If an online lending app is threatening to message your contacts, post your photo, call your employer, or accuse you of a crime unless you pay immediately, document everything first. In the Philippines, harassment and blackmail by online lending apps can be reported to the Securities and Exchange Commission (SEC) for unfair debt collection, the National Privacy Commission (NPC) for misuse of personal data, and the PNP Anti-Cybercrime Group or NBI Cybercrime Division for threats, extortion, cyberlibel, impersonation, or scams. This guide explains what conduct is illegal, where to file, what evidence to prepare, and what usually happens after you report.

What Counts as Online Lending App Harassment or Blackmail?

Online lending apps and their collectors are allowed to demand payment of a valid loan. They may send reminders, issue statements of account, negotiate payment plans, and file proper legal cases if they believe a debt is unpaid.

But they are not allowed to collect through abuse, threats, public shaming, misuse of your contact list, or blackmail.

Common examples include:

Threatening to post your face, ID, or personal details online
Sending messages to your family, employer, coworkers, Facebook friends, or phone contacts
Calling you a “scammer,” “estafador,” “magnanakaw,” or “wanted person”
Editing your photo to make you look like a criminal or sex offender
Threatening to file an “arrest warrant” unless you pay today
Pretending to be police, NBI, a court sheriff, a lawyer, or barangay official
Sending fake subpoenas, fake warrants, or fake demand letters
Calling repeatedly late at night or early in the morning
Using profanity, insults, sexual remarks, or degrading language
Demanding payment to a personal GCash, Maya, or bank account “para matigil ang post”
Threatening to contact immigration, your embassy, your employer, or your relatives abroad
Telling your contacts that they are liable even if they never agreed to be guarantors

The important distinction is this: a lender may collect a debt, but it must do so through lawful, fair, and privacy-compliant methods.

Your Legal Rights Under Philippine Law

SEC rules prohibit unfair debt collection by lending and financing companies

The main regulator for lending companies, financing companies, and recorded online lending platforms is the Securities and Exchange Commission.

Under SEC Memorandum Circular No. 18, Series of 2019, lending companies, financing companies, and their third-party collection agents may collect debts only through reasonable and legally permissible means. The circular specifically prohibits unfair debt collection practices, including threats of violence, threats to take illegal action, obscenities or insults, publication of borrowers’ personal information, false representations, deceptive collection methods, and contacting borrowers at unreasonable hours. It also treats contacting a borrower’s contact list, other than guarantors or co-makers, as an unfair collection practice.

The same SEC circular makes the lending or financing company ultimately responsible even if the harassment is done by a third-party collection agency. For repeated violations, SEC penalties may include fines, suspension, or revocation of the company’s authority to operate.

In 2026, the SEC, DICT, and NPC issued a joint public advisory after receiving reports of online lending platforms engaging in harassment, intimidation, public shaming, and unlawful use of personal data. The advisory emphasized that unnecessary app permissions, unauthorized or excessive processing of personal data, contacting people in the borrower’s contact list other than actual guarantors, and threats or violence in collection are prohibited. (National Privacy Commission)

Contact persons are not automatically guarantors

Many online lending apps ask for “character references” during registration. A character reference is usually a person who may help verify your identity or contact details. A guarantor, however, is someone who expressly agrees to answer for the loan if you do not pay.

A person does not become a guarantor simply because their name or number appeared in your phonebook or loan application.

The 2026 SEC-DICT-NPC advisory requires online lending platforms to distinguish between character references and guarantors. It also states that a person must expressly consent to be a guarantor before being treated as one. (National Privacy Commission)

This matters because collectors often tell relatives, coworkers, or friends: “Ikaw ang reference, ikaw ang magbayad.” That is usually misleading unless that person actually signed or electronically agreed to be a guarantor or co-maker.

Data privacy law protects your contacts, photos, IDs, and personal information

The Data Privacy Act of 2012, Republic Act No. 10173, protects personal information and recognizes the fundamental human right to privacy. (Lawphil)

Online lenders process sensitive information such as IDs, selfies, phone numbers, employment details, location data, payment records, device data, and sometimes contact lists. The NPC has rules specifically covering the processing of personal data for loan processing, including evaluation, granting, collection, and closure of loans. These rules require online lenders to process personal data lawfully, protect it, and respect the rights of data subjects. (National Privacy Commission)

The 2026 government advisory also warns that app permissions must be limited to what is necessary. Camera or gallery access may be justified for legitimate identity verification, but it should not remain unnecessarily active after that purpose is served. Unrestricted harvesting or use of contact lists for harassment is not allowed. (National Privacy Commission)

Harassment may also become a criminal case

Depending on what the collector actually said or did, the following laws may apply:

Conduct	Possible legal basis
Threatening to harm you, your family, reputation, or property	Revised Penal Code, Article 282 on grave threats or Article 283 on light threats
Forcing you to pay through intimidation or pressure	Revised Penal Code, Article 286 on grave coercions
Repeated abusive messages meant to annoy, disturb, or harass	Revised Penal Code, Article 287 on unjust vexation
Posting or threatening to post defamatory accusations online	Revised Penal Code, Articles 353 and 355 on libel, with possible cybercrime implications
Threatening to publish defamatory material unless paid	Revised Penal Code, Article 356 on threatening to publish a libel and offer to prevent publication for compensation
Using phones, messaging apps, social media, or online platforms to commit the act	Cybercrime Prevention Act of 2012, Republic Act No. 10175

The Revised Penal Code defines and penalizes threats, coercions, unjust vexation, libel, and threatening to publish a libel for compensation. (Lawphil) Republic Act No. 10175 also covers certain crimes committed through information and communications technology, including cyberlibel and other offenses committed through computer systems. (Human Rights Library)

You cannot be jailed simply for not paying a debt

The Philippine Constitution states that no person shall be imprisoned for debt. (Supreme Court E-Library)

This does not mean a borrower can ignore a valid obligation. A lender may still send lawful demand letters, file a civil collection case, or report genuine fraud if there is evidence of fraud separate from non-payment. But a collector’s statement like “may warrant ka na bukas” or “ipapakulong ka namin ngayon kung hindi ka magbayad” is often a pressure tactic, especially when no actual criminal complaint, prosecutor action, or court order exists.

Where to Report Online Lending App Harassment in the Philippines

Different agencies handle different parts of the problem. Filing in the correct office saves time.

Problem	Main agency	Where to file	What they can address
Abusive collection by a lending company, financing company, or online lending platform	SEC Financing and Lending Companies Division / FINLEND	SEC iMessage complaint portal	Unfair debt collection, unauthorized online lending operations, abusive collectors, possible suspension or revocation of authority
Misuse of contact list, photos, IDs, device permissions, or disclosure of personal data	National Privacy Commission	NPC complaints process or complaints-assistance form sent to NPC	Data privacy violations, unlawful or excessive processing, unauthorized disclosure
Threats, blackmail, fake warrants, impersonation, cyberlibel, sextortion-style tactics, scams	PNP Anti-Cybercrime Group or NBI Cybercrime Division	PNP ACG, NBI CCD, or DICT Cyber Hotline	Criminal investigation, cybercrime evidence handling, referral for prosecution
Bank, credit card, or BSP-supervised financial institution	BSP Consumer Assistance Mechanism	BSP Online Buddy or BSP consumer affairs channels	Complaints against BSP-supervised financial institutions
Home visits, immediate safety concerns, local disturbance	Local police station or barangay	Police blotter or barangay record	Incident documentation, local peace and order assistance

The 2026 SEC-DICT-NPC advisory gives these reporting channels: unfair debt collection may be reported to the SEC through iMessage and SEC Hotline 1-4732 (1-4SEC); cyber harassment, threats, fraud, and scams may be reported to the DICT Cyber Hotline at 1326@dict.gov.ph, the NBI Cybercrime Division, or the PNP Anti-Cybercrime Group. (National Privacy Commission)

The SEC iMessage portal is the SEC’s online system for public inquiries, complaints, incidents, and requests. It allows users to open a new ticket and check ticket status. (Securities and Exchange Commission)

Step-by-Step Guide: How to Report Online Lending App Harassment and Blackmail

1. Preserve evidence before blocking, deleting, or uninstalling anything

Do not rely on one screenshot. Build a complete evidence folder.

Save:

Full screenshots of text messages, chat messages, emails, and app notifications
Screen recordings showing the sender profile, phone number, account name, and message thread
Call logs showing dates, times, and frequency of calls
Voice recordings or voicemail, if available
Messages sent to your relatives, employer, coworkers, or references
Posts, comments, edited photos, fake wanted posters, or fake warrants
The app’s name, logo, developer name, app store link, website, privacy policy, and customer service details
Loan agreement, disclosure statement, payment schedule, and statement of account
Proof of payments, receipts, reference numbers, and payment channels
Screenshots of app permissions requested or granted
Names, numbers, emails, and social media profiles used by collectors
Your complaint ticket numbers from SEC, NPC, PNP, NBI, or DICT

If the harassment was sent to other people, ask them to send you screenshots showing the full sender number, full message, date, and time. A cropped screenshot without sender details is weaker.

Electronic evidence can be used in Philippine proceedings, but it must be properly authenticated. The Rules on Electronic Evidence apply when electronic documents or data messages are offered or used in evidence. (Lawphil)

2. Identify the actual lender behind the app

The app name is not always the legal company name. One company may operate several lending apps, and some apps use collection agencies or outsourced call centers.

Look for:

Corporate name
SEC registration number
Certificate of Authority number
Business address
Email address and hotline
App developer name
Website domain
Collection agency name
Payment merchant name
GCash, Maya, bank, or payment center account used

Check whether the company appears in the SEC lists of registered lending companies, financing companies, or recorded online lending platforms. The Lending Company Regulation Act, Republic Act No. 9474, places lending companies under SEC regulation and requires lending companies to operate with proper authority. (Supreme Court E-Library)

If the app is not registered, that fact should be included in your complaint. If you cannot identify the company, report what you have: app name, phone numbers, screenshots, payment channels, and app store link.

3. Send one calm written objection to create a record

Before or while filing complaints, you may send one short written message to the lender’s official email, app support, or verified collection channel.

Keep it factual:

I dispute the harassment and unlawful disclosure of my personal information. Please communicate only through your official channel and provide a complete statement of account. Do not contact third parties except any person who actually and expressly agreed to be a guarantor or co-maker. I am preserving evidence and reporting the matter to the proper government agencies.

Do not insult the collector. Do not threaten them back. Do not post their private information online. The goal is to create a clean record showing that you objected to the harassment and asked for lawful communication.

4. File an SEC complaint for unfair debt collection

File with the SEC when the issue involves a lending company, financing company, online lending platform, or collection agent.

Prepare:

Your full name, address, contact number, and email
Name of the lending app and company, if known
SEC Certificate of Authority number, if available
Loan date, amount borrowed, amount received, amount demanded, and payments made
Timeline of harassment
Screenshots and supporting evidence
Names and numbers of collectors
Names of third parties contacted
Statement of what you want the SEC to do, such as investigation, order to stop unfair collection, correction of records, or sanctions

Use the SEC iMessage complaint portal and choose the complaint category related to lending or financing companies if available. The SEC has also previously instructed complainants to use complete identifying details and attach supporting evidence because incomplete complaints may be dismissed or delayed. (www.foi.gov.ph)

In the facts section, describe the conduct using concrete words:

“Collector threatened to post my photo and call me a scammer.”
“Collector messaged my employer even though my employer is not a guarantor.”
“Collector contacted my entire phonebook.”
“Collector sent fake warrant and threatened immediate arrest.”
“Collector used profanity and called after 10:00 p.m.”
“Collector demanded payment to a personal account to stop posting.”

Avoid long emotional narratives without evidence. A clear timeline with attachments is usually more useful.

5. File an NPC complaint for data privacy violations

File with the National Privacy Commission when the lending app or collector:

Accessed or used your contact list without a lawful basis
Messaged your contacts about your debt
Posted your photo, ID, address, employer, or other personal information
Used your gallery, camera, location, or device data beyond what was necessary
Refused to delete or stop processing data after the purpose was completed
Used deceptive consent screens, hidden permissions, or confusing app design

The NPC accepts complaints through its complaints process, including a complaints-assisted form with supporting documents. NPC rules allow complaints to be filed personally, by registered mail, courier, or email when authorized, and formal complaints generally need to be notarized or verified with evidence and witness affidavits. (National Privacy Commission)

A strong NPC complaint usually includes:

Filled-out NPC complaint form
Valid government ID
Screenshots of app permissions and privacy notice
Screenshots of messages sent to you and your contacts
Affidavits or written statements from relatives, coworkers, or friends who received messages
Proof that the recipients were not guarantors
Timeline of when you installed the app, applied, received the loan, and were harassed
Any request you sent asking the lender to stop contacting third parties or delete data

NPC’s Complaints and Investigation Division generally has 30 calendar days from receipt to determine whether to give due course to a complaint or dismiss it without prejudice, and NPC states that the full process to final adjudication may take around 10 to 12 months. (National Privacy Commission)

6. Report threats, blackmail, impersonation, or fake warrants to cybercrime authorities

If the collector is threatening to post your private information, demanding payment to stop publication, impersonating authorities, sending fake legal documents, or committing fraud, consider filing with:

PNP Anti-Cybercrime Group
NBI Cybercrime Division
DICT Cyber Hotline

Bring or prepare:

Valid ID
Your phone, SIM card, and device used to receive the messages
Printed screenshots and digital copies
URLs, usernames, phone numbers, emails, account names, and payment account details
Chronology of events
Loan documents and payment proof
Names of witnesses or contacts who received messages
Draft affidavit or sworn statement, if already prepared

The NBI Cybercrime Division’s process may include a preliminary interview, complaint sheet, sworn statements or affidavits, examination of the device, and review of supporting documents. (National Bureau of Investigation)

For the fastest handling, do not submit only a collage of screenshots. Bring the original device if possible, because investigators may need to verify metadata, message origin, account details, and continuity of the conversation.

7. Make a police blotter or barangay record when there is a local safety concern

If collectors show up at your house, threaten your family, disturb your neighbors, or create an immediate safety issue, you may make a police blotter or barangay record.

A blotter does not automatically punish the collector, but it creates an official incident record. This can support your SEC, NPC, PNP, NBI, or prosecutor complaint.

Barangay conciliation may apply to certain disputes between individuals in the same city or municipality, but it is not a substitute for SEC, NPC, or cybercrime reporting when the issue involves regulated lending, data privacy violations, or cybercrime. Barangay conciliation also has exceptions, including offenses punishable by imprisonment exceeding one year or a fine over ₱5,000, cases involving no private offended party, and urgent legal action. (Lawphil)

8. Deal with the debt separately from the harassment

Reporting harassment does not automatically erase a valid loan.

To protect yourself:

Ask for a written statement of account
Ask for a breakdown of principal, interest, penalties, service fees, and payments
Pay only through official company channels
Keep receipts and reference numbers
Do not pay a collector’s personal account unless the company confirms in writing that it is an authorized payment channel
Avoid signing settlement terms you do not understand
Do not agree to “processing fees” or “anti-posting fees” demanded through threats

For small online loans, interest and charges may also be regulated. SEC Memorandum Circular No. 03, Series of 2022, implementing BSP Circular No. 1133, sets ceilings for certain short-term, small-value unsecured loans, including limits on nominal interest, effective interest rate, penalties, and total cost of credit.

Evidence Checklist for Online Lending App Complaints

Evidence	Why it matters	Practical tip
Full screenshots of threats	Shows exact words, sender, date, and time	Capture the whole screen, not only the message bubble
Messages sent to your contacts	Proves third-party disclosure or public shaming	Ask contacts to send screenshots from their own phones
Call logs	Shows frequency and timing of harassment	Include late-night or repeated calls
App permissions	Supports data privacy complaint	Record permissions before uninstalling
Loan agreement and disclosure statement	Shows the actual loan terms	Save PDF, screenshots, or in-app pages
Statement of account	Helps separate valid debt from illegal charges	Ask for itemized breakdown
Proof of payment	Prevents double collection	Save receipts, reference numbers, and account names
App store page and developer details	Helps identify the operator	Screenshot the listing before it disappears
Fake warrants or legal threats	Supports cybercrime or unfair collection complaint	Preserve the file, sender, and message trail
Affidavits from contacts	Strengthens NPC, SEC, or criminal complaints	A simple signed statement may help; agencies may require notarization

Fees, Timelines, and What to Expect

Process	Usual cost	Practical timeline	What to expect
SEC iMessage complaint	Usually no court-style filing fee	Ticket creation may be quick; investigation may take weeks or months	SEC may request more documents, evaluate the company’s authority, and impose regulatory action
NPC complaint	Complaint filing itself is not usually like a court filing fee, but expect notarization, printing, and documentation costs	Initial action may take around 30 calendar days; full adjudication may take 10–12 months	NPC may require proper verification, supporting documents, and affidavits
PNP ACG or NBI cybercrime complaint	Usually no filing fee, but expect printing, photocopying, storage device, and notarization expenses	Depends on complexity, identity tracing, platform records, and evidence	Investigators may interview you, inspect your device, and help prepare complaint documents
Police blotter or barangay record	Minimal or no official fee	Often same day	Creates an incident record but does not replace SEC, NPC, or cybercrime complaints
Prosecutor complaint	No ordinary filing fee for criminal complaint, but documentation costs may apply	Several weeks to months, depending on docket and evidence	Prosecutor determines probable cause before filing in court

A common bottleneck is incomplete evidence. Another is inability to identify the real operator behind the app, especially when collectors use prepaid numbers, fake names, foreign-hosted apps, or payment accounts under different individuals.

Common Mistakes to Avoid

Deleting the app before preserving evidence

Uninstalling may remove loan details, permissions, notices, chat logs, or in-app statements. Record and back up important information first.

Paying a personal account out of panic

Some collectors demand payment through personal GCash or bank accounts and promise to stop the harassment. This can lead to more demands. Pay only through verified official channels and keep proof.

Assuming every threat of arrest is real

A collector cannot create a valid arrest warrant by texting you. Warrants are issued by courts under legal procedures. Non-payment of debt alone is not a basis for imprisonment.

Posting the collector’s private information online

It may be tempting to expose the collector publicly. Be careful. Posting personal information or accusing someone online without proper basis may create your own risk for cyberlibel, privacy complaints, or harassment allegations. Preserve evidence and file with the proper agencies instead.

Reporting only to Facebook, Google, or the app store

App store reports may help remove abusive apps, but they are not a substitute for SEC, NPC, PNP, NBI, or DICT complaints.

Ignoring real legal documents

Fake warrants and fake subpoenas are common. But real court summons, prosecutor subpoenas, or official agency notices should not be ignored. Check the issuing office, docket number, signature, and contact details through official channels.

Treating a character reference as a co-borrower

A reference is not automatically liable. A guarantor or co-maker must have clearly agreed to that responsibility.

Special Notes for OFWs, Filipinos Abroad, and Foreigners

OFWs and Filipinos abroad can still report online lending harassment in the Philippines, especially when the lending app, borrower, contacts, or harassment activity is connected to the Philippines. SEC iMessage can be accessed online, and NPC materials may be submitted through authorized channels depending on the complaint requirements.

If you need to sign an affidavit abroad, the receiving agency may require consular notarization through a Philippine embassy or consulate, or local notarization with apostille depending on the document and country. The DFA maintains official apostille information and requirements through its Apostille website. (Apostille Services)

Foreigners in the Philippines have the same practical need to preserve evidence, identify the lender, and report to the proper Philippine agency. If the harassment involves threats to immigration status, embassy reporting, or deportation, document the exact words used. A private collector does not control Philippine immigration proceedings.

If you are outside the Philippines and the app operator is also outside the Philippines, enforcement may be slower. Still, a well-documented SEC, NPC, or cybercrime complaint can help if the app targets Philippine borrowers, uses Philippine collection agents, or operates through Philippine payment channels.

Frequently Asked Questions

Can I report an online lending app even if I really owe money?

Yes. A valid debt does not give a lender the right to harass, shame, threaten, or misuse your personal data. You may report the harassment while separately asking for a proper statement of account and arranging lawful payment.

Where should I report first: SEC, NPC, PNP, or NBI?

Report based on the conduct. File with SEC for unfair debt collection by a lending or financing company. File with NPC for misuse of contact lists, photos, IDs, or personal data. File with PNP ACG or NBI Cybercrime Division for threats, blackmail, impersonation, fake warrants, cyberlibel, or scams. In serious cases, you may file with more than one agency because each handles a different legal issue.

Is it illegal for an online lending app to message my contacts?

It may be illegal or a regulatory violation if the app contacts people in your phonebook who are not actual guarantors or co-makers. SEC rules treat contacting a borrower’s contact list, other than guarantors or co-makers, as an unfair debt collection practice, and data privacy rules restrict excessive or unauthorized use of personal data.

Can an online lending app post my photo online if I do not pay?

No. Posting your photo, ID, personal details, or accusations to shame you into paying may violate SEC rules, data privacy law, civil law, and possibly criminal law, depending on the content and circumstances.

Can I be arrested for not paying an online loan?

You cannot be jailed simply for debt. The Constitution prohibits imprisonment for debt. However, a separate criminal case may exist if there is actual fraud, identity theft, falsification, or another criminal act. Do not ignore official notices, but do not panic over text messages claiming an instant warrant.

What if the online lending app is not registered with the SEC?

Include that in your SEC complaint. Provide the app name, app store link, developer name, screenshots, payment channels, phone numbers, and messages. Unregistered or unauthorized lending activity is a serious regulatory issue.

Should I block the collector?

You may block abusive numbers after preserving evidence, especially if the messages are affecting your safety or mental health. Before blocking, save screenshots, call logs, sender details, and any threats. Keep at least one official communication channel open if you are trying to settle the legitimate loan.

What should I tell my employer or relatives if collectors message them?

Keep it short and calm. You can say: “Please disregard messages from these numbers. I did not authorize them to contact you about my private matter. I am documenting the messages and reporting them to the proper agencies.” Ask them to send you screenshots with the sender number, full message, date, and time.

Can I demand damages from the lending app?

Possibly. The Civil Code recognizes liability for acts contrary to law, bad faith conduct, and violations of dignity, privacy, and peace of mind. Articles 19, 20, 21, and 26 may be relevant depending on the facts. (FAOLEX Database) In practice, however, civil damages claims require time, evidence, and court proceedings, so many borrowers first file regulatory and cybercrime complaints.

What if I already paid but they still keep harassing me?

Send the official receipt and request a written account closure or updated statement of account. If harassment continues, include proof of payment in your SEC, NPC, and cybercrime complaint. Continued collection after payment may also suggest unfair, deceptive, or fraudulent conduct.

Key Takeaways

Do not panic and do not delete evidence. Preserve screenshots, call logs, app details, payment proof, and messages sent to your contacts.
Report unfair debt collection to the SEC, especially threats, shaming, unreasonable calls, false legal claims, and contacting non-guarantor contacts.
Report misuse of personal data to the NPC, especially contact-list abuse, posting of photos or IDs, and excessive app permissions.
Report blackmail, fake warrants, impersonation, cyberlibel, and serious threats to PNP ACG, NBI Cybercrime Division, or DICT.
A contact person is not automatically a guarantor. A guarantor must expressly agree to be responsible for the debt.
You cannot be jailed simply for debt, but you should not ignore real court or prosecutor documents.
Handle the debt separately from the harassment. Ask for a proper statement of account, pay only through official channels, and keep receipts.