Online lending app harassment is frightening because it often does not stay between you and the lender. Many borrowers in the Philippines report repeated calls, threats, public shaming, messages to family members, or use of their phone contacts after missing a payment. The important point is this: owing money does not give a lending app the right to harass you, shame you, threaten you, or misuse your personal data. Philippine law allows lenders to collect legitimate debts, but only through lawful, fair, and privacy-respecting methods. The rules now specifically cover online lending platforms, mobile lending apps, websites, and other fintech systems used by lending and financing companies.

This guide explains what online lending harassment looks like, which Philippine laws protect you, what evidence to save, where to file complaints, and what practical steps can help stop the harassment.

What Counts as Online Lending App Harassment?

Online lending app harassment usually happens when a lender, collection agent, or third-party collector uses pressure tactics beyond lawful debt collection.

Common examples include:

Calling or texting you repeatedly in an abusive way
Threatening to post your photo or name online
Calling you a “scammer,” “criminal,” or “estafa suspect” without a court case
Messaging your parents, spouse, employer, officemates, neighbors, or Facebook friends
Sending group chats or social media posts about your debt
Using obscene, insulting, or humiliating language
Threatening arrest, barangay action, NBI action, or police action when no lawful basis exists
Accessing or using your phone contacts without a valid, limited, and necessary purpose
Contacting people in your phonebook who are not your guarantors or co-makers
Demanding payment at unreasonable hours or through intimidation

The government has specifically warned that online lending platforms may not engage in harassment, intimidation, public shaming, or unlawful use of personal data in collection practices. It also states that contacting people in the borrower’s contact list other than named guarantors is prohibited for debt collection purposes.

Your Basic Rights as a Borrower in the Philippines

Even if the loan is unpaid, you still have rights.

A lender may:

Remind you of your due date
Demand payment of a valid loan
Send a statement of account
Offer restructuring or settlement
File a lawful collection case if there is a real debt

A lender may not:

Shame you publicly
Threaten violence or unlawful action
Pretend to be police, court staff, barangay officials, or lawyers
Tell third persons about your debt when they are not legally involved
Use your contact list for harassment
Use false statements to collect
Collect through abusive, profane, threatening, or deceptive messages

Under Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, financial consumers have rights to fair treatment, disclosure and transparency, data privacy and protection, and timely handling of complaints. The law covers financial products and services such as credit and applies to financial service providers regulated by agencies such as the SEC, BSP, Insurance Commission, and Cooperative Development Authority. (Supreme Court E-Library)

Key Philippine Laws Against Online Lending Harassment

SEC Memorandum Circular No. 18, Series of 2019

The most important SEC rule for lending app harassment is SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices by financing companies and lending companies. The SEC issued this rule after receiving complaints that borrowers were being harassed through abusive, unethical, and unfair collection methods. (SEC Appointment System)

Under this circular, prohibited practices include:

Threats of violence or criminal means to harm a person, reputation, or property
False accusations or threats of legal action that cannot legally be taken
Obscenities, insults, or profane language
Disclosure or publication of names and personal information of borrowers who allegedly refuse to pay
Communicating false loan information, including failure to state that a debt is disputed
False representation or deceptive means to collect
Contact at unreasonable hours, generally before 6:00 a.m. or after 10:00 p.m., subject to limited exceptions
Contacting people in the borrower’s contact list other than named guarantors or co-makers

The SEC circular also makes clear that lending and financing companies remain responsible even if they outsource collection to a third-party service provider. A lender cannot avoid liability by saying, “Collection agency lang po iyon.”

Data Privacy Act of 2012 and NPC Rules

Republic Act No. 10173, the Data Privacy Act of 2012, protects personal information in government and private sector systems. The National Privacy Commission explains that the law protects privacy while regulating the collection, storage, use, disclosure, blocking, erasure, and destruction of personal data. (National Privacy Commission)

For online lending, the more specific rules are NPC Circular No. 20-01 and NPC Circular No. 2022-02, which cover personal data processing for loan-related transactions. These rules apply to lending companies, financing companies, and even persons acting as such, whether or not they have SEC authority. They also apply to third-party service providers processing borrowers’ data. (National Privacy Commission)

Current government guidance states that online lending platforms must not require unnecessary app permissions, must not process personal data excessively, and must not use contact lists in an unconstrained or disproportionate way. Access to contacts is limited to purposes such as selecting character references or guarantors, or deriving proportional metadata when necessary for specified and legitimate purposes.

Lending Company Regulation Act and Financing Company Act

Republic Act No. 9474, the Lending Company Regulation Act of 2007, governs lending companies and places them under SEC regulation. A lending company generally needs a valid Certificate of Authority from the SEC to operate. (Lawphil)

Republic Act No. 8556, the Financing Company Act of 1998, governs financing companies and also gives the SEC regulatory authority over them. Financing companies are corporations engaged in extending credit facilities, subject to licensing and regulation. (Lawphil)

This matters because many online lending apps operate under a corporate lending or financing company. Some apps use trade names that are different from the SEC-registered company name, so you should identify both the app name and the company name when filing a complaint.

Truth in Lending Act

Republic Act No. 3765, the Truth in Lending Act, requires creditors to disclose the true cost of credit, including finance charges, interest, fees, and the simple annual rate. The purpose is to protect borrowers from being unaware of the true cost of credit. (Lawphil)

The Lending Company Regulation Act’s implementing rules also require disclosure of the principal amount, interest rate, service or processing fee, amortization schedule, penalties, collection fee, notarial fee, other loan-related fees, collection and lien enforcement procedures, and method for computing the obligation in case of default. (Lawphil)

Revised Penal Code, Cybercrime Law, and Civil Code

Some collection tactics may become criminal or civilly actionable depending on the facts.

Under the Revised Penal Code, threats and coercive acts may fall under provisions on grave coercion, light coercion, unjust vexation, or threats, depending on what was said or done. Article 286 penalizes compelling a person through violence to do something against their will, while Article 287 covers certain coercions and unjust vexations. (Lawphil)

If defamatory statements are posted online, the issue may also involve libel under the Revised Penal Code and cyberlibel under Republic Act No. 10175, the Cybercrime Prevention Act of 2012. The Cybercrime Prevention Act covers certain crimes committed through information and communications systems. (Lawphil)

The Civil Code also protects dignity, privacy, and peace of mind. Articles 19, 20, and 21 require people to act with justice, good faith, and respect for public policy and morals; Article 26 recognizes a cause of action for acts that disturb private life or humiliate another person; and Article 32 recognizes damages for violations of rights such as privacy of communication and correspondence. (Lawphil)

What to Do Immediately When a Lending App Harasses You

1. Stop arguing with collectors and preserve evidence

Do not delete messages, call logs, app notifications, emails, or social media posts. Evidence is often the difference between a weak complaint and a complaint an agency can act on.

Save:

Screenshots of texts, chats, emails, app notifications, and social media posts
Call logs showing dates, times, and numbers
Voice recordings only if legally obtained and not through unlawful wiretapping
Names or aliases used by collectors
Payment receipts and transaction records
Loan agreement, disclosure statement, privacy notice, and terms of service
App screenshots showing permissions requested
App store listing, website URL, and company name
Screenshots from relatives, friends, employers, or coworkers who were contacted

For screenshots, include the full screen showing the date, time, sender, phone number, profile name, or group chat name. If a friend or coworker received the harassment, ask them to save their own screenshots and prepare a short written account of what they received.

2. Revoke unnecessary app permissions

On your phone, review the app’s permissions.

Common permissions to check:

Contacts
Camera
Photos or gallery
Microphone
Location
Calendar
SMS
Files and media

Government guidance says online lending platforms must not request unnecessary permissions unless needed for specified and legitimate purposes, and permissions should be turned off once the purpose has been fulfilled.

After taking screenshots of the app and loan details, consider uninstalling the app if it is no longer needed. Uninstalling alone may not stop collectors who already copied data, but it can reduce further access.

3. Send one calm written notice

Send a short message through the app, email, or official customer service channel. Keep it factual.

Example:

I acknowledge that there is a loan account under my name, but I object to any unlawful collection method. Do not contact my relatives, employer, coworkers, neighbors, or phone contacts who are not guarantors or co-makers. Do not publish or disclose my personal data or loan information to third parties. Please send an itemized statement of account, the registered company name, SEC registration details, Certificate of Authority details, and the full name or identity of any collector contacting me.

Do not admit to facts you are unsure of. Do not promise payment you cannot make. Do not send threats back.

4. Identify the company behind the app

Many borrowers only know the app name. For complaints, you need as much identifying information as possible:

What to identify	Where to look
App name	Phone app, app store listing, SMS, email
Corporate name	Loan agreement, privacy notice, terms and conditions
SEC registration number	App profile, website footer, loan documents
Certificate of Authority number	Disclosure statement, website, app page
Office address	Loan contract, privacy notice, SEC records
Collection agency name	Texts, emails, collector signatures
Payment channels	E-wallet, bank account, payment reference

The SEC has rules requiring disclosures in advertisements and reporting of online lending platforms by lending and financing companies. (SEC Appointment System)

5. File with the SEC for unfair debt collection

For abusive collection practices by lending companies, financing companies, or online lending platforms, the main regulator is the Securities and Exchange Commission, particularly its Financing and Lending Companies Department. The 2026 DICT-NPC-SEC advisory directs complaints on unfair debt collection practices to the SEC and identifies the SEC iMessage portal as the complaint channel.

Your SEC complaint should include:

Your full name and contact details
App name and company name
Loan account number, if available
Date you borrowed and amount received
Amount demanded by the collector
Description of harassment
Names/numbers/accounts used by collectors
Evidence attachments
Names of third parties contacted
Statement that those third parties are not guarantors or co-makers, if true

The SEC can impose administrative sanctions for violations, including fines, suspension, or revocation of authority to operate. SEC MC No. 18 provides penalties for lending companies and financing companies, including higher penalties and possible suspension or revocation for repeated or serious violations.

6. File with the NPC for privacy violations

File with the National Privacy Commission if the issue involves:

Accessing your contact list without proper basis
Sending messages to your contacts
Posting or sharing your name, photo, ID, employer, address, or loan details
Using your data beyond the purpose stated in the privacy notice
Refusing to delete or stop processing unnecessary data
Collecting excessive data through app permissions

The NPC formal complaint process requires the complaint form, printing and filling it out, notarization, and submission either in person, by courier, or by scanned email submission to the NPC. (National Privacy Commission)

Include in your NPC complaint:

Your screenshots of app permissions
The app’s privacy notice and terms
Evidence that contacts were messaged
Screenshots from affected contacts
Proof that the contacted persons were not guarantors
Your written objection or request to stop processing, if any

The NPC has previously ordered takedowns of online lending apps to protect borrowers’ data privacy rights, and it has stated that certain apps’ access to contacts, location, photos, media files, email, and social media data created serious privacy risks. (National Privacy Commission)

7. Report threats, fraud, or cyber harassment to cybercrime authorities

If collectors threaten harm, impersonate law enforcement, use fake legal documents, publish defamatory posts, hack accounts, or run a scam, the issue may go beyond an SEC or NPC administrative complaint.

The 2026 public advisory lists the following channels for other forms of harassment, threats, fraud, or scams: DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

For criminal complaints, prepare:

Complaint-affidavit or written narrative
Screenshots and call logs
IDs of the complainant and witnesses
Affidavits from third parties who received harassment
Links to posts or pages
Proof of account ownership or phone number ownership
Loan documents and payment records

For urgent threats to safety, report immediately to the nearest police station or appropriate cybercrime unit.

Where to File: SEC, NPC, PNP, NBI, or Court?

Problem	Best office to start with	What they can address
Harassing calls, insults, contacting non-guarantor contacts	SEC	Unfair debt collection by lending/financing company or OLP
App accessed contacts, photos, location, or disclosed debt data	NPC	Data privacy violations and excessive processing
Threats, fake warrants, impersonation, cyber shaming, scams	PNP ACG, NBI Cybercrime Division, DICT Cyber Hotline	Criminal/cybercrime investigation
Actual lawsuit or demand letter from court	Court handling the case	Legal defense, settlement, answer to complaint
Serious damages from public shaming	Civil court, depending on amount and cause	Damages, injunction, other civil relief
Local in-person harassment by identifiable persons	Police station or barangay, depending on facts	Blotter, immediate safety documentation, possible local intervention

For most online lending app harassment cases, the strongest first filings are usually SEC for unfair collection and NPC for data misuse. If there are threats, fake legal documents, cyberlibel, impersonation, or scams, add a cybercrime report.

Evidence Checklist

Prepare a folder with these files:

Evidence	Why it matters
Loan agreement or app confirmation	Shows the loan, lender, and terms
Disclosure statement	Shows interest, fees, penalties, and payment schedule
Screenshots of harassment	Proves abusive words, threats, timing, and sender
Call logs	Shows repeated calls and unreasonable hours
Messages to relatives/employer/friends	Proves third-party contact
Affidavits or statements from contacted persons	Strengthens the complaint
App permissions screenshots	Supports privacy complaint
Privacy policy and terms	Shows what the app claimed it would do with data
Payment receipts	Shows amounts already paid
Statement of account	Helps dispute inflated balances
App store listing and website	Helps identify the platform
Company registration details	Helps SEC/NPC identify the respondent

Organize the evidence chronologically. Label files clearly, such as:

Annex A - Loan Agreement
Annex B - Screenshots of Harassing Texts
Annex C - Messages Sent to Employer
Annex D - App Permissions
Annex E - Payment Receipts

Practical Timeline

Step	Practical timing
Save evidence	Same day
Revoke app permissions	Same day, after saving evidence
Send written objection	Same day or within 24 hours
File SEC complaint	As soon as evidence is organized
File NPC complaint	As soon as notarized complaint and annexes are ready
Cybercrime report	Immediately if threats, scams, hacking, or public shaming occur
Agency evaluation	Often weeks to months, depending on workload and completeness
Formal investigation or hearings	Can take several months, especially if respondent contests

Common bottlenecks include incomplete company details, unclear screenshots, missing dates, unnotarized complaints where notarization is required, and failure to show that contacted third persons were not guarantors or co-makers.

What If You Are an OFW or Foreigner?

Filipinos abroad and foreigners dealing with Philippine lending apps can still document and report harassment, especially if the lender, app operator, borrower, affected contacts, or data processing is connected to the Philippines.

Practical points:

Use your passport, Philippine ID, ACR I-Card, or other valid identification.
Save evidence with Philippine time where possible.
If an affidavit must be used in the Philippines, documents signed abroad may need notarization before a Philippine consulate or notarization abroad with apostille, depending on where it was executed and where it will be filed.
For NPC complaints, follow the NPC’s formal complaint requirements, including notarization and submission by the accepted methods. (National Privacy Commission)
If your Philippine relatives, employer, or contacts are being messaged, ask them to save their own screenshots and prepare short statements.

Foreigners should also check whether the lender is using passport data, immigration status, employer information, or residence details to pressure them. That may strengthen a privacy or harassment complaint.

Common Mistakes That Make Complaints Weaker

Deleting the app before saving evidence

Many people uninstall immediately. That is understandable, but first take screenshots of the app name, loan details, privacy policy, permissions, payment instructions, and customer service channels.

Paying only because of threats

Payment may reduce collection pressure, but it does not erase the harassment violation. If you pay, keep receipts and mark whether the payment is full settlement, partial payment, penalty payment, or restructuring.

Ignoring real court papers

Many collectors send fake threats. But if you receive a real summons from a court, do not ignore it. A debt case is handled differently from harassment. The harassment complaint can proceed separately, but you still need to respond to a real court case within the required period.

Assuming all contact with references is illegal

Not always. A guarantor or co-maker is different from a character reference. Government guidance now emphasizes that online lending platforms should have separate interfaces for character references and guarantors, and a guarantor must have expressly consented to assume responsibility for the loan.

Posting the collector’s private information online

Avoid retaliatory doxxing. Preserve evidence and file with the proper authority. Publicly posting personal information can create legal problems for you as well.

Can You Still Be Required to Pay the Loan?

Yes, if the loan is valid, the debt may remain collectible. Filing a harassment complaint does not automatically cancel the principal obligation.

But harassment can affect:

Administrative liability of the lender
Data privacy liability
Potential civil damages
Credibility of the lender’s collection records
Settlement leverage
Regulatory action against the company or app

Separate the issues:

Debt issue: How much, if anything, is validly owed?
Collection conduct issue: Did they harass, shame, threaten, or misuse data?
Privacy issue: Did they collect, access, or disclose data unlawfully?
Criminal issue: Were there threats, impersonation, fraud, hacking, or defamatory online posts?

Frequently Asked Questions

Can an online lending app message my contacts in the Philippines?

Generally, not for debt collection unless the person is a proper guarantor or co-maker. Government guidance states that contacting people in the borrower’s contact list other than named guarantors is prohibited, and for debt collection the lender may only contact the guarantor.

Can a lending app post my name and photo online if I do not pay?

No. Public shaming, publication of borrower names or personal information, and abusive disclosure of debt information can violate SEC rules, data privacy rules, and possibly civil or criminal laws depending on the facts. SEC MC No. 18 treats disclosure or publication of borrower names and personal information in collection as an unfair practice, subject to limited exceptions.

Can I be jailed for not paying an online loan?

Unpaid debt by itself is generally a civil matter. However, separate criminal issues may arise if there is fraud, falsification, threats, identity misuse, or other criminal conduct. Collectors who say “automatic kulong ka” for ordinary non-payment are usually using intimidation, not accurately explaining the law.

What agency handles online lending app harassment?

For unfair debt collection, file with the SEC. For misuse of contacts, excessive app permissions, or disclosure of personal data, file with the NPC. For threats, scams, cyber shaming, fake warrants, or impersonation, report to cybercrime authorities such as the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DICT Cyber Hotline.

What if the lending app is not SEC-registered?

Report it to the SEC anyway. The SEC regulates lending and financing companies and online lending platforms, and unregistered or unrecorded operations may raise additional issues. The NPC rules on loan-related data processing can also apply to persons acting as lending or financing companies, whether or not they have SEC authority. (National Privacy Commission)

Should I block the collectors?

You may block abusive numbers for safety and peace of mind, but keep at least one official written channel open if you need statements, settlement terms, or records. Before blocking, save screenshots and call logs.

Do I need a lawyer to file an SEC or NPC complaint?

Not always. Many administrative complaints can be prepared by the borrower using the agency forms and evidence. A lawyer becomes more useful when there is a criminal complaint, civil damages case, court summons, complicated settlement, large amount, or risk of counterclaims.

What should I do if my employer was contacted?

Save the message, ask the employer or HR officer to preserve the screenshot, and note who received it, when it was received, and what was said. If the employer is not a guarantor or co-maker, this can support an SEC complaint for unfair collection and an NPC complaint for unauthorized disclosure or misuse of personal data.

Can I demand deletion of my data?

You may object to unnecessary or unlawful processing and request blocking, erasure, or deletion where legally proper. The NPC recognizes data subject rights, including the right to erasure or blocking and the right to file complaints for Data Privacy Act violations. (National Privacy Commission)

What if the app says I consented to contact access?

Consent is not a blank check. Current government guidance warns against unnecessary, excessive, or disproportionate processing of personal data and deceptive design patterns. It also states that unbridled processing of contact lists is prohibited.

Key Takeaways

You can owe money and still be protected from harassment.
Online lending apps cannot lawfully shame you, threaten you, or message random people in your contact list for debt collection.
SEC MC No. 18 prohibits unfair debt collection practices by lending and financing companies.
The Data Privacy Act, NPC Circular No. 20-01, and NPC Circular No. 2022-02 protect borrowers against excessive or unlawful use of personal data.
File with the SEC for abusive collection, the NPC for privacy violations, and cybercrime authorities for threats, scams, fake legal documents, or online shaming.
Strong evidence matters: screenshots, call logs, app permissions, loan documents, payment records, and statements from contacted third persons.
Do not ignore real court papers, but do not be intimidated by fake arrest threats or public shaming tactics.