in another city, a corporation, a foreign entity, or an online syndicate.

Barangay conciliation under the Katarungang Pambarangay system is generally for disputes between individuals in the same city or municipality and within barangay jurisdiction. It is not designed to trace cybercriminals, investigate digital evidence, subpoena platforms, or regulate lending and gambling companies.

However, a barangay blotter may be useful if:

collectors went to your house;
threats are happening locally;
neighbors or relatives are being harassed in person;
you need a local record of repeated disturbance.

For cybercrime, fraud, illegal lending, and privacy issues, file directly with the proper agency.

Documents and evidence checklist

Document or evidence	For which agency
Government ID	All agencies
Written timeline of events	PNP/NBI, SEC, NPC, BSP, PAGCOR
Screenshots of chats, threats, posts, and calls	PNP/NBI, SEC, NPC
Loan agreement and disclosure statement	SEC
App name, app store link, APK source, company name	SEC, PNP/NBI
Proof contacts were messaged	NPC, SEC, PNP/NBI
Bank/e-wallet receipts and reference numbers	Bank/e-wallet, BSP, PNP/NBI
Casino website, app link, player ID, betting/withdrawal history	PAGCOR, PNP/NBI
Police report or cybercrime complaint reference	Bank/e-wallet, BSP, prosecutor
Notarized complaint-affidavit	NPC, prosecutor, sometimes PNP/NBI
Screenshots from third-party victims	NPC, PNP/NBI
Proof of prior complaint to bank/e-wallet	BSP

Sample complaint timeline format

Use a simple format like this:

Date and time	What happened	Evidence
March 3, 2026, 8:10 PM	Telegram agent invited me to online casino and sent link	Screenshot A
March 3, 2026, 8:45 PM	I deposited ₱2,000 to GCash account under Juan D.	Receipt B
March 4, 2026, 1:20 AM	Site showed winnings but blocked withdrawal unless I paid “tax”	Screenshot C
March 4, 2026, 9:00 AM	Same agent referred me to lending app	Screenshot D
March 5, 2026, 10:30 AM	Lending app released ₱3,500 but demanded ₱6,000 after 7 days	Loan screenshot E
March 8, 2026, 2:15 PM	Collector threatened to message my contacts	Screenshot F
March 8, 2026, 3:00 PM	My coworker received a message about my alleged debt	Screenshot G from coworker

This format helps investigators see coordination.

Common pitfalls that weaken complaints

Deleting the app too early

If you delete the app before saving loan terms, app permissions, company name, payment details, and messages, you may lose key evidence. Save first, then secure your phone.

Sending more money to “unlock” withdrawals

Fake gambling sites often keep inventing reasons to delay withdrawal: tax, AML verification, VIP upgrade, account freeze fee, processing fee, or risk deposit. Repeated payment usually increases the loss.

Naming only the brand, not the operator

Apps and gambling sites often use trade names. Try to identify:

corporate name;
app name;
website URL;
app package name;
payment account name;
agent name;
phone number;
email;
social media page.

Relying only on screenshots without dates

Screenshots should show sender identity, date, time, and full message. For websites, include the URL bar. For e-wallets, include reference numbers.

Posting accusations publicly

Victims understandably want to warn others. But public posts naming individuals may create separate defamation issues if facts are incomplete or identities are wrong. Reporting to agencies with evidence is safer than trial by social media.

Ignoring a legitimate loan obligation

If the lending company is legitimate and the loan is real, the principal obligation may still exist. What you are reporting is the illegal or abusive conduct: harassment, privacy violations, unauthorized charges, misleading disclosures, or unfair collection practices.

What foreigners and overseas Filipinos should know

Foreigners and Filipinos abroad can still report Philippine-based scams, especially if:

the operator, collector, bank, e-wallet, or receiving account is in the Philippines;
Philippine phone numbers or Philippine-registered companies are involved;
the online lending app targets Philippine users;
the gambling site claims PAGCOR authority;
the victim used a Philippine bank, GCash, Maya, or local payment channel.

Practical points:

If you are abroad, prepare a detailed affidavit before a Philippine consulate or notary where appropriate.
Documents executed abroad may need apostille or consular authentication depending on where they will be used.
If someone in the Philippines will file for you, prepare a Special Power of Attorney with clear authority to file complaints, submit documents, and receive notices.
Keep original electronic evidence. Do not rely only on printed copies.
Time zone differences matter. Use Philippine time where possible when reconstructing events.

What happens after you report?

For criminal complaints

PNP or NBI may evaluate evidence, request additional documents, trace accounts, coordinate with platforms or financial institutions, and refer the case to the prosecutor for preliminary investigation. The prosecutor determines whether there is probable cause to file a criminal case in court.

For SEC complaints

The SEC may evaluate whether the lending or financing company violated rules, operated without authority, used unfair collection practices, or failed to comply with disclosure and consumer protection requirements. Possible outcomes may include warnings, penalties, suspension, revocation, or referral for further action.

For NPC complaints

The NPC may require proper form, notarized complaint, evidence, and respondent details. It may handle privacy violations involving unauthorized processing, disclosure, data breach, or misuse of personal information.

For BSP complaints

The BSP Consumer Assistance Mechanism is generally a second-level recourse after you complain to your bank, e-wallet, or BSP-supervised institution. BSP facilitates communication and may act under its financial consumer protection powers where appropriate. (Bureau of the Treasury)

For PAGCOR reports

PAGCOR may verify licensing status, act on regulatory issues, and coordinate against illegal gambling operations. If there is fraud, threats, or money laundering indicators, law enforcement involvement is usually necessary.

Frequently Asked Questions

Can I report an online lending app even if I really borrowed money?

Yes. A real loan does not allow harassment, threats, public shaming, unauthorized access to contacts, or abusive collection. You may still owe a lawful debt, but the lender or collector must follow Philippine law and SEC rules.

Where should I report if the lending app messaged my contacts?

Report to both the SEC and the National Privacy Commission. The SEC handles unfair debt collection by lending or financing companies. The NPC handles misuse or unauthorized disclosure of personal data.

What if the online casino says it is PAGCOR licensed?

Do not rely on screenshots of logos or “certificates” sent by agents. Verify through official PAGCOR channels. If the site blocks withdrawals, demands repeated top-ups, or uses personal e-wallet accounts for deposits, save evidence and report to PAGCOR and PNP/NBI.

Can I recover money sent to a scammer’s GCash or bank account?

Recovery is not guaranteed, but speed matters. Report immediately to your bank or e-wallet and ask for investigation and coordination with the receiving institution. Then file with PNP/NBI. If the financial institution does not act satisfactorily, escalate to BSP after using the institution’s complaint channel.

Should I pay a lending app collector who is threatening me?

Do not pay through unofficial personal accounts or because of threats. First verify the lender, the exact amount legally due, and the official payment channel. Save the threats and report abusive collection. If there is an actual debt, ask for a proper statement of account.

Can collectors file a criminal case against me for not paying an online loan?

Non-payment of debt is generally a civil matter. However, fraud may be alleged if there was deceit from the start. Collectors often misuse threats of arrest or fake criminal cases to scare borrowers. Save those messages and include them in your SEC and cybercrime complaint.

What if the scammer is outside the Philippines?

Still report if Philippine accounts, phone numbers, companies, platforms, or victims are involved. The DOJ Office of Cybercrime is the central authority for certain cybercrime-related international cooperation matters, but practical investigation may still depend on available evidence and cross-border coordination.

Do I need a notarized affidavit?

For many formal complaints, especially before the NPC, prosecutor, or court-related processes, a notarized complaint-affidavit may be required. For initial police, NBI, SEC, bank, e-wallet, or PAGCOR reporting, you may often start with a written complaint and evidence, but agencies may later require sworn documents.

Is posting the scammer on Facebook a good idea?

It may warn others, but it can also create risks if you identify the wrong person, include personal data, or make statements you cannot prove. A safer approach is to report to the proper agencies and share only general warnings without exposing private information or making unsupported accusations.

How long does investigation take?

Urgent bank or e-wallet blocking should be done immediately. Agency action may take days to months depending on evidence, identity of respondents, number of accounts involved, platform cooperation, and whether the case proceeds to the prosecutor. Complete evidence and clear timelines help reduce delay.

Key Takeaways

Coordinated lending app and online gambling scams often involve multiple legal issues, so report by issue, not just by app name.
Report cyber fraud, threats, extortion, fake sites, and mule accounts to PNP ACG or NBI Cybercrime.
Report abusive online lending practices to the SEC.
Report contact-list harassment, debt shaming, and personal data misuse to the National Privacy Commission.
Report unauthorized bank or e-wallet transactions first to the provider, then escalate unresolved complaints to the BSP.
Report illegal or fake online gambling operations to PAGCOR and law enforcement.
Save evidence before deleting apps or blocking accounts.
Do not send OTPs, passwords, additional “unlocking fees,” or new verification documents to unverified agents.
A legitimate debt may still be payable, but harassment, threats, and privacy violations are not lawful collection methods.
The strongest complaints include a clear timeline, complete transaction records, screenshots with dates and sender details, and official reference numbers from prior reports.