If a fake or abusive online lending app is calling your relatives, threatening to post your photo, shaming you in group chats, or saying you will be arrested if you do not pay immediately, the first goal is to stop the harm without making your situation worse. In the Philippines, lenders may demand payment through lawful and reasonable means, but they cannot harass you, misuse your contacts, threaten violence, publicly shame you, pretend to be police or court officers, or use your personal data beyond what is necessary and lawful. This guide explains what conduct is illegal, how to preserve evidence, where to file complaints, and what to do if you really borrowed money but the collection tactics have become abusive.

First, Understand the Difference Between Debt and Harassment

An unpaid online loan is usually a civil debt. This means the lender’s proper remedy is to demand payment, negotiate, or file a collection case in the proper court. It does not give collectors a license to intimidate you, contact your whole phonebook, threaten your family, or post your personal details online.

The Philippine Constitution is clear that no person may be imprisoned for debt. This does not mean all loan-related conduct is immune from criminal liability. Fraud, falsified documents, threats, identity theft, cyberlibel, or other criminal acts may be investigated separately. But simple failure to pay a loan is not a reason for police to arrest you. (Supreme Court E-Library)

If a lender has a valid claim, it may pursue lawful collection. For smaller money claims, Philippine courts use simplified procedures, including small claims for certain money claims such as debts and loans, with the Supreme Court increasing the small claims threshold to ₱1,000,000 under the Rules on Expedited Procedures. (Supreme Court of the Philippines)

Harassment is different. The Securities and Exchange Commission (SEC) has rules prohibiting unfair debt collection practices by lending and financing companies, including their third-party collection agents. These rules cover conduct such as threats, insults, public disclosure of borrower information, deceptive statements, and contacting people in the borrower’s contact list who are not guarantors or co-makers. (ADB Law and Policy Reform)

Your Legal Rights Against Fake Online Lending App Harassment

You have the right not to be threatened, insulted, or publicly shamed

SEC Memorandum Circular No. 18, series of 2019 prohibits abusive collection practices by lending companies, financing companies, and their third-party service providers. The rule specifically addresses complaints involving harassment and recognizes that collection must be done in good faith and with reasonable conduct. (ADB Law and Policy Reform)

Examples of prohibited collection conduct include:

Using or threatening violence or criminal means to harm your person, reputation, or property
Threatening legal action that the collector cannot legally take
Using obscenities, insults, or profane language
Publishing or threatening to publish your name or personal information to shame you
Communicating false credit or loan information
Using false, deceptive, or misleading collection methods
Calling before 6:00 a.m. or after 10:00 p.m., except in limited situations allowed by the SEC rule
Contacting people in your phone contacts who are not guarantors, co-makers, or otherwise legally connected to the loan (ADB Law and Policy Reform)

Collectors must also disclose their true identity and full name when dealing with borrowers. A collector who hides behind fake names, fake law office titles, fake police claims, or anonymous numbers may be creating additional evidence against the company or collection agent. (ADB Law and Policy Reform)

Your contacts should not be used for debt shaming

A common abusive tactic of fake online lending apps is to harvest your contact list, then message your relatives, co-workers, employers, classmates, or clients. The message may say you are a scammer, criminal, absconder, or “wanted” person. This is one of the clearest red flags.

A 2026 public advisory from the DICT, National Privacy Commission (NPC), and SEC warns that online lending platforms must not process personal data in ways that lead to harassment, public shaming, intimidation, or unlawful collection. It also states that contacting people in a borrower’s contact list for debt collection is prohibited unless they are guarantors. (National Privacy Commission)

The advisory also explains that online lending apps should not demand unnecessary app permissions or process data in a disproportionate way. Contact list access must not become a tool for harassment or pressure. (National Privacy Commission)

You have data privacy rights

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information in the Philippines. It is based on principles such as transparency, legitimate purpose, and proportionality. In simple terms, an online lender should be clear about what data it collects, should collect it for a lawful and specific purpose, and should not collect or use more data than necessary. (National Privacy Commission)

The NPC has repeatedly warned online lending apps against excessive permissions and abusive data practices. It has discussed complaints where lending apps accessed contact lists and used personal information for debt shaming, and it has issued rules limiting how online lenders may process contact lists and other personal data. (National Privacy Commission)

A lender must be properly authorized

Under the Lending Company Regulation Act of 2007, or Republic Act No. 9474, a lending company must generally be organized as a corporation and must secure authority to operate from the SEC before conducting lending business. (Supreme Court E-Library)

A legitimate online lending app should not hide who operates it. SEC rules require lending and financing companies to report their online lending platforms and disclose key information such as the corporate name, SEC registration number, and Certificate of Authority details in their platforms and advertisements. (Philippine News Agency)

Be careful: “SEC registered” is not always enough. Some companies have a corporate registration but no valid authority to operate as a lending company. Others use a similar name to a legitimate company. Some apps disappear, change names, or use personal e-wallet accounts to receive payments.

What To Do Immediately When an Online Lending App Harasses You

1. Preserve evidence before blocking, deleting, or uninstalling

Evidence is the backbone of your complaint. Before you block numbers or uninstall the app, save as much proof as possible.

Collect:

Screenshots of text messages, chat messages, app notifications, emails, and social media posts
Screen recordings showing the sender profile, phone number, app name, and full conversation
Call logs showing repeated calls, especially very early or late calls
Voicemails or recorded threats, if available
Screenshots of the app page on Google Play, App Store, APK website, Facebook page, or ads
The loan agreement, disclosure statement, repayment schedule, and statement of account
Proof of payments, including receipts, GCash/Maya/bank transfer records, and reference numbers
Screenshots showing app permissions, especially access to contacts, photos, camera, storage, microphone, SMS, or call logs
Messages sent to your relatives, employer, co-workers, or other contacts
Names, phone numbers, aliases, and account details used by collectors

Ask affected contacts to send you screenshots with the phone number, date, and time visible. If they only forward cropped screenshots, ask for a full screenshot showing context.

Do not edit the screenshots except to make backup copies. Keep the originals in cloud storage, email, or a separate device.

2. Stop unnecessary access to your phone and accounts

After preserving evidence, reduce further damage.

Do these as soon as possible:

Go to your phone settings and revoke the app’s permissions to contacts, photos, camera, microphone, location, SMS, and storage.
Change passwords for your email, social media accounts, e-wallets, and banking apps.
Turn on two-factor authentication where available.
Review your social media privacy settings.
Remove public access to your employer, relatives, photos, phone number, and email address.
Warn close contacts with a neutral message, such as: “An online lending app may contact you using false or harassing statements. Please do not reply. Kindly screenshot and send me any message you receive.”
Block abusive numbers only after saving evidence.
Report fake profiles or posts directly to the social media platform.

Do not give collectors new IDs, selfies, passwords, one-time PINs, or additional contacts just because they say it is needed to “verify” you.

3. Verify whether the lender is legitimate

Check whether the app is connected to a registered and authorized lending or financing company. Look for:

Corporate name
SEC registration number
Certificate of Authority number
Business address
Official email address
Privacy policy
Terms and conditions
Disclosure statement showing interest, fees, penalties, and total amount due

You can use SEC online channels, including the SEC’s official iMessage system for complaints and concerns, and SEC online search tools for company information. (Securities and Exchange Commission)

Warning signs of a fake or abusive app include:

No corporate name, only an app name
No Certificate of Authority number
Payment demanded to a personal GCash, Maya, or bank account
Threats of arrest or “police operation”
Fake court summons or fake warrants sent by chat
Collectors refusing to give their full name and company
Sudden additional fees that were not disclosed before release
Different collectors giving different amounts due
Messages to your contacts even if they are not guarantors
Threats to post your ID, selfie, or family photos

4. Send a written demand to stop unlawful collection

A short written message can help create a clear record. Keep it calm and factual. Do not threaten, insult, or admit facts you are unsure about.

You may send something like this by email, app chat, or SMS:

I am requesting that all collection communications be sent only to me through this number/email. I do not authorize you or your agents to contact my relatives, employer, co-workers, or phone contacts who are not guarantors or co-makers. I also object to any posting, sharing, or publication of my personal information, photos, ID, or loan details. Please send a complete statement of account, the name of the lending company, SEC registration number, Certificate of Authority number, and the name of the collector handling this account. I am preserving evidence of all communications for submission to the proper government agencies.

If the debt is disputed, say so clearly:

I dispute the amount being collected. Please provide a written breakdown of principal, interest, penalties, service fees, collection fees, and all payments credited.

This message is not magic. Abusive apps may ignore it. But it shows that you objected to the harassment, withdrew consent to improper contact, requested verification, and demanded lawful communication.

5. File a complaint with the SEC for unfair collection or unauthorized lending

The SEC is the main agency for complaints against lending and financing companies, including abusive online lending platforms. The 2026 DICT-NPC-SEC advisory identifies the SEC FINLEND complaint channel through imessage.sec.gov.ph and SEC Hotline 1-4732. (National Privacy Commission)

Prepare:

Your full name and contact details
App name and company name, if known
SEC registration number and Certificate of Authority number, if shown
Screenshots of harassment, threats, public shaming, or contact-list messages
Screenshots of the app page and permissions
Loan details: amount borrowed, amount received, due date, amount demanded, payments made
Names, numbers, aliases, and payment accounts used by collectors
Written statement of what happened, in chronological order

In your complaint, describe the conduct plainly. For example:

“They contacted my employer even though my employer is not a guarantor.”
“They sent my photo and ID to a group chat.”
“They threatened to file a criminal case and have me arrested for non-payment.”
“They used insulting language and called repeatedly after 10:00 p.m.”
“They refused to identify the lending company and collector.”

SEC rules allow sanctions for unfair collection practices. For lending companies, penalties under MC No. 18 may include fines, suspension, or revocation of authority depending on the offense and circumstances. (ADB Law and Policy Reform)

6. File a complaint with the National Privacy Commission for misuse of personal data

If the app accessed your contacts, photos, ID, messages, or social media details and used them for harassment, you may also file with the NPC.

The NPC’s own complaint procedure requires a formal complaint in the proper format. The NPC explains that complainants should download the form, fill it out, print it, have it notarized, and submit it personally, by courier, or by scanned email to complaints@privacy.gov.ph. (National Privacy Commission)

The NPC also states that a complaint may include a notarized complaint-assisted form or verified complaint, supporting evidence, and witness affidavits. (National Privacy Commission)

Prepare:

Notarized complaint form or verified complaint
Valid government ID
Screenshots of app permissions
Screenshots of messages sent to your contacts
Screenshots of public posts, fake profiles, or group chats
Witness statements or affidavits from contacted relatives, co-workers, or friends
Copies of privacy policy, consent screen, loan agreement, or app terms
Proof that the persons contacted were not guarantors or co-makers

If you are abroad, notarization may require extra steps. Documents executed overseas may need acknowledgment before a Philippine Embassy or Consulate, or apostille through the competent authority in an Apostille Convention country, depending on where the document is signed. The Philippines became a party to the Apostille Convention in 2019, and the DFA recognizes consular acknowledgment or apostille routes for certain documents executed abroad. (Apostille Philippines)

7. Report serious threats, cyber harassment, or fake legal documents to cybercrime authorities

If the collector threatens violence, extortion, identity theft, fake arrest, hacked accounts, fake warrants, or public posting of your personal information, consider reporting to cybercrime authorities.

The 2026 DICT-NPC-SEC advisory lists these channels:

Agency	When it may help	Contact details from the advisory
DICT Cyber Hotline	Online scams, cyber concerns, coordination	1326@dict.gov.ph
NBI Cybercrime Division	Cyber harassment, identity misuse, fake accounts, threats	ccd@nbi.gov.ph; telephone numbers listed in the advisory
PNP Anti-Cybercrime Group	Cyber threats, online harassment, fake posts, coordinated abuse	acg@pnp.gov.ph; onlinecims.ocs@gmail.com; telephone numbers listed in the advisory	(National Privacy Commission)

The NBI’s citizen-facing materials also describe complaint intake through cybercrime offices, where complainants fill out forms and submit the complaint to personnel. (National Bureau of Investigation)

Possible legal issues may include threats under the Revised Penal Code, unjust vexation or coercion depending on the facts, libel or cyberlibel if false and defamatory statements are posted online, and data privacy violations if personal information is unlawfully processed or disclosed. The Cybercrime Prevention Act of 2012, Republic Act No. 10175, recognizes certain crimes committed through computer systems, and the Supreme Court in Disini v. Secretary of Justice upheld cyberlibel as a punishable offense when the legal elements are present. (Lawphil)

8. If the debt is real, deal with the debt separately from the harassment

Harassment does not automatically erase a valid debt. But it may give you grounds to complain, dispute excessive charges, demand proper accounting, or challenge unlawful collection methods.

Practical steps:

Ask for a written statement of account.
Verify the lender’s corporate identity and authority.
Pay only through official company channels, not personal wallets, unless the company confirms in writing that the account is authorized.
Keep receipts and reference numbers.
Do not borrow from another suspicious app just to pay the first app.
Do not agree to new “extension fees” unless the terms are clear and documented.
If you can pay part of the undisputed amount, state that payment is not an admission of unlawful penalties or collection fees.

The Truth in Lending Act, Republic Act No. 3765, requires disclosure of finance charges in credit transactions, and SEC rules also require online lending platforms to disclose key company and loan information. (Lawphil)

Where to File Complaints Against Fake Online Lending Apps

Problem	Main office to approach	What to prepare	Practical notes
Harassing collection calls, threats, insults, contact-list messaging	SEC	Screenshots, call logs, app name, company name, loan details, collector numbers, payment accounts	Best for unfair debt collection and unauthorized lending complaints
Misuse of contacts, photos, ID, phonebook, or personal data	NPC	Notarized complaint, valid ID, screenshots, witness affidavits, app permissions, privacy policy	Best for data privacy violations and unlawful processing
Fake warrants, threats of arrest, cyber shaming, identity theft, fake accounts	PNP-ACG or NBI Cybercrime Division	Screenshots with URLs, phone numbers, profiles, messages, affidavits, IDs	Best when there are threats, impersonation, fraud, hacking, or online publication
Immediate physical threat or stalking	Local police station or barangay blotter, then PNP if needed	Threat messages, names, numbers, addresses, witnesses	A blotter helps document the incident but is not the same as a full agency complaint
Valid loan dispute or collection case	Court, if a case is filed	Loan documents, receipts, statement of account, notices	A lender should use lawful court processes, not threats or public shaming

Evidence Checklist for a Strong Complaint

Evidence	Why it matters	Practical tip
Screenshots of threats	Shows the exact words used by collectors	Capture sender name, number, date, and time
Messages sent to contacts	Proves contact-list harassment	Ask contacts not to delete messages
App permissions	Shows possible excessive data access	Screenshot before uninstalling
Loan agreement and disclosure statement	Shows terms, fees, penalties, and lender identity	Save PDF or screenshots inside the app
Payment records	Proves what you already paid	Keep reference numbers visible
App store page or APK website	Helps identify the app operator	Screenshot developer name, app logo, and reviews
Collector numbers and aliases	Helps connect repeated harassment	Keep a spreadsheet or notes file
Public posts or fake profiles	Useful for cybercrime and privacy complaints	Save URL, profile link, and full-page screenshots
Witness affidavits	Supports your version of events	Useful when relatives or employers were contacted
Written demand to stop harassment	Shows you objected and requested lawful communication	Send by a traceable channel

Common Scenarios and What You Can Do

“The online lending app messaged my contacts. Is that legal?”

Usually, no. The 2026 DICT-NPC-SEC advisory states that contacting persons in a borrower’s contact list for debt collection is prohibited unless they are guarantors. (National Privacy Commission)

Save screenshots from each contacted person. File with the SEC for unfair collection and with the NPC for misuse of personal data.

“They said I will be arrested tomorrow if I do not pay.”

For ordinary non-payment of debt, arrest threats are misleading. The Philippine Constitution prohibits imprisonment for debt. (Supreme Court E-Library)

Ask for the case number, court name, prosecutor’s office, and official document. Do not rely on chat screenshots of fake warrants. Real court and prosecutor processes do not happen through anonymous collector threats.

“They posted my ID, selfie, or family photo online.”

Capture the post immediately. Include the URL, page name, profile link, date, time, comments, shares, and the full context. Report it to the platform, then include the same evidence in complaints to the NPC and cybercrime authorities.

Posting your personal information to shame you may involve data privacy violations, defamation issues, or cybercrime concerns depending on the content and intent.

“I am an OFW or foreigner outside the Philippines. Can I still complain?”

Yes. The issue may still fall under Philippine regulators if the lender, app operator, borrower, affected contacts, or data processing is connected to the Philippines.

Practical points for overseas complainants:

Use email filing channels where allowed.
Keep screenshots showing your local timezone.
If an affidavit or complaint must be notarized, ask whether consular acknowledgment or apostille is acceptable.
If someone in the Philippines will file or follow up for you, prepare a Special Power of Attorney when required.
Use a stable email address for agency communications.

“Should I uninstall the app immediately?”

Do not uninstall before saving evidence. First screenshot the app dashboard, loan details, permission settings, privacy policy, collection messages, and repayment instructions. After that, revoke permissions and uninstall if needed for safety.

“They are asking me to pay to a personal GCash account.”

Be careful. Ask for written confirmation from the company that the account is an authorized payment channel. A legitimate lender should be able to provide official payment instructions and receipts. Paying random personal accounts may make it harder to prove payment later.

“They keep adding extension fees and penalties.”

Ask for a detailed statement of account showing:

Principal released to you
Interest
Service fees
Processing fees
Late penalties
Collection fees
Payments credited
Remaining balance

If the terms were not disclosed before loan release, or the charges appear excessive or deceptive, include that issue in your SEC complaint.

Practical Timelines and Bottlenecks

Government complaints rarely stop harassment overnight. Many abusive apps use rotating numbers, fake names, and multiple collection agents. Still, formal complaints matter because they create a record and allow regulators to investigate patterns.

Typical practical timeline:

Step	Usual timing	Common bottleneck
Evidence gathering	Same day to 3 days	Contacts delete messages or screenshots lack phone numbers
Revoking permissions and securing accounts	Same day	App already copied some data before permissions were revoked
SEC complaint filing	Same day once evidence is ready	Incomplete company/app information
NPC complaint preparation	Several days	Notarization, affidavits, and organizing attachments
Cybercrime complaint	Same day for urgent threats; longer for investigation	Need for URLs, original files, device inspection, or follow-up affidavits
Debt verification or settlement discussion	Days to weeks	Collectors refuse to provide proper statement of account

A well-organized complaint is easier to act on. Put your evidence in folders by date. Name files clearly, such as 2026-06-25_SMS_threat_0917xxxxxxx.png or Message_to_employer_from_collector.pdf.

Mistakes That Can Make the Situation Worse

Avoid these common mistakes:

Deleting the app before saving screenshots
Paying random personal accounts without official confirmation
Sending your contacts, selfies, IDs, or passwords to collectors
Borrowing from another suspicious app to pay the first one
Arguing emotionally with collectors for hours
Posting the collector’s private information online in retaliation
Ignoring a real court notice because earlier collector messages were fake
Admitting to fraud or intent not to pay when you only mean you cannot pay immediately
Filing a complaint with only vague statements and no screenshots

Stay factual. Your strongest position is not “I am angry,” even if you understandably are. Your strongest position is: “Here is the evidence. Here are the numbers used. Here are the people they contacted. Here is the app. Here are the dates and times. Here is why the conduct violates SEC, NPC, and cybercrime rules.”

Frequently Asked Questions

Can online lending apps call my contacts in the Philippines?

They should not contact your phone contacts for debt collection unless those persons are guarantors, co-makers, or otherwise legally connected to the loan. The DICT-NPC-SEC advisory specifically warns against using contact lists for debt collection and harassment. (National Privacy Commission)

Can I go to jail for not paying an online loan?

Not for debt alone. The Philippine Constitution prohibits imprisonment for debt. However, separate criminal acts such as fraud, falsification, threats, or cyber-related offenses may be investigated if the facts support them. (Supreme Court E-Library)

What if the online lending app is fake or unregistered?

Save evidence and report it to the SEC. A lending company generally needs proper authority from the SEC to conduct lending business in the Philippines. If the app hides its company name, uses personal payment accounts, or cannot show a Certificate of Authority, include those facts in your complaint. (Supreme Court E-Library)

Do I still have to pay if the lender harassed me?

If you truly received a loan, the debt issue and the harassment issue should be handled separately. You may still need to settle the legitimate principal and lawful charges, but you can dispute excessive, undisclosed, or abusive charges and file complaints for unlawful collection conduct.

Should I file with the SEC or the National Privacy Commission?

File with the SEC for unfair collection, unauthorized lending, deceptive loan practices, and abusive collectors. File with the NPC when the app misused your personal data, accessed your contact list, posted your ID or photo, or contacted people using information taken from your phone. Many serious online lending app cases involve both agencies.

Is a barangay blotter enough?

A blotter can help document threats or harassment, especially if there is a safety concern. But a blotter does not replace complaints with the SEC, NPC, PNP-ACG, or NBI Cybercrime Division. Use the blotter as supporting evidence, not as the only action.

What should I do if they send a fake warrant or fake subpoena?

Take a screenshot and do not panic. Ask for the court name, case number, prosecutor’s office, and issuing authority. Real warrants and subpoenas are not issued by anonymous lending collectors through random chat messages. Include the fake document in your SEC and cybercrime complaint.

Can I sue the collector personally?

Possibly, depending on the facts and evidence. A collector who personally threatens, defames, extorts, impersonates authorities, or unlawfully processes personal data may face individual liability. The company may also be responsible for the actions of its collection agents, especially when the conduct is part of its collection operation.

What if my employer was contacted?

Ask your employer or HR officer for screenshots, call logs, or a written note of what was received. If the message contained false accusations or personal loan information, include it in your SEC and NPC complaints. If your employment was affected, preserve employment-related documents as well.

Can foreigners in the Philippines complain against online lending app harassment?

Yes. Foreigners dealing with Philippine-based lending apps, Philippine borrowers, Philippine contacts, or data processed in the Philippines may use Philippine complaint channels where jurisdiction exists. Keep passport or ID copies, local contact details, loan records, and screenshots. If documents are signed abroad, notarization, consular acknowledgment, or apostille may be relevant.

Key Takeaways

Online lenders may collect debts, but they cannot use threats, insults, public shaming, fake legal claims, or contact-list harassment.
Non-payment of debt alone is not punishable by imprisonment in the Philippines.
Save evidence before blocking numbers, deleting messages, or uninstalling the app.
Revoke app permissions, secure your accounts, and warn contacts calmly.
Verify whether the lender has a real corporate identity and SEC authority to operate.
File with the SEC for unfair collection or unauthorized lending.
File with the National Privacy Commission when your contacts, photos, ID, or personal data are misused.
Report serious threats, fake warrants, identity misuse, and cyber shaming to PNP-ACG, NBI Cybercrime Division, or DICT cyber channels.
If the debt is real, ask for a proper statement of account and pay only through verified official channels.
The strongest complaint is organized, dated, specific, and supported by screenshots, witnesses, payment records, and app details.