The rapid proliferation of Online Lending Applications (OLAs) has increased financial inclusion but has also led to a surge in predatory practices. Borrowers often face "debt-shaming," unauthorized data access, and psychological harassment. Philippine law provides robust mechanisms to combat these abuses through administrative, civil, and criminal channels.

I. Prohibited Acts: What Constitutes Harassment?

Under SEC Memorandum Circular No. 18, Series of 2019 (MC 18) and the Financial Products and Services Consumer Protection Act (RA 11765), the following actions by lenders or their third-party collection agencies are strictly prohibited:

Threats of Violence: Any threat to the physical person, reputation, or property of the borrower or their family.
Profanity and Insults: The use of obscenities, insults, or profane language to abuse the borrower.
Public Shaming: Disclosing the names and personal information of alleged "delinquent" borrowers on social media or messaging "contact lists" harvested from the borrower's phone.
False Representation: Falsely claiming to be a lawyer, a court officer, or a representative of a government agency (e.g., "The NBI is coming to arrest you").
Unreasonable Contact Hours: Contacting the borrower before 6:00 AM or after 10:00 PM, unless the account is past due for more than 15 days or the borrower has given express consent for those specific times.
Contacting Third Parties: Contacting people in the borrower’s phonebook who are not co-makers or references, and informing them about the debt.

II. The Legal Framework

Reporting mechanisms are grounded in four primary pieces of legislation:

SEC Memorandum Circular No. 18 (2019): Specifically targets unfair debt collection practices by financing and lending companies.
Republic Act No. 11765 (Financial Products and Services Consumer Protection Act): Grants the SEC and BSP the authority to adjudicate claims and impose heavy penalties for "abusive collection or debt recovery practices."
Republic Act No. 10173 (Data Privacy Act of 2012): Penalizes the unauthorized processing and disclosure of personal information (e.g., harvesting your contact list).
Republic Act No. 10175 (Cybercrime Prevention Act of 2012): Addresses online libel, cyber-harassment, and threats made through digital platforms.

III. Step-by-Step Reporting Procedure

Step 1: Preservation of Evidence

Before blocking the harasser, document everything. Regulatory bodies require "competent evidence" to take action.

Screenshots: Capture text messages, emails, and social media posts (including the profile of the sender).
Call Logs & Recordings: Record the frequency of calls and the content of the conversation (one-party consent for evidentiary purposes is generally admissible in these specific harassment contexts).
Transaction Records: Keep copies of the loan agreement, disclosure statements, and proof of payments.

Step 2: File a Complaint with the SEC

The Securities and Exchange Commission (SEC) is the primary regulator for lending companies and OLAs.

Portal: Use the SEC eComplaint system or the Corporate Governance and Finance Department (CGFD) email.
Requirements: A formal letter or filled-out complaint form detailing the name of the app, the specific violations of MC 18, and your attached evidence.
Power: The SEC can revoke the company’s "Certificate of Authority" (CA), effectively shutting down the app, and impose fines up to ₱1,000,000 per violation.

Step 3: Report to the National Privacy Commission (NPC)

If the app accessed your contacts or posted your photos without consent, this is a data privacy violation.

Action: File a complaint via the NPC Complaints Management Division.
Focus: Emphasize the "unauthorized processing" and "malicious disclosure" of your sensitive personal information.

Step 4: Lodge a Criminal Case (PNP-ACG or NBI)

For grave threats, blackmail, or persistent cyber-harassment:

PNP Anti-Cybercrime Group (PNP-ACG): Visit their office at Camp Crame or report through their online "Cyber Help Desk."
NBI Cybercrime Division: File a formal complaint if the harassment involves extortion or identity theft.

IV. Adjudication of Money Claims

A significant development under RA 11765 is that the SEC and the Bangko Sentral ng Pilipinas (BSP) now have adjudicatory powers.

Authority	Scope of Power
Administrative	Can issue Cease and Desist Orders (CDO) and revoke licenses.
Quasi-Judicial	Can order the lender to pay the borrower damages or reimbursement for sums of money not exceeding ₱10,000,000 without needing to go to a regular court.

V. Summary of Recourse Options

Agency	Violation Type	Expected Outcome
SEC	Unfair collection, unlicensed lending	License revocation, administrative fines
NPC	Contact list harvesting, shaming	Cease & Desist on data use, fines, criminal referral
BSP	Harassment by banks or bank-affiliated apps	Sanctions against the bank, consumer redress
PNP / NBI	Grave threats, online libel, extortion	Criminal prosecution and imprisonment
PAO / IBP	Legal representation for the borrower	Legal assistance for filing cases in court