Introduction

Online lending apps have become common in the Philippines because they offer fast, app-based loans with minimal documentary requirements. Many legitimate lending and financing companies use digital platforms to make credit more accessible. However, abusive online lending practices have also become widespread. Borrowers have reported excessive interest and fees, harassment, public shaming, unauthorized access to contacts, threats, defamatory messages, repeated calls, false accusations, and misuse of personal data.

In the Philippines, online lending apps may be reported to different government agencies depending on the violation. The proper reporting body may be the Securities and Exchange Commission, National Privacy Commission, Bangko Sentral ng Pilipinas, Department of Justice, Philippine National Police, National Bureau of Investigation, Department of Trade and Industry, or the courts.

Reporting is most effective when the complainant understands the nature of the violation, identifies the correct agency, preserves evidence, and clearly states the relief requested.

I. What Are Online Lending Apps?

Online lending apps are mobile applications, websites, or digital platforms that offer loans to consumers or small businesses. They may be operated by:

lending companies;
financing companies;
banks;
cooperatives;
microfinance institutions;
peer-to-peer platforms;
informal lenders;
unregistered entities pretending to be licensed lenders.

A legitimate lending app should be connected to a legally registered lender or financing company. The app itself may be only the platform, while the lender is the company behind it. When filing a complaint, it is important to identify both the app name and the corporate operator, if known.

II. Common Abuses by Online Lending Apps

Complaints against online lending apps commonly involve one or more of the following:

harassment of borrowers;
harassment of contacts, relatives, employers, or coworkers;
public shaming through text, chat, social media, or contact blasting;
unauthorized access to phone contacts, photos, files, or social media;
threats of criminal prosecution for ordinary debt;
false claims that the borrower committed estafa or fraud;
abusive language, insults, or obscenities;
excessive interest, penalties, and hidden charges;
automatic deductions from loan proceeds;
lack of written disclosure of loan terms;
continuing collection after full payment;
refusal to issue official receipts or statements of account;
use of fake lawyer, fake police, or fake court messages;
impersonation of government officers;
defamatory posts or messages;
sending edited photos or humiliating accusations;
disclosure of debt to third parties;
threats to contact employers;
threats to blacklist the borrower;
threats of arrest without legal basis;
use of multiple unknown numbers to harass;
collecting more than the amount legally due;
operating without proper registration or authority.

These acts may trigger administrative, civil, criminal, consumer protection, privacy, and regulatory remedies.

III. First Question: What Exactly Are You Reporting?

Before reporting an online lending app, classify the problem. Different violations go to different agencies.

A. Registration or Licensing Issue

If the lending app or company appears unregistered, unauthorized, or operating without proper license, the complaint may be directed to the Securities and Exchange Commission if the operator is a lending or financing company.

B. Data Privacy Violation

If the app accessed contacts, photos, messages, or personal data without valid consent, or disclosed the borrower’s debt to third parties, the complaint may be filed with the National Privacy Commission.

C. Harassment, Threats, or Cybercrime

If collectors threaten, shame, blackmail, extort, impersonate authorities, or post defamatory content online, the matter may be reported to law enforcement, such as the Philippine National Police Anti-Cybercrime Group or the National Bureau of Investigation Cybercrime Division.

D. Bank or BSP-Supervised Entity

If the lender is a bank, financing arm of a bank, e-money issuer, payment service provider, or BSP-supervised financial institution, the complaint may be directed to the Bangko Sentral ng Pilipinas.

E. Consumer Complaint

If the issue involves unfair, deceptive, or abusive collection practices, misleading advertising, hidden charges, or unfair terms, consumer protection remedies may be relevant.

F. Court Action

If the borrower suffered damages, defamation, harassment, privacy invasion, or unlawful collection, civil or criminal action may be considered.

IV. Agencies That May Receive Reports

1. Securities and Exchange Commission

The SEC is the primary regulator of lending companies and financing companies. Many online lending apps are operated by entities that must be registered with and regulated by the SEC.

A complaint may be filed with the SEC when the online lending app:

operates without SEC registration or authority;
uses an unregistered lending company;
violates lending company regulations;
engages in unfair debt collection practices;
imposes abusive practices through its collectors;
fails to disclose required loan terms;
uses harassment, threats, or abusive language;
shames borrowers or contacts;
uses misleading app names to hide the real company;
continues operating despite suspension or revocation.

The SEC may investigate, issue advisories, impose fines, suspend or revoke authority, order removal of abusive apps, and refer matters for prosecution where appropriate.

2. National Privacy Commission

The National Privacy Commission is the principal agency for data privacy violations. Online lending apps often require access to contacts, camera, storage, location, or other phone data. Some apps misuse this access to pressure borrowers.

A complaint may be filed with the NPC when the lending app or its collectors:

access the borrower’s contact list without valid consent;
contact persons who are not co-makers, guarantors, or references;
disclose the borrower’s debt to relatives, friends, employers, or coworkers;
send messages to contacts announcing the borrower’s debt;
use personal photos for shame campaigns;
collect excessive personal information;
retain personal data after the loan is paid;
refuse to delete data without lawful basis;
fail to provide a privacy notice;
process data for harassment or public shaming;
use data beyond the purpose of loan assessment and collection;
transfer personal data to unknown collectors or third parties;
fail to secure personal information.

The NPC may order compliance, deletion or correction of data, cessation of unlawful processing, payment of damages in proper cases, administrative fines, and referral for criminal prosecution.

3. Philippine National Police Anti-Cybercrime Group

The PNP Anti-Cybercrime Group may receive complaints involving online threats, cyber libel, identity theft, hacking, extortion, harassment, or digital abuse.

Report to cybercrime authorities when collectors:

threaten to post defamatory content online;
create fake posts accusing the borrower of fraud;
edit photos to shame the borrower;
use social media to humiliate the borrower;
impersonate police, lawyers, judges, prosecutors, or court staff;
demand payment through threats;
send obscene or abusive messages;
hack or unlawfully access accounts;
use fake accounts to harass;
threaten physical harm;
spread false accusations through chat groups or social media.

Law enforcement complaints are especially important when there is immediate threat, extortion, identity misuse, or online publication of defamatory content.

4. National Bureau of Investigation Cybercrime Division

The NBI Cybercrime Division may investigate serious online lending abuses involving cybercrime, identity theft, online harassment, fraud, extortion, cyber libel, or coordinated illegal collection practices.

A complaint to the NBI may be appropriate where:

there are multiple victims;
the operators use fake identities;
the app is part of an organized scheme;
messages involve threats or extortion;
personal data is being sold or misused;
there is impersonation of government authorities;
there are fake warrants, fake subpoenas, or fake court documents;
the complainant needs digital forensic assistance.

5. Bangko Sentral ng Pilipinas

The BSP handles complaints against BSP-supervised financial institutions. This includes banks, certain non-bank financial institutions, e-money issuers, payment system operators, remittance companies, and other covered entities.

Report to the BSP if the online loan is offered by or connected to a BSP-supervised institution, such as:

a bank;
digital bank;
financing product of a bank;
e-wallet or payment provider;
credit product integrated into a BSP-supervised financial service;
bank collection agent;
supervised lending platform.

The BSP may require the institution to respond to the complaint, investigate compliance, impose regulatory action, and direct corrective measures.

6. Department of Trade and Industry

The DTI may become relevant when the complaint involves consumer protection, misleading advertising, unfair sales practices, or deceptive representations, especially where the lending activity is linked to consumer transactions, goods, or services.

However, pure lending company regulation is usually more directly handled by the SEC or BSP, depending on the entity.

7. Department of Justice

The DOJ may become relevant in criminal prosecution, cybercrime policy, appeals from prosecutor resolutions, and coordination of law enforcement actions. Complaints involving criminal offenses are usually initiated through the prosecutor’s office, PNP, NBI, or appropriate law enforcement agency.

8. Prosecutor’s Office

A borrower may file a criminal complaint before the Office of the City or Provincial Prosecutor if the acts constitute criminal offenses, such as grave threats, unjust vexation, cyber libel, identity theft, coercion, estafa, illegal access, or violations of special laws.

The complaint should include affidavits, screenshots, recordings where lawfully obtained, proof of identity, loan documents, and other evidence.

9. Courts

Courts may be involved where the borrower seeks:

damages;
injunction;
protection against harassment;
correction or deletion of unlawful data processing;
defense against collection suit;
declaration of invalid or excessive charges;
criminal prosecution after filing of information;
enforcement of rights under contract, privacy, or tort law.

Court action is more formal and usually requires legal counsel.

V. Legal Issues Commonly Involved

1. Unfair Debt Collection Practices

Debt collection is allowed, but it must be lawful. Creditors may demand payment, send reminders, negotiate settlements, and file civil collection cases. They may not use abusive, deceptive, threatening, or humiliating methods.

Unfair practices include:

calling repeatedly at unreasonable hours;
using obscene or insulting language;
threatening arrest for nonpayment of ordinary debt;
threatening violence;
contacting third parties to shame the borrower;
falsely representing themselves as lawyers, police, or court officers;
falsely claiming that a case has been filed;
using fake warrants or fake subpoenas;
publicly posting the borrower’s debt;
making false statements about legal consequences;
pressuring employers or coworkers.

A borrower’s failure to pay does not give collectors permission to violate the law.

2. Data Privacy Violations

Online lending apps often rely on personal data. They may ask for the borrower’s name, address, employer, ID, selfie, contact list, location, photos, bank or e-wallet information, and device permissions.

Under Philippine data privacy principles, personal data must generally be collected and processed lawfully, fairly, transparently, and only for legitimate purposes. The processing must be proportionate and limited to what is necessary.

Potential violations include:

collecting excessive data not needed for the loan;
using contact lists for harassment;
contacting people who did not consent;
disclosing loan information to third parties;
retaining data after it is no longer necessary;
failing to give a clear privacy notice;
using vague consent to justify abusive collection;
sharing data with unknown collectors;
failing to protect data from unauthorized access.

Consent does not authorize everything. Even if a borrower clicked “allow,” the lender must still process data lawfully and proportionately.

3. Cyber Libel and Online Shaming

If collectors post or send defamatory statements online, cyber libel may be implicated. This may include statements falsely accusing the borrower of being a scammer, criminal, thief, or fraudster, especially when sent to third parties or posted publicly.

Online shaming may also support civil claims for damages, privacy violations, or criminal complaints depending on the content and circumstances.

4. Threats and Coercion

Collectors may violate the law when they threaten harm, arrest, public humiliation, criminal prosecution without basis, or other unlawful consequences to force payment.

Threatening to file a lawful civil collection case is generally different from threatening illegal or false action. A creditor may say it will pursue lawful remedies. It may not fabricate criminal cases, fake documents, or threats of immediate arrest.

5. Harassment of Contacts

A common abuse is “contact blasting,” where collectors message the borrower’s relatives, friends, employer, coworkers, or phone contacts. This may violate privacy rules, debt collection rules, and civil rights.

Even if a borrower listed one or two references, this does not authorize the lender to contact the entire phonebook or disclose the debt to unrelated persons.

6. Excessive Interest and Hidden Charges

Borrowers may complain about unclear, excessive, or hidden charges. Some apps advertise low interest but deduct large service fees, processing fees, membership fees, platform fees, insurance fees, or penalties.

The legal issues may include:

failure to disclose effective interest rate;
misleading advertising;
unconscionable charges;
violation of lending regulations;
unfair terms;
collection of amounts not agreed upon;
charging fees not properly disclosed.

Borrowers should compare the amount applied for, amount actually released, due date, total payable amount, interest, fees, penalties, and payment history.

7. Unregistered or Unauthorized Lending

Some online lending apps operate without proper corporate registration or lending authority. Others use shell entities, different app names, or constantly changing platforms.

Red flags include:

no company name;
no physical office;
no SEC registration details;
no customer service address;
no formal loan agreement;
payment to personal accounts;
collectors using random numbers;
threats instead of official notices;
refusal to issue receipts;
app disappearing after collection.

Operating a lending business without proper authority may expose the operator to regulatory and criminal consequences.

VI. Evidence to Preserve Before Reporting

Evidence is crucial. Before deleting the app, changing numbers, or blocking collectors, preserve proof.

A. App and Company Details

Save:

app name;
screenshots of app page;
developer name;
app store link, if available;
website;
company name;
SEC registration number, if shown;
office address;
customer service email or hotline;
privacy policy;
terms and conditions;
loan agreement;
screenshots of permissions requested by the app.

B. Loan Details

Preserve:

loan amount applied for;
amount released;
date released;
due date;
interest rate;
service fees;
processing fees;
penalties;
payment schedule;
payment history;
receipts;
proof of payment;
bank or e-wallet transaction records;
statements of account.

C. Harassment Evidence

Preserve:

screenshots of text messages;
call logs;
voicemail, if any;
chat messages;
emails;
social media posts;
names and numbers of collectors;
time and date of calls;
messages sent to contacts;
screenshots from friends or relatives who were contacted;
threats or defamatory statements;
fake legal documents;
fake warrants or subpoenas;
abusive language.

D. Privacy Evidence

Preserve:

proof that contacts were messaged;
names of third parties contacted;
screenshots from contacted persons;
app permission screenshots;
privacy policy;
evidence of uploaded contact list, if available;
notices or consent screens;
any proof that the app accessed photos or data.

E. Identity and Personal Documents

Prepare:

valid government ID;
proof of address;
affidavit of complaint;
authorization if filing through representative;
supporting affidavits from contacted persons.

VII. Should the Borrower Delete the Lending App?

Deleting the app may stop further access, but it may also remove evidence. Before deleting it, the borrower should save screenshots of:

account page;
loan details;
repayment schedule;
app permissions;
privacy policy;
terms and conditions;
messages inside the app;
customer support chats.

After preserving evidence, the borrower may consider uninstalling the app, revoking permissions, changing passwords, and securing accounts.

VIII. Immediate Steps for Borrowers Being Harassed

A borrower experiencing harassment should consider the following:

remain calm and avoid responding with threats;
save all evidence;
ask collectors to communicate only through lawful written channels;
do not admit false amounts;
pay only through verified official channels;
request a statement of account;
request proof of authority of the collector;
warn collectors not to contact third parties;
revoke app permissions;
notify contacts not to engage with collectors;
report serious threats to law enforcement;
file complaints with the proper agencies;
consult counsel if harassment is severe.

Borrowers should not ignore lawful debts, but they also do not have to tolerate unlawful collection methods.

IX. How to Report to the SEC

A complaint to the SEC should focus on the online lending company’s registration, authority, and collection practices.

A. Information to Include

The complaint should include:

name of the online lending app;
name of the lending or financing company, if known;
app store link or website;
date of loan;
amount borrowed;
amount released;
amount demanded;
interest and fees;
names or numbers of collectors;
description of harassment;
screenshots and messages;
proof of payments;
statement that contacts were harassed, if applicable;
request for investigation and regulatory action.

B. Relief to Request

A complainant may request:

investigation of the company;
verification of registration and authority;
sanctions for unfair collection practices;
suspension or revocation of authority;
order to stop harassment;
correction of loan records;
action against abusive collectors;
referral to law enforcement.

C. Complaint Style

The complaint should be factual and organized. Avoid emotional generalizations without evidence. State dates, times, names, numbers, and specific acts.

X. How to Report to the National Privacy Commission

A complaint to the NPC should focus on misuse of personal data.

A. Information to Include

The complaint should include:

identity of complainant;
identity of respondent app or company;
personal data collected;
permissions requested by the app;
privacy notice or lack of privacy notice;
how the data was misused;
names of persons contacted;
screenshots of messages sent to third parties;
proof that debt information was disclosed;
proof that contacts did not consent;
demand for deletion or cessation, if made;
response or refusal by the company;
harm suffered.

B. Relief to Request

The complainant may request:

investigation;
order to stop unlawful processing;
order to stop contacting third parties;
deletion or correction of personal data;
administrative fines or sanctions;
damages, where proper;
referral for criminal prosecution.

C. Importance of Third-Party Statements

If friends, relatives, or coworkers were contacted, their screenshots and affidavits strengthen the complaint. The NPC will need evidence that personal data was disclosed or misused.

XI. How to Report to PNP or NBI Cybercrime Units

A law enforcement complaint should focus on criminal acts, especially threats, extortion, cyber libel, identity theft, or online harassment.

A. Information to Include

Prepare:

affidavit of complaint;
valid ID;
screenshots of messages;
call logs;
links to defamatory posts;
names and numbers of suspects;
app details;
loan agreement;
proof of payment;
screenshots sent to third parties;
witnesses or affidavits;
proof of fake warrants, fake subpoenas, or impersonation.

B. Possible Criminal Issues

Depending on the facts, possible complaints may involve:

grave threats;
unjust vexation;
coercion;
libel or cyber libel;
identity theft;
illegal access;
computer-related fraud;
extortion;
use of fictitious names;
usurpation of authority;
violation of data privacy laws;
other crimes under the Revised Penal Code or special laws.

C. Urgent Threats

If there is a threat of physical harm, stalking, extortion, or immediate danger, the borrower should report promptly to law enforcement and local authorities.

XII. How to Report to the BSP

If the lender is a BSP-supervised financial institution, the borrower should report through the BSP’s consumer assistance channels.

A. Information to Include

The complaint should state:

name of bank or financial institution;
product or loan account number;
date of transaction;
disputed amount;
collection behavior;
prior communication with the institution;
requested resolution;
supporting documents.

B. Prior Complaint to Institution

It is often useful to first file a complaint with the financial institution’s customer assistance mechanism. Keep the ticket number or acknowledgment. This shows that the borrower tried to resolve the matter directly.

XIII. Reporting to App Stores and Platforms

Borrowers may also report abusive lending apps to app distribution platforms. This does not replace filing with Philippine authorities, but it may help stop further downloads.

Report the app if it:

misuses contacts;
collects excessive permissions;
violates financial services policies;
uses deceptive practices;
impersonates another company;
contains malware-like behavior;
harasses users.

Include screenshots, app link, developer name, and explanation of abuse.

XIV. Reporting to Employers or Contacts

If collectors contact the borrower’s employer or coworkers, the borrower may notify HR or management that:

the messages are from an online lending collector;
the debt should not be discussed with unauthorized persons;
disclosure may violate privacy rights;
the employee is taking legal steps;
the employer should preserve messages if needed as evidence.

The borrower should avoid letting the issue escalate into workplace conflict. A calm factual explanation is usually better.

XV. What to Put in a Complaint-Affidavit

A complaint-affidavit should be detailed and chronological.

Suggested Structure

Personal Details Name, address, contact information, and identification.
Respondent Details Name of app, company, collectors, phone numbers, email addresses, websites, app links.
Loan Transaction Date of application, amount applied for, amount released, fees deducted, due date, amount demanded.
Payments Made Dates, amounts, channels, receipts, reference numbers.
Abusive Acts Specific dates and times of harassment, threats, public shaming, contact blasting, or data misuse.
Third-Party Disclosure Names of relatives, friends, coworkers, or employers contacted.
Evidence Attach screenshots, call logs, receipts, messages, app screenshots, and affidavits.
Harm Suffered Anxiety, reputational harm, workplace issues, family conflict, financial loss, medical effects, or other damages.
Relief Requested Investigation, sanctions, deletion of data, stop-contact order, damages, prosecution, or other relief.
Verification Statement that the facts are true based on personal knowledge and documents.

XVI. Sample Complaint Narrative

A complaint may say:

I applied for a loan through the mobile application known as [App Name] on [date]. The app represented that I would receive a loan of ₱[amount], but only ₱[amount] was released after deductions. The app demanded payment of ₱[amount] by [date].

Beginning [date], collectors using the numbers [numbers] repeatedly called and sent threatening messages. They stated that they would contact my employer, post my photograph, and tell my relatives that I was a scammer.

On [date], my contacts [names] received messages stating that I owed money and accusing me of fraudulent conduct. I did not authorize the disclosure of my loan information to these persons. Copies of the messages are attached.

I respectfully request investigation and appropriate action against the app, its operators, and collectors for abusive collection practices, unauthorized processing of personal data, and other violations of law.

This should be modified to match the facts.

XVII. Demand Letter Before or Alongside Complaint

A borrower may send a demand letter to the lending company requiring it to:

stop contacting third parties;
stop using abusive language;
stop disclosing personal information;
provide a full statement of account;
identify the legal entity and collector;
correct erroneous balances;
acknowledge payments;
delete unlawfully processed data;
communicate only through official channels.

A demand letter is not always required before reporting, especially in serious harassment cases, but it can support the record.

XVIII. Can You Report Even If You Actually Owe Money?

Yes. A borrower may report abusive collection practices even if the debt is real. Nonpayment of a debt does not authorize harassment, threats, defamation, privacy violations, or unlawful data processing.

However, the borrower should be truthful. Do not falsely deny a valid loan. Instead, focus on illegal collection methods, excessive charges, lack of disclosure, privacy violations, or wrong amounts.

The debt issue and the abuse issue are separate. The borrower may still have to pay a lawful debt, but the lender must collect lawfully.

XIX. Can You Refuse to Pay Because the App Harassed You?

Harassment does not automatically cancel a valid loan. The borrower may still owe the principal and lawful charges. However, abusive conduct may support complaints, damages, sanctions, or challenges to excessive fees.

If the loan terms are illegal, unconscionable, undisclosed, or imposed by an unauthorized lender, the borrower may have defenses. These should be evaluated carefully.

A practical approach is to request a written statement of account, pay only through official channels, keep receipts, and dispute unlawful charges.

XX. Criminal Case Threats by Online Lending Apps

Collectors often threaten borrowers with criminal cases. Ordinary failure to pay a debt is generally a civil matter. A person is not supposed to be arrested merely because of inability to pay a loan.

However, criminal issues may arise if there was fraud at the inception, identity theft, falsified documents, or other criminal conduct. Collectors often misuse criminal terms to scare borrowers.

Red flags of abusive threats include:

“You will be arrested today” without case details;
fake warrant of arrest;
fake subpoena;
fake police blotter;
fake prosecutor notice;
use of police or court logos;
claim that nonpayment alone is estafa;
threats to send police to the workplace immediately;
refusal to provide actual case number.

Borrowers should preserve such messages and report them.

XXI. What If the App Contacts Your Phone Contacts?

This is one of the most common grounds for reporting.

The borrower should:

ask contacts to send screenshots;
save numbers used by collectors;
record dates and times;
identify what personal information was disclosed;
determine whether contacts were listed as references;
file a privacy complaint;
include third-party affidavits where possible;
demand that the lender stop contacting third parties.

Even if the app had access to the contact list, using it for public shaming or pressure collection may be unlawful.

XXII. What If the App Posts Your Photo Online?

If the app or collectors post the borrower’s photo, ID, selfie, or edited image online, the borrower should:

screenshot the post with URL, date, and account name;
ask witnesses to preserve screenshots;
report the post to the platform;
file a cybercrime complaint if defamatory or threatening;
file a privacy complaint for misuse of personal data;
request takedown;
consider civil damages.

Do not merely delete or ignore the evidence. Preserve it first.

XXIII. What If Collectors Threaten Your Employer?

If collectors threaten to call or message the employer, the borrower should:

preserve the threat;
inform HR or supervisor if necessary;
ask employer not to disclose employment details without proper authority;
request copies of any messages received by the employer;
include the incident in SEC, NPC, or cybercrime complaints.

Collectors may verify basic contact information through lawful means, but they should not shame the borrower or disclose debt information to unauthorized persons.

XXIV. What If the App Uses Fake Legal Documents?

Fake subpoenas, fake warrants, fake court orders, and fake police notices should be reported promptly. These may involve impersonation, falsification, usurpation of authority, unjust vexation, grave threats, or other offenses.

Evidence should include:

full screenshot of the document;
sender’s number or account;
metadata if available;
explanation of how it was received;
any demand for payment attached to it.

XXV. What If the App Keeps Collecting After Payment?

If the borrower has already paid, gather:

proof of payment;
reference numbers;
screenshots of payment confirmation;
statement of account before payment;
collection messages after payment;
demand for account closure or official receipt.

The complaint should request correction of records, cessation of collection, and sanctions for continued harassment.

XXVI. What If the Borrower Paid Through a Personal Account?

Many abusive apps require payment through personal bank or e-wallet accounts. This is a red flag. Preserve:

account name;
account number or wallet number;
screenshots of payment instructions;
proof of transfer;
collector messages;
confirmation receipt.

This may help regulators trace the collector or operator.

XXVII. What If There Are Many Apps and Collectors?

Borrowers often borrow from several apps, making evidence confusing. Create a separate folder or file for each app.

For each app, list:

app name;
company name;
loan date;
amount released;
due date;
amount paid;
collector numbers;
harassment incidents;
screenshots;
complaint status.

Organized evidence makes complaints more credible.

XXVIII. Class or Group Complaints

If many borrowers were harmed by the same app, group complaints may be effective. Each complainant should still provide personal evidence.

Group complaints can show a pattern of abuse, such as:

same app;
same collector scripts;
same threats;
same fake documents;
same contact blasting;
same payment accounts;
same excessive fees.

Regulators may take stronger action when there is evidence of systematic abuse.

XXIX. Remedies That May Be Available

Depending on the agency and facts, possible remedies include:

order to stop harassment;
investigation of the app;
suspension or revocation of lending authority;
removal of app from platforms;
administrative fines;
deletion or correction of personal data;
damages;
criminal prosecution;
injunction;
refund of unlawful charges;
correction of account balance;
issuance of official receipt;
settlement agreement;
public advisory against the app.

Not every agency can grant every remedy. The requested relief should match the agency’s authority.

XXX. Civil Remedies

A borrower may file a civil action for damages if the online lending app caused harm through harassment, defamation, invasion of privacy, abuse of rights, or unlawful collection.

Possible damages may include:

actual damages;
moral damages;
exemplary damages;
attorney’s fees;
litigation expenses.

Civil action requires proof of wrongful act, injury, and causal connection.

XXXI. Criminal Remedies

Depending on the facts, criminal complaints may involve:

grave threats;
light threats;
unjust vexation;
coercion;
libel;
cyber libel;
identity theft;
illegal access;
computer-related offenses;
falsification;
usurpation of authority;
extortion;
violation of data privacy laws.

The proper charge depends on the exact words, acts, medium used, evidence, and intent.

XXXII. Administrative Remedies

Administrative complaints may be filed with regulators such as SEC, NPC, or BSP. These may result in penalties, orders, suspension, revocation, or compliance directives.

Administrative remedies are often faster and more practical than court actions, especially for stopping abusive practices.

XXXIII. Practical Complaint Packet

A strong complaint packet should include:

complaint letter;
complaint-affidavit;
valid ID;
screenshots of app and company information;
loan agreement or app loan details;
proof of loan release;
payment records;
screenshots of abusive messages;
call logs;
screenshots from contacts who were messaged;
third-party affidavits, if available;
privacy policy and app permissions;
demand letter, if any;
proof of continuing harassment;
summary table of incidents.

A summary table helps agencies understand the case quickly.

XXXIV. Sample Summary Table

Date	Time	Sender/Number	Act	Evidence
Jan. 5	8:12 AM	09xx xxx xxxx	Threatened to post photo	Screenshot A
Jan. 5	8:40 AM	09xx xxx xxxx	Messaged borrower’s sister	Screenshot B
Jan. 6	10:15 AM	Collector account	Sent fake subpoena	Screenshot C
Jan. 7	7:30 PM	Unknown number	Called employer	Call log D

This table should be attached to the complaint.

XXXV. What Not to Do

Borrowers should avoid:

deleting evidence before saving it;
threatening collectors back;
posting private data of collectors online;
making false accusations;
refusing to pay lawful debts without legal basis;
paying to personal accounts without proof;
ignoring real court papers;
signing settlement documents without reading them;
giving more personal data to unknown collectors;
installing more lending apps to pay old loans.

The goal is to protect rights while preserving credibility.

XXXVI. How to Communicate With Collectors

A borrower may send a message such as:

Please communicate only through lawful written channels. I dispute the amount you are demanding and request a complete statement of account. Do not contact my relatives, employer, coworkers, or other third parties. Do not disclose my personal information or loan details to unauthorized persons. Any harassment, threats, or misuse of my data will be reported to the proper authorities.

This does not erase the debt, but it creates a record that the borrower objected to unlawful practices.

XXXVII. If the Borrower Wants to Settle

If the borrower wants to settle, the borrower should request:

written computation;
breakdown of principal, interest, fees, and penalties;
settlement amount;
official payment channel;
written confirmation that payment fully settles the account;
official receipt;
undertaking to stop collection;
undertaking to stop contacting third parties;
correction or deletion of collection records where appropriate.

Never rely solely on verbal promises by collectors.

XXXVIII. If the Borrower Cannot Pay

If the borrower cannot pay, the borrower may:

request restructuring;
negotiate lower penalties;
ask for written settlement;
prioritize lawful debts;
avoid new predatory loans;
seek financial counseling;
preserve evidence of harassment;
report abusive practices;
prepare for possible civil collection.

Inability to pay should be handled honestly. Avoid giving false promises or false information.

XXXIX. Reporting Does Not Automatically Stop Collection

Filing a complaint may not immediately stop collection. However, it creates an official record and may lead to regulatory action. For urgent harassment, the borrower may need to combine:

regulatory complaint;
law enforcement report;
platform takedown request;
demand letter;
privacy complaint;
court action, where necessary.

XL. Time Limits and Delay

Complaints should be filed as soon as possible. Delay may weaken evidence, make numbers inactive, allow posts to disappear, or make it harder to trace collectors.

Screenshots should show the date, time, sender, and full message. Save original files when possible.

XLI. Special Concern: Borrower’s Own Data Security

After dealing with an abusive app, the borrower should secure personal data:

revoke app permissions;
uninstall the app after preserving evidence;
change passwords;
enable two-factor authentication;
check e-wallet and bank activity;
monitor social media accounts;
warn contacts about possible scam messages;
avoid installing unknown APK files;
avoid giving OTPs to anyone;
avoid clicking payment links from unknown sources.

XLII. Special Concern: Identity Theft

If the lending app or collector uses the borrower’s ID, photo, or personal details to create fake accounts, the borrower should report immediately.

Evidence may include:

fake account links;
screenshots;
misuse of ID;
unauthorized loan applications;
messages from victims;
credit reports or collection notices;
proof that the borrower did not authorize the act.

Identity theft may involve criminal and privacy remedies.

XLIII. Special Concern: References and Co-Makers

A borrower should distinguish between:

a casual contact in the phonebook;
a character reference;
a guarantor;
a co-maker;
a co-borrower.

A reference is not automatically liable for the loan. A guarantor, co-maker, or co-borrower may have contractual liability if they signed or validly agreed.

Collectors should not mislead references by claiming they are liable when they did not agree to be liable.

XLIV. Special Concern: Threats of Barangay, Police, or Court Visit

Collectors may threaten to send barangay officials, police, or court sheriffs. A lawful court process has formal documents, case numbers, and proper service procedures.

Borrowers should know:

police do not arrest people merely for ordinary unpaid loans;
barangay officials do not collect private online loans as debt collectors;
court sheriffs act only under valid court processes;
subpoenas and warrants must come from proper authorities;
fake documents should be preserved and reported.

XLV. Special Concern: “Estafa” Threats

Collectors often threaten estafa. Nonpayment alone does not automatically constitute estafa. Estafa generally requires deceit, fraud, abuse of confidence, or other elements provided by criminal law.

If a borrower obtained a loan using fake identity, fake documents, or fraudulent representations from the start, criminal exposure may be possible. But if the borrower simply cannot pay after receiving a loan, the matter is usually civil collection.

Collectors who use baseless criminal threats may be engaging in abusive collection.

XLVI. Special Concern: Public Posts and Group Chats

If collectors post in group chats, social media pages, or community forums:

screenshot the post;
capture the URL;
identify the account name;
ask group members to preserve evidence;
report the post to the platform;
file privacy and cybercrime complaints;
include proof of reputational harm.

If the statement is false, malicious, or defamatory, cyber libel or civil damages may be considered.

XLVII. Special Concern: Use of Borrower’s Contacts Outside the Philippines

Some apps or collectors may contact overseas relatives, employers, or foreign numbers. This may still be relevant to a Philippine complaint if the lender operates in the Philippines, targets Philippine borrowers, or processes data from the Philippines.

The borrower should obtain screenshots from overseas contacts and include them as evidence.

XLVIII. Special Concern: APK Lending Apps

Some abusive lending apps are installed through APK files outside official app stores. These are risky because they may bypass platform review and request excessive permissions.

Borrowers should be cautious with apps that:

are not listed on official app stores;
require downloading APK files;
ask to disable security settings;
request access to contacts, SMS, camera, files, and location;
have no clear company information;
give loans instantly with hidden charges.

APK-based lending apps should be reported if they misuse data or operate unlawfully.

XLIX. Special Concern: Loan Aggregator Apps

Some apps act as “loan aggregators” that refer borrowers to multiple lenders. Complaints may become complicated because the aggregator may claim it is not the actual lender.

The borrower should identify:

which app collected the data;
which company released the loan;
which company demanded payment;
which collector sent messages;
where payments were made;
whether data was shared among multiple lenders.

Both the aggregator and lender may be relevant respondents if data was misused.

L. Special Concern: Collection Agencies

Some lending companies hire third-party collectors. The lender may still be responsible for unlawful acts of its collection agents, depending on the relationship and circumstances.

A complaint should identify:

lending company;
collection agency, if known;
collector names and numbers;
messages showing agency authority;
payment instructions;
threats or unlawful acts.

Borrowers should ask collectors to identify their company and authority in writing.

LI. Special Concern: Continuing Harassment After Complaint

If harassment continues after a complaint is filed:

keep preserving new evidence;
update the agency handling the complaint;
submit supplemental evidence;
inform collectors that a complaint has been filed;
report new threats immediately;
consider law enforcement or court remedies if escalation occurs.

Continuing harassment after notice may strengthen the case.

LII. Special Concern: Borrowers Who Used Fake Information

Some borrowers fear reporting because they used inaccurate information in the loan application. This may complicate the case. The borrower should avoid lying in the complaint.

Even if the borrower made mistakes, collectors still cannot use unlawful methods. However, false information in the loan application may create legal risk for the borrower. Legal advice is recommended in such cases.

LIII. Special Concern: Minors and Vulnerable Borrowers

If the borrower is a minor, senior citizen, person with disability, or vulnerable person, the complaint should state this. Additional protections or urgency may apply.

If collectors harass a minor or vulnerable person’s family, preserve evidence and report promptly.

LIV. Role of Lawyers

A lawyer may help by:

identifying causes of action;
preparing complaint-affidavits;
sending demand letters;
filing complaints with regulators;
filing criminal complaints;
seeking injunctions;
defending collection suits;
negotiating settlements;
protecting against self-incrimination;
claiming damages.

While many administrative complaints can be filed without a lawyer, counsel is helpful for serious harassment, large debts, criminal threats, or litigation.

LV. Can the Borrower Sue for Damages?

Yes, if the borrower can prove unlawful acts and resulting injury. Examples include:

reputational harm from defamatory messages;
emotional distress from harassment;
job consequences from employer contact;
privacy invasion;
financial loss from excessive charges;
medical harm caused by severe stress.

The borrower must present evidence. Screenshots, affidavits, medical certificates, employer statements, and witness testimony may be useful.

LVI. Can the App Be Shut Down?

Regulators may suspend or revoke authority, issue advisories, impose sanctions, or coordinate removal of abusive apps. App stores may also remove apps that violate platform policies.

However, some operators relaunch under new names. This is why complaints should identify corporate operators, payment accounts, collector numbers, and developers, not just the app name.

LVII. Does Reporting Affect Credit Record?

A legitimate unpaid loan may affect credit standing depending on reporting arrangements and law. Reporting harassment does not automatically erase the debt or credit record.

However, if the account is wrong, fully paid, fraudulent, or unlawfully reported, the borrower may request correction.

LVIII. What If a Real Court Case Is Filed?

If the borrower receives actual court papers:

do not ignore them;
verify the court, case number, and summons;
consult a lawyer;
file an answer within the required period;
raise defenses and counterclaims if appropriate;
preserve harassment evidence;
consider settlement if reasonable.

Reporting the app does not replace the need to respond to a real lawsuit.

LIX. Difference Between Harassment Complaint and Debt Defense

A borrower may have two separate matters:

complaint against abusive collection; and
defense or settlement of the debt.

A borrower can complain about harassment while still negotiating or disputing the debt. The complaint should not be framed as a request to avoid all payment unless there is a valid basis.

LX. Checklist: Where to Report Based on Problem

Problem	Possible Agency
Unregistered lending company	SEC
Abusive collection by lending app	SEC
Contact blasting or misuse of contacts	NPC
Unauthorized access to personal data	NPC
Defamatory online posts	PNP/NBI Cybercrime, prosecutor, courts
Threats or extortion	PNP/NBI, prosecutor
Fake warrant or fake subpoena	PNP/NBI, prosecutor
Bank or BSP-supervised lender	BSP
Misleading consumer practices	SEC, BSP, DTI, depending on entity
Need damages or injunction	Courts
App store abuse	App platform report

LXI. Practical Step-by-Step Guide

Step 1: Preserve Evidence

Take screenshots, save messages, record call logs, and collect documents.

Step 2: Identify the App and Company

Find the app name, corporate name, website, app store link, and payment accounts.

Step 3: Classify the Violation

Determine whether the main issue is harassment, privacy violation, cybercrime, licensing, excessive charges, or bank-related complaint.

Step 4: Send a Written Demand, If Appropriate

Demand that harassment stop and request a statement of account.

Step 5: File With the Correct Agency

Submit complaint to SEC, NPC, BSP, PNP, NBI, prosecutor, or court depending on the violation.

Step 6: Attach Evidence

Include organized screenshots, loan documents, payment records, and witness statements.

Step 7: Track Complaint

Keep acknowledgment receipts, reference numbers, and copies of submissions.

Step 8: Submit Supplemental Evidence

If harassment continues, submit new proof.

Step 9: Secure Accounts

Revoke permissions, change passwords, and warn contacts.

Step 10: Address the Debt Separately

Negotiate, dispute, or defend the debt through lawful means.

LXII. Suggested Complaint Letter Format

[Date]

[Agency Name] [Office Address or Complaint Portal]

Subject: Complaint Against [Online Lending App / Company Name] for [Harassment / Unfair Collection / Data Privacy Violation / Unauthorized Lending]

I respectfully file this complaint against [App Name] and its operator, [Company Name, if known].

On [date], I applied for a loan through the app. The amount applied for was ₱[amount], but only ₱[amount] was released after deductions. The app demanded payment of ₱[amount] by [date].

Beginning [date], collectors using [numbers/accounts] sent threatening and abusive messages. They also contacted my [relatives/employer/friends] and disclosed my alleged loan obligation without my consent. Copies of the messages are attached.

I respectfully request your office to investigate the app, its operator, and its collectors, and to take appropriate action. I also request that the respondent be directed to stop contacting third parties, stop unlawful collection practices, and correct or delete unlawfully processed personal data, as applicable.

Attached are copies of my evidence, including screenshots, loan details, payment records, and messages received by third parties.

Respectfully, [Name] [Contact Information]

LXIII. Evidence Attachment Checklist

Attach, when available:

copy of valid ID;
screenshots of app profile;
screenshots of app permissions;
loan agreement or loan page;
disbursement proof;
payment proof;
statement of account;
collector messages;
call logs;
third-party screenshots;
social media posts;
fake legal documents;
privacy policy;
demand letter;
affidavits of witnesses;
summary table.

LXIV. Best Practices for Borrowers

Borrowers should:

borrow only from registered entities;
read loan terms before accepting;
avoid apps requiring excessive permissions;
avoid APK downloads;
keep all loan records;
pay only through official channels;
demand receipts;
protect OTPs and passwords;
report abusive collection promptly;
avoid rolling over debt through more predatory loans.

LXV. Best Practices for Lending Apps

Legitimate lenders should:

maintain proper registration and authority;
disclose loan terms clearly;
avoid excessive and hidden charges;
use lawful collection methods;
train collectors;
prohibit contact blasting;
maintain a lawful privacy policy;
collect only necessary personal data;
secure borrower information;
provide customer assistance channels;
issue receipts and statements;
correct errors promptly;
supervise third-party collectors;
comply with regulator directives.

LXVI. Conclusion

Online lending apps may be reported in the Philippines when they engage in unlawful lending, abusive collection, harassment, contact blasting, misuse of personal data, excessive charges, false legal threats, defamation, cybercrime, or unauthorized operations.

The proper agency depends on the nature of the violation. The Securities and Exchange Commission is usually relevant for lending company registration and abusive collection by lending or financing companies. The National Privacy Commission is the principal agency for misuse of personal data, unauthorized access, and disclosure of loan information to contacts. The PNP Anti-Cybercrime Group and NBI Cybercrime Division are appropriate for threats, cyber libel, identity theft, fake legal documents, and online harassment. The Bangko Sentral ng Pilipinas is relevant when the lender is a BSP-supervised financial institution.

A borrower may owe a debt and still have the right to report illegal collection practices. Debt collection must be lawful. Lenders may pursue payment through proper legal remedies, but they may not threaten, shame, defame, impersonate authorities, misuse personal data, or harass third parties.

The strongest complaint is evidence-based. Borrowers should preserve screenshots, call logs, payment records, app details, third-party messages, and loan documents. They should identify the app, the company, the collectors, the numbers used, and the specific acts committed. Reporting early, organizing evidence, and choosing the correct agency greatly improves the chance of effective action.