How to report online lending apps for harassment and privacy violations

The rise of Online Lending Applications (OLAs) has been accompanied by a surge in predatory practices, including debt shaming, unauthorized access to contact lists, and persistent harassment. Under Philippine law, these actions are not merely unethical; they are often criminal.

This article outlines the legal framework and the specific steps victims can take to hold these entities accountable.


I. Legal Framework and Violations

The primary legal protections against abusive OLAs are found in several key statutes and regulatory circulars:

  • Data Privacy Act of 2012 (Republic Act No. 10173): Prohibits the unauthorized processing of personal information. Accessing your contact list to harass your friends or family constitutes a grave violation.
  • Cybercrime Prevention Act of 2012 (Republic Act No. 10175): Addresses online libel, threats, and harassment.
  • SEC Memorandum Circular No. 18 (Series of 2019): Explicitly prohibits "Unfair Debt Collection Practices." This includes using threats, profane language, public disclosure of a debtor's name, or contacting persons in the debtor's contact list (unless they were named as guarantors).
  • Revised Penal Code: Covers crimes such as Grave Threats, Light Threats, and Criminal Unjust Vexation.

II. Common Prohibited Acts

Victims should document instances where an OLA or its collection agents perform the following:

  1. Debt Shaming: Posting the borrower's debt on social media or informing their employer/contacts.
  2. Contact List Harvesting: Using "phone permissions" to call or text every contact in the borrower’s phone.
  3. Threats and Intimidation: Threatening physical harm, "legal action" that is non-existent (e.g., "we have a warrant for your arrest"), or using profane language.
  4. Misrepresentation: Claiming to be lawyers, court officials, or law enforcement officers.

III. Step-by-Step Reporting Process

1. Secure Evidence

Before blocking the harassers, ensure you have documented everything:

  • Screenshots: Capture all threatening text messages, emails, and social media posts.
  • Call Logs: Record the numbers used, dates, and times of calls.
  • Registration Details: Note the OLA’s name and, if possible, their SEC Registration Number and Certificate of Authority (CA) Number.

2. File a Complaint with the SEC (Securities and Exchange Commission)

The SEC regulates financing and lending companies. If the OLA is registered, the SEC can fine them or revoke their license. If they are unregistered, the SEC can issue Cease and Desist Orders.

  • Action: Fill out the SEC Formal Complaint Form and email it to the Corporate Governance and Finance Department (CGFD) at cgfd_enforcement@sec.gov.ph.

3. File a Complaint with the NPC (National Privacy Commission)

If the OLA accessed your contacts, photos, or social media without valid consent, or used that data to harass you, they have violated the Data Privacy Act.

  • Action: Use the NPC’s online complaint portal or email complaints@privacy.gov.ph. Focus on the unauthorized processing of your personal data.

4. Coordinate with the PNP-ACG or NBI-CCD

For criminal acts such as cyber-libel, grave threats, or violations of the Cybercrime Prevention Act:

  • PNP Anti-Cybercrime Group (ACG): Visit their office at Camp Crame or submit a report through their website.
  • NBI Cybercrime Division (CCD): File a complaint at the NBI main office or regional offices.

5. Report to App Stores

  • Google Play Store / Apple App Store: Report the app for violating "Financial Services" policies. If enough users report an app for predatory behavior and privacy violations, the stores will delist the application.

IV. Summary of Red Flags

Violation Type Regulatory Body Key Law/Regulation
Harassment / Unfair Collection SEC SEC MC No. 18, s. 2019
Data Breach / Contact Access NPC R.A. 10173 (Data Privacy Act)
Online Libel / Threats PNP-ACG / NBI R.A. 10175 (Cybercrime Act)

V. Important Considerations

  • Payment Obligations: Filing a complaint does not automatically extinguish a legitimate debt. However, it can halt the harassment and provide a legal basis to dispute excessive interest rates that violate "Truth in Lending" laws.
  • SEC Status: Always check the SEC website for the List of Licensed Lending Companies. If an OLA is not on this list, it is operating illegally.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.