In the digital age, Online Lending Apps (OLAs) have become a double-edged sword. While they offer quick financial relief, many operate outside the bounds of Philippine law, employing "scorched-earth" collection tactics. When an OLA resorts to debt shaming, unauthorized contact access, or threats, it ceases to be a financial service and becomes a legal liability.

If you are a victim of OLA harassment, you have two primary shields: the Securities and Exchange Commission (SEC) and the National Privacy Commission (NPC).

1. The Legal Framework

Harassment by OLAs generally violates three major legal pillars in the Philippines:

Republic Act No. 10173 (Data Privacy Act of 2012): Protects your personal information and contact lists from unauthorized use.
SEC Memorandum Circular No. 18 (Series of 2019): Explicitly prohibits "Unfair Debt Collection Practices."
Republic Act No. 9474 (Lending Company Regulation Act): Requires all lending entities to be registered and licensed.

2. Defining "Unfair Debt Collection Practices"

Under SEC rules, the following actions are strictly prohibited:

Threats of Violence: Any suggestion of physical harm to the debtor or their family.
Profanity/Obscenity: Using insults or derogatory language.
Disclosure of Names: Posting "shame lists" on social media or informing third parties (friends, employers) about the debt.
Misrepresentation: Falsely claiming to be a lawyer, a court official, or representing a government agency.
Unreasonable Hours: Contacting the debtor between 10:00 PM and 6:00 AM, unless the debt is over 60 days past due and the debtor gave prior consent.

3. Reporting to the Securities and Exchange Commission (SEC)

The SEC handles the corporate conduct and licensing of these apps. If an OLA is harassing you or is operating without a Certificate of Authority (CA), the SEC is your first stop.

Steps to File a Complaint:

Verify the License: Check the SEC website for the "List of Recorded Online Lending Platforms." If they aren't on the list, they are operating illegally.
Gather Evidence: * Screenshots of threatening texts/emails.
- Call logs (if they call excessively).
- The OLA's name and, if possible, their corporate name (often found in the "About" section of the app).
Submit via i-Message: Access the SEC’s i-Message portal or email the Enforcement and Investor Protection Department (EIPD) at epd@sec.gov.ph.
Formal Letter: Prepare a formal complaint letter addressed to the EIPD Director, detailing the timeline of harassment and the specific violations of SEC MC 18.

4. Reporting to the National Privacy Commission (NPC)

If the OLA accessed your phone’s contact list without consent or messaged people in your directory to shame you, they have violated the Data Privacy Act.

Steps to File a Complaint:

The Cease and Desist Demand: Ideally, you should first email the OLA’s Data Protection Officer (DPO) demanding they stop processing your data and delete your contact list. Save this email.
File a Formal Complaint: If they ignore you, go to the NPC’s official website and look for the Complaints and Investigation Division.
Requirements: You will need to fill out a Complaint Form and provide:
- A clear statement of facts.
- Evidence of the privacy breach (e.g., a message from a friend saying the OLA contacted them).
- Proof that you attempted to resolve the issue with the OLA first (the demand email).
Submission: Submit the notarized complaint form and supporting documents to complaints@privacy.gov.ph.

5. Summary of Where to Report

Issue	Agency	Primary Contact
No License / Illegal Operation	SEC	`epd@sec.gov.ph`
Debt Shaming / Profanity	SEC	`cgfd_rtas@sec.gov.ph`
Unauthorized Access to Contacts	NPC	`complaints@privacy.gov.ph`
Cyber-Libel / Grave Threats	PNP-ACG / NBI	Anti-Cybercrime Group

6. Critical Tips for Victims

Do Not Delete the App Immediately: Before uninstalling, take screenshots of your profile, the loan terms, and any permissions the app requested.
Secure Your Social Media: Set your profiles to private. OLAs often "scrape" your friend list to find people to harass.
Record Everything: Even if a collector is shouting, stay calm and record the call. This is powerful evidence for a "Notice of Violation" from the SEC.
Coordinate with the NBI: If the threats involve death or physical harm, file a report with the NBI Cybercrime Division or the PNP Anti-Cybercrime Group (ACG) for criminal prosecution.

The law is clear: Debt is a civil obligation, not a criminal one. No Filipino should be subjected to psychological warfare for a financial default. By reporting these apps, you not only protect yourself but also contribute to the systematic shutdown of predatory digital lenders.