If an online lending app is threatening to shame you online, message your contacts, call your employer, post your photo or ID, or tell you that police will arrest you for an unpaid loan, treat it as a serious legal problem—not just “collection pressure.” In the Philippines, lenders may demand payment and pursue lawful remedies, but they cannot use threats, public humiliation, unauthorized use of your personal data, or deceptive collection tactics. This guide explains what counts as illegal harassment, which government office to report to, what evidence to prepare, and how to file complaints with the SEC, NPC, PNP Anti-Cybercrime Group, NBI, DOJ, BSP, or barangay when online lending app harassment happens.

What Counts as Threats and Harassment from Online Lending Apps?

Online lending harassment usually happens when a borrower misses a payment, disputes charges, or refuses to pay inflated fees. The collector may use fear, shame, or social pressure instead of lawful collection.

Common examples include:

Threatening to post your photo, valid ID, or “wanted” poster on Facebook, TikTok, group chats, or community pages
Messaging your phone contacts, relatives, employer, co-workers, churchmates, schoolmates, or customers
Calling you a scammer, thief, criminal, or prostitute in public or private messages
Threatening arrest, barangay action, police visits, immigration trouble, deportation, or a criminal case for simple nonpayment
Sending obscene, insulting, or degrading language
Calling or texting repeatedly at unreasonable hours
Pretending to be a lawyer, police officer, court employee, barangay official, or government agent
Using your ID, selfie, phonebook, photos, or social media information to pressure you
Creating fake posts, fake accounts, edited images, or fabricated accusations
Threatening harm to you, your family, your job, or your reputation

A lender can remind you of a debt, send a demand letter, charge lawful fees disclosed in the loan agreement, or file a proper civil or collection case. But debt collection becomes legally problematic when it uses threats, intimidation, deception, public shaming, or unauthorized processing of personal information.

Under SEC Memorandum Circular No. 18, Series of 2019, financing companies and lending companies are prohibited from using unfair debt collection practices, including threats of violence or other criminal means, obscene or profane language, disclosure or publication of borrowers’ names and personal information, false representations, and contacting persons in the borrower’s contact list other than guarantors or co-makers. The same circular treats calls or contacts before 6:00 a.m. or after 10:00 p.m. as unfair unless the borrower gave permission or the account is already past due for more than 60 days.

Your Legal Rights Under Philippine Law

SEC rules on online lending app collection practices

Most online lending apps in the Philippines fall under the supervision of the Securities and Exchange Commission when they are lending companies, financing companies, or online lending platforms connected to those entities.

Republic Act No. 9474, or the Lending Company Regulation Act of 2007, requires a lending company to be a corporation and to have authority from the SEC before engaging in the lending business. The SEC has supervisory and regulatory authority over lending companies, including the power to require reports, examine records, impose fines, suspend operations, or revoke authority when warranted. (Supreme Court E-Library)

This means the SEC is usually the first agency to consider when the complaint is about:

Unfair or abusive collection
An online lending app operating without proper authority
A lending app using a different app name from its registered corporate name
Hidden charges or misleading loan terms
Refusal to identify the company, collector, or basis of the claimed balance
Use of third-party collectors who harass borrowers

SEC Memorandum Circular No. 18 also makes lending and financing companies responsible for the conduct of their third-party collection agents. A lender cannot simply say, “That was our outsourced collector, not us,” if the collection activity was done for its account. The circular provides administrative penalties, including fines and possible suspension or revocation of the company’s Certificate of Authority depending on the violation and recurrence.

Data privacy rights when lending apps access your contacts

Online lending app harassment often involves data privacy violations. Many borrowers allow app permissions because they need fast cash, without realizing that the app may access contacts, photos, device information, or social media-linked data.

Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information and gives data subjects rights over how their personal data is collected, used, stored, shared, and disclosed. Personal information can include your name, phone number, address, employer, ID image, selfie, contact list, messages, and other details that can identify you. (National Privacy Commission)

Under the Data Privacy Act, you have the right to be informed about how your data is processed, the purposes of processing, the recipients of your data, the identity and contact details of the personal information controller, the storage period, and your right to file a complaint. You also have rights of access, correction, blocking, removal, destruction, and indemnification when your rights are violated. (National Privacy Commission)

A lending app or collection agency may face privacy issues when it:

Accesses your phone contacts without valid, specific, and informed consent
Sends messages to people who are not co-borrowers, guarantors, or co-makers
Discloses your debt to your employer, relatives, or friends
Publishes your name, ID, photo, or alleged balance online
Uses your contact list as pressure even if those people have no legal obligation to pay
Keeps or shares your data after it is no longer necessary for the legitimate purpose of the loan

The National Privacy Commission handles formal complaints involving improper collection, use, disclosure, or retention of personal data.

Criminal laws that may apply to threats, coercion, and online shaming

Some online lending harassment may also be criminal.

Under the Revised Penal Code, grave threats may apply when a person threatens another with a wrong amounting to a crime against the person, honor, or property. Grave coercion may apply when a person, without legal authority and through violence, threats, or intimidation, compels another to do something against their will or prevents them from doing something not prohibited by law. Unjust vexation may also apply to acts that annoy, irritate, or torment another person without lawful justification. (Lawphil)

Republic Act No. 10175, or the Cybercrime Prevention Act of 2012, may become relevant when the harassment happens through a computer system, mobile app, social media account, messaging platform, or other digital means. Cybercrime issues may arise from cyber libel, computer-related identity theft, computer-related fraud, or other cyber-enabled conduct depending on the facts. The Supreme Court has recognized that cyber libel under RA 10175 implements the Revised Penal Code provisions on libel when committed through a computer system. (Lawphil)

Simple nonpayment of a loan is generally a civil matter. A collector should not automatically threaten arrest just because you missed a payment. However, separate facts—such as using fake documents, identity theft, fraud, or issuing bouncing checks—may create different legal issues. This is why the exact facts and evidence matter.

Civil liability for public humiliation and invasion of privacy

Apart from administrative and criminal complaints, harassment may also support a civil claim for damages in proper cases.

The Civil Code protects human dignity, privacy, and good faith in the exercise of rights. Article 19 requires every person to act with justice, give everyone their due, and observe honesty and good faith. Article 26 addresses acts that violate dignity, privacy, peace of mind, and similar personal rights, including prying into privacy, disturbing private life or family relations, intriguing to alienate friends, or humiliating a person because of personal circumstances. (Lawphil)

In practical terms, this matters when collectors shame a borrower before family, friends, co-workers, customers, or the public. Even if a debt exists, the existence of a debt does not give a lender unlimited power to destroy a person’s reputation or disclose personal data.

Where to Report Online Lending App Harassment in the Philippines

Different agencies handle different parts of the problem. You may need to file with more than one office because a single incident can involve unfair debt collection, data privacy violations, and cybercrime at the same time.

Problem	Where to report	What that office usually handles
Harassing collection, obscene messages, contacting non-guarantor contacts, threats to shame you, unregistered lending activity	Securities and Exchange Commission	Lending and financing company regulation; unfair debt collection; online lending platform complaints
Accessing or messaging your contacts, posting your ID/photo, disclosing your debt, misuse of personal data	National Privacy Commission	Data Privacy Act complaints involving unauthorized or excessive use, sharing, or publication of personal information
Threats, extortion, fake posts, fake accounts, cyber libel, identity misuse, blackmail, online harassment	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Cybercrime investigation and criminal complaint assistance
Cybercrime coordination, especially complex or cross-border cyber matters	DOJ Office of Cybercrime	Cybercrime coordination, referrals, and international cooperation under RA 10175
Complaint involving a bank, e-money issuer, pawnshop, money service business, payment system operator, or other BSP-supervised financial institution	Bangko Sentral ng Pilipinas	Consumer complaints involving BSP-supervised financial institutions
Immediate local disturbance, threats by a known person in the same locality, or safety concerns	Barangay or local police station	Blotter, peace and order assistance, immediate safety documentation

The SEC has an online iMessage portal for submitting complaints and checking ticket status. The BSP’s consumer directory also lists the SEC Financial and Lending Company Division complaint channel for lending company concerns, including flcd_complaints@sec.gov.ph and the direct line (02) 8818-5990. (Securities and Exchange Commission)

For data privacy complaints, the NPC requires a formal complaint in its prescribed format. The complaint must be printed, filled out, notarized, and submitted either in person, by courier, or by scanned copy through complaints@privacy.gov.ph. (National Privacy Commission)

For cybercrime, the PNP Anti-Cybercrime Group accepts reports through its e-complaint channel and email, while the NBI Cybercrime Division also handles investigative assistance for victims of computer-related crimes. The DOJ Office of Cybercrime, created under RA 10175, also serves as the central authority for international mutual assistance and extradition in cybercrime and cyber-related matters. (www.foi.gov.ph)

Step-by-Step Guide: How to Report Threats and Harassment from Online Lending Apps

1. Preserve evidence before blocking, deleting, or uninstalling

Do not delete the app, messages, call logs, social media posts, or emails until you have preserved evidence. Many complaints become weak because the borrower only remembers what happened but cannot prove it.

Save the following:

Full screenshots of text messages, chat messages, and social media messages
Sender’s number, username, profile link, or account ID
Date and time shown on the screen
Call logs showing repeated calls or unusual hours
Voicemails or recorded calls, if available
Screenshots of posts, comments, group chats, or public shaming
App name, app store link, website, privacy policy, and customer service details
Loan agreement, disclosure statement, amortization, interest, fees, and due date
Proof of disbursement and payment
Messages sent to your contacts, employer, relatives, or friends
Screenshots from the phones of affected contacts
Any fake account, edited photo, “wanted” poster, or false accusation

For online posts, capture the full page, not just the insulting line. Include the profile name, URL, date, comments, and visible audience if possible. If your friend, co-worker, or employer received the message, ask them to save their own screenshots because evidence from the actual recipient is stronger than secondhand narration.

2. Write a clear incident timeline

Before filing, prepare a simple timeline. Government evaluators handle many complaints, so a clear chronology helps them understand the pattern quickly.

Use this format:

Date and time	What happened	Evidence
June 3, 2026, 8:30 p.m.	Collector texted that my ID would be posted online if I did not pay by 9:00 p.m.	Screenshot A
June 4, 2026, 7:15 a.m.	My co-worker received a message calling me a scammer	Screenshot B, witness statement
June 4, 2026, 11:20 p.m.	Collector called five times and used obscene language	Call log C, recording D
June 5, 2026	Fake Facebook post with my photo and alleged debt appeared	Screenshot E, profile link

Avoid long emotional narration at first. Start with facts: who, what, when, where, how, and what evidence supports it.

3. Identify the company behind the app

Online lending apps often use one app name, one collection name, and a different corporate name. Try to identify all of them.

Check:

The app’s “About” page
Loan agreement or disclosure statement
Privacy policy
Emails or SMS footers
Customer service number
App store developer name
SEC registration number or Certificate of Authority number
Names appearing in payment channels or receipts
Collection agency name, if any

A company may be SEC-registered as a corporation but still lack authority to operate as a lending company. Registration alone is not always the same as a Certificate of Authority to operate as a lending or financing company. RA 9474 allows penalties for engaging in lending business without the required authority. (Supreme Court E-Library)

4. Send a written stop-harassment and data request when safe

If there is no immediate threat of harm, send a short written message to the app’s customer service, company email, or data protection officer. This helps show that you tried to raise the issue and gives the company a chance to stop the unlawful conduct.

Your message can say:

I dispute the abusive collection methods being used in relation to my account. Your collectors have contacted people who are not guarantors or co-makers, threatened to publish my personal information, and used insulting language. Please stop contacting third parties, identify the collection agency and collectors handling my account, provide the legal basis for processing and disclosing my personal data, preserve all records relating to my account, and communicate with me only through lawful channels.

Do not delay filing with police, PNP-ACG, NBI, or the barangay if there are threats of violence, extortion, fake posts, stalking, or immediate safety concerns.

5. File a complaint with the SEC for unfair debt collection

File with the SEC when the complaint involves lending app harassment, unfair debt collection, unregistered lending activity, hidden or misleading charges, or abusive conduct by a collector.

Prepare:

Complaint letter or complaint form, if required
Your full name, contact details, and address
App name and corporate name, if known
Screenshots of harassment
Loan agreement and disclosure statement
Payment records
App store link or website
Names, phone numbers, or accounts used by collectors
Timeline of events
Names of contacts who were messaged, if they are willing to be identified

The SEC iMessage portal allows submission of complaints and checking of ticket status. If filing by email or formal complaint channel, the SEC has advised complainants to use a clear subject format such as complete name, respondent company, and subject of complaint. (Securities and Exchange Commission)

6. File a complaint with the National Privacy Commission

File with the NPC when the lending app or collector misused your personal information, accessed your contacts, disclosed your loan to third parties, posted your ID or photo, or refused to respect your data privacy rights.

Prepare:

NPC complaint form
Notarized complaint
Valid government ID
Screenshots of messages to you and your contacts
Proof that third parties received your debt information
App privacy policy and permission screenshots, if available
Loan agreement and account details
Copies of your emails or requests to the company, if any
Timeline and witness details

The NPC’s formal complaint process requires the complaint to be in the prescribed format and notarized before submission by personal filing, courier, or scanned email copy. (National Privacy Commission)

7. Report criminal threats or cyber harassment to PNP-ACG or NBI

Go to PNP-ACG, NBI Cybercrime Division, or your local police station when there are serious threats, extortion, fake accounts, identity misuse, cyber libel, blackmail, stalking, or public posts.

Bring:

Valid ID
Your phone or device, if possible
Screenshots and original messages
URLs, profile links, phone numbers, and usernames
Witness screenshots from contacts who were messaged
Recordings or call logs
Complaint-affidavit, if already prepared
Printed copies and digital copies of evidence

Ask for a reference number, blotter entry, cybercrime report, or receiving copy. For criminal cases, the police or NBI may later require sworn affidavits from you and witnesses for referral to the prosecutor’s office.

8. Report to the BSP only if the entity is BSP-supervised

Not all lenders are under the BSP. The BSP usually handles complaints against BSP-supervised financial institutions, such as banks, non-bank e-money issuers, money service businesses, pawnshops, payment system operators, and similar entities. For ordinary lending or financing companies, the SEC is usually the proper regulator. BSP guidance says consumers should first raise the concern with the financial institution’s own consumer assistance mechanism, then escalate unresolved complaints through BSP channels such as the BSP Online Buddy or consumer affairs email. (Bangko Sentral ng Pilipinas)

9. Use the barangay or local police for immediate safety documentation

A barangay blotter can help document local threats, especially if a collector, agent, or known person appears at your home, workplace, or neighborhood. But barangay proceedings are not a replacement for SEC, NPC, PNP-ACG, NBI, or prosecutor action.

Barangay conciliation has limits. Supreme Court guidance on the Katarungang Pambarangay system recognizes exceptions, including offenses punishable by imprisonment exceeding one year or a fine exceeding ₱5,000, offenses with no private offended party, and urgent legal actions where delay may prejudice the complainant. (Lawphil)

Documents, Fees, and Timelines to Expect

Office	Main documents	Common costs	Practical timeline
SEC	Complaint letter or online complaint, valid ID, screenshots, loan documents, app details, payment records, timeline	Usually no major filing cost for online complaint submission; printing, notarization, or courier costs may apply depending on filing method	Initial acknowledgment may be fast through online channels; investigation and regulatory action can take weeks or months
NPC	Prescribed complaint form, notarized complaint, valid ID, screenshots, privacy evidence, proof of disclosure to contacts	Notarization, photocopying, courier, and applicable NPC fees under current rules	Evaluation can take weeks; formal proceedings may take longer depending on completeness and complexity
PNP-ACG / NBI	Valid ID, device, screenshots, URLs, numbers, witness screenshots, affidavit if required	Usually evidence preparation, printing, notarization, transport; ask the office about current documentary requirements	Urgent threats can be reported immediately; investigation and prosecutor referral may take weeks or months
Prosecutor’s Office	Complaint-affidavit, witness affidavits, evidence attachments, IDs, receiving copies from police/NBI if any	Notarization and document preparation costs	Preliminary investigation commonly takes months depending on docket congestion and respondent participation
Barangay / Local police	ID, screenshots, address details, names of persons involved, incident narrative	Usually minimal or no filing cost for blotter; certification fees may vary	Blotter can often be made the same day; barangay proceedings depend on schedules and jurisdiction
Overseas complainant	Scanned evidence, Philippine contact details, notarized or consularized affidavit if required, passport/ID	Philippine Embassy or Consulate notarization, apostille or courier costs if required	Longer because of appointments, mailing, authentication, and time zone coordination

For Filipinos abroad and foreigners outside the Philippines, sworn documents may need special handling. Philippine embassies and consulates provide notarization or acknowledgment services for documents to be used in the Philippines, and some agencies may also accept locally notarized documents with apostille depending on the country and the agency’s requirements. Always check the receiving office’s current document rules before sending originals. (Philippine Embassy)

Sample Complaint Narrative for Online Lending Harassment

Use a clear, factual statement like this:

I borrowed ₱____ from [name of app] on [date]. The app or company name shown in the loan documents is [company name, if known]. My due date was [date]. Beginning [date], collectors using the phone numbers/accounts [list numbers or usernames] repeatedly sent threatening and insulting messages. They threatened to post my photo and ID online, called me a scammer, and contacted my [mother/employer/co-worker/friend], who is not a guarantor or co-maker. They disclosed my alleged loan and demanded that the third party pressure me to pay. I am attaching screenshots, call logs, the loan agreement, payment records, and screenshots from the recipients. I request investigation for unfair debt collection, unauthorized use and disclosure of personal information, and other violations that may apply.

Keep the narrative truthful. Do not exaggerate, invent threats, or hide payments you made. A calm, organized complaint is easier for agencies to act on.

Common Mistakes That Weaken Online Lending Harassment Complaints

Deleting messages too early

Blocking may protect your peace, but deleting messages before saving them can destroy important evidence. Save first, then block if necessary.

Submitting cropped screenshots only

Cropped screenshots are easy to challenge. Capture the sender, full message, date, time, phone number or username, and surrounding conversation.

Filing with only one agency when several violations are involved

SEC, NPC, PNP-ACG, NBI, DOJ, BSP, and the barangay do not all handle the same issue. A data privacy complaint does not automatically become a cybercrime complaint, and a cybercrime report does not automatically trigger SEC sanctions.

Focusing only on “high interest”

High interest or fees may matter if they were hidden, misleading, unconscionable, or not properly disclosed. But the strongest harassment complaint usually focuses on specific unlawful acts: threats, disclosure to third parties, obscene language, fake posts, unauthorized use of data, and misleading representations.

The Truth in Lending Act, Republic Act No. 3765, requires creditors to provide a clear written statement of finance charges and the percentage rate before the credit transaction is consummated. This can be relevant when the app did not clearly disclose the true cost of the loan. (Lawphil)

Paying collectors through personal accounts without proof

If you decide to pay, use official channels and keep receipts. Be careful with collectors who demand payment through personal e-wallets or bank accounts not connected to the company.

Fighting harassment with harassment

Do not threaten collectors back, post their private information, or make false public accusations. Preserve evidence and file properly. Retaliatory posts can create separate legal problems.

Special Scenarios Borrowers Commonly Face

“They messaged my contacts and employer. What should I do?”

Ask each recipient to screenshot the message on their own phone, including the sender, date, time, and full content. This supports both an SEC unfair collection complaint and an NPC data privacy complaint. If the message contains false accusations or threats, it may also support a cybercrime or criminal complaint.

“They posted my photo or ID online.”

Take screenshots immediately, including the page URL, account name, comments, reactions, and date. Ask other people to capture the post too. Do not rely only on reporting the post to the platform because it may be removed before you preserve evidence. This may involve data privacy violations, cyber libel, unjust vexation, or other offenses depending on the wording and facts.

“They said I will be arrested if I do not pay today.”

Mere failure to pay a loan is not automatically a criminal offense. A collector may file a lawful collection case, but threatening immediate arrest for ordinary nonpayment can be misleading and coercive. Save the message and include it in your SEC and, if serious, police or cybercrime report.

“The app is not on the SEC list.”

That can make the complaint more serious. Save the app store page, loan agreement, payment channel, website, and all communications. Report the app and company details to the SEC. Operating a lending business without proper authority may lead to penalties under RA 9474. (Supreme Court E-Library)

“I am a Filipino abroad and the lender is harassing my family in the Philippines.”

You can still preserve evidence, file online complaints where available, and ask relatives to save screenshots from their own devices. If a sworn complaint or affidavit is required, you may need notarization through a Philippine Embassy or Consulate, or another authentication method accepted by the receiving agency. Keep your Philippine number, email, and app account records active if possible.

“I am a foreigner living in the Philippines.”

Foreigners in the Philippines may also report harassment, threats, cybercrime, and misuse of personal data. Bring your passport, ACR I-Card if applicable, Philippine address details, phone number, and screenshots. If the harassment involves immigration threats, preserve those messages carefully because collectors sometimes use immigration fear even when they have no authority over immigration matters.

Frequently Asked Questions

Can online lending apps contact my contacts in the Philippines?

They should not contact people in your phonebook just to shame you or pressure you to pay, especially if those people are not guarantors, co-makers, or legally responsible for the debt. SEC Memorandum Circular No. 18 treats contacting persons in the borrower’s contact list other than guarantors or co-makers as an unfair debt collection practice.

Can an online lending app post my picture, ID, or name online?

No lawful debt collection process requires public posting of your photo, ID, or personal details. Posting your image, ID, alleged debt, or insults online may raise issues under SEC unfair collection rules, the Data Privacy Act, cybercrime laws, the Revised Penal Code, and the Civil Code depending on the facts.

Can I be arrested for not paying an online loan?

Simple nonpayment of a loan is generally a civil matter. A lender may pursue lawful collection remedies, but a collector should not threaten automatic arrest for ordinary missed payments. Different facts, such as fraud, identity theft, falsified documents, or bouncing checks, may create separate legal issues.

Should I report to the SEC or the NPC?

Report to the SEC for unfair debt collection, abusive collectors, unregistered lending activity, hidden loan charges, or online lending platform issues. Report to the NPC when your personal data, contacts, photo, ID, or debt information was accessed, used, shared, or posted without lawful basis. Many cases should be reported to both.

When should I go to PNP-ACG or NBI?

Go to PNP-ACG or NBI when there are threats, blackmail, fake accounts, cyber libel, identity misuse, extortion, or online posts meant to shame or intimidate you. Bring the device, screenshots, links, numbers, usernames, and witness evidence.

Do I need a notarized complaint?

For NPC formal complaints, the complaint must be notarized under the NPC’s procedure. For criminal complaints, affidavits are commonly notarized before filing with investigators or the prosecutor. Some online SEC submissions may begin through an online complaint portal, but formal proceedings may require additional signed or sworn documents later. (National Privacy Commission)

What evidence is most important?

The most important evidence is the actual threatening or harassing communication. Save full screenshots, phone numbers, usernames, URLs, dates, times, call logs, app details, loan documents, payment records, and screenshots from third parties who were contacted.

Can I block the collectors?

Yes, after preserving evidence. Blocking can help stop repeated abusive calls or messages, but keep at least one lawful communication channel open if you are trying to settle or dispute the account. Do not delete evidence before blocking.

What if I already paid but they still harass me?

Save proof of payment and all later harassment. Report the continued collection to the SEC and, if personal data was shared or contacts were messaged, to the NPC. If threats, fake posts, or identity misuse continue, report to PNP-ACG or NBI as well.

What if the lending app says I gave consent to access my contacts?

Consent is not a magic word. Under data privacy principles, consent must be informed, specific, and connected to a legitimate purpose. Even if you allowed app permissions, that does not automatically authorize public shaming, disclosure of your debt to unrelated contacts, or abusive processing of your personal data.

Key Takeaways

Online lending apps may collect debts, but they cannot use threats, public humiliation, false representations, obscene language, or unauthorized disclosure of your personal information.
The SEC handles unfair debt collection and lending company complaints.
The NPC handles misuse of personal data, contact lists, photos, IDs, and debt disclosure.
The PNP Anti-Cybercrime Group and NBI Cybercrime Division handle threats, cyber harassment, fake posts, identity misuse, extortion, and other possible cybercrimes.
The BSP is relevant only when the complaint involves a BSP-supervised financial institution, not ordinary SEC-regulated lending companies.
Preserve full evidence before blocking or deleting anything.
A strong complaint includes a clear timeline, complete screenshots, app and company details, loan documents, payment records, and witness evidence from contacts who were messaged.
Filipinos abroad and foreigners in the Philippines can also report, but sworn documents may require notarization, consular acknowledgment, apostille, or other authentication depending on the agency’s requirements.