Online lending app harassment can feel frightening because it often happens fast: repeated calls, threats of “public shame,” messages to your family or employer, fake legal warnings, and abusive collectors using your contact list. In the Philippines, a debt does not give a lender the right to humiliate, threaten, or misuse your personal data. This article explains what online lending apps are not allowed to do, which Philippine laws protect you, how to preserve evidence, where to file complaints, and what to do if you still owe money but the collection methods have become abusive.

What Online Lending App Harassment Usually Looks Like

Online lending app harassment in the Philippines commonly involves one or more of these acts:

Calling or texting repeatedly in a way meant to intimidate you
Sending insults, threats, or obscene messages
Threatening to post your name, photo, ID, or loan details online
Contacting your phone contacts, relatives, co-workers, employer, or clients
Creating group chats to shame you
Saying you will be arrested immediately if you do not pay
Pretending to be a lawyer, police officer, court sheriff, barangay official, or government agent
Threatening to file criminal cases without legal basis
Adding unexplained charges, penalties, or interest
Refusing to give a proper statement of account
Using personal data from your phone beyond what is necessary for the loan

Some lenders may lawfully remind you about a debt, send billing notices, or pursue civil collection. What they cannot do is collect in a way that violates debt collection rules, data privacy law, consumer protection law, or criminal law.

Is It Legal for Online Lending Apps to Collect Debts?

Yes. A lender may collect a valid loan. If you borrowed money, the lender can demand payment, charge agreed interest and fees if lawful and properly disclosed, and file a proper civil case if necessary.

But collection must be done through lawful, fair, and reasonable means.

The Securities and Exchange Commission (SEC) has specific rules against unfair debt collection practices by financing companies and lending companies. SEC Memorandum Circular No. 18, Series of 2019 states that lending and financing companies may collect debts only through reasonable and legally permissible means, and that they must observe good faith and reasonable conduct. The circular was issued after the SEC received numerous complaints about harassment by online lenders and collectors.

This distinction is important:

Situation	What it means
You owe money	The lender may demand payment using lawful collection methods.
You are overdue	The lender may send reminders, notices, and statements of account.
You are being threatened, shamed, or exposed	The lender or collector may be violating SEC rules, privacy law, civil law, or criminal law.
The app accessed your contacts and messaged them	This may raise serious data privacy issues.
You are told you will be jailed only because you cannot pay	That threat is misleading. The Philippine Constitution prohibits imprisonment for debt.

Your Rights Under Philippine Law

1. You have the right not to be harassed by lending or financing companies

SEC Memorandum Circular No. 18, Series of 2019 prohibits several unfair debt collection practices. These include:

Using or threatening violence or other criminal means to harm a borrower’s person, reputation, or property
Threatening legal action that cannot legally be taken
Using obscenities, insults, or profane language
Disclosing or publishing the names and personal information of borrowers who allegedly refuse to pay
Communicating false loan information
Using false representations or deceptive means to collect
Contacting the borrower at unreasonable hours, specifically before 6:00 a.m. or after 10:00 p.m., except in limited situations
Contacting people in the borrower’s contact list other than guarantors or co-makers, even if the borrower supposedly gave consent

The same SEC circular also makes lending and financing companies responsible for the acts of their outsourced collection agents and third-party service providers. A company cannot simply say, “That was our collector, not us.” Under the circular, outsourced collectors act as agents, and the lending or financing company remains ultimately responsible.

Penalties may include fines, suspension, or revocation of the company’s Certificate of Authority, depending on the offense and gravity of the violation.

2. You have data privacy rights when lending apps use your phone data

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information in the Philippines. The National Privacy Commission (NPC) has specifically addressed online lending apps that harvest contact lists and use them to shame borrowers.

The NPC has stated that online lenders are prohibited from harvesting phone or social media contact lists for harassment. It has also identified unnecessary app permissions such as accessing phone contacts, email lists, social media contacts, photos, and other data when these are used for debt collection or shaming. (National Privacy Commission)

The NPC has previously acted against online lending apps accused of unauthorized use of personal data, public shaming, and harassment. In some cases, the NPC ordered takedowns of lending apps because their access to contacts and social data was excessive and allegedly “weaponized” against borrowers. (National Privacy Commission)

In simple terms: even if you borrowed money, that does not automatically mean the app can use your contact list, photos, employer details, or social media information to pressure you.

3. You cannot be jailed merely for unpaid debt

Article III, Section 20 of the 1987 Philippine Constitution states: “No person shall be imprisoned for debt or non-payment of a poll tax.” (Supreme Court E-Library)

This means a person generally cannot be jailed simply because they failed to pay a civil debt.

However, this does not mean all loan-related cases are automatically civil. Criminal issues may arise if there are separate acts such as fraud, falsification, identity theft, bouncing checks, threats, online libel, or other criminal conduct. Collectors often abuse this confusion by saying “estafa kaagad” or “may warrant na” even when no case has been filed.

A real arrest warrant does not come from a collector’s text message. It comes from a court after proper legal proceedings.

4. You have consumer protection rights in financial transactions

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, recognizes important rights of financial consumers, including fair treatment, disclosure and transparency, protection of consumer assets against fraud and misuse, data privacy and protection, and timely handling of complaints. It applies to financial products and services under regulators such as the SEC and the Bangko Sentral ng Pilipinas (BSP). (Supreme Court E-Library)

BSP rules also prohibit abusive collection or debt recovery practices by covered financial service providers. Financial service providers are responsible for the acts of their employees, agents, and accredited third-party service providers in consumer-facing activities such as debt collection.

5. You may have civil remedies for humiliation, privacy invasion, or abuse

The Civil Code of the Philippines provides general protections against abusive conduct.

Articles 19, 20, and 21 require people to act with justice, give everyone their due, observe honesty and good faith, and compensate others for unlawful or willfully harmful acts contrary to morals, good customs, or public policy. Article 26 also protects a person’s dignity, personality, privacy, and peace of mind, and recognizes relief for acts that vex or humiliate another person. (Lawphil)

These provisions may matter when harassment causes reputational harm, emotional distress, workplace embarrassment, or damage to family relationships.

What To Do Immediately If an Online Lending App Is Harassing You

1. Stop responding emotionally

Collectors often try to provoke fear, panic, or anger. Avoid replying with insults or threats. Keep your messages short, factual, and calm.

A useful response is:

Please communicate only through lawful collection channels. I dispute any harassment, threats, contact-list messaging, public shaming, and misuse of my personal data. Send a written statement of account showing the principal, interest, fees, payments, and legal basis for all charges.

Do not admit facts you are unsure of. Do not promise payment terms you cannot meet. Do not send more personal documents unless you have verified the lender.

2. Preserve evidence before deleting anything

Evidence is critical. Agencies will usually need specific proof, not just a general statement that you were harassed.

Save:

Screenshots of abusive text messages, chats, emails, and app notifications
Screenshots showing the sender’s phone number, account name, profile, date, and time
Call logs showing repeated calls
Voicemails, if any
Messages sent to your relatives, employer, friends, or co-workers
Group chats or social media posts created to shame you
Proof that the collector contacted people who were not guarantors or co-makers
The app name, developer name, website, Facebook page, and contact details
Loan agreement, disclosure statement, promissory note, or app terms
Statement of account or computation of charges
Receipts, GCash/Maya/bank transfer proof, or other payment records
Any notice you sent asking the lender to stop harassment or correct misuse of personal data

For long conversations, take a screen recording showing the full thread from the sender profile down to the abusive messages. Then export important screenshots to PDF or print them.

3. Revoke unnecessary app permissions

After preserving evidence, check your phone settings and revoke unnecessary permissions such as:

Contacts
Camera
Photos
Location
Microphone
SMS
Call logs

On many phones, you can do this through:

Android: Settings → Apps → App name → Permissions
iPhone: Settings → Privacy & Security → Contacts/Photos/Camera/etc.

If the harassment is severe, consider uninstalling the app after saving evidence. Also change passwords for email, e-wallets, and social media accounts if you suspect your information was compromised.

4. Verify whether the lender is registered

Before negotiating or paying, verify the lender’s identity. Some abusive apps use names similar to legitimate companies, while others operate without authority.

For lending companies, the SEC regulates companies under the Lending Company Regulation Act of 2007, or Republic Act No. 9474. A lending company generally cannot operate as such without authority from the SEC. (Supreme Court E-Library)

Check whether the company or platform appears in SEC lists of:

Registered lending companies
Registered financing companies
Recorded online lending platforms
Revoked or suspended companies
Companies with cancelled Certificates of Authority

If the name in the app, loan agreement, bank account, and messages do not match, note this in your complaint.

5. Send a written demand to stop harassment

Send a written notice to the lender’s official email, customer service channel, data protection officer, or support page. Keep proof of sending.

You can write:

I am requesting that your company and your collection agents stop all unfair debt collection practices, including threats, insults, public shaming, disclosure of my loan information, and contacting persons who are not guarantors or co-makers. I also request a full statement of account and the legal basis for all charges.

I further object to any unnecessary or excessive processing of my personal data, including access to my contact list, photos, social media accounts, employer information, and third-party contacts. Please confirm in writing what personal data you processed, the purpose, and the steps taken to stop unauthorized processing.

This is useful for SEC, NPC, and BSP complaints because it shows you tried to resolve the matter and clearly identified the abusive conduct.

6. Pay only through verifiable channels

If you decide to pay or negotiate, do not send money to random personal accounts just because a collector threatens you.

Ask for:

Official company name
SEC registration details
Official payment channels
Updated statement of account
Breakdown of principal, interest, penalties, and fees
Written confirmation that payment settles the account, if applicable
Official receipt or proof of payment

Keep all receipts. If you pay through GCash, Maya, bank transfer, or remittance, screenshot the confirmation page and save the reference number.

Where to File a Complaint Against Online Lending App Harassment

Different agencies handle different parts of the problem. In many cases, you may need to complain to more than one office because harassment may involve unfair collection, data privacy violations, and possibly criminal threats.

Problem	Where to file	What to prepare	Practical notes
Harassment by a lending or financing company	Securities and Exchange Commission (SEC)	Screenshots, call logs, loan documents, app name, company name, collector details, proof they contacted third parties	Best for unfair debt collection practices under SEC rules.
Misuse of contacts, photos, employer details, or personal data	National Privacy Commission (NPC)	Notarized complaint form or verified complaint, evidence, proof you first notified the respondent, authorization if filed by representative	NPC generally requires proof that you first informed the respondent and that it failed to act within 15 calendar days.
Abusive collection by a bank, e-money issuer, pawnshop, remittance company, or BSP-supervised institution	Financial institution’s complaint channel first, then BSP if unresolved	Complaint reference number, screenshots, account details, prior correspondence	BSP-supervised institutions must have a first-level consumer assistance mechanism; unresolved complaints may be elevated to BSP Online Buddy.
Threats, extortion, fake warrants, identity misuse, online libel, or hacking	Police cybercrime unit, NBI cybercrime channels, prosecutor’s office, or other law enforcement	Screenshots, URLs, account profiles, phone numbers, witnesses, affidavits, proof of identity	Criminal complaints require clear evidence of the specific act and the person or account involved.
Excessive or undisclosed interest and fees	SEC, BSP if BSP-supervised, or court if already sued	Loan agreement, disclosure statement, payment history, computation	Courts may reduce unconscionable interest depending on the facts.

Filing with the SEC

The SEC now uses official channels such as iMessage for public inquiries, reports, and complaints. The SEC describes iMessage as its web-based platform for managing public inquiries, complaints, incidents, and requests, with unique electronic tickets for tracking. (Securities and Exchange Commission)

For an SEC complaint, organize your evidence this way:

Name of the lending app
Name of the lending or financing company, if known
SEC registration number or Certificate of Authority number, if available
App screenshots from Google Play, App Store, website, or Facebook page
Loan amount, date borrowed, amount received, due date, and payments made
Names, numbers, or profiles of collectors
Specific unfair acts, with dates and screenshots
Names of people contacted who were not guarantors or co-makers
Your written demand to stop harassment, if any
Your requested action, such as investigation, sanction, or order to stop unlawful collection practices

Be specific. Instead of saying “they harassed me,” write: “On 15 June 2026 at 8:42 p.m., collector number 09xx sent my loan details to my employer, who was not a guarantor or co-maker. On 16 June 2026 at 7:10 a.m., the collector threatened to post my photo online.”

Filing with the National Privacy Commission

For data privacy complaints, the NPC has a formal complaint process. A complaint may be filed by the data subject, an authorized representative with a Special Power of Attorney, a juridical entity with proper authority, or the NPC on its own initiative. (National Privacy Commission)

The NPC’s process generally requires:

A complaint-assisted form or verified complaint
Supporting evidence and witness affidavits, when available
Notarization
Submission personally, by registered mail, courier, or authorized email
Proof that you first informed the respondent of the privacy violation and that the respondent failed to take timely or appropriate action, or failed to respond within 15 calendar days (National Privacy Commission)

For online lending app harassment, the strongest NPC complaints usually include proof that the app or collector:

Accessed or used your contact list
Sent your loan details to third parties
Posted your photo, ID, or personal information
Used your employer or family information for shaming
Processed personal data beyond what was necessary for the loan
Continued processing your data after you objected

If you are abroad, you may need a notarized or consularized Special Power of Attorney if someone in the Philippines will file for you. Depending on the country, documents executed abroad may need Philippine consular notarization or an apostille for use in the Philippines. (Apostille Services)

Filing with BSP

If the lender is a BSP-supervised financial institution, such as a bank, e-money issuer, remittance company, pawnshop, or other covered institution, file first with the institution’s own consumer assistance channel. If unresolved, you may elevate the complaint to the BSP through BSP Online Buddy or other BSP consumer assistance channels. (Bureau of the Treasury)

This matters because some online credit products are connected to e-wallets, banks, or other regulated financial service providers. Check the exact entity behind the loan before choosing the complaint channel.

Evidence Checklist for Online Lending App Harassment

Evidence	Why it matters
Screenshot of abusive message	Shows the exact words, date, time, and sender.
Full conversation thread	Prevents the collector from claiming the message was taken out of context.
Call logs	Shows frequency and timing of calls.
Messages to family, employer, or contacts	Proves third-party contact and possible disclosure of personal information.
App name and developer page	Helps agencies identify the platform.
Loan agreement or disclosure statement	Shows the stated principal, interest, fees, and due date.
Proof of amount actually received	Important because many apps deduct fees before release.
Payment receipts	Prevents double collection and supports disputes over balance.
Written demand to stop harassment	Shows you formally objected.
Witness statements	Useful if relatives, co-workers, or employers received threats or shaming messages.
IDs and authorization documents	Needed when filing formal complaints or authorizing a representative.

Common Situations and What They Mean

“The app messaged my contacts. Is that allowed?”

Generally, contacting people in your phone contact list who are not guarantors or co-makers is prohibited under SEC debt collection rules for lending and financing companies. The SEC rule specifically treats this as an unfair practice even if the borrower supposedly gave consent.

This may also be a data privacy issue if the app accessed, copied, or used your contact list beyond what was necessary and lawful.

“They threatened to post my face and ID online.”

That is a serious red flag. Publishing or threatening to publish your name, photo, ID, address, employer, or loan information to shame you may violate SEC debt collection rules, data privacy principles, civil law protections on dignity and privacy, and possibly criminal laws depending on the content and manner of posting.

Take screenshots immediately, including the profile or number of the sender. Do not just block without preserving evidence.

“They said they will send police to my house.”

Collectors cannot create arrest warrants. A real warrant must come from a court. If the threat is only based on non-payment of a debt, remember that the Constitution prohibits imprisonment for debt. (Supreme Court E-Library)

However, do not ignore real court papers. If you receive an actual summons, subpoena, barangay notice, or prosecutor’s notice, read it carefully and respond within the required period.

“They contacted my employer.”

This is common and very harmful. If your employer is not a guarantor, co-maker, or authorized contact for the loan, report it. Save screenshots from your employer or HR department. If the collector disclosed your debt, insulted you, or threatened workplace embarrassment, include those details in your SEC and NPC complaints.

“I still owe money. Can I still complain?”

Yes. A valid debt does not legalize harassment. You may complain about unlawful collection while still addressing the actual loan balance.

When possible, separate the issues:

“I am asking for a lawful statement of account.”
“I dispute the harassment and misuse of personal data.”
“I am willing to communicate through proper channels.”
“I do not consent to public shaming or third-party contact.”

“The loan app is unregistered.”

If the app or company appears unregistered, suspended, or revoked, report that to the SEC. Also be careful about paying random collectors. Ask for proof of authority to collect and official payment channels.

If the app is a scam or uses fake identities, criminal enforcement may also be involved.

“The interest is too high.”

Philippine courts may reduce interest that is unconscionable or excessive, depending on the facts. The Supreme Court has repeatedly recognized that unconscionable interest may be struck down or reduced, even when the borrower signed the agreement. (Lawphil)

Also check whether the lender gave proper disclosure of the finance charges. The Truth in Lending Act, Republic Act No. 3765, requires disclosure of finance charges in credit transactions so borrowers can understand the true cost of credit. (Lawphil)

Practical Timelines, Costs, and Bottlenecks

Step	Usual timeline	Possible cost	Common bottleneck
Save screenshots and call logs	Same day	Free	Missing dates, cropped screenshots, deleted messages
Revoke app permissions	Same day	Free	Evidence lost if app is deleted too early
Send written demand to lender or data protection officer	Same day to a few days	Free	No official email or fake company details
SEC complaint	Same day once documents are complete	Usually free to submit	Identifying the correct company behind the app
NPC complaint	After written notice and 15-calendar-day response period, unless facts justify urgent action	Notarization, printing, courier if applicable	Lack of notarized complaint, missing proof of prior notice
BSP escalation	After first filing with the financial institution	Usually free	No complaint reference number from the institution
Criminal complaint	Depends on law enforcement or prosecutor schedule	Printing, notarization, affidavit costs	Identifying anonymous numbers or fake profiles
Civil case for damages or collection dispute	Months to years	Filing fees, legal costs	Court congestion, service of summons, evidence issues

A practical tip: create one folder for each lender or app. Label files by date, such as 2026-06-15 collector threat employer screenshot. This makes your complaint easier to evaluate.

Frequently Asked Questions

Can online lending apps contact my contacts in the Philippines?

For SEC-regulated lending and financing companies, contacting people in your contact list other than guarantors or co-makers is treated as an unfair debt collection practice. This rule applies even if the app claims you gave consent when you installed it.

Can an online lender post my name, photo, or loan details on Facebook?

They should not use public shaming as a collection method. Publishing or threatening to publish your personal information may violate SEC rules, data privacy law, and civil law protections on privacy and dignity. Preserve screenshots and report the conduct.

Can I be arrested for not paying an online loan?

You cannot be imprisoned merely for debt. The Constitution expressly prohibits imprisonment for debt. But separate criminal acts, such as fraud, falsification, threats, or bouncing checks, may create different legal issues. A collector’s text message is not a warrant.

Should I block the collector?

You may block abusive numbers after saving evidence. Before blocking, screenshot the messages, sender details, timestamps, and call logs. If you block too early, you may lose proof needed for a complaint.

Should I uninstall the lending app?

Preserve evidence first. Screenshot the loan details, account page, payment instructions, terms, and messages inside the app. After that, you may revoke permissions or uninstall if needed to reduce further access to contacts, photos, location, or other data.

What if I clicked “allow contacts” when I installed the app?

Consent must still be lawful, specific, informed, and not excessive. Under SEC rules, contacting people in your contact list who are not guarantors or co-makers is still an unfair collection practice for covered lending and financing companies. Under data privacy principles, access to personal data must be necessary, proportionate, and for a legitimate purpose.

Where should I complain first: SEC or NPC?

File with the SEC for unfair debt collection by a lending or financing company. File with the NPC when the issue involves misuse of personal data, contact harvesting, public shaming, or unauthorized disclosure of your loan information. Many online lending app harassment cases involve both.

What if I am an OFW or living abroad?

You can still preserve digital evidence and send written notices by email. If someone in the Philippines will file or follow up for you, prepare a Special Power of Attorney. Depending on where you sign it, the SPA may need consular notarization or an apostille before it is accepted in the Philippines. (Apostille Services)

Can the lender still sue me if I complain?

Yes. Complaining about harassment does not automatically cancel a valid debt. The lender may still pursue lawful collection. But your complaint may help stop abusive methods, document unlawful conduct, and challenge unfair charges, privacy violations, or harassment.

What if the app keeps changing numbers?

Keep saving evidence. Make a log showing dates, times, numbers, names used, and message content. Include all numbers in your complaint. If the pattern shows coordinated harassment, it can support your claim that the lender or its agents are using repeated abusive collection tactics.

Key Takeaways

A lender may collect a valid debt, but it cannot threaten, shame, deceive, or harass you.
SEC rules prohibit unfair debt collection practices, including insults, threats, public shaming, false representations, unreasonable-hour contact, and contacting non-guarantor phone contacts.
Online lending apps may violate the Data Privacy Act when they harvest contacts, use photos or employer details, or disclose loan information to third parties.
You cannot be jailed merely for unpaid debt, but real court or prosecutor notices should never be ignored.
Preserve evidence before blocking numbers, deleting messages, revoking permissions, or uninstalling the app.
File with the SEC for unfair collection, the NPC for data privacy misuse, BSP for covered financial institutions, and law enforcement for threats, extortion, identity misuse, or cybercrime.
A harassment complaint does not erase the debt, but it can help stop unlawful collection and protect your privacy, reputation, and peace of mind.