I. Introduction

Online lending apps have become a common source of quick credit in the Philippines. Many borrowers use them for emergency expenses, bills, medical needs, tuition, or daily living costs. However, the convenience of app-based lending has also led to serious abuses. Some borrowers and even non-borrowers have reported harassment, public shaming, repeated threats, unauthorized contact with family members, abusive collection calls, defamatory messages, misuse of personal data, and intimidation by supposed collection agents.

While lenders have the right to collect lawful debts, that right is not unlimited. Debt collection must be done within the bounds of law, regulation, privacy rights, and basic standards of fairness. A borrower does not lose legal protection simply because the borrower owes money. Threats, harassment, insults, coercion, data privacy violations, and abusive collection practices may give rise to administrative, civil, and even criminal liability.

This article explains, in the Philippine context, how victims may report harassment and threats from online lending apps, what laws and agencies are involved, what evidence should be preserved, and what remedies may be available.

II. Online Lending Apps and the Legal Framework in the Philippines

Online lending apps may operate under different legal forms, but many are connected to lending companies or financing companies. In the Philippines, lending and financing businesses are regulated primarily through laws and rules administered by the Securities and Exchange Commission, commonly known as the SEC.

Relevant laws and regulations may include:

The Lending Company Regulation Act of 2007, or Republic Act No. 9474;
The Financing Company Act, or Republic Act No. 8556, as amended;
SEC rules and circulars on lending and financing companies;
SEC rules against unfair debt collection practices;
The Data Privacy Act of 2012, or Republic Act No. 10173;
The Cybercrime Prevention Act of 2012, or Republic Act No. 10175;
The Revised Penal Code, where threats, unjust vexation, slander, libel, coercion, or other offenses may be involved;
Consumer protection rules, where deceptive, unfair, or abusive practices are present.

The applicable remedy depends on the specific conduct. A single abusive act may violate more than one law. For example, an online lending app that sends threatening messages to a borrower’s contacts may raise issues under debt collection rules, data privacy law, cybercrime law, and criminal law.

III. What Counts as Harassment or Threatening Conduct?

Debt collection becomes abusive when the lender, collector, agent, or app operator uses unlawful, oppressive, deceptive, or unfair methods to force payment. Common examples include:

Repeated calls or messages at unreasonable hours; threats of physical harm; threats of arrest without legal basis; threats to file criminal cases merely because of nonpayment of a loan; sending humiliating messages to family, friends, co-workers, or employers; posting the borrower’s name, photo, ID, or personal details online; calling the borrower a scammer, thief, criminal, or other insulting names; using profane or degrading language; pretending to be a police officer, lawyer, court employee, or government official; threatening to seize property without court process; threatening to shame the borrower in social media; contacting people in the borrower’s phonebook without lawful basis; using personal information obtained from the borrower’s phone contacts, gallery, messages, or social media; and sending fake legal documents, fake subpoenas, fake warrants, or fake barangay notices.

Not every collection reminder is unlawful. A lender may send payment notices, demand letters, or lawful reminders. The line is crossed when the communication becomes threatening, defamatory, deceptive, invasive, coercive, or abusive.

IV. Debt Is Generally a Civil Obligation, Not a Crime

One of the most common tactics used by abusive online lending apps is to threaten borrowers with arrest or imprisonment. In general, nonpayment of a simple loan is a civil matter. A person is not automatically criminally liable merely because the person failed to pay a debt.

The Philippine Constitution prohibits imprisonment for debt. This means a borrower cannot be jailed solely for inability or failure to pay a loan. However, separate criminal liability may arise if there is fraud, falsification, use of fake identity, issuance of bouncing checks, or other criminal acts independent of the unpaid debt.

Therefore, a collector’s claim that the borrower will be arrested simply for nonpayment should be treated with caution. A lawful creditor may sue for collection of sum of money, but arrest, imprisonment, and criminal prosecution are not ordinary consequences of mere nonpayment.

V. Illegal or Abusive Collection Practices

The SEC has issued rules addressing unfair debt collection practices by lending and financing companies. These rules generally prohibit collection practices that harass, oppress, abuse, or threaten borrowers or their contacts.

Abusive collection methods may include:

Using threats of violence or harm;
Using obscene, insulting, or profane language;
Publishing or threatening to publish the borrower’s name or personal information;
Misrepresenting the amount or legal status of the debt;
Falsely claiming to be connected with courts, law enforcement, or government agencies;
Contacting third parties except under limited and lawful circumstances;
Using deceptive means to collect payment;
Making repeated or excessive calls intended to annoy, abuse, or harass;
Disclosing loan information to persons who are not parties to the loan.

A borrower may report such acts to the SEC, especially when the lender is a registered lending company, financing company, or an entity required to be registered with the SEC. Even where the app uses a different name from the registered company, it is important to identify the app name, developer name, company name, payment account, website, email address, and any registration details displayed in the app or loan documents.

VI. Data Privacy Violations by Online Lending Apps

Many complaints against online lending apps involve misuse of personal data. Some apps request access to contacts, photos, location, camera, SMS, or device information. In abusive cases, collectors use the borrower’s contact list to send humiliating or threatening messages.

Under the Data Privacy Act of 2012, personal information must be collected and processed lawfully, fairly, and for legitimate purposes. Personal data should not be processed beyond what is necessary. Consent, where required, must be meaningful and informed. Personal information controllers and processors must protect personal data against unauthorized access, use, disclosure, or misuse.

Potential data privacy violations may include:

Accessing the borrower’s contact list without valid consent;
Using contact information for harassment or public shaming;
Disclosing the borrower’s loan status to relatives, friends, co-workers, or employers;
Sending messages to third parties about the borrower’s debt;
Publishing the borrower’s photo, ID, phone number, address, or other personal information;
Using data for purposes not clearly disclosed at the time of collection;
Continuing to process personal data after consent has been withdrawn, where withdrawal is legally applicable;
Failing to provide a privacy notice;
Failing to protect personal information from unauthorized use.

Complaints involving misuse of personal data may be filed with the National Privacy Commission, or NPC. The NPC may investigate data privacy violations and impose appropriate measures, including compliance orders and penalties where warranted.

VII. Cybercrime Issues

When threats, harassment, defamation, identity misuse, or unauthorized disclosure occur through electronic means, the Cybercrime Prevention Act may become relevant. Online messages, social media posts, emails, fake online notices, and digital threats may be examined under cybercrime-related provisions.

Possible cybercrime-related issues may include:

Cyber libel, where defamatory statements are published online;
Online threats or intimidation;
Identity misuse or impersonation;
Unauthorized access or misuse of digital data;
Online harassment through repeated abusive communications.

Victims may report serious online threats, cyber libel, or digital harassment to law enforcement cybercrime units, such as the Philippine National Police Anti-Cybercrime Group or the National Bureau of Investigation Cybercrime Division.

VIII. Criminal Law Remedies Under the Revised Penal Code

Depending on the facts, abusive collection conduct may fall under provisions of the Revised Penal Code. Possible offenses may include:

1. Grave Threats

Grave threats may be involved when a collector threatens to inflict harm, commit a crime, or cause serious injury to the borrower or another person. Threats of physical harm, death, violence, or destruction of property should be taken seriously and reported to law enforcement.

2. Light Threats or Other Threats

Even where the threat is less severe, criminal liability may still arise if the conduct is intended to intimidate, compel payment, or cause fear.

3. Unjust Vexation

Unjust vexation may apply to acts that annoy, irritate, torment, distress, or disturb another person without lawful justification. Repeated abusive calls, insults, intimidation, or humiliating messages may be relevant depending on the circumstances.

4. Coercion

Coercion may be involved when a person is unlawfully compelled to do something against their will through violence, intimidation, or other unlawful pressure.

5. Slander or Oral Defamation

If a collector orally insults or falsely accuses the borrower in front of others, oral defamation may be considered.

6. Libel or Cyber Libel

If defamatory statements are written, posted, messaged, or published online, libel or cyber libel may be considered. Publicly calling someone a fraudster, scammer, thief, or criminal without lawful basis may expose the speaker or publisher to liability.

7. Alarm and Scandal

In some circumstances, threatening or scandalous acts that disturb public order may be relevant.

The exact offense depends on the words used, the medium, the intent, the audience, and the surrounding facts. Victims should preserve complete records and seek legal advice where criminal filing is contemplated.

IX. Harassment of Family, Friends, Co-Workers, or Employers

A common abusive practice is contacting the borrower’s relatives, friends, officemates, employer, or social media contacts. This may be unlawful or improper when the purpose is to shame, pressure, embarrass, or threaten the borrower.

Third parties who are not co-makers, guarantors, sureties, or authorized references generally should not be treated as debtors. They should not be harassed or threatened for another person’s loan. Disclosing the borrower’s loan information to them may also violate privacy rights.

If an online lending app contacts third parties, the victim should preserve:

Screenshots of the messages received by third parties;
Names and numbers used by the collectors;
Date and time of each communication;
Exact words used;
Proof that the recipient is not a party to the loan;
Any social media posts or group messages;
Any employer communication caused by the lender’s disclosure.

The borrower and affected third parties may both have grounds to complain, depending on the nature of the messages and the personal data involved.

X. Evidence to Preserve Before Filing a Complaint

Evidence is critical. Victims should avoid deleting messages, call logs, app notifications, loan agreements, emails, and payment records. The following should be preserved:

Screenshots of threatening or abusive text messages;
Screenshots of chat messages from messaging apps;
Screenshots of social media posts or comments;
Call logs showing repeated calls;
Audio recordings, where lawfully obtained and relevant;
Names, numbers, usernames, email addresses, and account names used by collectors;
App name, developer name, and screenshots of the app store listing;
Loan agreement, disclosure statement, promissory note, or terms and conditions;
Proof of the loan amount, interest, fees, and due date;
Payment receipts and transaction confirmations;
Screenshots of abusive messages sent to contacts;
Affidavits or written statements from family, friends, or co-workers who were contacted;
Screenshots of permissions requested by the app;
Privacy policy and terms of service of the app;
SEC registration details, if available;
Any demand letter, fake legal notice, or fake warrant sent by the collector.

Screenshots should show the sender, date, time, phone number or account name, and full message. For online posts, victims should capture the URL, profile name, date, time, and visible comments or reactions. It is also useful to back up evidence in cloud storage or another secure device.

XI. Where to Report Harassment and Threats from Online Lending Apps

A. Securities and Exchange Commission

The SEC is a primary agency for complaints against registered lending companies, financing companies, and related online lending platforms. Complaints may involve unfair debt collection practices, abusive collection methods, unregistered lending activity, excessive or undisclosed charges, or violations of SEC rules.

A complaint to the SEC should include the name of the lending app, company name, screenshots of abusive messages, loan documents, proof of payment, and a concise narrative of what happened.

The SEC may investigate whether the lending or financing company violated applicable rules. Sanctions may include fines, suspension, revocation of registration or authority, and other regulatory action.

B. National Privacy Commission

Complaints involving misuse of personal information should be reported to the NPC. This includes unauthorized access to contacts, disclosure of loan information to third parties, public posting of personal details, unlawful processing of personal data, or failure to respect data subject rights.

Before filing, the complainant should prepare evidence showing what personal data was used, how it was used, who received it, when it happened, and why the use was unauthorized, excessive, or harmful.

C. Philippine National Police Anti-Cybercrime Group

For online threats, cyber harassment, cyber libel, identity misuse, or digital extortion, victims may report to the PNP Anti-Cybercrime Group. This is especially important where there are threats of violence, public shaming, fake online posts, or repeated harassment through electronic communications.

D. National Bureau of Investigation Cybercrime Division

The NBI Cybercrime Division may also receive complaints involving cybercrime, online harassment, identity misuse, cyber libel, or online threats. Victims should bring printed and digital copies of evidence, identification documents, and a written timeline of events.

E. Local Police Station or Prosecutor’s Office

For criminal threats, coercion, unjust vexation, defamation, or other offenses, victims may go to the local police station or directly consult the prosecutor’s office. The prosecutor determines whether criminal charges should be filed in court after preliminary investigation or inquest, depending on the case.

F. Barangay

Some disputes may pass through barangay conciliation if the parties are individuals residing in the same city or municipality and the matter falls within the Katarungang Pambarangay system. However, corporate lenders, online platforms, cybercrime issues, and urgent threats may require direct filing with the proper agency or law enforcement office. Barangay proceedings are not a substitute for reporting serious threats, cybercrime, or data privacy violations.

G. Department of Trade and Industry

Where consumer protection issues are involved, especially deceptive, unfair, or unconscionable practices, the DTI may be relevant. However, for lending companies and financing companies, the SEC is usually the more direct regulator.

XII. How to Prepare a Complaint

A strong complaint should be organized, factual, and supported by evidence. It should avoid exaggeration and focus on specific acts.

A complaint may include:

Full name, address, contact number, and email of the complainant;
Name of the lending app and company, if known;
App store link or screenshots identifying the app;
Loan details, including amount borrowed, amount received, due date, interest, service fees, and payment history;
Timeline of events;
Description of harassment, threats, or privacy violations;
Names or numbers of collectors;
List of affected third parties;
Screenshots and documents as annexes;
Specific relief requested, such as investigation, order to stop harassment, deletion or correction of data, sanctions, or assistance in filing criminal charges.

The timeline is especially important. It should state when the loan was taken, when payment became due, when the harassment started, what was said, who was contacted, and what harm resulted.

XIII. Sample Complaint Narrative

A complainant may write the narrative in this manner:

“I obtained a loan through the online lending application [name of app] on [date]. The loan amount was [amount], but I received only [amount received] after deductions. The due date was [date]. Beginning [date], I received repeated calls and messages from persons claiming to be collectors of the said lending app. The messages contained threats, insults, and statements that I would be publicly shamed and reported as a criminal if I failed to pay immediately.

The collectors also contacted persons from my phone contacts, including [relationship or description], even though they were not parties to the loan. They disclosed my alleged debt and sent humiliating messages about me. Attached are screenshots of the messages, call logs, proof of the loan, and statements from persons who were contacted.

I respectfully request that the matter be investigated for possible violations of applicable laws and regulations, including unfair debt collection practices, data privacy violations, cyber harassment, threats, and other offenses that may be warranted by the evidence.”

XIV. What to Include in the Relief or Prayer

The complainant may request the agency to:

Investigate the online lending app and its operators;
Order the lender or collector to stop harassment and unlawful contact with third parties;
Require the deletion or lawful correction of improperly processed personal data;
Impose administrative sanctions if violations are found;
Refer the matter for criminal investigation where appropriate;
Require the lender to explain the computation of the loan, interest, penalties, and fees;
Act against unregistered or unauthorized lending operations;
Protect the complainant and affected third parties from further unlawful disclosure or harassment.

XV. Responding to Collectors While Preserving Legal Rights

Victims should avoid responding with threats, insults, or admissions that may be used against them. A calm written response is usually better. The borrower may state:

“I recognize your claim regarding the alleged loan. However, I do not consent to harassment, threats, insults, public shaming, or disclosure of my personal information to third parties. Please communicate only through lawful and proper channels. Any further abusive, threatening, defamatory, or privacy-violating communication will be documented and reported to the proper authorities.”

This type of response does not erase the debt. It simply asserts the borrower’s rights against unlawful collection practices.

XVI. The Borrower’s Obligation to Pay

Reporting harassment does not automatically cancel a valid loan. If the loan is lawful and the amount is correct, the borrower may still be civilly liable to pay the principal, lawful interest, and legitimate charges. However, the existence of a debt does not authorize abuse.

A borrower may dispute:

Excessive or hidden interest;
Undisclosed service charges;
Illegal penalties;
Charges not agreed upon;
Payments not credited;
Harassment-based “settlement” demands;
Amounts inflated beyond the agreed terms.

Borrowers should request a clear statement of account and keep proof of all payments. Payments should be made only to verified official channels, not to suspicious personal accounts unless clearly authorized and documented.

XVII. Fake Legal Threats and Misrepresentation

Some collectors send fake notices claiming to be from courts, police, prosecutors, barangays, or lawyers. Victims should examine such notices carefully. Warning signs include:

No case number;
No court branch;
No official seal or improper use of seals;
Wrong grammar or generic formatting;
Demand for immediate payment to a personal e-wallet;
Threat of arrest without court process;
Use of words such as “final warrant,” “cybercrime subpoena,” or “barangay warrant” in suspicious contexts;
Refusal to provide official contact details;
Messages sent from ordinary mobile numbers or anonymous accounts.

Impersonating government authorities, lawyers, or court personnel may create additional liability. Victims should preserve these notices and report them.

XVIII. When the App Is Not Registered or Uses Multiple Names

Some online lending apps use trade names, app names, or shell entities that differ from their registered corporate names. A borrower should gather all available identifying details, including:

App name;
Developer name in the app store;
Website;
Email address;
Customer service number;
Privacy policy name;
Company name in the loan agreement;
SEC registration number, if displayed;
Payment recipient names;
Bank or e-wallet accounts used;
Names of collectors;
Social media pages;
Screenshots of advertisements.

Even if the exact company is unclear, a complaint may still be filed using all known details. Regulators and law enforcement may use these details to trace responsible persons.

XIX. Remedies for Affected Contacts

Friends, relatives, co-workers, and employers who receive abusive messages may also preserve evidence and file complaints where their own rights are violated. They may be victims of harassment, privacy violations, defamation, or unjust vexation.

They should document:

The message they received;
The number or account that sent it;
Whether their personal information was used;
Whether they were threatened or insulted;
Whether false statements were made about the borrower;
Whether the communication affected their work, reputation, or peace of mind.

A third party has no obligation to pay another person’s loan unless that third party legally agreed to be a co-borrower, guarantor, surety, or similar obligor.

XX. Practical Safety Steps for Victims

Victims should take practical steps to protect themselves:

Do not panic over threats of arrest for mere nonpayment.
Save all evidence before blocking numbers.
Tell family or close contacts not to engage with collectors.
Warn contacts that any abusive messages should be screenshotted.
Avoid granting unnecessary app permissions.
Remove risky app permissions from phone settings where possible.
Change passwords if the app may have accessed sensitive accounts.
Avoid paying through unverified personal accounts.
Request a written statement of account.
File reports with the appropriate agencies.
Seek legal assistance if threats escalate.
Report immediate threats of violence to law enforcement.

Where there is a credible threat of physical harm, the matter should be treated as urgent and reported to the police.

XXI. Possible Liability of Online Lending Apps and Collectors

Depending on the facts, an online lending app, its officers, employees, agents, collectors, or data processors may face:

SEC administrative sanctions;
NPC enforcement action;
Criminal complaints;
Civil liability for damages;
Injunction or orders to stop unlawful acts;
Revocation or suspension of authority to operate;
Penalties for unauthorized or unfair lending practices;
Liability for data privacy violations;
Liability for defamatory or threatening communications.

The company may not avoid liability simply by claiming that an outside collection agency committed the acts. If the collector acted on behalf of the lender, the relationship between the lender and collector may be examined.

XXII. Civil Action for Damages

A victim may consider a civil action for damages where harassment, defamation, privacy violations, or abusive collection practices caused injury. Possible damages may include moral damages for mental anguish, anxiety, humiliation, or wounded feelings; actual damages for provable financial loss; exemplary damages in proper cases; and attorney’s fees where allowed.

Civil action should be discussed with a lawyer, especially where the victim suffered job consequences, reputational harm, medical stress, financial loss, or public humiliation.

XXIII. Legal Aid and Assistance

Victims who cannot afford private counsel may seek assistance from legal aid organizations, law school legal aid clinics, the Public Attorney’s Office where qualified, or the Integrated Bar of the Philippines legal aid program. For criminal matters, the police, NBI, or prosecutor’s office may guide complainants on the affidavit and filing process.

A lawyer can help determine whether the best route is administrative complaint, criminal complaint, civil action, data privacy complaint, or a combination of remedies.

XXIV. Frequently Asked Questions

1. Can I be arrested for not paying an online loan?

Generally, no. Nonpayment of debt alone is not a crime and does not justify imprisonment. However, separate criminal issues may arise if there was fraud, falsification, or another independent criminal act.

2. Can the lending app message my contacts?

A lender should not use your contacts to shame, threaten, or pressure you. Contacting third parties and disclosing your loan may raise privacy and unfair collection issues, especially if the third parties are not liable for the debt.

3. Can collectors post my name and photo online?

Public shaming, posting personal information, or accusing a borrower online may expose the collector or lender to liability for privacy violations, defamation, cyber libel, or unfair collection practices.

4. Should I delete the lending app?

Before deleting the app, preserve evidence such as loan details, terms, account information, messages, and screenshots. After preserving evidence, you may consider removing permissions or uninstalling the app to reduce further data access.

5. What if I actually owe the money?

You may still owe a lawful debt, but the lender must collect it lawfully. Debt does not give collectors the right to threaten, insult, shame, or misuse your data.

6. What if the collector says they are from a law office?

Ask for the full name of the lawyer, law office, office address, official email, and written authority to collect. A legitimate legal demand should not contain threats, insults, or false claims of immediate arrest.

7. What if they threaten to go to my barangay or employer?

A creditor may pursue lawful remedies, but threatening public humiliation or disclosing loan details to unrelated persons may be improper. Employers are generally not responsible for an employee’s personal debt unless they legally agreed to be liable.

8. Can I block collectors?

You may block abusive numbers after preserving evidence. However, keep at least one lawful communication channel open if you intend to settle or dispute the debt. Blocking should not destroy evidence.

9. Can I report even if I have not fully paid?

Yes. A borrower may report harassment, threats, privacy violations, or abusive collection even if the loan remains unpaid.

10. Can my contacts file complaints too?

Yes, if they were harassed, threatened, or had their personal information misused. They should preserve screenshots and other evidence.

XXV. Suggested Structure of a Formal Complaint

A formal complaint may be structured as follows:

Subject: Complaint Against [Name of Online Lending App] for Harassment, Threats, Unfair Debt Collection Practices, and Possible Data Privacy Violations

Complainant: [Name, address, contact details]

Respondent: [Name of app, company, collector, phone numbers, emails, and other known details]

Facts: State when the loan was obtained, how much was borrowed, what amount was received, what charges were imposed, when payment became due, and what happened afterward.

Acts Complained Of: Identify the specific threats, abusive words, public shaming, third-party contacts, data misuse, false legal claims, or other unlawful acts.

Evidence: List screenshots, call logs, loan documents, payment receipts, app details, privacy policy, witness statements, and other attachments.

Legal Grounds: Mention possible unfair debt collection practices, data privacy violations, cybercrime, threats, coercion, unjust vexation, defamation, or other applicable laws and regulations.

Relief Requested: Request investigation, sanctions, order to stop harassment, protection of personal data, correction of loan records, or referral for criminal action where appropriate.

Signature and Date

XXVI. Key Principles to Remember

A lender may collect, but it may not abuse. A borrower may owe money, but the borrower retains constitutional rights, privacy rights, dignity, and legal protection. A collector may demand payment, but the demand must be truthful, lawful, and fair. A lending app may process personal data, but only within the limits of law, consent, necessity, transparency, and legitimate purpose.

Harassment and threats from online lending apps should be documented carefully and reported to the proper agencies. The most effective complaints are factual, chronological, evidence-based, and directed to the correct authority. Where threats are serious, immediate law enforcement assistance should be sought.

XXVII. Conclusion

Online lending harassment is not merely a private inconvenience. It can involve unfair debt collection, unlawful disclosure of personal information, cyber harassment, defamation, threats, coercion, and other violations. Philippine law recognizes the right of creditors to collect lawful debts, but it also protects borrowers and third parties from abusive, deceptive, and unlawful collection practices.

Victims should preserve evidence, avoid retaliatory communication, verify the identity of the lending company, protect their personal data, and file complaints with the appropriate agencies such as the SEC, NPC, PNP Anti-Cybercrime Group, NBI Cybercrime Division, local police, prosecutor’s office, or other relevant authorities. The law does not permit debt collection through fear, humiliation, threats, or misuse of personal information.