Harassment by an online lending company can feel overwhelming, especially when collectors threaten arrest, shame you on social media, or message your relatives and coworkers. Philippine law allows a lender to collect a valid debt, but it does not allow threats, public humiliation, abusive language, deception, or misuse of your contacts and personal data. The right response is to preserve the evidence, identify the company behind the app, and report each violation to the agency that has authority over it.

What Counts as Online Lending Harassment?

A legitimate lender may:

Send reasonable payment reminders and demand letters;
Explain the amount due and available payment arrangements;
File a civil collection case;
Report accurate credit information through lawful credit-reporting channels; and
Contact a guarantor who knowingly consented to guarantee the loan.

Collection becomes potentially unlawful when the lender, its employee, or its third-party collection agency uses tactics such as:

Threatening violence, physical harm, property damage, or harm to your reputation;
Claiming that you will be arrested or that a warrant has already been issued when this is false;
Pretending to be a police officer, lawyer, court employee, or government agency;
Using insults, obscenities, sexual remarks, or degrading language;
Repeatedly calling at unreasonable hours or in a manner intended to intimidate;
Publishing your name, photograph, ID, loan balance, or alleged delinquency online;
Editing your photograph into a “wanted,” “scammer,” or funeral-style poster;
Messaging your employer, coworkers, relatives, friends, or other phone contacts to shame you;
Disclosing false or disputed loan information;
Accessing or copying phone contacts, photographs, messages, or social-media connections beyond what is necessary for a legitimate loan purpose; or
Threatening a legal action that the collector cannot lawfully take.

Harassment does not automatically cancel the debt. Treat the loan obligation and the collection violation as separate matters: request a correct statement of account and negotiate or dispute the balance through official channels while pursuing the complaint.

Philippine Laws That Protect Borrowers

SEC rules against unfair debt collection

Lending companies are governed by the Lending Company Regulation Act of 2007, or Republic Act No. 9474. Financing companies are regulated under the Financing Company Act of 1998, or Republic Act No. 8556.

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair collection practices by lending and financing companies and their third-party collectors. Prohibited conduct includes threats, insults, deceptive representations, public disclosure of borrower information, and other abusive collection methods.

The Financial Products and Services Consumer Protection Act, or Republic Act No. 11765 of 2022, also recognizes a financial consumer’s right to fair treatment, protection of assets and data, disclosure, and prompt complaint handling. Regulators may impose fines, suspend or revoke authority to operate, and take other enforcement action.

A lending company cannot escape responsibility simply by outsourcing collection. Conduct by its collection agency, call center, or individual collector may still be attributed to the regulated company.

Data Privacy Act protection

The Data Privacy Act of 2012, or Republic Act No. 10173, requires personal data to be processed fairly, lawfully, transparently, and only to the extent necessary for a declared purpose.

Under NPC Circular No. 20-01, as amended by NPC Circular No. 2022-02:

An app cannot engage in unnecessary or excessive processing of personal data.
Unrestrained copying or use of a borrower’s contact list is prohibited.
A character reference may be used for identification or verification, not debt collection.
A guarantor may be contacted about the debt only if that person separately and expressly consented to be a guarantor.
Camera or photo-gallery access must be limited to a legitimate purpose, such as identity verification, and should be disabled when that purpose is completed.
Borrower data must not be used for public shaming, harassment, or unfair collection.

A joint DICT-NPC-SEC advisory dated March 18, 2026 expressly confirms that contacting people in the borrower’s contact list for debt collection—other than a consenting guarantor—is prohibited.

Criminal and civil liability

Depending on the exact words and acts involved, abusive collectors may also face liability under the Revised Penal Code, including:

Grave threats under Article 282;
Grave coercion under Article 286;
Unjust vexation under Article 287;
Libel under Articles 353 and 355; or
Oral defamation under Article 358.

A defamatory Facebook post, group message, or other online publication may amount to cyberlibel under Section 4(c)(4) of the Cybercrime Prevention Act of 2012, or Republic Act No. 10175, in relation to the Revised Penal Code.

Civil Code Articles 19, 20, 21, and 26 may support a claim for damages when a lender acts contrary to law, good customs, public policy, or another person’s dignity and privacy.

Finally, Article III, Section 20 of the Constitution states that no person may be imprisoned for debt. Nonpayment of an ordinary loan does not by itself authorize arrest. A separate criminal offense—such as proven fraud or violation of the Bouncing Checks Law—requires its own facts, complaint, and lawful court process. A collector cannot issue an arrest warrant.

Where to Report an Online Lending Company

Problem	Proper office	What the office can do
Unfair collection by a lending or financing company	SEC Financing and Lending Companies Department	Investigate regulatory violations and impose administrative sanctions
Contact-list harvesting, disclosure, or misuse of personal data	National Privacy Commission	Investigate Data Privacy Act violations, restrict processing, award indemnity, or recommend prosecution
Threats, cyberlibel, impersonation, fraud, or extortion	PNP Anti-Cybercrime Group, NBI Cybercrime Division, or prosecutor’s office	Conduct criminal investigation and pursue prosecution
Loan issued by a bank or BSP-supervised digital bank	Institution’s consumer assistance channel, then BSP	Facilitate and adjudicate qualifying financial-consumer complaints
Immediate threat to life or safety	Local police or 911	Provide immediate police assistance and document the incident

You may report the same incident to more than one office when different violations occurred. For example, messaging your coworkers about a debt may justify both an SEC complaint for unfair collection and an NPC complaint for unlawful disclosure. A death threat may additionally require a criminal complaint.

How to Report Online Lending Harassment Step by Step

1. Address any immediate danger

If a message contains a credible threat of violence, identifies your home or workplace, or suggests that someone is on the way to harm you, call 911 or contact the nearest police station.

Ask that the incident be entered in the police blotter and obtain the blotter entry or reference number. A blotter documents the report but does not, by itself, start a criminal case.

2. Preserve the evidence before blocking or uninstalling the app

Save the evidence in its original form whenever possible:

Full screenshots showing the sender, number, date, time, and complete message thread;
Screen recordings showing how you opened the messages or posts;
Original emails, including headers;
Call logs and saved voicemail messages;
URLs and screenshots of social-media posts;
The app’s name, developer, download page, privacy notice, and permissions;
Loan agreement, disclosure statement, repayment schedule, and statement of account;
Payment receipts and transaction reference numbers;
Names and numbers used by collectors;
Messages received by relatives, coworkers, or other contacts; and
Short affidavits from people who were contacted.

Keep an incident log with one line for each event: date, time, platform, sender, recipient, exact conduct, and evidence filename. This makes a long pattern of harassment understandable to an investigator.

Avoid secretly recording live private calls. The Anti-Wiretapping Act, Republic Act No. 4200, can apply even when the person recording participated in the conversation, as the Supreme Court explained in Ramirez v. Court of Appeals. Save voicemails and written messages, and obtain consent before recording a live call.

3. Identify the legal company behind the app

The app’s brand name may be different from the corporation that issued the loan. Check:

The loan contract and disclosure statement;
The app’s privacy notice and terms;
Payment-account names;
App-store developer information; and
The SEC’s Check with SEC service.

Look for both an SEC registration and a valid Certificate of Authority to operate as a lending or financing company. Include the app name and legal company name in your complaint. If the company or platform cannot be found, report that fact rather than guessing its identity.

4. Send the lender a written complaint

Write to the company’s official customer-service channel, grievance unit, or data protection officer. Include:

Your name and loan or account reference;
The dates and examples of harassment;
The numbers or accounts used by the collectors;
A request to stop third-party contact and abusive communications;
A request to preserve all collection records;
A request for a corrected statement of account, if the balance is disputed; and
A reasonable deadline for a written response.

Keep proof of delivery, such as an email acknowledgment or ticket number. This is especially important for an NPC complaint because the NPC generally requires you to notify the company in writing and allow it 15 calendar days to respond. The NPC may waive this step for serious, patently illegal, or urgently harmful conduct, but the reason must be clearly explained.

5. File a complaint with the SEC

Use the official SEC iMessage portal. The SEC’s 2026 user guide directs complainants to create or use an eSECURE account, open a ticket, and select:

Financing and Lending Companies Department → Complaints on Financing and Lending Companies

Attach:

A concise chronological narrative;
Your loan agreement or proof of the transaction;
Screenshots and other evidence;
The company and app details;
Your written complaint to the lender and its response, if any; and
A statement of the action you want, such as investigation, cessation of third-party contact, or correction of unlawful practices.

Save the electronic ticket number and monitor the portal. A ticket may be marked closed because it requires additional documents or payment, so read the status message rather than assuming the matter has ended.

The SEC’s March 2026 advisory also lists hotline 1-4732 (1-4SEC) for unfair debt-collection concerns. Filing a complete ticket is still preferable because it creates a traceable record.

6. File a privacy complaint with the NPC

Use the current complaint-affidavit form available through the NPC complaint page. A formal complaint ordinarily requires:

A completed, signed, verified, and notarized complaint;
A valid government-issued ID;
Identification of the respondent;
A chronological statement of facts;
Copies of the relevant correspondence and evidence;
Witness affidavits, when available;
The relief requested; and
A sworn certification against forum shopping.

Submit it personally, by registered mail, courier, or authorized electronic filing. Filing and printing fees may apply under the NPC’s current schedule, although indigent complainants may seek exemption.

The NPC states that its Complaints and Investigation Division generally has 30 calendar days to give due course to or dismiss a complaint without prejudice. Its published estimate for the entire process is approximately 10 to 12 months, although incomplete submissions, service problems, mediation, and requests for urgent orders can change the timeline.

For a nonresident Filipino citizen without a Philippine representative, the amended NPC rules allow filing from abroad if the complaint is notarized by a Philippine embassy or consulate or carries an apostille from the country of origin. A representative ordinarily needs a special power of attorney. Foreign complainants and foreign residents whose data was processed in connection with a Philippine lender should confirm the NPC’s authentication and service requirements before sending originals.

7. Report criminal conduct to cybercrime authorities

For threats, impersonation, extortion, cyberlibel, or scams, the March 2026 joint advisory lists:

DICT Cyber Hotline: 1326@dict.gov.ph
NBI Cybercrime Division: ccd@nbi.gov.ph; (02) 8523-8231 to 38
PNP Anti-Cybercrime Group: acg@pnp.gov.ph; (02) 8723-0401 local 7491

Bring your original device, printed screenshots, identification, incident log, loan documents, and witness information. A police or NBI investigation is different from a formal criminal complaint. Prosecution usually requires a signed complaint-affidavit and supporting affidavits submitted for preliminary investigation before the appropriate prosecutor.

Barangay conciliation may be required for some disputes between individuals who actually reside in the same city or municipality. It is often inapplicable when the collector is unidentified, the respondent is a corporation in another locality, or the offense falls within a statutory exception. The prosecutor’s office can determine whether a certificate to file action is required for the particular case.

8. Continue handling the debt through official channels

Ask the lender for:

The principal amount released;
Interest, fees, and penalties;
Payments already credited;
The contractual basis for every charge; and
The exact amount needed to settle or restructure the account.

Pay only through a verified company channel. Do not send money to a collector’s personal e-wallet without written confirmation from the lender. Keep every receipt and obtain a certificate of full payment or account closure after settlement.

Evidence and Document Checklist

Document	Why it matters
Government-issued ID	Confirms the complainant’s identity
Loan contract and disclosure statement	Identifies the lender and agreed terms
Statement of account	Shows the disputed balance and charges
Screenshots with dates and sender details	Proves the actual collection conduct
Messages received by third parties	Supports public-shaming or privacy allegations
App-store page, privacy notice, and permissions	Helps identify the operator and excessive data access
Payment receipts	Establishes amounts already paid
Written complaint to the lender	Proves notice and exhaustion of remedies
Lender’s response or proof of no response	Shows whether corrective action was taken
Incident chronology	Makes repeated harassment easier to evaluate
Witness affidavits	Confirms contact with relatives, employers, or coworkers

Common Mistakes That Weaken a Complaint

Submitting only cropped screenshots. Include enough of the thread to show the sender, date, context, and exact threat.
Naming only the app. Identify the corporation and Certificate of Authority when possible.
Deleting the app immediately. Preserve the contract, privacy notice, permissions, and transaction history first.
Posting all evidence publicly. This can expose more personal data and create unnecessary defamation issues. Send complete evidence to the authorities.
Combining several lenders into one unclear narrative. Prepare a separate timeline and evidence folder for each company.
Ignoring agency requests. Check email, spam folders, and ticket status regularly.
Assuming an SEC ticket automatically starts a criminal case. Criminal conduct must also be reported to law enforcement or the prosecutor.
Stopping payment solely because of harassment. The complaint does not automatically extinguish a valid obligation.

Frequently Asked Questions

Can an online lender contact my family, friends, or coworkers?

Not for debt collection merely because their details appeared in your contact list or because you named them as character references. Under current NPC and SEC guidance, collection contact should be limited to a guarantor who separately and expressly consented to that role.

Can the lender post my photograph and debt on Facebook?

Public shaming and disclosure of borrower information may violate SEC collection rules, the Data Privacy Act, and potentially the laws on libel or cyberlibel. Preserve the post’s URL, account name, date, comments, and screenshots before requesting removal.

Can I be arrested for an unpaid online loan?

You cannot be imprisoned simply for debt. Arrest requires a separate criminal case, probable cause, and a warrant issued by a judge, unless a lawful warrantless arrest applies. A collector’s text message is not a warrant.

What if the lender threatens to visit my home or workplace?

A peaceful demand is not automatically illegal. Threats, trespassing, public confrontation, humiliation, disclosure to coworkers, or pretending to serve court documents may be unlawful. Contact the police if you fear violence or forced entry.

Should I block the collector?

Preserve the messages, numbers, and account details first. You may then block abusive accounts while keeping one official written channel open for legitimate statements, payment arrangements, and complaint responses.

Do I need a lawyer to complain?

A lawyer is not normally required to file an SEC ticket or make an initial police report. An NPC complaint is more formal because it must be verified, notarized, supported by evidence, and accompanied by a certification against forum shopping. Eligible indigent complainants may inquire with the Public Attorney’s Office.

What if the lending app is unregistered?

Report it to the SEC and include the app-store link, developer name, payment accounts, website, numbers used, and any claimed company name. Lack of registration does not prevent you from reporting privacy violations or criminal threats to the NPC, PNP, or NBI.

Can an OFW report harassment from abroad?

Yes. The SEC iMessage system is online. For an NPC complaint, nonresident Filipino citizens without a Philippine representative may execute the complaint before a Philippine embassy or consulate or obtain an apostille in the country of origin. An authorized Philippine representative will normally need a properly authenticated special power of attorney.

How long will the complaint take?

An SEC ticket number is generated after successful submission, but investigation time depends on the completeness and complexity of the case. The NPC publishes an initial 30-calendar-day evaluation period and an estimated 10-to-12-month process through final adjudication. Criminal investigations have no single guaranteed timeline.

Will reporting the lender erase my loan?

No. Reporting addresses the lender’s conduct. You must separately dispute incorrect charges, negotiate payment, or settle any valid balance. Harassment does not give the lender a right to collect unlawfully, but it also does not automatically cancel the debt.

Key Takeaways

A lender may collect a valid debt, but it may not threaten, deceive, shame, or misuse personal data.
Preserve complete digital evidence before blocking collectors or uninstalling the app.
Identify the legal corporation behind the app, not just its brand name.
File unfair collection complaints through SEC iMessage under the Financing and Lending Companies Department.
Notify the lender in writing and allow 15 calendar days before filing an NPC complaint, unless urgent circumstances justify a waiver.
Report threats, impersonation, extortion, fraud, and cyberlibel separately to the PNP, NBI, or prosecutor.
Nonpayment of an ordinary debt does not, by itself, authorize arrest or imprisonment.
Continue addressing the correct loan balance through verified company channels while the harassment complaint is pending.