If an online lending app is threatening you, shaming you in group chats, calling your employer, or messaging your phone contacts, the issue is no longer just an unpaid loan. In the Philippines, online lending apps and their collectors are covered by rules on fair debt collection, financial consumer protection, data privacy, cybercrime, and civil liability. This guide explains where to report online lending apps for harassment or abuse, what evidence to save, which government agency handles which complaint, and what usually happens after you file.

Quick Answer: Where to Report an Online Lending App in the Philippines

The right agency depends on what the lending app did. In many cases, you may report to more than one office because the same conduct can involve both unfair debt collection and misuse of personal data.

Problem	Where to report	Best for
Threats, abusive collection calls, public shaming, contacting your contacts, employer, or relatives	Securities and Exchange Commission (SEC) Financing and Lending Companies Department / SEC iMessage	Lending companies, financing companies, and online lending platforms
App accessed your contacts, photos, ID, messages, or posted/shared your personal information	National Privacy Commission (NPC)	Data privacy violations under the Data Privacy Act
Fake accounts, threats of violence, blackmail, impersonation, hacking, phishing, or online scams	NBI Cybercrime Division, PNP Anti-Cybercrime Group, or DICT/CICC cybercrime hotline	Cybercrime, fraud, identity theft, online harassment
The lender is a bank, credit card issuer, e-wallet, remittance company, or BSP-supervised financial institution	Bangko Sentral ng Pilipinas (BSP) Consumer Assistance Mechanism	Complaints against BSP-supervised entities
Immediate physical danger or threats against your family	Local police station, barangay blotter, 911, PNP ACG, or NBI	Urgent safety concerns

The SEC, DICT, and NPC issued a 2026 public advisory specifically warning online lending platforms against harassment, intimidation, public shaming, and unlawful use of personal data. The advisory identifies SEC FINLEND, DICT cyber channels, NBI Cybercrime Division, and PNP Anti-Cybercrime Group as reporting channels for abusive online lending behavior.

What Counts as Online Lending App Harassment or Abuse?

Debt collection is not automatically illegal. A lender may remind you of a due date, send a billing statement, or demand payment through lawful means. The problem begins when the lender or collector uses methods that are threatening, humiliating, deceptive, excessive, or invasive of privacy.

Common abusive practices include:

Threatening to have you arrested for nonpayment of a loan.
Saying they will file a criminal case when there is no lawful basis.
Threatening physical harm against you or your family.
Calling or messaging your contacts, employer, co-workers, spouse, parents, or neighbors to shame you.
Posting your photo, ID, loan details, or “wanted” notices on Facebook, Messenger, Viber, Telegram, or group chats.
Using obscene, insulting, or degrading language.
Pretending to be a police officer, NBI agent, lawyer, court employee, or barangay official.
Calling before 6:00 a.m. or after 10:00 p.m., except in limited situations allowed by rules.
Accessing your phone contacts without proper consent and using them for debt collection.
Demanding payment through suspicious personal accounts, mule e-wallets, or accounts under different names.
Continuing harassment after you have already paid or settled.

Under SEC Memorandum Circular No. 18, Series of 2019, financing and lending companies and their third-party collectors are prohibited from unfair debt collection practices, including threats of violence or criminal means, obscene or insulting language, disclosure or publication of borrower information, deceptive collection methods, and contacting people in the borrower’s contact list other than guarantors or co-makers.

The 2026 DICT-NPC-SEC advisory is even clearer on contact-list abuse: online lending platforms must not process contact lists in an excessive or disproportionate way, and debt collection contact should be limited to a named guarantor when applicable.

Legal Basis: Your Rights Against Abusive Online Lending Apps

SEC Rules on Lending Companies and Debt Collection

Most non-bank lending and financing companies in the Philippines are regulated by the Securities and Exchange Commission. Republic Act No. 9474, or the Lending Company Regulation Act of 2007, requires a lending company to be organized as a corporation and to obtain authority from the SEC before doing lending business. The law gives the SEC power to supervise lending companies, require reports, conduct examinations, and impose sanctions such as fines, suspension, or revocation of authority. (Supreme Court E-Library)

The SEC’s relevant legal framework for lending and financing companies includes RA 9474, RA 8556 or the Financing Company Act, the Revised Corporation Code, the Securities Regulation Code, and RA 3765 or the Truth in Lending Act. (SEC Appointment System)

For harassment complaints, the most important SEC issuance is SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices. It applies not only to lending and financing companies, but also to their agents, representatives, and third-party service providers. The company cannot simply blame a collection agency; the lender remains responsible for the collectors it uses.

Penalties under MC 18 may include administrative fines, suspension, or even revocation of the company’s Certificate of Authority, depending on the violation and whether it is repeated.

Financial Consumer Protection Act

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, strengthens the rights of financial consumers. It recognizes rights such as:

Fair and equitable treatment.
Clear disclosure and transparency.
Protection against fraud and misuse.
Data privacy and data protection.
Timely handling of complaints. (Supreme Court E-Library)

RA 11765 also requires financial service providers to treat consumers fairly and respectfully, prohibits abusive debt recovery practices, requires consumer assistance mechanisms, and makes providers responsible for third-party service providers involved in activities such as marketing, transacting, and debt collection. (Supreme Court E-Library)

This is important because many online lending apps use outsourced collectors. If the collector is the one threatening, humiliating, or messaging your contacts, the lender may still be answerable.

Data Privacy Act and Contact-List Abuse

Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information and gives individuals rights over how their data is collected, used, stored, shared, and deleted. Consent must be freely given, specific, and informed. The National Privacy Commission has authority to receive complaints, investigate, facilitate settlement, adjudicate, and award indemnity in proper cases. (National Privacy Commission)

For online lending apps, the most common data privacy issues are:

Accessing your full contact list even if only one reference or guarantor is needed.
Messaging your contacts about your debt.
Posting your name, face, ID, address, or loan details online.
Using your phone data for harassment after you revoke permissions.
Failing to explain clearly what data will be collected and why.

The 2026 DICT-NPC-SEC advisory warns that online lending platforms should not use deceptive design patterns to obtain consent, and that unnecessary app permissions are prohibited. It also states that online lending apps may access contacts only for limited, legitimate, and proportionate purposes, such as allowing the borrower to select a character reference or guarantor.

Criminal, Civil, and Cybercrime Issues

Some online lending app abuse may also involve criminal or civil liability, depending on the facts.

Possible legal bases include:

Revised Penal Code, Article 282 on grave threats, if the collector threatens harm against your person, honor, property, or family.
Revised Penal Code provisions on unjust vexation, coercion, slander, or libel, depending on what was said or published.
Republic Act No. 10175, the Cybercrime Prevention Act, if the act involves online libel, identity theft, unlawful access, or other computer-related offenses.
Civil Code Articles 19, 20, and 21, which impose liability for acts contrary to law, morals, good customs, public order, or public policy.
Civil Code Article 26, which protects dignity, personality, privacy, and peace of mind against acts such as prying into privacy, humiliating a person, or disturbing private or family life. (Lawphil)

A borrower can therefore have several possible remedies: administrative complaint with the SEC, privacy complaint with the NPC, cybercrime complaint with law enforcement, and in serious cases, a civil or criminal case.

Step-by-Step Guide: How to Report an Online Lending App for Harassment or Abuse

1. Secure Your Safety First

If the message includes threats of physical harm, stalking, extortion, or actual visits to your home or workplace, treat it as a safety issue first.

Practical steps:

Save the threatening messages immediately.
Tell a trusted family member or co-worker what is happening.
If there is immediate danger, contact 911, your local police station, or barangay.
File a police or barangay blotter if collectors are visiting, stalking, or threatening you in person.
Report cyber-related threats to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DICT/CICC channels.

A barangay blotter does not replace an SEC, NPC, or cybercrime complaint, but it helps create an official record if the harassment escalates.

2. Preserve Evidence Before Blocking or Deleting Anything

Evidence is the most important part of an online lending harassment complaint. Agencies receive many complaints, and the stronger ones usually have clear screenshots, dates, phone numbers, app details, and proof of what happened.

Save the following:

Evidence	Why it matters	Practical tip
Screenshots of messages	Shows threats, insults, shaming, or false statements	Include date, time, sender name, number, profile, or URL
Call logs	Shows frequency and timing of calls	Screenshot missed calls, especially before 6 a.m. or after 10 p.m.
Messages sent to your contacts	Proves contact-list harassment	Ask contacts to send screenshots showing sender details
App screenshots	Identifies the app and developer	Capture app name, logo, Google Play/App Store page, package name, and privacy policy
Loan agreement or disclosure	Shows terms, fees, interest, due date, and lender name	Save PDFs, emails, SMS approvals, and in-app pages
Proof of payment	Shows payments already made	Save GCash/Maya/bank receipts and reference numbers
Collector details	Identifies who harassed you	Save names, numbers, account names, emails, and social media profiles
Public posts	Shows cyber shaming or libel	Save URL, screenshot, date, comments, and group/page name
Government tickets	Shows reporting history	Save SEC, NPC, NBI, PNP, DICT, or BSP reference numbers

Avoid editing screenshots. Do not crop out the sender, date, or URL. If possible, export chat histories and save original files. Be careful with secretly recording phone calls because the Philippines has strict rules under the Anti-Wiretapping Act; messages, screenshots, voicemails, and call logs are safer evidence to preserve.

3. Identify the Actual Lending Company

The app name is not always the company name. Some apps use several names, change branding, or operate through third-party collectors. Try to identify:

App name.
Developer name on Google Play or Apple App Store.
Corporate name in the privacy policy, terms and conditions, or loan agreement.
SEC registration number or Certificate of Authority number, if shown.
Email address, office address, or customer service channel.
Payment account names used for collection.
Name of the collection agency, if disclosed.

If the company name is unclear, still file the complaint. Include every detail you have. Regulators can use app names, screenshots, payment channels, phone numbers, and developer information to trace the operator.

4. File a Complaint with the SEC for Unfair Debt Collection

For online lending app harassment, the SEC is usually the main agency when the lender is a lending company, financing company, or online lending platform.

The SEC iMessage system is the official web-based platform for inquiries, complaints, incidents, and requests. It generates a ticket number and allows tracking of the complaint. (Securities and Exchange Commission)

When filing through SEC iMessage:

Create or sign in to your SEC account if required.
Choose the service related to financing and lending company complaints.
State the app name and company name, if known.
Describe the loan:
- Date borrowed.
- Amount received.
- Amount demanded.
- Due date.
- Interest, fees, penalties, and collection charges.
Describe the harassment in chronological order.
Attach screenshots and documents.
State which acts you are complaining about, such as:
- Threats.
- Public shaming.
- Contacting non-guarantor contacts.
- False threats of arrest.
- Obscene language.
- Misrepresentation as police, court, lawyer, or government personnel.
- Calls outside allowed hours.
Save the ticket number and confirmation email.

A short but specific complaint is better than a long emotional message without evidence. Use dates, names, phone numbers, and screenshots.

5. File a Complaint with the NPC for Data Privacy Violations

File with the National Privacy Commission if the app accessed, used, shared, or published your personal data without proper authority. This is especially important if collectors contacted people from your phonebook, posted your ID or photo, or shared your loan information with your employer or relatives.

The NPC requires a formal complaint in a specific format. Its complaint process instructs complainants to download the form, print and fill it out, have it notarized, and submit it in person, by courier, or by scanned email copy to the NPC. (National Privacy Commission)

For an NPC complaint, include:

Your name, contact details, and ID.
Name of the lending app and company, if known.
What personal data was collected or accessed.
Why you believe the collection or use was excessive or unauthorized.
Screenshots showing messages to your contacts.
Screenshots of public posts containing your personal information.
App permissions requested by the lending app.
Any privacy policy, consent screen, or terms shown by the app.
Your requested relief, such as deletion of unlawfully processed data, stopping further processing, and investigation.

If contacts were harassed, ask them to save screenshots too. Their screenshots can show that your personal data was used to shame or pressure you.

6. Report Cybercrime, Threats, or Scams to Law Enforcement

Report to cybercrime authorities if the conduct involves:

Threats of physical harm.
Blackmail or extortion.
Impersonation.
Fake Facebook or social media accounts.
Posting edited photos or IDs.
Hacking or unauthorized access.
Phishing links.
Identity theft.
Online libel or public accusations.
Scam lending apps that collect fees but do not release loans.

The 2026 advisory identifies DICT cyber channels, NBI Cybercrime Division, and PNP Anti-Cybercrime Group as reporting channels for abusive online lending behavior.

For NBI Cybercrime complaints, expect to provide a complaint sheet, sworn statement or affidavit, screenshots, account links, device information, and other available evidence. The NBI Citizen’s Charter describes investigative assistance for victims of computer crimes and indicates that complainants may be interviewed and asked to submit documents or devices when needed. (National Bureau of Investigation)

7. Report to BSP Only if the Entity Is BSP-Supervised

Not every online lending app is under the BSP. The BSP generally handles complaints involving BSP-supervised financial institutions such as banks, credit card issuers, money service businesses, non-bank e-money issuers, virtual asset service providers, pawnshops, and operators of payment systems. The BSP consumer assistance page separately identifies SEC as the proper agency for complaints involving lending and financing companies. (Bureau of Small Enterprises)

If the lender is a bank app, credit card provider, or e-wallet-connected lender under BSP supervision, use the BSP consumer assistance channels. If it is a non-bank online lending app, the SEC is usually the better starting point.

8. Report the App to the Platform, but Do Not Rely on That Alone

You may also report the app to:

Google Play Store.
Apple App Store.
Facebook, Messenger, Telegram, Viber, or other platforms used for harassment.
GCash, Maya, or banks if payment accounts are being used for fraud.
Telecom providers if numbers are being used for threats or scams.

Platform reports can help remove abusive apps, pages, posts, or accounts. However, they do not replace complaints with the SEC, NPC, NBI, PNP, DICT, or BSP.

What to Write in Your Complaint

A clear complaint usually includes these parts:

Your details Full name, contact number, email address, city/province, and valid ID.
Lending app details App name, developer, company name, website, email, phone numbers, and SEC details if available.
Loan details Date of loan, amount received, amount demanded, fees, interest, due date, and payment history.
Harassment details Explain what happened in order:
- When did the harassment start?
- Who contacted you?
- What exactly did they say?
- Did they contact your family, employer, or contacts?
- Did they post your information online?
- Did they threaten arrest, violence, deportation, or public shaming?
Evidence list Number your attachments: Screenshot 1, Screenshot 2, Payment Receipt 1, App Page Screenshot, Contact Message Screenshot, and so on.
Relief requested Ask the agency to investigate, stop the abusive collection, direct the company to remove unlawfully posted data, preserve records, and impose appropriate sanctions.

Sample Complaint Narrative

Use plain facts. Avoid exaggeration. A simple narrative may look like this:

I borrowed ₱5,000 from [App Name] on [date]. The app released ₱3,500 after deductions and demanded ₱7,000 by [date]. On [date], after I missed payment, collectors using the numbers [numbers] sent messages threatening to shame me and have me arrested. They also messaged my mother, employer, and co-worker even though they were not guarantors or co-makers. They sent my photo and loan details to a group chat. Attached are screenshots of the messages, call logs, loan details, payment receipts, and screenshots from my contacts. I am requesting investigation for unfair debt collection, misuse of personal information, and other appropriate violations.

Practical Timelines, Fees, and What to Expect

Timelines vary depending on the agency, completeness of evidence, and whether the company can be identified.

Agency/process	What usually happens	Timeline reality
SEC iMessage complaint	Ticket is created, complaint is routed, SEC may request more documents or explanation	Initial acknowledgment may be quick; investigation and enforcement can take weeks or months
NPC complaint	Complaint form is reviewed; notarized filing may proceed to evaluation, possible mediation, investigation, or adjudication	Longer if documents are incomplete or respondent contests
NBI/PNP cybercrime complaint	Intake, interview, affidavit, evidence review, possible digital investigation	Urgent threats may be acted on faster; technical tracing can take time
Barangay or police blotter	Incident is recorded	Often same day, but blotter alone does not decide liability
BSP complaint	BSP may require proof that you first raised the issue with the supervised financial institution	Depends on response of the institution and BSP processing

Government complaint filing is usually not the expensive part. Common out-of-pocket costs are printing, photocopying, notarization, courier fees, travel, and preparing affidavits.

Will Reporting Cancel the Loan?

Reporting harassment does not automatically cancel a valid debt. The law separates two issues:

Whether you legally owe money.
Whether the lender used illegal, abusive, or unfair collection practices.

Even if you still owe a lawful amount, the lender is not allowed to threaten, shame, deceive, or misuse your personal data. On the other hand, if the app charged undisclosed fees, misrepresented the loan, operated without authority, or violated disclosure rules, those facts may become relevant in the SEC complaint or any later dispute.

RA 3765, the Truth in Lending Act, requires disclosure of finance charges in credit transactions, including interest, fees, service charges, discounts, and similar charges. (Lawphil)

Common Situations and What to Do

“The lending app said I will be jailed if I do not pay.”

Nonpayment of an ordinary debt is generally a civil matter. A collector should not threaten jail just to force payment. However, separate facts such as fraud, falsified documents, bouncing checks, identity theft, or other criminal acts may create different legal issues.

Save the message and report it to the SEC. If the threat includes violence, impersonation, or fake legal documents, report to cybercrime authorities too.

“They messaged my contacts and employer.”

This is one of the strongest signs of abusive collection and possible data privacy violation. Save screenshots from your contacts showing the sender, date, time, and message. File with the SEC for unfair debt collection and with the NPC for misuse of personal data.

Under current guidance, online lending apps should not use your contact list for broad debt collection. Contacting people other than a guarantor or co-maker is a serious red flag.

“They posted my face, ID, or loan details on Facebook.”

Take screenshots immediately, including the URL, account name, group name, date, and comments. Report the post to the platform, but also file with the NPC and cybercrime authorities. If the post contains false accusations or humiliating statements, it may also raise civil or criminal issues depending on the exact words and context.

“The app is not registered with the SEC.”

Report it anyway. Include the app store link, developer name, payment account, mobile numbers, privacy policy, and screenshots. Operating a lending company without proper SEC authority is itself a regulatory concern under RA 9474. (Supreme Court E-Library)

“I am an OFW or foreigner outside the Philippines.”

You can still report if the lender, app, borrower, data processing, or harmful conduct has a Philippine connection. For notarized complaints or affidavits executed abroad, you may need notarization under the rules of the country where you are located, and in some cases apostille or consular authentication may be required before the document is used in Philippine proceedings. Keep your passport or valid ID, Philippine address or contact person, and digital evidence organized.

“The collector says they are only a third-party agency.”

That does not automatically excuse the lender. SEC rules and RA 11765 recognize responsibility for third-party collectors and service providers. If the collector acted for the lender, include both the lending app and the collector in your complaint.

Frequently Asked Questions

Which agency handles online lending app harassment in the Philippines?

For most non-bank online lending apps, start with the SEC, especially if the issue is abusive collection, threats, public shaming, or contacting your phone contacts. File with the NPC if personal data was misused. File with NBI, PNP ACG, or DICT/CICC if there are cybercrime elements such as threats, impersonation, blackmail, fake accounts, or online scams.

Can an online lending app contact my phone contacts?

An online lending app should not freely use your contact list for debt collection. Current SEC-NPC-DICT guidance says contact-list processing must be limited, proportionate, and tied to legitimate purposes, and debt collection should not be directed at people other than a named guarantor when applicable.

Can I be jailed for not paying an online lending app?

Ordinary nonpayment of debt is generally not a crime by itself. But separate acts, such as fraud, falsification, identity theft, or issuing a bad check in certain situations, may create different legal consequences. A collector who uses fake arrest threats just to pressure payment may be engaging in unfair debt collection.

What evidence should I include when reporting an online lending app?

Include screenshots of messages, call logs, proof that your contacts were messaged, app details, loan documents, payment receipts, public post URLs, collector numbers, and the company name if known. The best evidence shows the sender, date, time, exact words used, and connection to the lending app.

Is SEC registration enough to make the harassment legal?

No. SEC registration or authority to operate does not allow a lender to harass borrowers. Registered lending and financing companies must still follow SEC rules, RA 11765, data privacy rules, and other applicable laws.

Should I uninstall the lending app immediately?

First preserve evidence: screenshots of the app, loan details, permissions, messages, privacy policy, and account information. After saving evidence, you may revoke unnecessary permissions, secure your accounts, and uninstall if needed for safety and privacy. If the app contains evidence you cannot access elsewhere, save it before deleting.

What if the app keeps changing names?

Report all names used by the app. Include the app store link, developer name, package name, logo, website, phone numbers, payment accounts, and screenshots. Some abusive operators use multiple names, so technical and payment details can be more useful than the app name alone.

Can I report even if I still owe money?

Yes. A borrower may still complain about harassment even if there is an unpaid balance. The complaint is about illegal or abusive collection methods. The existence of a debt does not give collectors the right to threaten, shame, deceive, or misuse personal data.

Can my employer be contacted about my online lending app debt?

Collectors should not shame you through your employer or use your employment relationship to pressure payment. If your employer was contacted and was not a guarantor or co-maker, save the messages and include them in your SEC and NPC complaints.

What can happen to an abusive online lending app?

Depending on the evidence and violations, regulators may investigate, order corrective action, impose fines, suspend operations, revoke authority, or refer matters for further enforcement. Cybercrime authorities may investigate threats, scams, impersonation, hacking, identity theft, or online defamation when supported by evidence.

Key Takeaways

Online lending app harassment in the Philippines can be reported to the SEC, especially for unfair debt collection.
File with the NPC when the app misuses your contacts, photos, ID, loan details, or other personal data.
Report to NBI, PNP ACG, or DICT/CICC if there are threats, impersonation, fake accounts, blackmail, or cybercrime elements.
Save evidence before blocking, deleting, uninstalling, or changing phones.
Contacting your phone contacts, employer, relatives, or friends for debt collection is a major red flag.
Reporting harassment does not automatically erase a valid debt, but lenders must collect lawfully.
The strongest complaints are specific, chronological, and supported by screenshots, documents, and witness messages.