Harassing calls and messages from a lending company, online lending app, collector, or “legal department” can feel terrifying, especially when they threaten to shame you, contact your family, message your employer, post your photo, or send police to your house. In the Philippines, lenders may collect legitimate debts, but they cannot use threats, public shaming, abusive language, excessive calls, or unauthorized use of your contacts to force payment. This guide explains what counts as lending harassment, what Philippine laws protect you, how to preserve evidence, where to complain, and what to do if the lender is still demanding payment.

What Counts as Lending Harassment in the Philippines?

Debt collection becomes legally problematic when the collector uses methods that are abusive, deceptive, threatening, invasive, or disproportionate to the purpose of collecting a loan.

Common examples include:

Repeated calls or messages meant to intimidate, not simply remind
Threats to arrest you, “file a criminal case,” or send police for a purely unpaid loan
Threats to post your photo, ID, loan details, or “scammer” accusations online
Calling your relatives, officemates, neighbors, or phone contacts even if they are not guarantors
Telling third parties that you owe money
Using insults, profanity, sexual remarks, or degrading language
Pretending to be a lawyer, court sheriff, police officer, NBI agent, or prosecutor
Sending fake subpoenas, fake warrants, fake court notices, or fake barangay summons
Contacting you at unreasonable hours
Using your phone contact list, gallery, or social media data to pressure you

The DICT, National Privacy Commission (NPC), and Securities and Exchange Commission (SEC) issued a public advisory on online lending platforms after receiving reports of harassment, intimidation, public shaming, and unlawful use of personal data in collection practices. The advisory specifically says that unnecessary app permissions, unauthorized or excessive processing of contact lists, and contacting people other than guarantors for debt collection are prohibited.

The Important Distinction: You May Owe Money, But Harassment Is Still Illegal

A borrower should separate two issues:

Issue	What it means
The loan obligation	If you borrowed money, the lender may still have the right to collect what is legally due.
The collection method	Even if the loan is unpaid, the lender or collector must collect in a lawful, fair, and respectful way.

Under the Civil Code, an obligation is a legal necessity to give, do, or not do something, and obligations may arise from contracts. But the Civil Code also requires people to act with justice, give everyone their due, and observe honesty and good faith; a person who causes damage contrary to law, morals, good customs, or public policy may be liable for damages under Articles 19, 20, and 21. (Law Library - Legal Resource PH)

This means you should not ignore the debt if it is valid, but you also do not have to tolerate abuse.

Legal Basis: Your Rights Against Lending Harassment

1. SEC Rules on Unfair Debt Collection Practices

The main rule for lending companies and financing companies is SEC Memorandum Circular No. 18, Series of 2019, which applies to financing companies, lending companies, and their third-party service providers. It allows reasonable and legally permissible collection, but prohibits collection practices that are abusive, unfair, deceptive, or done in bad faith.

Under SEC MC 18, the following may be unfair debt collection practices:

Use or threat of violence or other criminal means to harm a person, reputation, or property
Threats to take action that cannot legally be taken
Obscenities, insults, or profane language that amount to abuse or a criminal act
Disclosure or publication of borrowers’ names and personal information, except as legally allowed
Communicating false loan information, including failure to say that a debt is disputed
False representation or deceptive means to collect a debt or obtain borrower information
Contact at unreasonable or inconvenient hours as defined by the circular
Contacting people in the borrower’s contact list other than guarantors or co-makers

SEC MC 18 also states that if collection is outsourced, the lending or financing company remains ultimately responsible for the collection practices of its third-party service provider. It requires collection personnel to disclose their full name or true identity to the borrower and provides penalties, including fines, suspension of lending or financing activities, and revocation of the Certificate of Authority in appropriate cases.

2. Data Privacy Act and NPC Rules

Many lending harassment cases are also data privacy cases. This happens when an online lending app uses your personal data or your contacts’ personal data beyond what is necessary for a legitimate loan transaction.

Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information and gives data subjects rights such as the right to be informed, the right to access information about processing, and the right to block, remove, or destroy personal data that is unlawfully obtained, used for unauthorized purposes, or no longer necessary. Unauthorized processing and processing for unauthorized purposes are punishable under the law. (National Privacy Commission)

The NPC has specifically warned that online lenders are prohibited from harvesting phone and social media contact lists for harassment, and that online lending apps must follow privacy by design and default under the Data Privacy Act. (National Privacy Commission)

For online lending platforms, the 2026 DICT-NPC-SEC advisory is very direct: for debt collection, lending companies, financing companies, or persons acting as such may contact only the guarantor, and a person becomes a guarantor only if that person separately consented to assume responsibility for the loan in case of default. A character reference is not automatically a guarantor.

3. Financial Products and Services Consumer Protection Act

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, applies to financial products and services, including digital financial products and services. It gives financial regulators such as the SEC and BSP authority over market conduct, consumer protection, complaints handling, enforcement, and sanctions. (Supreme Court E-Library)

The law specifically prohibits financial service providers from employing abusive collection or debt recovery practices against financial consumers. It also requires privacy and protection of client data, consumer assistance mechanisms, fair and respectful treatment, and clear disclosure of costs and terms. (Supreme Court E-Library)

4. BSP Rules for Credit Cards, Banks, and BSP-Supervised Institutions

If the debt is from a bank, credit card issuer, e-wallet, money service business, pawnshop, or other BSP-supervised financial institution, the complaint may fall under BSP consumer protection channels.

For credit card collection, BSP rules state that banks and credit card issuers, including their collection agents, may communicate through acceptable and reasonable modes, but they must not harass, abuse, oppress, or use unfair practices. Examples include threats of violence, insults amounting to criminal acts, disclosure of names of cardholders who allegedly refuse to pay, threats to take illegal action, false credit information, deceptive means, and calls before 6:00 a.m. or after 10:00 p.m. unless permitted under the rule.

The BSP also has a Consumer Assistance Mechanism through BOB, the BSP Online Buddy, and email channels for unresolved complaints against BSP-supervised financial institutions. (Bangko Sentral ng Pilipinas)

5. Criminal Laws May Apply When There Are Threats, Coercion, Libel, or Fraud

Some collection tactics may go beyond administrative violations and become possible criminal complaints.

Depending on the facts, these may include:

Grave threats under Article 282 of the Revised Penal Code, if the collector threatens to commit a wrong amounting to a crime against your person, honor, property, or family
Grave coercion under Article 286 of the Revised Penal Code, if threats, violence, or intimidation are used to compel you to do something against your will
Unjust vexation under Article 287, if the conduct unjustly annoys, irritates, or disturbs you
Libel or cyberlibel, if false and defamatory statements are posted or sent through online means
Data Privacy Act violations, if your personal data or your contacts’ personal data is processed unlawfully
Use of fake authority, if someone pretends to be connected with courts, law enforcement, or government agencies

For online threats, fake posts, cyber shaming, or fraud, the NBI Cybercrime Division and PNP Anti-Cybercrime Group are practical enforcement channels. The NBI’s citizen charter for computer crime complaints describes the process of filing a complaint, preliminary interview, sworn statements, and submission of supporting documents. (National Bureau of Investigation)

Can You Be Arrested for Not Paying an Online Loan?

For an ordinary unpaid loan, no. Article III, Section 20 of the 1987 Constitution says that no person shall be imprisoned for debt or non-payment of a poll tax. (Supreme Court E-Library)

This is why statements like “we will send police to arrest you tonight” or “you will go to jail if you do not pay today” are usually abusive and misleading when the issue is only non-payment of a civil debt.

However, this does not mean all loan-related disputes are automatically civil. A criminal case may arise if there is a separate criminal act, such as using fake IDs, issuing bouncing checks under applicable law, identity theft, falsification, fraud, threats, libel, or data privacy violations. The key point is that non-payment alone is not the same as a crime.

What To Do Immediately When Harassment Starts

Step 1: Stop Arguing by Phone

Collectors often try to keep borrowers emotional so they can extract admissions, pressure payments, or provoke angry replies.

Use one calm message:

“I dispute your collection methods. Please communicate only through written channels and provide the lender’s registered business name, SEC registration number, Certificate of Authority number, account details, computation of the amount claimed, and the name of the collector handling this account.”

After that, avoid long arguments. Do not insult them back. Do not threaten them. Keep your own messages clean because your replies may also become evidence.

Step 2: Preserve Evidence Properly

Save evidence before blocking numbers or deleting apps.

Collect:

Screenshots of SMS, Viber, Messenger, WhatsApp, Telegram, email, and in-app messages
Full screen screenshots showing the sender, number, date, and time
Call logs showing frequency and time of calls
Names, numbers, profile photos, account names, and links used by collectors
Screenshots of messages sent to your relatives, employer, co-workers, or contacts
Screenshots of public posts, comments, group chats, or “scammer” accusations
Loan agreement, disclosure statement, repayment schedule, screenshots from the app, and proof of payments
The app name, developer name, website, Google Play/App Store listing, and privacy notice
A short timeline of events

Be careful with secret audio recording of calls. Republic Act No. 4200, the Anti-Wiretapping Law, penalizes secret recording of private communications without authorization of the parties. Safer evidence usually includes screenshots, call logs, written messages, witness statements, and your immediate written notes of what was said during a call. (Lawphil)

Step 3: Revoke App Permissions and Protect Your Accounts

If harassment comes from an online lending app:

Go to your phone settings.
Check app permissions.
Revoke access to contacts, photos, camera, microphone, location, SMS, and storage unless strictly necessary.
Change passwords for email, social media, and e-wallets.
Turn on two-factor authentication.
Tell close contacts not to engage with collectors and to screenshot any messages they receive.
Report abusive app listings to the app store if the app is still active.

The DICT-NPC-SEC advisory says online lending platforms must not require unnecessary permissions and must prompt data subjects to revoke permissions once the purpose has been achieved. It also warns borrowers to review permissions carefully because contact list access must not become unbridled processing.

Step 4: Send a Written Demand to Stop Harassment

A short written notice helps show that the lender was warned and continued anyway.

Include:

Your name and account reference, if known
A statement that you dispute the abusive collection practices
A request for a written statement of account and legal basis for the amount
A demand to stop contacting third parties who are not guarantors
A demand to stop public shaming, threats, false statements, and abusive messages
A request for the collector’s full name and authority to collect
A statement that you are preserving evidence for SEC, NPC, BSP, NBI, PNP, or court proceedings

Send it by email, app support channel, registered mail, or any channel that gives proof of sending.

Where to File a Complaint

Use the office that matches the kind of lender and violation.

Situation	Main office to approach	What it can address
Lending company, financing company, or online lending platform uses abusive collection	SEC Financing and Lending Companies Department / SEC iMessage	Unfair debt collection, possible suspension, fines, revocation, regulatory action
App accessed contacts, messaged your contacts, posted personal data, or used personal data excessively	National Privacy Commission	Data Privacy Act violations, unlawful processing, complaints involving personal data
Bank, credit card issuer, e-wallet, money service business, pawnshop, or BSP-supervised entity	BSP Consumer Assistance Mechanism	Complaints against BSP-supervised financial institutions
Threats, cyber shaming, fake posts, scams, identity misuse, or online criminal conduct	NBI Cybercrime Division or PNP Anti-Cybercrime Group	Criminal investigation and cybercrime-related complaints
Immediate threats to safety	Nearest police station or barangay blotter	Incident recording, immediate police response, local documentation

The 2026 DICT-NPC-SEC advisory identifies SEC iMessage for unfair debt collection complaints involving lending and financing companies, and lists DICT, NBI Cybercrime Division, and PNP Anti-Cybercrime Group channels for harassment, threats, frauds, and scams.

How to File a Complaint with the SEC

File with the SEC when the offender is a lending company, financing company, or online lending platform.

Practical steps

Identify the company. Get the app name, corporate name, SEC registration number, Certificate of Authority number, website, and contact information if available.
Check if the company appears legitimate. Use SEC resources such as SEC eSearch or Check with SEC when available.
Prepare a complaint narrative. State what happened in chronological order.
Attach evidence. Include screenshots, call logs, messages, proof that third parties were contacted, and the loan documents.
Submit through SEC iMessage. SEC iMessage is the SEC-wide ticketing system for feedback, issues, and complaints. (imessage.sec.gov.ph)
Keep your ticket number. You will need it for follow-ups.
Update your complaint if harassment continues. New messages after filing can show a continuing violation.

What to request

You can ask the SEC to:

Investigate the lending or financing company
Order the company to stop unfair collection practices
Sanction the company and responsible officers, if warranted
Require the company to address third-party collection conduct
Verify the company’s authority to operate as a lending or financing company

The SEC may impose penalties under SEC MC 18, and RA 11765 also gives financial regulators enforcement powers such as fines, suspension, cease-and-desist orders, and consumer redress mechanisms.

How to File a Complaint with the National Privacy Commission

File with the NPC when the case involves misuse of personal data, such as:

Accessing or uploading your contacts
Messaging your contacts about your debt
Posting your name, photo, ID, or loan details
Sharing your debt information with relatives, employers, or co-workers
Processing data from your phone beyond what is necessary
Refusing to delete or stop using unlawfully obtained data

Practical steps

Download the NPC complaint form from the NPC’s official complaint page.
Fill it out clearly and attach supporting documents.
Have the complaint notarized.
Submit it in person, by courier, or by scanning and emailing it to the NPC complaints email address stated on the NPC website.
Keep proof of submission and payment, if any fee applies.

The NPC’s official complaint page states that a formal complaint must follow the required format, be printed and filled out, notarized, and submitted in person, by courier, or by scanned email. (National Privacy Commission)

If you are abroad

If you are a Filipino overseas or a foreigner outside the Philippines, you can still organize your evidence digitally. If a sworn complaint or affidavit must be notarized abroad, check whether the receiving office will accept a document notarized abroad with apostille or consular authentication. For foreign public documents to be used in the Philippines, authentication depends on the country and the type of document; DFA guidance explains that apostille applies to public documents for cross-border use, while foreign documents may need attestation by the issuing country’s embassy or consulate depending on the circumstances. (Apostille Philippines)

How to Complain to the BSP

Use the BSP route when the collector is acting for a bank, credit card issuer, e-money issuer, pawnshop, money service business, or another BSP-supervised financial institution.

Before escalating, it is usually best to file first with the institution’s own consumer assistance unit and keep proof of the complaint. If unresolved, file through BSP Online Buddy or submit the required complaint form by email or other BSP channels. BSP guidance says BOB can guide consumers through the Consumer Assistance Mechanism and that complaints may also be sent through the CIR form and BSP consumer affairs email. (Bangko Sentral ng Pilipinas)

Include:

Your account or reference number
Name of the bank, issuer, or collection agency
Date you complained to the institution
The institution’s reply, if any
Screenshots and call logs
The specific resolution requested, such as stopping abusive collection, correcting records, or investigating the collector

When to Go to NBI, PNP, or the Police

Go beyond SEC, NPC, or BSP if there are threats, public shaming, impersonation, fraud, fake warrants, identity misuse, or other criminal behavior.

Examples:

“We will post your nude photos unless you pay.”
“We will send police to your office today.”
“We will tell your employer you are a scammer.”
A fake court order, subpoena, warrant, or prosecutor notice is sent to you.
Your photo and ID are posted online.
Someone uses your name or documents to borrow from other apps.
Collectors use dummy accounts to harass your family.

The NBI Cybercrime Division’s process includes filing a complaint or request for investigation, preliminary interview, sworn statements or affidavits, and submission of supporting documents. (National Bureau of Investigation)

For immediate threats, document the incident at the nearest police station or barangay, especially if the collector knows your home or workplace. A barangay blotter does not replace an SEC, NPC, BSP, NBI, or PNP complaint, but it can help create a dated local record.

What Documents and Evidence Should You Prepare?

Document or evidence	Why it matters
Valid ID	Confirms your identity as complainant
Loan agreement or app screenshots	Shows the lender, amount, terms, and account
Disclosure statement and computation	Helps verify whether charges are properly disclosed
Proof of payment	Shows amounts already paid
Screenshots of threats or insults	Main proof of harassment
Call logs	Shows frequency and timing of calls
Messages sent to third parties	Proves contact-list harassment or unlawful disclosure
Links to public posts	Proves online shaming or cyberlibel-related conduct
Names/numbers/accounts of collectors	Helps identify persons involved
Timeline of events	Makes the complaint easier to evaluate
Prior complaint to lender	Shows the company had notice and opportunity to stop
Notarized affidavit, if required	Often needed for formal complaints or investigation

For court or agency filings, organize evidence by date. Use a simple file naming system, such as:

2026-04-10_SMS_threat_from_0917xxxxxxx.png
2026-04-11_Message_to_employer.png
2026-04-12_Call_log_23_calls.pdf
Loan_agreement_app_screenshot.pdf

This small step makes your complaint much easier to review.

What If the Online Lending App Is Illegal or Unregistered?

If the lender is not registered or has no SEC Certificate of Authority, report that fact to the SEC. Lending companies are regulated under Republic Act No. 9474, the Lending Company Regulation Act of 2007, while financing companies are regulated under Republic Act No. 8556, the Financing Company Act of 1998. These laws place lending and financing operations under SEC regulation. (Lawphil)

An unregistered or unauthorized lender may still try to collect, but lack of authority is highly relevant to an SEC complaint. Do not rely only on the app name. Many apps use brand names different from their corporate names. Look for the corporate entity in the loan agreement, privacy policy, app listing, text messages, or bank/e-wallet recipient details.

Should You Still Pay the Loan?

If the loan is valid, payment may still be due. But do not pay blindly just because someone is threatening you.

Before paying, ask for:

Registered corporate name of the lender
SEC registration and Certificate of Authority details
Statement of account
Breakdown of principal, interest, penalties, service fees, and other charges
Official payment channel
Official receipt or confirmation process
Written confirmation if a settlement will fully close the account

Republic Act No. 3765, the Truth in Lending Act, requires disclosure of finance charges in credit transactions so borrowers understand the true cost of credit. (Lawphil)

If the collector offers a “discounted settlement,” require written proof that the amount is accepted as full settlement, and pay only through official channels traceable to the lender. Avoid sending money to personal GCash, Maya, bank, or crypto accounts unless the lender confirms in writing that the account is an authorized payment channel.

What If They File a Case Against You?

A legitimate lender may file a civil collection case. Many loan collection cases fall under small claims or summary procedure, depending on the amount. The Supreme Court’s Rules on Expedited Procedures increased the small claims threshold to claims not exceeding ₱1,000,000, exclusive of interest and costs. (Supreme Court of the Philippines)

Do not ignore court papers. A real court document will identify the court, case number, parties, and deadlines. If you receive summons from an actual court, respond within the required period and attend the hearing.

Be suspicious of fake documents that:

Have no court branch or case number
Are sent only by random SMS or Messenger
Say “warrant of arrest for debt”
Demand payment to a personal account
Use poor formatting, wrong seals, or threatening language
Claim a same-day arrest for an unpaid online loan

Real legal collection is not the same as harassment. A lender can sue; a collector cannot invent fake criminal consequences.

Common Scenarios

The lender messaged my contacts. What can I do?

Save screenshots from each contact who received a message. Ask them not to argue with the collector. File with the NPC for unauthorized processing and with the SEC if the lender is a lending or financing company. Under the DICT-NPC-SEC advisory, contacting people on the borrower’s contact list other than guarantors is prohibited for debt collection.

They called my employer. Can they do that?

A collector may not shame you or disclose unnecessary debt information to your employer. If your employer is not a guarantor, contacting them to pressure you may support an SEC and NPC complaint. If they made false statements that damaged your reputation, preserve evidence for possible civil or criminal remedies.

They said they will post me as a scammer online.

That may involve unfair collection, data privacy violations, and possible defamation or cyberlibel, depending on the words used and where they were posted. Screenshot the threat and any actual post, including the URL, date, time, account name, and comments.

They call 30 times a day from different numbers.

Repeated calls can support a harassment complaint, especially if combined with threats, abusive words, or inconvenient timing. Save call logs daily. Do not delete the logs until you have exported or screenshotted them.

They are asking for more than I borrowed.

Ask for a written computation. Check the loan agreement, disclosure statement, interest, penalties, processing fees, and payments already made. If fees were not clearly disclosed or appear excessive, include that in your SEC or BSP complaint, depending on the lender.

The app disappeared from Google Play or the App Store.

Still file the complaint if you have evidence. Keep the APK name, screenshots, payment channels, messages, and corporate name. Some operators remove and re-upload apps under different names.

Practical Timelines and Bottlenecks

Process	Usual practical timing	Common bottleneck
Evidence gathering	Same day to 1 week	Screenshots missing sender/date/time
Written demand to lender	Same day	No official email or support channel
SEC complaint	Filing can be done online through SEC iMessage	Identifying the real corporate operator behind the app
NPC formal complaint	Depends on completion, notarization, and submission	Complaint not in required format or missing notarization
BSP complaint	Usually after first raising concern with the financial institution	No prior complaint filed with the bank/issuer
NBI/PNP cybercrime complaint	Can be started once evidence is organized	Need sworn statements and clear digital evidence
Court case if lender sues	Varies by court and procedure	Borrower ignores summons or fails to appear

The best practical improvement is to submit a clean, organized complaint with complete evidence. Agencies receive many complaints; a clear timeline and labeled attachments make your case easier to act on.

Frequently Asked Questions

Can online lending apps contact my contacts in the Philippines?

For debt collection, lending companies, financing companies, and persons acting as such may contact only a guarantor. A person in your contact list or a character reference is not automatically a guarantor unless that person separately consented to assume responsibility for the loan.

Is it legal for a collector to threaten to post my photo online?

No. Threatening public shaming, posting personal data, or accusing you online to force payment may violate SEC rules on unfair debt collection, the Data Privacy Act, and possibly criminal laws depending on the facts.

Can I block the collector?

Yes, but save evidence first. Blocking can protect your peace, but if you block too early without screenshots, call logs, or message exports, you may lose proof. You can also keep one written channel open for lawful account statements and settlement discussions.

Can I file a complaint even if I really owe the money?

Yes. Owing money does not give the lender permission to harass you, shame you, misuse your data, or threaten illegal action. The agency may address the collection misconduct even if the underlying debt still needs to be resolved.

What if the collector says they are from a law office?

Ask for the full name of the lawyer, law office address, IBP details if applicable, written authority to collect, and a formal demand letter. A real lawyer should not use fake warrants, insults, threats, or public shaming. Preserve the messages.

Can a lending company send police to arrest me for non-payment?

For a purely unpaid civil debt, no. The Constitution prohibits imprisonment for debt. Police may become involved only if there is a separate criminal matter, such as fraud, threats, identity theft, or other crimes. (Supreme Court E-Library)

Should I delete the lending app?

Not immediately. First screenshot the loan details, payment history, privacy permissions, support channels, and terms. After preserving evidence, revoke permissions and consider uninstalling if the app is abusing access.

Can foreigners in the Philippines file complaints?

Yes. Foreign borrowers, foreign spouses, expats, and foreign residents can file complaints if the lender or data processing has links to the Philippines or the financial service provider is regulated in the Philippines. If documents are executed abroad, ask the receiving agency whether notarization, apostille, or consular authentication is needed.

What if the harassment is from a private individual, not a lending company?

SEC rules may not apply if the lender is a private individual who is not operating as a lending or financing company. But threats, defamation, coercion, unjust vexation, and data privacy violations may still be reported to the police, NBI, PNP Anti-Cybercrime Group, or filed in court depending on the facts.

Will filing a complaint erase my debt?

Usually, no. Complaints about harassment address unlawful collection methods, privacy violations, or abusive conduct. The debt may still exist unless it is invalid, already paid, prescribed, settled, or legally reduced. Handle both tracks: stop the harassment and resolve the legitimate account balance.

Key Takeaways

Lending companies and collectors may collect lawful debts, but they cannot harass, shame, threaten, deceive, or misuse your personal data.
Contacting your phone contacts, employer, relatives, or friends for debt collection is especially problematic if they are not guarantors.
Save evidence before blocking numbers, deleting apps, or changing phones.
File with the SEC for unfair debt collection by lending or financing companies.
File with the NPC for contact-list misuse, public shaming, unlawful disclosure, or excessive processing of personal data.
File with the BSP if the complaint involves a bank, credit card issuer, e-wallet, or other BSP-supervised institution.
Go to the NBI, PNP Anti-Cybercrime Group, police, or barangay when there are threats, fake legal documents, fraud, identity misuse, or online shaming.
Non-payment of an ordinary debt is not a crime by itself, and no one may be imprisoned for debt alone under the Philippine Constitution.
A valid debt should still be addressed through written statements, proper computation, official payment channels, and documented settlement terms.