If you've fully paid off your debt to a lending app but still receive persistent calls, text messages, voice notes, or other contacts demanding payment or pressuring you, you are not powerless. Philippine law gives you clear rights and practical remedies to stop this harassment immediately, update your records as closed, and hold the company accountable—whether the app is registered with regulators or operating illegally. This article explains exactly what the law says, why continued contact after full payment is especially problematic, and the step-by-step actions that have helped many borrowers regain peace of mind.

Lending apps, particularly online lending platforms (OLPs), often use aggressive collection tactics that continue even after settlement due to system errors, aggressive internal targets, failure to update records, or deliberate attempts to extract more money. Once you have proof of full payment, these tactics lose any legitimate basis and can cross into unfair debt collection, unauthorized data processing, and even criminal harassment.

Why Continued Contact After Full Payment Violates Your Rights

Under the Civil Code of the Philippines, obligations are extinguished by payment or performance (Article 1231). When you pay the full amount due—including any agreed interest and fees—the debt is legally wiped out. The lender no longer has a right to demand anything further or to keep processing your personal data for collection purposes.

Continuing to call, text, or pressure you (or your contacts) after full payment typically lacks any “legitimate purpose” under the Data Privacy Act of 2012 (Republic Act No. 10173). The law requires personal information controllers to process data only for specified, legitimate purposes and to stop once that purpose is fulfilled. Persistent contact after payment often violates the principles of purpose limitation, proportionality, and storage limitation.

Many of these apps are also subject to the Lending Company Regulation Act of 2007 (Republic Act No. 9474), which requires SEC registration and compliance with ethical standards. Even unregistered operators remain fully subject to general laws on abuse of rights and data privacy.

Key Legal Protections Against Harassment

SEC Rules on Fair Debt Collection

The Securities and Exchange Commission (SEC) Memorandum Circular No. 18, Series of 2019 (Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies) explicitly bans unfair practices by registered lending and financing companies, including most online lending apps. Prohibited conduct includes any action that harasses, oppresses, or abuses the debtor—such as threats, profane or insulting language, public humiliation or social media shaming, unauthorized disclosure of debt or personal information to third parties, and other oppressive tactics.

Unregistered apps face even stronger enforcement because operating without SEC registration is itself illegal under RA 9474. The SEC regularly issues cease-and-desist orders against abusive or unregistered platforms.

Data Privacy Act Protections

The Data Privacy Act (RA 10173) protects you when apps access your contacts, share your information with collectors or third parties, or continue using your data after the loan purpose ends. Contacting your family, friends, employer, or posting details online without a fresh, specific legal basis is often a violation. The National Privacy Commission (NPC) can order companies to stop processing your data, delete it, and pay damages.

Criminal and Civil Remedies

Persistent harassment after payment can constitute unjust vexation under Article 287 of the Revised Penal Code (punishable by arresto menor or a fine). If there are threats of harm, arrest, or reputational damage, it may qualify as grave threats (Article 282) or other offenses. You can also pursue civil damages under the Civil Code for abuse of rights (Articles 19, 20, and 21), quasi-delicts (Article 2176), and moral damages for the anxiety, humiliation, and disruption caused.

No one can be imprisoned for debt alone (1987 Constitution, Article III, Section 20), and threats of jail for non-payment (or continued demands after payment) are almost always unlawful.

Step-by-Step Guide to Stop the Harassment

Follow these steps in order. Many borrowers see results after the formal demand letter; others need to escalate to regulators.

Gather and preserve strong evidence
Collect proof of full payment (bank transfer receipts, app screenshots showing “paid in full,” any acknowledgment messages, or official receipts).
Document every harassing contact: screenshots of texts and voicemails with dates and times, call logs showing frequency and duration, names or numbers used, and any messages sent to your contacts or posted publicly.
Note exact language used (threats, insults, demands for more money).
Save everything in organized folders or cloud storage with backups. This evidence is crucial for complaints and any future legal action.
Send a formal Cease and Desist + Data Privacy Demand Letter
Write a clear, firm letter (email is acceptable but follow up with registered mail or courier when possible). Include:
- Your full name, contact details, and any loan reference or account number.
- Clear statement that the debt has been paid in full, with attached proof.
- Demand to immediately cease all calls, texts, emails, and other contact with you and any third parties.
- Demand to update internal records as “fully paid and closed,” stop all processing of your personal data, and confirm this in writing within 5–7 business days.
- Reference your rights under the Civil Code, RA 10173, and SEC MC No. 18, s. 2019.
- State that you will escalate to the SEC, NPC, and other authorities if they fail to comply.
  Send to every known email address (support, collections, Data Protection Officer) and the company’s registered address (searchable via SEC if registered). Keep copies and proof of sending/receipt. Do not engage in phone calls—redirect everything to writing.
Block numbers and limit engagement
Block known numbers on your phone. Use built-in call-blocking features or reputable apps. Do not answer unknown numbers from the app or argue—document and forward to your written record. Many borrowers also change their number as a last resort while pursuing complaints.
Check the company’s registration status
Verify whether the lending company and its online platform are properly registered with the SEC. Unregistered operation gives you an additional strong ground for complaint. Use the SEC’s public resources or i-Message portal for inquiries.
File a complaint with the Securities and Exchange Commission (SEC)
Use the SEC i-Message portal or email the appropriate department (commonly flcd_complaints@sec.gov.ph or cgfd_enforcement@sec.gov.ph).
Attach your evidence package: proof of payment, screenshots/logs of continued harassment, copy of your demand letter, and proof it was sent.
The SEC can investigate, order the company to stop all contact and unfair practices, impose penalties, and act against unregistered operators. Many cases result in swift directives to the company.
File a complaint with the National Privacy Commission (NPC)
If the harassment involves your personal data, contact list, or continued processing after payment (which it almost always does), file with the NPC.
First, include a specific demand to the company’s Data Protection Officer in your cease-and-desist letter. If no satisfactory response within a reasonable time (often 15 days in practice), proceed.
Download the official Complaint-Affidavit form from the NPC website, fill it out completely, have it notarized, and submit via email to complaints@privacy.gov.ph, in person, or by courier.
The NPC can order immediate cessation of processing, data deletion, and compensation. It may also recommend criminal prosecution for serious violations under RA 10173.
Address criminal aspects if threats or severe harassment occur
File a police blotter at your local Philippine National Police (PNP) station for the record. For online shaming, manipulated photos, or cyber elements, go directly to the PNP Anti-Cybercrime Group (ACG).
Grave threats or repeated unjust vexation can lead to criminal charges. Bring your evidence package. A police report strengthens your regulator complaints and supports any civil case.
Consider civil remedies for damages and to stop future contact
You can file a civil case for moral and exemplary damages plus an injunction ordering the company to stop all contact and delete your data. For smaller claims, explore small claims court procedures. Consult the Public Attorney’s Office (PAO) or Integrated Bar of the Philippines (IBP) chapter for free or low-cost assistance if needed.
Follow up and monitor
Keep records of any further contact after you file complaints. Follow up politely with the SEC and NPC on case status. Many borrowers receive confirmation within weeks that the company has been directed to stop.

Common Pitfalls and Special Situations

Borrowers often delay sending a formal written demand and lose valuable time. Others engage in calls and inadvertently give the company more information or perceived consent. Some assume that because the app “already knows” they paid, records will update automatically—frequent system failures prove otherwise.

Unregistered or rebranded apps may ignore demands initially; regulators can still act against them and their operators. If the app sold or assigned the “debt” to aggressive collectors after you paid, the original company remains responsible for ensuring proper closure.

For overseas Filipino workers (OFWs) and foreigners: Time zone differences often mean calls arrive at inconvenient hours. You can file SEC and NPC complaints entirely online or by email. Execute a Special Power of Attorney (SPA) before a Philippine consul or via apostille so a trusted relative or lawyer in the Philippines can follow up, receive documents, or appear on your behalf. Enforcement is fully available to you as the data subject and borrower.

Evidence and Documents Checklist for Complaints

Government-issued ID (passport, driver’s license, or UMID)
Proof of full payment (transaction receipts, screenshots, bank statements)
Complete record of harassing contacts (screenshots with timestamps, call logs, voicemails)
Copy of your cease-and-desist/data privacy demand letter + proof of sending
Any responses (or lack of response) from the company
Statements from family or friends who received unwanted contact (if applicable)
For NPC: Notarized Complaint-Affidavit form

There are generally no or minimal filing fees for initial regulator complaints, though notarization costs a small amount. Investigations by SEC and NPC typically take several weeks to a few months, depending on complexity and cooperation.

Frequently Asked Questions

Can lending apps legally keep calling me after I’ve paid the full debt?
No. Once the obligation is extinguished by full payment, continued demands or contact generally lack any legitimate purpose and can violate the Data Privacy Act, SEC fair collection rules, and provisions against unjust vexation or abuse of rights.

Is it illegal for them to contact my family, friends, or employer?
Yes, in most cases. Unauthorized disclosure of your debt or personal information to third parties violates the Data Privacy Act and SEC MC No. 18, s. 2019. Collectors may only contact third parties in very narrow circumstances to locate you, not to harass or shame.

What if the lending app is not registered with the SEC?
That strengthens your position. Operating without registration violates RA 9474. Report it anyway—the SEC actively pursues unregistered platforms engaged in abusive practices and can issue cease-and-desist orders.

How long does it usually take for SEC or NPC complaints to stop the calls?
Many borrowers see the company directed to stop within weeks after filing, especially with strong evidence and a prior formal demand. Full investigation and penalties can take longer. Continue documenting any continued contact.

Can I sue the lending app or its collectors for harassment?
Yes. You can pursue civil damages for the distress caused and an injunction to stop all contact. In serious cases involving threats or criminal acts, you can also initiate criminal proceedings. Many people successfully combine regulator complaints with civil or criminal action.

What evidence works best for complaints?
Clear, timestamped screenshots, call logs showing repeated contact, proof of full payment, and copies of your unanswered demand letter are highly effective. The more organized and complete your package, the stronger your case.

Are there rules about what hours collectors can call?
While credit card collections have specific hours under RA 10870 (generally 6:00 a.m. to 10:00 p.m.), lending apps are governed by the broader prohibition on harassing or abusive conduct under SEC MC No. 18, s. 2019. Repeated calls at unreasonable hours (very early morning or late at night) support a finding of harassment or unjust vexation.

What should I do if they threaten to publish my information or ruin my reputation?
Document the threat immediately and report it to the PNP (especially the Anti-Cybercrime Group if online) and the NPC. Such threats can constitute grave threats, unjust vexation, or violations of the Data Privacy Act and cybercrime laws. Do not pay any “settlement” under threat.

Can I file complaints from abroad as an OFW or foreigner?
Yes. Both the SEC i-Message portal and NPC email submissions accept complaints from outside the Philippines. Use a notarized and apostilled Special Power of Attorney if you need someone in the Philippines to follow up or appear for you.

Will complaining affect my credit standing or ability to get future loans?
Filing legitimate complaints about harassment after full payment should not harm your credit. In fact, ensuring your records are properly closed as “paid in full” protects your credit profile. Focus on documentation and regulator complaints rather than re-engaging with the app.

Key Takeaways

Full payment extinguishes the debt under the Civil Code—continued collection activity after that point has no legitimate basis and strengthens your legal position.
Document everything thoroughly before taking action; organized evidence is your most powerful tool.
Always start with a formal written cease-and-desist and data privacy demand letter sent to all known channels, including the Data Protection Officer.
Escalate promptly to the SEC (for unfair collection practices and registration issues) and the NPC (for data privacy violations)—both accept online/email filings and have successfully acted against abusive lending apps.
Combine regulator complaints with police reports when threats or severe harassment occur, and consider civil action for damages and an injunction if needed.
OFWs and foreigners have the same rights and can file electronically while using an apostilled SPA for local follow-up.
Free or low-cost help is available through the Public Attorney’s Office, IBP legal aid, or consumer protection groups if the process feels overwhelming.

You took the responsible step of paying your debt in full. Philippine law stands on your side to make the harassment stop. Start with the evidence and demand letter today—most borrowers who follow these steps regain control quickly.