If an online lending app is calling your employer, texting your relatives, threatening jail, posting your photo, or using your contact list to shame you, the problem is no longer just an unpaid loan. In the Philippines, lenders may collect legitimate debts, but they must do it through lawful, fair, and proportionate methods. This article explains what counts as online lending app harassment, what Philippine laws protect you, what evidence to save, and where to file complaints with the SEC, National Privacy Commission, NBI, PNP, and other proper offices. In a 2026 public advisory, the DICT, National Privacy Commission, and Securities and Exchange Commission specifically warned against harassment, intimidation, public shaming, and unlawful use of personal data by online lending platforms.
What Counts as Harassment by an Online Lending App?
An online lending app, often called an OLA or online lending platform, is usually a mobile app, website, or financial technology platform used to apply for, release, and collect loans. Some OLAs are connected to SEC-registered lending or financing companies. Others operate under unclear names, use multiple app names, or hide behind call centers and third-party collectors.
Debt collection itself is not illegal. If you borrowed money, the lender may remind you of payment, send demand letters, charge lawful interest and penalties stated in the loan agreement, or file a civil collection case if necessary.
What is not allowed is abusive, deceptive, or privacy-invasive collection.
Common examples include:
- Calling or texting your contacts who are not guarantors
- Telling your family, employer, co-workers, neighbors, or social media contacts that you are a “scammer” or “criminal”
- Threatening arrest, imprisonment, barangay blotter, police action, or court cases without basis
- Sending fake subpoenas, fake warrants, fake demand letters, or fake lawyer/police messages
- Threatening to post your photo, ID, loan details, or private messages online
- Using insults, profanity, sexual harassment, or degrading language
- Calling repeatedly at unreasonable hours
- Accessing or misusing your phone contacts, photos, location, camera, files, or social media accounts
- Contacting your employer to pressure you into payment
- Collecting from your references as if they were co-borrowers or guarantors
- Demanding payment far beyond the amount actually borrowed without clear disclosure of charges
The 2026 DICT-NPC-SEC advisory says online lenders must not engage in unnecessary, excessive, unauthorized, or disproportionate personal data processing. It specifically flags access to contact lists, threats of violence or harm, threats to reputation or property, threats of unlawful legal action, and contacting a borrower’s contact list except true guarantors.
Your Rights Under Philippine Law
You cannot be jailed for a simple unpaid loan
One of the most common threats from abusive collectors is: “Makukulong ka sa utang.”
For an ordinary unpaid loan, that is misleading. The 1987 Philippine Constitution states that no person shall be imprisoned for debt or non-payment of a poll tax. (Lawphil)
This does not erase the debt. The lender can still use lawful civil remedies, such as sending a demand letter or filing a collection case. But a simple inability or failure to pay a private loan is not, by itself, a reason for immediate arrest or imprisonment.
Be careful, however, with facts that may be different from a simple unpaid loan. A criminal complaint may be attempted if there are allegations of fraud, falsified documents, identity theft, or issuance of bouncing checks. Even then, the collector cannot lawfully invent criminal liability just to scare you into paying.
Lenders must follow fair debt collection rules
The SEC regulates lending companies and financing companies, including those using online lending platforms. SEC rules include Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices, and Memorandum Circular No. 19, Series of 2019, which requires disclosure and reporting of online lending platforms. (SEC Appointment System)
The SEC and other agencies have repeatedly emphasized that abusive collection is not acceptable. Under the 2026 DICT-NPC-SEC advisory, violations may lead to administrative sanctions, fines, suspension, or revocation of registration or authority.
Your contacts, photos, and private information are protected personal data
The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information and gives data subjects rights over the collection, use, sharing, storage, and deletion of their personal data. The National Privacy Commission has also stated that online lenders are barred from harvesting borrowers’ phone and social media contact lists for harassment and public shaming. (National Privacy Commission)
This is important because many online lending apps ask for permissions when installed. Some borrowers click “allow” without realizing the app may access contacts, camera, photos, storage, SMS, or location.
Consent is not a blank check. Even if you allowed an app permission at installation, the lender must still process data for a lawful, necessary, and proportionate purpose. The 2026 advisory says unnecessary mobile app permissions and excessive processing, especially contact list processing that leads to harassment, are prohibited.
You have financial consumer rights
The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, recognizes financial consumer rights such as fair and equitable treatment, disclosure and transparency, protection against fraud and misuse, data privacy, and timely handling of complaints. It covers financial products and services, including credit and digital financial services, and names regulators such as the SEC and BSP. (Supreme Court E-Library)
The Truth in Lending Act, Republic Act No. 3765, also requires disclosure of finance charges so borrowers understand the true cost of credit. Its policy is to protect citizens from lack of awareness of the real cost of borrowing by requiring full disclosure. (Lawphil)
If an app advertised “low interest” but deducted huge charges before release, added unexplained penalties, or hid the true annual cost of credit, those facts may be relevant in a complaint.
Threats, public shaming, and privacy violations may create civil or criminal liability
Depending on the facts, abusive collection may involve more than an SEC or privacy complaint.
Under the Civil Code of the Philippines, every person must act with justice, give everyone his due, and observe honesty and good faith. The Civil Code also recognizes liability for acts that violate another person’s dignity, privacy, peace of mind, or reputation. (Lawphil)
Under the Revised Penal Code, threats, coercion, unjust vexation, grave oral defamation, and libel may become relevant depending on the collector’s words and acts. Online defamation may also fall under the Cybercrime Prevention Act framework; in Disini v. Secretary of Justice, the Supreme Court explained that online libel is not a new crime but traditional libel committed through cyberspace. (Lawphil)
What to Do Immediately When the Harassment Starts
1. Stop arguing by phone and move communication to writing
Abusive collectors often want you emotional, scared, and reactive. Do not match their anger. Do not admit facts you are unsure about. Do not promise payment dates you cannot meet.
A practical response is:
Please send all loan details, computation, and collection notices in writing. I will only respond through written channels. Do not contact my relatives, employer, co-workers, or other persons who are not guarantors. Do not use threats, public shaming, or unauthorized processing of personal data.
Keep it short. The goal is not to win an argument with the collector. The goal is to create a record.
2. Preserve evidence before deleting anything
Screenshots are useful, but they are not always enough. Save evidence in a way that shows the sender, date, time, phone number, account name, message content, and context.
Useful evidence includes:
| Type of harassment | Evidence to save |
|---|---|
| Threats of jail, police, barangay, or court action | Screenshots, call logs, voice recordings where lawful, SMS/Viber/WhatsApp/Messenger messages |
| Contacting relatives, employer, or co-workers | Screenshots from those people, written statements, call logs, names and numbers used |
| Public shaming or social media posts | Screenshots showing URL/profile/page name, date/time, comments, shares |
| Fake legal documents | Full copy of the document, sender details, email headers if available |
| Accessing contacts or photos | App permission screenshots, phone settings, messages sent to contacts |
| Excessive or abusive calls | Call logs showing frequency, time, numbers, and duration |
| Hidden charges or misleading loan terms | Loan agreement, app screenshots, disclosure statement, amount released, repayment demand |
For serious threats, preserve the original messages on the device when possible. Agencies may ask to inspect the phone or verify authenticity.
3. Identify the lender behind the app
Many borrowers only know the app name. Complaints are stronger when you identify the actual company.
Look for:
- App name and developer name in Google Play, Apple App Store, or APK source
- SEC registration name in the app, website, loan agreement, disclosure statement, or privacy policy
- Company address, email, customer service number, and collection agency name
- Bank account, e-wallet, or payment channel receiving payments
- Names, aliases, numbers, email addresses, and social media profiles of collectors
- Screenshots of the app page, app permissions, privacy notice, and terms and conditions
The 2026 advisory tells borrowers to download online lending platforms only from official or verified sources operated by registered or licensed entities and to check app permissions and privacy notices carefully.
4. Revoke unnecessary app permissions
On your phone, review the app’s access to:
- Contacts
- Photos and videos
- Camera
- Microphone
- Location
- SMS
- Phone logs
- Files and storage
- Social media accounts
- Accessibility permissions
If the loan has already been released and the app no longer needs a permission, revoke it. The 2026 advisory states that when the purpose of an app permission has already been achieved, online lending platforms should prompt users to turn off or revoke the permission.
Before uninstalling the app, take screenshots of the app profile, loan details, outstanding balance, payment history, terms, privacy policy, and permissions. If you uninstall first, you may lose evidence.
5. Send a written demand to stop unlawful collection methods
A calm written notice can help show that you objected to the harassment.
You may send something like this:
I acknowledge your collection notice, but I object to unlawful collection practices. Do not contact my relatives, employer, co-workers, phone contacts, or any person who is not a guarantor. Do not threaten arrest, imprisonment, public posting, or legal action that is not actually available. Do not disclose my personal data or loan details to third persons. Please send a complete written computation of the alleged balance, including principal, interest, penalties, fees, payments, and legal basis for each charge.
Send it by email, in-app support, SMS, or any channel where you can preserve proof of sending.
6. Warn your contacts without oversharing
If the app has started texting your contacts, you may send a brief message to reduce panic and prevent further embarrassment.
Example:
Please ignore messages or calls from unknown numbers about me and do not give them any information. I am handling a complaint regarding an online lending app’s unauthorized contact of third persons. Please screenshot any message you receive and send it to me.
Do not ask contacts to argue with collectors. Ask them to save evidence.
7. Separate the debt issue from the harassment issue
Two things may be true at the same time:
- You may still owe a valid loan balance.
- The lender may still be violating debt collection, privacy, or cybercrime rules.
Paying under fear does not automatically erase the unlawful act. On the other hand, filing a complaint does not automatically cancel a lawful debt. Keep your records organized so you can challenge abusive collection without losing track of the actual loan computation.
Where to File Complaints Against Online Lending App Harassment
Different agencies handle different parts of the problem. In many cases, you may need to file with more than one office because harassment, data privacy violations, and cyber threats overlap.
| Office | Best for | How to file or report | What to attach |
|---|---|---|---|
| SEC Financing and Lending Companies Department (FINLEND) | Unfair debt collection, abusive online lending practices, unregistered or abusive lending/financing companies | The 2026 advisory directs complaints on unfair debt collection to SEC FINLEND through the SEC iMessage portal or SEC hotline 1-4732 (1-4SEC). | App name, company name if known, loan agreement, computation, screenshots, call logs, messages to contacts, proof of payment |
| National Privacy Commission (NPC) | Unauthorized access, misuse, disclosure, or excessive processing of personal data such as contacts, photos, IDs, employer details, and loan information | The NPC states that a formal complaint must follow its required format, be notarized, and may be submitted personally, by courier, or by scanned copy through email to the NPC complaints address. (National Privacy Commission) | Notarized complaint form, screenshots, app permissions, privacy notice, IDs, messages sent to contacts, proof you are the data subject |
| NBI Cybercrime Division | Threats, extortion, fake legal documents, identity theft, online shaming, cyberlibel, hacking, scams | The 2026 advisory lists the NBI Cybercrime Division as a reporting channel for harassment, threats, fraud, and scams. | Device, screenshots, URLs, phone numbers, account names, payment channels, fake documents, witness details |
| PNP Anti-Cybercrime Group | Immediate cyber harassment, threats, identity misuse, malicious online posting, cyber-related collection abuse | The 2026 advisory also lists the PNP Anti-Cybercrime Group as a reporting channel. | Screenshots, links, phone numbers, call logs, proof of identity, messages, witness statements |
| DICT Cyber Hotline | General cyber incident reporting and referral | The 2026 advisory lists the DICT Cyber Hotline 1326 reporting channel for other harassment, threats, fraud, and scams. | Basic incident summary, screenshots, contact numbers, app name, links, chronology |
How to Prepare a Strong Complaint
A complaint is easier to act on when it is organized. Instead of sending hundreds of random screenshots, prepare a clear packet.
Basic complaint packet
Include:
- Your full name and contact details
- Name of the lending app
- Name of the company, if known
- Date you applied for the loan
- Amount you borrowed
- Amount actually released
- Amount demanded
- Payments already made
- Short timeline of events
- Specific acts of harassment
- Names, numbers, or accounts used by collectors
- List of people contacted by the collector
- Screenshots and call logs
- Copy of loan agreement, disclosure statement, and payment receipts
- App permission screenshots
- What relief you are asking for, such as stopping unlawful contact, correction of computation, deletion of unlawfully processed data, investigation, or sanctions
Sample timeline format
| Date | What happened | Evidence |
|---|---|---|
| June 1 | Loan of ₱5,000 approved; only ₱3,500 released after deductions | App screenshot, e-wallet receipt |
| June 7 | Collector threatened arrest by SMS | Screenshot A |
| June 8 | Collector texted borrower’s sister and employer | Screenshots B and C |
| June 9 | Collector posted borrower’s photo in a group chat | Screenshot D, link |
| June 10 | Borrower sent written objection and requested computation | Screenshot E |
A timeline helps agencies see the pattern quickly.
Practical Timelines, Fees, and Bottlenecks
Online lending harassment cases move at different speeds depending on the evidence, whether the company is identifiable, and whether the conduct is administrative, privacy-related, or criminal.
| Step | Typical practical timeline | Common bottlenecks |
|---|---|---|
| Gathering screenshots, app details, and witness messages | Same day to several days | Missing sender numbers, deleted messages, contacts unwilling to provide screenshots |
| SEC complaint for unfair collection | Acknowledgment and routing may take days or weeks; full action may take longer | App name differs from registered company name; incomplete loan documents |
| NPC formal complaint | Preparation may take several days because notarization and required format matter | Complaint not notarized, unclear privacy violation, missing proof of data disclosure |
| NBI/PNP cybercrime report | Urgent threats may be reported immediately | Need for original device, URLs, account identifiers, or clearer proof of who made the threat |
| Civil settlement or payment negotiation | Days to weeks if the lender responds | Inflated computation, refusal to issue written breakdown, multiple collectors |
For the NPC, notarization is especially important because its complaint procedure requires the formal complaint to be in the prescribed format and notarized before submission. (National Privacy Commission)
If you are abroad, documents signed for use in the Philippines may need proper notarization, consular acknowledgment, or apostille depending on the document, country, and receiving office. The DFA explains that apostille and consular processes apply to public documents and documents executed abroad for use in the Philippines. (DFA Appointment System)
Common Scenarios Borrowers Face
“They said they will file estafa if I do not pay today.”
Ask for the exact complaint, docket number, court, prosecutor’s office, and complainant. Most collectors cannot provide this because it is only a pressure tactic.
Non-payment of debt alone is not imprisonment. But do not ignore genuine legal documents. A real subpoena, court order, or prosecutor’s notice will identify the office, case number, parties, and date of appearance.
“They texted my employer and said I am a scammer.”
This is one of the most common harmful tactics. Save the employer’s screenshot and ask for the number or account used. If your employer received a call, ask them to write down the date, time, number, name used by caller, and exact words.
Contacting an employer to shame or pressure a borrower may support complaints for unfair collection, privacy violation, and possible civil or criminal liability depending on the content.
“They messaged all my contacts because I allowed contact access.”
Permission does not automatically make the act lawful. The key questions are:
- Was contact access necessary for the loan?
- Was the borrower clearly told how contacts would be used?
- Were the contacts true guarantors or merely phonebook entries?
- Was the use proportionate?
- Were the contacts harassed, shamed, or asked to pay?
The 2026 advisory specifically says character references and guarantors are different. Guarantors must expressly consent, and contacting a borrower’s contact list other than guarantors is prohibited.
“They are threatening to post my ID and face photo online.”
Treat this as urgent. Save the threat, account name, number, and any draft or actual post. If posted online, capture the URL, page name, date, time, comments, and shares.
Report to the platform for removal, but save evidence first. If the post is deleted before you capture it, the complaint becomes harder to prove.
“The lending app is not registered or keeps changing names.”
This is common. Focus on identifying every trace:
- App package name or developer name
- App store link
- Privacy policy link
- Payment account name
- E-wallet or bank recipient
- SMS sender ID
- Collector numbers
- Company name in loan documents
- Customer support email
- Screenshots of ads
Even if enforcement is harder, agencies can use these details to connect related apps, accounts, and operators.
“I am an OFW or foreigner outside the Philippines.”
You may still preserve evidence and file complaints if the harassment involves a Philippine lending app, Philippine borrower, Philippine contacts, Philippine data subjects, or Philippine-based collection activity.
If you need someone in the Philippines to file, follow up, or submit documents for you, that person may need a Special Power of Attorney, or SPA. If signed abroad, the SPA or supporting affidavit may need consular notarization or apostille, depending on the receiving agency’s requirement and the country where it is signed. DFA guidance recognizes consular notarization and apostille processes for documents executed abroad and used in the Philippines. (Chongqing PCG)
How to Respond if You Actually Owe the Loan
Harassment is wrong, but the debt should still be handled carefully.
Ask for a written computation showing:
- Principal
- Amount actually released
- Interest
- Processing fees
- Penalties
- Collection charges
- Payments already made
- Remaining balance
- Legal basis for each charge
If you can pay, pay only through official channels and keep receipts. Avoid sending money to personal accounts unless the lender confirms in writing that the account is authorized.
If you cannot pay in full, propose a realistic payment plan in writing. Do not agree to impossible dates just to stop calls for the moment. A broken promise often triggers more aggressive collection.
If the amount demanded is much higher than expected, compare it with the disclosure statement and the Truth in Lending Act requirement for full disclosure of finance charges. (Lawphil)
Red Flags That the Collector May Be Acting Illegally
Be extra careful when the collector:
- Refuses to identify the company
- Uses many changing phone numbers
- Uses profanity, insults, or threats
- Claims to be police, NBI, barangay, court staff, or a lawyer without proof
- Sends documents with no real case number or office address
- Demands payment to a personal e-wallet
- Threatens to contact all your phone contacts
- Demands payment from your reference
- Says your reference is automatically liable
- Threatens to post your ID, photo, or private information
- Offers to “delete” your data only if you pay immediately
- Adds unexplained “legal fees” or “field collection fees”
A reference is not automatically a guarantor. A guarantor is someone who expressly agrees to answer for another person’s debt. Under the 2026 advisory, online lending platforms must use separate interfaces for character references and guarantors, and the guarantor must expressly consent.
Frequently Asked Questions
Can online lending apps contact my contacts in the Philippines?
Generally, they should not contact your phone contacts just to shame, pressure, or collect from you. The 2026 DICT-NPC-SEC advisory says contacting a borrower’s contact list other than guarantors is prohibited. A character reference is not the same as a guarantor.
Can I be jailed for not paying an online loan?
For a simple unpaid debt, no. The Constitution prohibits imprisonment for debt. The lender may still pursue lawful civil collection, but collectors should not threaten jail just because you missed a payment. (Lawphil)
What if I gave the app permission to access my contacts?
Consent must still be lawful, specific, informed, necessary, and proportionate. Permission to access contacts does not allow harassment, public shaming, or collection from people who are not guarantors. The NPC has specifically warned against harvesting contact lists for harassment. (National Privacy Commission)
Should I pay immediately just to stop the harassment?
Paying may stop some collectors, but it can also encourage repeated pressure if the computation is inflated or unclear. Ask for a written breakdown first. If you pay, use official channels and keep proof. The complaint about harassment is separate from the question of how much you legally owe.
Can I file both SEC and NPC complaints?
Yes, when the facts involve both unfair debt collection and misuse of personal data. The SEC is generally the proper agency for abusive lending and collection practices by lending or financing companies. The NPC handles personal data misuse, unauthorized disclosure, and privacy violations.
What should I do if they threaten to post my photo or ID online?
Save the threat immediately. Capture the number, account name, message, date, and time. If they post it, screenshot the post with the URL, comments, and shares before reporting it for removal. Consider reporting to the SEC, NPC, and cybercrime authorities depending on the content.
Are my references required to pay my online loan?
Not unless they clearly agreed to be guarantors or co-borrowers. Being listed as a reference does not automatically make someone liable for your loan. The 2026 advisory emphasizes that character references and guarantors must be treated separately.
What if the collector sends a fake subpoena or warrant?
Do not panic. A real court, prosecutor, or government document should have an identifiable office, case number, parties, date, and official contact details. Save the fake document and include it in your complaint. Fake legal threats may support reports for unfair collection, fraud, harassment, or cybercrime depending on the facts.
Can an OFW or foreigner file a complaint against a Philippine online lending app?
Yes, if the facts involve a Philippine lending app, Philippine data processing, Philippine contacts, or collection activity connected to the Philippines. If documents must be signed abroad for use in the Philippines, notarization, consular acknowledgment, apostille, or an SPA for a representative may be needed depending on the receiving office’s requirements. (DFA Appointment System)
Key Takeaways
- Online lending apps may collect legitimate debts, but they cannot use harassment, threats, public shaming, or unauthorized use of personal data.
- You cannot be jailed for a simple unpaid private loan, although the lender may still pursue lawful civil collection.
- Contacting your phone contacts, employer, relatives, or co-workers to shame or pressure you may violate SEC debt collection rules and data privacy rules.
- Consent to app permissions does not allow excessive, unnecessary, or abusive processing of your contacts, photos, or private information.
- Save evidence before deleting messages or uninstalling the app.
- File with the SEC for unfair collection practices, the NPC for privacy violations, and NBI/PNP/DICT cyber channels for threats, scams, fake documents, identity misuse, or online harassment.
- A character reference is not automatically a guarantor, and your contacts are generally not required to pay your debt.
- Keep the debt issue separate from the harassment issue: ask for a written computation, pay only through official channels, and keep complete records.