Being behind on an online loan can be stressful, but a lender’s right to collect payment does not give it the right to threaten you, shame you online, misuse your contacts, or harass your family and employer. Philippine law allows legitimate debt collection while prohibiting abusive collection practices. The most effective response is to preserve evidence, secure your personal data, send a written demand, continue dealing responsibly with any valid balance, and file complaints with the correct government agencies.

What Counts as Online Lending App Harassment?

A lender or collection agency may remind you that a payment is due, send an accurate statement of account, offer a restructuring plan, and pursue lawful collection remedies. It may also file a civil case if the debt remains unpaid.

Collection becomes improper when the lender uses intimidation, humiliation, deception, excessive contact, or unauthorized disclosure of personal information.

Common examples include:

Threatening to arrest, kidnap, injure, or publicly shame you
Using obscene, insulting, or degrading language
Calling repeatedly at unreasonable hours
Sending messages that falsely appear to come from a court, police office, law firm, or government agency
Posting your name, photograph, identification card, loan details, or alleged “wanted” notice on Facebook, TikTok, group chats, or other public channels
Contacting everyone in your phonebook to announce your debt
Telling your employer, co-workers, customers, neighbors, or relatives about the loan to embarrass or pressure you
Editing your photograph and labeling you a scammer, criminal, thief, or fraudster
Threatening criminal charges merely because you cannot pay an ordinary debt
Continuing to use personal data collected through excessive app permissions
Demanding payment through a collector’s personal bank or e-wallet account without proper proof of authority

The Securities and Exchange Commission’s Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by lending and financing companies. The regulated company remains responsible for the acts of collection agencies and other third parties collecting on its behalf. (SEC Appointment System)

Philippine Laws That Protect Borrowers

SEC rules against unfair debt collection

SEC Memorandum Circular No. 18 prohibits collection methods involving threats, violence, insults, deceptive representations, public disclosure intended to shame a borrower, and communications at unreasonable or inconvenient hours.

As a regulatory benchmark, collection calls between 10:00 p.m. and 6:00 a.m. are generally considered unreasonable, subject to limited circumstances such as the borrower’s consent or a situation showing that another time is more convenient.

Collectors are also prohibited from contacting people in the borrower’s contact list who are not declared guarantors or co-makers when the purpose is to pressure, shame, or expose the borrower.

A character reference is not automatically a guarantor. A guarantor is someone who expressly agreed to answer for the debt. Simply being named as a reference, relative, friend, or emergency contact does not make a person liable for the loan. The National Privacy Commission has specifically distinguished character references from guarantors. (National Privacy Commission)

Financial Products and Services Consumer Protection Act

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act of 2022, protects financial consumers against abusive debt collection and recovery practices. It also requires financial service providers to treat consumers fairly and maintain appropriate complaint-handling systems. (Lawphil)

Data Privacy Act and online lending app rules

Republic Act No. 10173, or the Data Privacy Act of 2012, requires personal information to be collected and processed for a legitimate purpose and only to the extent necessary and proportionate to that purpose.

The National Privacy Commission’s rules for online lending applications prohibit indiscriminate contact harvesting. An app should not copy or use your entire phonebook, social-media contacts, photographs, or other unrelated data to harass you or pressure third parties.

Online lenders must:

Explain why particular app permissions are needed
Limit access to information necessary for loan evaluation and administration
Avoid excessive or disproportionate processing
Refrain from using photographs, contact lists, and other personal data for debt-shaming
Provide a practical way to revoke permissions when the purpose has been completed
Protect the personal information of borrowers, references, guarantors, and other affected persons

The NPC has stated that contact information may be processed for limited purposes such as identity verification, but not in an unrestrained manner that results in harassment, unfair collection, or collection from persons other than actual guarantors. (National Privacy Commission)

No imprisonment for an ordinary unpaid debt

Article III, Section 20 of the 1987 Philippine Constitution provides that no person shall be imprisoned for debt. An ordinary failure to pay a loan is generally a civil matter, not a reason for immediate arrest. (Lawphil)

This does not protect a person from prosecution for a separate criminal act. For example, a case may involve fraud, falsification, identity theft, or a violation involving a check when all legal elements are present. But a collector cannot truthfully claim that police officers will arrest you immediately merely because an app loan is overdue.

A genuine criminal complaint also does not begin through a threatening text saying, “A warrant will be issued today.” Warrants of arrest are issued by judges under legal procedures, not by collectors, lawyers, police officers, or barangay officials.

Civil liability for humiliation and abuse

Articles 19, 20, and 21 of the Civil Code of the Philippines require people to act with justice, honesty, and good faith and may provide a basis for damages when a person willfully causes harm in a manner contrary to law, morals, good customs, or public policy.

Article 26 also protects personal dignity, privacy, and peace of mind against certain forms of meddling, humiliation, and harassment. Whether damages will be awarded depends on the evidence and the circumstances of the case. (Lawphil)

Threats, coercion, libel, and cyberlibel

Severe collection conduct may fall under the Revised Penal Code, including grave threats, coercion, unjust vexation, or libel, depending on the exact words, actions, intent, and evidence.

When a defamatory accusation is published through Facebook, messaging platforms, websites, or another computer system, Republic Act No. 10175, the Cybercrime Prevention Act, may apply to libel committed through information and communications technology. (Lawphil)

Not every rude message automatically constitutes a crime. Prosecutors and courts examine the complete communication, the identity of the sender, the intended audience, whether publication occurred, and whether the legal elements of the alleged offense are present.

How to Stop Online Lending App Harassment

1. Preserve the evidence before blocking or uninstalling anything

Do not immediately delete the app, erase messages, or reset your phone. First, create a complete evidence file.

Save the following:

Screenshots showing the full message, sender, mobile number or account name, date, and time
Screen recordings showing the conversation from beginning to end
Call logs showing the frequency and timing of calls
Voicemails and recordings lawfully obtained from conversations in which you participated
Facebook posts, comments, group messages, profile links, usernames, and URLs
Copies of messages sent to your relatives, references, employer, or co-workers
The app’s name, developer, app-store page, website, privacy notice, and requested permissions
Your loan agreement, disclosure statement, repayment schedule, and statement of account
Receipts and transaction records for payments already made
The collector’s name, claimed company, payment instructions, and account details
Any police, court, barangay, or law-office document that appears suspicious
A written chronology showing what happened on each date

Ask affected relatives or co-workers to preserve the original messages on their own devices. A screenshot forwarded to you is useful, but the original recipient’s copy and a sworn statement may carry greater evidentiary value.

Keep unedited originals. You may make redacted copies for submission, but do not rely only on cropped or annotated screenshots. Back up the files to secure cloud storage, an external drive, or another device.

2. Revoke unnecessary app permissions and secure your accounts

After preserving the evidence, open your phone’s settings and review the lender’s permissions.

Revoke access to:

Contacts
Call logs
Text messages
Photographs and files
Camera and microphone
Location
Calendar
Social-media accounts

Change passwords for your primary email, social-media accounts, cloud storage, and financial apps. Turn on multi-factor authentication and check whether unfamiliar devices are logged in.

Uninstalling the app prevents some future access, but it does not automatically erase information the company already copied. A separate written deletion or objection request may still be necessary.

3. Send a written cease-harassment and data-privacy demand

Send the lender and collection agency a calm written notice through the company’s official email address, customer-support channel, or registered office. Keep proof of delivery.

Your notice may state:

I acknowledge your right to communicate with me regarding any legitimate account. However, I demand that all threats, abusive language, excessive calls, public shaming, impersonation, and disclosure of my account to unauthorized third parties stop immediately.

Communicate directly with me in writing and at reasonable hours. Do not contact persons who are not valid guarantors or co-makers, and do not publish or disclose my personal information, photograph, loan details, or alleged indebtedness.

I object to the continued use of contact lists, photographs, and other personal information obtained through unnecessary or excessive app permissions. Please identify the personal data you hold, its source and purpose, the parties to whom it was disclosed, and the action taken on my request.

Please provide an itemized statement of account, the legal name of the creditor, the SEC registration and authority details, the identity and authority of the collection agency, and the official account through which any payment should be made.

Please confirm your corrective action in writing within 15 calendar days.

This notice does not require the lender to stop all legitimate collection. Its purpose is to require lawful communications, create a paper trail, and give the company an opportunity to address the privacy violation.

For an NPC complaint, the complainant is generally expected to have first informed the company or personal information controller in writing and allowed it an opportunity to respond. Under the NPC Rules of Procedure, a complaint may proceed when the company takes no timely action or does not respond within 15 calendar days, although the NPC may relax this requirement in cases involving grave or irreparable harm, patently illegal action, or the absence of an adequate remedy.

4. Verify the lender and the amount being claimed

Ask for:

The lender’s complete corporate name
SEC registration number
Certificate of Authority to Operate as a lending or financing company
Name and authority of the collection agency
Principal amount borrowed
Interest, service fees, penalties, and other charges
Payments already credited
Current outstanding balance
Official payment channels

Under Republic Act No. 9474, lending businesses covered by the law must operate through properly organized entities with the required SEC authority. Registration of a company name alone is not the same as authority to operate a lending business. (Lawphil)

The Truth in Lending Act, Republic Act No. 3765, requires creditors to disclose finance charges and the true cost of credit before the transaction is completed. (Lawphil)

For certain unsecured, general-purpose loans of ₱10,000 or less with a term of up to four months, applicable regulatory caps include:

Charge	Applicable cap
Nominal interest	6% per month
Effective interest, including most fees	15% per month
Late-payment penalty	5% per month on the outstanding scheduled amount due
Total cost of credit	100% of the amount borrowed

These caps do not apply to every type of loan. They apply only when the loan falls within the covered amount, purpose, security, and term.

5. Address any legitimate balance without exposing yourself to another scam

Harassment does not automatically cancel a valid loan. If the statement is accurate and you can pay, use only a verified official payment channel.

When full payment is not immediately possible:

Propose a realistic installment arrangement
Ask for interest or penalty reduction
Require the agreement to be confirmed in writing
Ask whether collection activity will be suspended while you comply
Keep every receipt
Request a certificate of full payment or account closure after settlement

Do not send money to an individual collector’s personal GCash, Maya, bank account, or remittance account unless the lender independently confirms in writing that the person and account are authorized. Fraudsters sometimes pose as collection agents and offer fake “discounted settlements.”

Where to Report Online Lending App Harassment

More than one agency may have jurisdiction because unfair collection, privacy violations, and criminal threats are different legal issues.

Problem	Where to file	Practical notes
Threats, insults, unreasonable collection calls, third-party shaming, deceptive collection, or misconduct by a lending or financing company	Securities and Exchange Commission	File through the SEC I-Message Mo portal. Select the category for complaints involving financing or lending companies and upload organized evidence.
Contact harvesting, unauthorized disclosure, misuse of photographs, excessive app permissions, or failure to honor privacy rights	National Privacy Commission	Use the current form and instructions on the NPC complaint filing page.
Complaint involving a bank, BSP-supervised e-money issuer, or another BSP-supervised institution	Bangko Sentral ng Pilipinas	First complain through the institution’s Financial Consumer Protection Assistance Mechanism. If unresolved, use the BSP’s consumer-assistance channels.
Death threats, violence, extortion, hacking, impersonation, stalking, or potentially criminal online publication	PNP, NBI, CICC, or prosecutor’s office	Report urgent danger immediately. Administrative complaints with the SEC or NPC do not replace a criminal complaint.

The SEC’s iMessage system is its official online platform for public inquiries and complaints and generates a ticket that can be tracked. The SEC headquarters is at 7907 Makati Avenue, Salcedo Village, Bel-Air, Makati City. (Securities and Exchange Commission)

The BSP’s complaint guidance directs complaints involving lending companies, financing companies, online lending applications, online lending platforms, and their collection agencies to the SEC. BSP escalation is primarily for institutions under BSP supervision, after the consumer has first used the institution’s internal complaint mechanism.

For criminal or cybercrime concerns, reports may also be made through the NBI online complaint system, the NBI Cybercrime Division, the Philippine National Police Anti-Cybercrime Group, or the Cybercrime Investigation and Coordinating Center. (National Bureau of Investigation)

What to include in an SEC complaint

Attach:

Your full name and reliable contact details
Name of the lending app
Corporate name of the lender, if known
Name of the collection agency
Loan or account reference number
Concise chronological narrative
Copies of abusive messages and call logs
Proof of third-party contact or public posting
Loan documents and payment records
Copy of your written demand and the company’s response
Specific relief requested, such as stopping third-party contact and correcting the account

Organize attachments by date and label them clearly: “Annex A — Loan Agreement,” “Annex B — Threatening Messages,” and so on. A focused complaint is easier to evaluate than hundreds of unsorted screenshots.

How to file an NPC complaint

The NPC currently requires use of its prescribed complaint format. The form must generally be completed, printed or properly executed, notarized, and submitted with supporting documents. Filing may be done in person, by courier, or through the authorized email channel stated on the NPC website. (National Privacy Commission)

Use the current form downloaded directly from the NPC. A new Complaint-Affidavit template took effect on July 1, 2025, and the NPC announced that the previous version would no longer be accepted after the transition period. (National Privacy Commission)

The complaint should contain:

The identities and addresses of the parties
A clear statement of facts
The personal data involved
The privacy rights allegedly violated
Your prior written communication with the lender
The lender’s response, or proof that 15 calendar days passed without a sufficient response
Supporting screenshots, records, and sworn statements
The relief requested
Verification and certification against forum shopping

The basic NPC complaint filing fee is ₱500. Additional fees may apply when damages are claimed, and a separate fee applies to an application for a cease-and-desist order. Qualified indigent complainants may request an exemption subject to the NPC’s documentary requirements.

NPC proceedings may involve evaluation, mediation, investigation, adjudication, and enforcement. Although the rules provide internal processing periods for particular stages, a fully contested case can take many months. Incomplete forms, missing notarization, failure to show prior written notice, and disorganized evidence are common causes of delay or dismissal.

What to Do When the Threat Appears Immediate

Do not wait for the SEC or NPC if a message contains a credible threat of physical harm, kidnapping, sexual violence, home invasion, or harm to a child or family member.

Take these steps:

Preserve the message and sender details.
Call 911 or contact the nearest police station.
Inform household members, building security, or your employer’s security office when appropriate.
Avoid meeting the collector alone.
Do not reveal your live location.
Provide investigators with the original device and files when requested.
Secure your social-media accounts and remove publicly visible location details.

A police blotter creates an official record, but it does not by itself determine criminal liability. Investigators or prosecutors may require a complaint-affidavit, witness affidavits, authenticated digital evidence, and other supporting records.

Special Considerations for OFWs, Filipinos Abroad, and Foreigners

A borrower outside the Philippines can still preserve electronic evidence, send a written demand, and submit complaints through available online or email channels.

Under NPC procedure, a non-resident Filipino citizen who does not have a Philippine representative may execute the complaint before a Philippine embassy or consulate. Depending on where the document is signed and the applicable rules, an apostille may also be used. A representative filing in the Philippines may need a special power of attorney, or SPA.

Foreign nationals whose personal information is processed in the Philippines may also be covered by Philippine data privacy protections. Documents executed abroad may require notarization and an apostille or consular authentication, depending on the country and the receiving agency’s current requirements. The latest form and filing instructions should always be checked before execution because agencies may revise templates and authentication procedures.

Common Mistakes That Make Harassment Cases Harder

Deleting the app and messages too early

Deleting everything may remove the clearest evidence. Preserve and back up records first.

Fighting back with threats or public accusations

Do not threaten the collector, expose private information, or post unsupported criminal accusations. Retaliatory messages can complicate your complaint and potentially expose you to a separate case.

Paying an unverified personal account

Confirm the creditor, collector, amount, and payment channel directly with the company. Demand an official receipt.

Filing with only one agency

An SEC complaint addresses unfair collection regulation. An NPC complaint addresses personal-data processing. A police, NBI, or prosecutor complaint addresses possible crimes. One incident may justify separate complaints because the agencies have different powers.

Assuming harassment automatically erases the debt

The collection method and the underlying loan are separate issues. You may challenge illegal charges and abusive conduct while still addressing any valid principal and lawful charges.

Ignoring a real summons

Collectors frequently send fake “final notices,” but a genuine summons from a court should never be ignored. Court papers usually identify the court, case number, parties, and branch and are served through authorized procedures. Verify suspicious documents directly with the named court using independently obtained contact information.

Treating every person named in the phone as a guarantor

A guarantor must have actually agreed to guarantee the obligation. A reference, friend, co-worker, or relative does not become legally responsible merely because the lender found the person in your contacts or because the borrower entered the person’s number in an application. (National Privacy Commission)

Frequently Asked Questions

Can an online lending app contact my family and friends?

It may communicate with a genuine co-maker or guarantor concerning that person’s legal obligation. It should not contact everyone in your phonebook, disclose your debt to unrelated people, or use relatives and friends to shame or pressure you.

Can a lender call my employer?

Limited and lawful verification may be different from debt collection. The lender should not disclose your loan to your manager, human-resources department, clients, or co-workers merely to embarrass you or force payment. Preserve proof of what was said and who received the communication.

Can an online lending app post my photograph on Facebook?

Using your photograph and loan information for public shaming may violate SEC collection rules and the Data Privacy Act. A defamatory post may also raise civil or criminal issues. Save the full post, URL, profile information, comments, shares, and date before requesting removal.

Can I be arrested for not paying an online loan?

You cannot be imprisoned merely for an ordinary unpaid debt. A separate criminal case is possible only when the facts satisfy the elements of a criminal offense. A collector cannot issue a warrant or order your arrest. (Lawphil)

Should I block the collector?

Preserve the evidence and send a written notice first. After that, blocking abusive numbers may be reasonable, but maintain one controlled written channel—such as email—for legitimate account communications.

Should I uninstall the lending app?

Preserve the app information, permissions, messages, and loan records before uninstalling it. Revoke permissions first when possible. Remember that uninstalling the app does not automatically delete data already collected.

What if the lender is not registered with the SEC?

Report the entity to the SEC and preserve evidence of its app, website, payment channels, and representations. Lack of proper authority may result in regulatory enforcement, but it does not automatically mean that every amount received by the borrower can be kept without legal consequence.

Can I file complaints with both the SEC and NPC?

Yes, when the facts involve both unfair collection and misuse of personal information. Explain the different issues clearly and disclose related proceedings when a form requires a certification or information about other cases.

Can I claim damages for harassment?

Possible bases may exist under the Civil Code, the Data Privacy Act, and other applicable laws. An award is not automatic. You must prove the wrongful conduct, the harm suffered, and the connection between them. Medical records, employment records, witness statements, public posts, and evidence of financial loss may be relevant.

What should I do if a collector claims to be from the police or a court?

Do not rely on the phone number or link in the message. Ask for the full name, office, case number, and document, then independently contact the named court or government office. Report false impersonation and threats to law enforcement and include the evidence in your SEC complaint.

Key Takeaways

A lender may collect a valid debt, but it may not threaten, humiliate, deceive, or publicly shame you.
Contact harvesting and disclosure of your debt to unrelated friends, relatives, co-workers, or employers may violate Philippine privacy and collection rules.
Preserve complete, unedited evidence before blocking numbers or uninstalling the app.
Revoke unnecessary permissions, secure your accounts, and send a written cease-harassment and privacy demand.
Ask for the lender’s legal identity, authority, itemized balance, and official payment channels.
File unfair collection complaints with the SEC and privacy complaints with the NPC.
Use BSP channels when the institution is BSP-supervised and law-enforcement channels when there are credible threats or other possible crimes.
Non-payment of an ordinary debt does not, by itself, authorize arrest or imprisonment.
Harassment does not automatically erase a valid balance, so address the debt and the abusive collection conduct as separate issues.