If you are facing relentless calls, threatening text messages, public shaming on social media, or unauthorized contact with your family and friends from an online lending app, you are not powerless. Philippine law provides strong protections against these abusive debt collection practices, and multiple government agencies are equipped to investigate and sanction violators. This article explains exactly what constitutes illegal harassment, the specific legal provisions that apply, and the practical step-by-step process to report it effectively—whether you are in the Philippines or abroad.

What Constitutes Harassment by Online Lending Apps

Online lending apps often cross the line from legitimate collection into harassment when they use tactics such as:

Persistent calls and texts at unreasonable hours (commonly before 8:00 a.m. or after 9:00 p.m.)
Contacting people in your phone or social media contact list who are not guarantors or co-makers on the loan
Posting your personal information, photos (sometimes manipulated), or debt details on social media, group chats, or public “wanted” posts to shame you
Using profane, threatening, or abusive language
Making false claims about arrest, lawsuits, or criminal liability
Accessing and using your contacts or other personal data without proper, limited consent for debt collection purposes

These practices cause real distress, damage reputations, strain family relationships, and can escalate to safety concerns. They are not acceptable even if you owe money. Legitimate debt collection must remain professional, respectful, and within legal bounds.

Your Legal Rights and Protections

SEC Memorandum Circular No. 18, Series of 2019 (Prohibition on Unfair Debt Collection Practices)

This circular, issued by the Securities and Exchange Commission, applies to all lending companies and financing companies, including online platforms. It explicitly prohibits unfair debt collection practices and requires companies to use only reasonable and legally permissible means while exercising good faith.

Key prohibited acts include:

Use or threat of violence or other criminal means against any person’s physical safety, reputation, or property
Use of obscene, insulting, or profane language
Disclosure or publication of a borrower’s name and personal information (public shaming)
Contacting persons in the borrower’s contact list other than named guarantors or co-makers (this remains prohibited even if the borrower previously consented to broad app permissions)
Other deceptive or harassing conduct that violates the borrower’s dignity

Violations can lead to administrative sanctions, including fines, cease-and-desist orders, revocation of the company’s Certificate of Authority to operate, and referral for criminal prosecution. The circular works alongside Republic Act No. 9474 (Lending Company Regulation Act of 2007), which requires lending companies to secure proper SEC registration and authority.

Data Privacy Act of 2012 (Republic Act No. 10173) and NPC Rules

The National Privacy Commission (NPC) has issued specific guidance prohibiting online lenders from harvesting phone or social media contact lists for debt collection or harassment purposes. App permissions for contacts, camera, or other data must be limited to legitimate know-your-customer (KYC) or fraud-prevention purposes and must not be excessive or repurposed for shaming or pressuring borrowers and their contacts.

Unauthorized processing, disclosure, or use of personal data for harassment violates the Data Privacy Act. The NPC can order deletion of illegally obtained data, impose substantial fines, and refer cases for criminal prosecution. Even registered lending apps remain fully accountable under this law.

Criminal Laws: Revised Penal Code and Cybercrime Prevention Act (Republic Act No. 10175)

When harassment occurs through text, calls, social media, or other digital means, the following provisions of the Revised Penal Code often apply, with penalties increased by one degree under RA 10175 when committed via information and communications technology:

Article 287 – Unjust vexation (persistent unwanted calls and messages that annoy or irritate without legal justification)
Article 282 – Grave threats (threats to inflict harm or commit a crime to compel payment)
Article 286 – Grave coercion (compelling a person to do something against their will through intimidation)
Article 355 – Libel (written or published defamatory statements that dishonor or discredit a person, including online posts)

These laws protect every person’s right to dignity, privacy, and freedom from intimidation, regardless of whether a debt exists.

Step-by-Step Practical Guide to Reporting

1. Preserve Strong Evidence Immediately

Clear, timestamped documentation is the foundation of any successful complaint.

Take screenshots of every message, post, or comment, ensuring dates, times, sender details, and full content are visible. Capture manipulated photos or group chat posts in context.
Maintain call logs showing frequency, timing, and duration.
Ask affected family members or friends for their own screenshots or written statements.
Organize everything chronologically in a dedicated folder and create backups. Do not delete original messages or chats.
Consider preparing a sworn affidavit summarizing the incidents (notarization can strengthen it for later use).

2. Check the Lender’s Registration Status

Visit the official SEC website and search the Company Registration and Monitoring System (CRMS) or the list of online lending platforms. Note whether the app or its operating company holds a valid Certificate of Authority or appears on any “advised against” or illegal lists. Many problematic apps operate without proper licensing.

3. File a Complaint with the Securities and Exchange Commission (SEC)

The SEC handles unfair debt collection practices and licensing violations.

Use the SEC’s online complaint channels (such as the i-Message platform at imessage.sec.gov.ph or the dedicated complaints portal) or email the appropriate department.
For lending and financing companies, common channels include flcd_complaints@sec.gov.ph or cgfd@sec.gov.ph. For unlicensed operations, use epd@sec.gov.ph.
Follow the required subject line format exactly: COMPLETE NAME_RESPONDENT COMPANY_SUBJECT OF COMPLAINT (example: JUAN DELA CRUZ_LOANAPP PH_UNFAIR DEBT COLLECTION AND HARASSMENT).
Provide a clear, chronological narration of facts and attach supporting evidence (screenshots and documents in PDF or JPEG format, respecting file size limits).
You will usually receive an acknowledgment and reference number within 24–48 hours. The SEC evaluates the complaint, may issue a show-cause order to the company, and can impose sanctions or refer the matter for criminal action.

4. File a Complaint with the National Privacy Commission (NPC)

File simultaneously with the NPC when contact lists were accessed or personal data was misused for harassment or shaming.

Use the online “File a Complaint” portal on the official NPC website (privacy.gov.ph) or email complaints@privacy.gov.ph.
Complete the form with your details, the name of the app/company, a description of the privacy violation, and upload evidence plus proof of identity.
The NPC notifies the respondent, may conduct mediation or investigation, and can issue orders for data deletion and compliance. Strong cases may result in significant fines and criminal referral under the Data Privacy Act.

5. Report Criminal Aspects to Law Enforcement

For threats, grave coercion, unjust vexation, libel, or other criminal conduct:

Visit your nearest police station to file a blotter entry and execute a complaint-affidavit, or go directly to the PNP Anti-Cybercrime Group (ACG).
PNP-ACG contact options include the hotline (02) 8723-0401 loc. 7491, email acg@pnp.gov.ph, or their official online reporting channels.
Provide all organized evidence. Investigators will assess the case and, when appropriate, refer it to the Office of the City or Provincial Prosecutor for preliminary investigation.
The NBI Cybercrime Division (ccd@nbi.gov.ph) serves as an additional or alternative avenue for complex cases.

Criminal complaints are generally free at the filing stage. A lawyer is not required to initiate the report but can help strengthen the affidavit or represent you during preliminary investigation and court proceedings.

6. Additional Protective Measures

Block the app’s numbers and accounts and tighten your social media privacy settings.
Inform trusted contacts about the situation so they know not to engage or send money.
If threats escalate to safety risks, seek immediate assistance from the barangay or court for appropriate protection orders.
For civil remedies such as damages for violation of rights (Civil Code Articles 19, 20, and 21), consult a lawyer after securing the administrative and criminal reports.

Common Challenges and Scenarios

Many Filipinos and overseas Filipino workers (OFWs) delay reporting due to embarrassment or fear that it will worsen the situation. In reality, documenting the pattern and reporting promptly often leads to faster intervention. Incomplete or blurry evidence weakens complaints—prioritize clarity and context.

Unregistered or frequently rebranded apps are common. Regulators can still act against the operators and individuals behind them. Filing with multiple agencies (SEC + NPC + PNP) is standard and encouraged because each addresses distinct violations.

For Filipinos abroad or foreigners dealing with Philippine lending apps, SEC and NPC complaints are fully accessible online or via email. Criminal complaints can be initiated through a Philippine embassy or consulate by executing a sworn affidavit (supporting foreign documents may require apostille for court use later). The process works the same; distance is not a barrier to starting the report.

Evidence, Timelines, and Key Offices

Primary agencies and typical timelines (these are indicative; actual duration depends on case complexity and agency workload):

SEC: Focus on unfair collection and licensing. Online/email filing. Initial evaluation and possible show-cause order within weeks to months; full resolution often 60–120 days.
NPC: Focus on data privacy breaches and contact harvesting. Online portal or email. Respondent answer period around 15 days; overall resolution commonly 90–180 days.
PNP-ACG / Local Police + Prosecutor: Focus on criminal offenses. In-person or hotline. Investigation length varies; preliminary investigation at prosecutor level typically 1–3 months or longer before court filing if probable cause is found.

No filing fees apply for these administrative and initial criminal complaints. Bring a valid government-issued ID and your organized evidence package. Digital files (screenshots with visible metadata where possible) are preferred and highly effective.

Frequently Asked Questions

Is it legal for online lending apps to contact my family and friends?
No. SEC Memorandum Circular No. 18, Series of 2019 prohibits contacting persons in your contact list who are not named guarantors or co-makers. The NPC also bars the use of harvested contact lists for debt collection or harassment.

What if the lending app is not registered with the SEC?
Report it anyway. Operating without a Certificate of Authority violates RA 9474. File with the SEC’s Enforcement and Investor Protection Department and the PNP. Regulators can still investigate, penalize responsible individuals, and protect the public.

Do I still have to pay the loan while reporting harassment?
Harassment does not cancel a legitimate debt, but you have every right to insist on fair treatment. You may negotiate restructuring through proper channels or seek legal advice on the debt itself. Prioritize stopping the abusive conduct through official reports.

How long does it take for authorities to act after I file?
Acknowledgment is usually quick (within days). Investigations and sanctions take longer—typically weeks to several months depending on the agency and complexity. Continued harassment after filing can be reported as additional evidence and may prompt faster action.

Can I file complaints if I am outside the Philippines?
Yes. SEC and NPC complaints are designed for online or email submission and work well from abroad. For criminal complaints, execute your affidavit before a Philippine embassy or consulate. Many OFWs successfully use this route.

What penalties can the app or its operators face?
SEC sanctions include fines, license revocation, and cease-and-desist orders. NPC can impose fines up to several million pesos per violation plus data deletion orders. Criminal convictions under the Revised Penal Code and RA 10175 can result in imprisonment (with higher penalties for cybercrimes) and fines. Both companies and responsible officers can be held accountable.

Do I need a lawyer to file with the SEC or NPC?
No. These are administrative processes that individuals can complete themselves using online forms or email. A lawyer becomes valuable for complex criminal cases, court representation, or pursuing separate civil damages.

Will reporting make the harassment worse or affect my credit standing?
Retaliation by a lender can itself constitute further violation. Continue documenting everything. Reporting legitimate violations is your protected right and does not negatively impact credit standing in the manner some fear.

What immediate steps can I take to protect myself?
Block the numbers and accounts, secure your social media, inform trusted people, and keep recording new incidents. Do not engage further or make payments under duress. File your reports as soon as your evidence package is ready.

Key Takeaways

Aggressive harassment by online lending apps—through contact harvesting, public shaming, threats, or unreasonable contact—is illegal under SEC MC No. 18 (2019), the Data Privacy Act (RA 10173), the Revised Penal Code, and RA 10175 (Cybercrime Prevention Act).
File reports with the SEC (unfair collection and licensing), NPC (privacy violations), and PNP-ACG or local police (criminal conduct) for maximum effectiveness. These processes are free or low-cost and accessible online.
Strong, timestamped evidence organized chronologically gives your complaint the best chance of success. Many borrowers have seen licenses revoked and operations sanctioned after filing well-documented complaints.
You have the right to be treated with dignity during any debt collection process. Reporting helps stop the abuse for yourself and contributes to cleaning up harmful practices across the industry.
Whether you are in the Philippines or abroad, the reporting mechanisms are available to you. Start with evidence preservation and the SEC and NPC filings—these directly target the regulatory violations most common in these cases.

Taking these steps puts you back in control and holds violators accountable under Philippine law.