Quick answer

A lending app or collector may demand payment through lawful means, but it generally may not shame you online, publish your personal data, contact unrelated people from your phonebook, threaten you, impersonate authorities, or use false or abusive posts to pressure you.

Act quickly:

Preserve the post and account details before requesting removal.
Report the content to the social-media platform.
Send the lender a written demand to stop, remove the post, preserve records, and identify the collecting company or agent.
Report unfair collection practices to the Securities and Exchange Commission (SEC), or to the Bangko Sentral ng Pilipinas (BSP) if the lender is a BSP-supervised institution.
For misuse or disclosure of personal data, follow the National Privacy Commission’s (NPC) complaint process.
Report threats, extortion, impersonation, or potentially criminal posts promptly to the police, the NBI, or a prosecutor.

Removal of the post does not automatically cancel a valid loan. The debt dispute and the collector’s unlawful conduct are separate issues.

What conduct should be reported?

Report a post or message that does any of the following:

Publicly labels you a scammer, thief, criminal, fraudster, or similar term without a proper factual and legal basis.
Publishes your name, photograph, address, phone number, identification document, account details, loan balance, contact list, employer, relatives, or other personal information to shame you.
Tags or messages friends, co-workers, clients, neighbors, or relatives who are not guarantors, co-makers, or otherwise legally responsible for the debt.
Uploads edited photographs, fake notices, fabricated court documents, or “wanted” posters.
Threatens violence, arrest without lawful basis, public humiliation, job loss, or harm to you or your family.
Pretends to be a court, prosecutor, police officer, NBI agent, sheriff, lawyer, or government office.
Uses obscene, insulting, or profane language as a collection tactic.
Repeatedly posts or republishes harmful material after being told it is false, excessive, or unauthorized.
Harvests your phone or social-media contacts and uses them for debt collection.

Under SEC Memorandum Circular No. 18, Series of 2019, financing and lending companies—and collection agencies or representatives acting for them—must observe good faith and reasonable conduct. Prohibited practices include threats, insults, deceptive representations, disclosure of borrowers’ personal information, and other abusive collection methods.

The NPC’s loan-related privacy rules also restrict access to contact lists. An online lending app may provide a separate interface through which the borrower chooses a character reference or guarantor, with only the minimum access necessary for that choice. It may not process the broader contact list to collect a debt from people the borrower did not designate, or in a way that produces unfair collection practices. See NPC Circular No. 2022-02 and the NPC’s loan-related privacy guidance.

Preserve evidence before the post disappears

Do this before blocking the account or asking the platform to remove the material:

Take full-page screenshots showing the post, caption, account name, profile link, date, time, reactions, comments, shares, and visible URL.
Make a screen recording that starts from the account profile and opens the post, comments, images, and links.
Copy the exact post URL, profile URL, usernames, phone numbers, email addresses, and app-store listing.
Save the original images, videos, voice messages, emails, SMS messages, and chat exports. Do not rely only on cropped screenshots.
Record when you first discovered the post. This can matter for legal deadlines.
Ask recipients to preserve what they received and, if willing, provide a signed affidavit describing when, where, and from whom it came.
Keep the loan agreement, disclosure statement, payment history, receipts, collection notices, app permissions, privacy notice, and your correspondence with the lender.
Note the registered company name. The app’s brand name may differ from the corporation operating it.
Save each platform-report confirmation and every complaint reference number.
Back up the evidence in at least two secure locations.

Do not edit the original files, add annotations to the only copy, or delete the app until relevant records and permissions have been documented. If a threat appears credible, preserve the evidence without continuing a hostile exchange.

Send a written notice to the lender

Write to the lender’s customer-service channel and data protection officer, if identified in its privacy notice. State:

The specific URLs, accounts, messages, and dates involved.
Which statements are false and why.
Which personal data was exposed and who received it.
That you demand an immediate stop to further publication or third-party contact.
That you request removal or correction of the material.
That you object to unnecessary processing of your personal data.
That you request preservation of account records, collector instructions, access logs, call recordings, and communications connected with the incident.
That you want the full corporate name and contact information of the lender, collection agency, and responsible collector.
That communications about the loan should be sent directly to you through a specified channel.

Keep proof that the notice was received. Avoid admitting an amount you genuinely dispute. If you acknowledge the loan, you may still contest illegal charges and abusive collection conduct.

Report the post to the platform

Use the platform’s reporting tools and select the most accurate ground, such as:

Harassment or bullying.
Threats or violence.
Impersonation.
Disclosure of private information.
Scam or fraud.
Defamation, where the platform offers that category.

Give the exact URL and identify the specific text, photograph, video, or personal information involved. If there is an appeal process, use it and retain the result.

A platform report can produce faster removal, but it is not a substitute for an SEC, NPC, BSP, or criminal complaint. Before requesting deletion, make sure you have preserved usable evidence.

File an SEC complaint

For a lending or financing company, submit a complaint to the SEC’s department handling financing and lending companies. The SEC’s official instructions require a completed complaint form, a copy of a valid government-issued ID, and supporting documents. Use one complaint form for each respondent company.

Include:

The lender’s registered name and app name.
The collector or collection agency, if known.
Your loan documents and payment records.
Screenshots, URLs, messages, call logs, and witness evidence.
Your written demand and proof of receipt.
A short chronological account explaining who posted what, when, and how it was connected to collection.

Consult the SEC’s complaint instructions for lending and financing companies and its current SEC iMessage portal. Follow the filing instructions shown on the official site at the time of submission.

The SEC process addresses regulatory violations. Compensation, criminal prosecution, or a court order may require a separate proceeding.

File an NPC complaint for misuse of personal data

The Data Privacy Act of 2012 requires personal-data processing to have a lawful basis and to comply with transparency, legitimate purpose, and proportionality. Depending on the facts, unauthorized or malicious disclosure may also carry criminal liability. Liability is not automatic: the exact data, purpose, authority, consent, recipient, and surrounding circumstances must be examined.

First notify the responsible entity

As a general rule, before filing a formal NPC complaint, notify the lender, collection agency, or other responsible entity in writing and allow it to act. If it takes no timely or appropriate action—or gives no response within 15 calendar days from receipt—you may proceed with the complaint.

The NPC may waive this exhaustion requirement for good cause or a serious violation, including circumstances involving grave and irreparable harm, lack of a plain and adequate remedy, or patently illegal conduct. Explain and support any request for waiver rather than assuming it will be granted.

Prepare the formal complaint correctly

The NPC’s formal process generally requires a written, signed, verified complaint or a completed complaints-assisted form, supporting evidence, and a certification against forum shopping. The complaint normally must be notarized. Failure to attach evidence or comply with essential formal requirements can lead to dismissal.

Use the NPC’s current complaint page and forms and its formal filing instructions. The official instructions identify personal, courier, mail, and authorized electronic filing options. Check the current form, fees, technical requirements, and submission address before filing.

State clearly what relief you seek—for example, stopping further processing, removal or correction, access to relevant personal data, deletion where legally available, investigation, or damages within the NPC’s authority.

When the lender is regulated by the BSP

Some digital lenders are banks, e-money issuers, or other BSP-supervised financial institutions rather than ordinary SEC-regulated lending companies.

First complain through the institution’s Financial Consumer Protection Assistance Mechanism or customer-service channel. If unresolved, escalate through the BSP Consumer Assistance Mechanism using the BSP Online Buddy and official alternatives.

The regulator depends on the entity’s actual license, not simply the app’s branding. A privacy complaint may still fall within NPC jurisdiction even when the lender is BSP-supervised.

Report possible crimes promptly

A malicious post may support a criminal complaint when the legal elements of an offense are present. Possible offenses depend on the exact words, conduct, intent, publication, identity of the poster, and evidence.

Examples may include:

Cyberlibel: A defamatory imputation made publicly through a computer system, subject to the requirements and defenses governing libel.
Grave threats or other threats: A threat to inflict a wrong on a person, honor, property, or family, depending on its nature and surrounding conditions.
Data Privacy Act offenses: Unauthorized processing, malicious disclosure, or unauthorized disclosure, when the statutory elements are proven.
Other cybercrime or fraud-related offenses: For example, impersonation or use of fabricated electronic material, depending on the facts.

Not every offensive or embarrassing post is cyberlibel. Truth, privileged communication, good motives and justifiable ends, identification, publication, malice, and the precise wording can materially affect the case. Conversely, even a statement about a real debt may still violate privacy or unfair-collection rules if the disclosure is unnecessary, excessive, or used to shame the borrower.

You may seek investigative assistance from:

The nearest police station or appropriate PNP cybercrime office.
The NBI online complaint facility.
The NBI Cybercrime Division or an NBI regional or district office.
The proper city or provincial prosecutor’s office, usually with legal assistance in preparing the complaint-affidavit and supporting affidavits.

For cyberlibel, the Supreme Court has held that the prescriptive period is one year from discovery by the offended party, authorities, or their agents. Filing the complaint with the prosecutor for preliminary investigation interrupts prescription. Do not wait for the post to be removed or for an administrative agency to finish its case. See the Supreme Court’s official summaries on the one-year cyberlibel period and interruption of prescription by filing with the prosecution office.

When help is urgent

Contact emergency services or law enforcement immediately if:

The collector threatens imminent physical harm, abduction, sexual violence, arson, or harm to a child or family member.
Someone appears at your home or workplace and behaves violently.
The post reveals your live location, home address, child’s school, or information creating an immediate safety risk.
The collector demands money while threatening to publish intimate, fabricated, or highly sensitive material.
The post causes a serious risk of job loss, violence, self-harm, or irreversible reputational damage.
A legal deadline may expire soon.

Call 911 for an immediate emergency. Consider changing passwords, enabling multifactor authentication, reviewing app permissions, alerting household members or workplace security, and temporarily limiting public profile information.

Common mistakes to avoid

Deleting the app, messages, or post before preserving evidence.
Saving only cropped screenshots with no URL, account name, date, or context.
Reporting only the app’s brand name and not identifying the corporation or collection agency.
Filing an NPC complaint without first sending the required written notice, unless a supported waiver applies.
Filing an incomplete, unsigned, unverified, or unsupported complaint.
Assuming a platform takedown automatically starts a government investigation.
Waiting for the SEC or NPC case to finish before consulting counsel about a short criminal deadline.
Publicly retaliating with threats, insults, doxxing, or unverified accusations.
Paying a person on social media who claims to represent the NPC, SEC, police, or NBI. Use only official government channels.
Believing harassment erases a legitimate loan. Continue to document payments and raise billing disputes separately.
Giving a collector an OTP, account password, remote-device access, or additional identification merely because removal was promised.

Practical complaint checklist

Before submitting a report, prepare:

A one- or two-page chronology.
Your full contact information and valid identification.
The respondent’s corporate name, app name, account name, and available contact details.
Loan agreement, disclosure statement, statements of account, receipts, and disputed computations.
Original screenshots, screen recordings, URLs, files, chats, emails, SMS messages, and call logs.
Witness names and affidavits where available.
Your written demand, proof of receipt, and the response or proof that 15 days passed without one when relevant to an NPC complaint.
Platform report confirmations.
A clear list of requested relief.
Copies of any other complaints already filed and an accurate disclosure of related proceedings.

Submit copies unless an agency specifically requires originals. Keep a complete duplicate of everything filed.

Frequently asked questions

Can a collector post my photograph and call me a scammer because I missed a payment?

A missed payment does not by itself establish that a borrower committed fraud or another crime. A public accusation may raise cyberlibel concerns if the required elements are present. Publishing the photograph or loan information may separately violate privacy and unfair-collection rules, depending on the lawful basis, purpose, necessity, audience, and circumstances.

May the lender contact my family, employer, or Facebook friends?

A lender may communicate with a genuine guarantor, co-maker, or another person legally connected to the obligation within lawful limits. It generally should not harvest or contact unrelated phonebook or social-media contacts to shame you or pressure them to pay. Workplace contact and third-party disclosure also require close scrutiny under SEC and privacy rules.

What if I allowed the app to access my contacts?

App permission does not necessarily amount to valid consent for every later use. Consent must meet legal requirements and processing must still have a lawful, declared, and proportionate purpose. NPC rules specifically limit contact-list processing by online lenders.

Should I report the collector, the app, or the lending company?

Identify all of them if possible. Name the registered lender, app, collection agency, individual collector, social-media account, and other entity involved. Their respective responsibility depends on contracts, instructions, control over personal data, and actual participation.

Can I complain even if the post has already been deleted?

Yes, provided you can support the complaint with reliable evidence. Deleted content can be harder to prove, which is why preserving the URL, files, surrounding context, witnesses, and report confirmations is important.

Will the SEC or NPC order the debt cancelled?

Not automatically. Their proceedings focus on regulatory or privacy violations. The validity and amount of the debt, damages, criminal liability, and enforceability of contract terms may require separate findings or proceedings.

Can I file with more than one agency?

Potentially, because SEC, NPC, BSP, law-enforcement, prosecution, and platform processes serve different purposes. Disclose related cases accurately, especially where a certification against forum shopping is required. Obtain legal advice if the requested remedies or issues overlap.

Do I need a lawyer?

A lawyer is not always required to make an initial platform or agency report. Legal assistance is strongly advisable when there are threats, extensive publication, job or safety consequences, disputed identity, possible cyberlibel, significant damages, overlapping proceedings, or an approaching deadline.

Official sources

This article provides general Philippine legal information, not legal advice or a prediction of any case’s outcome. Rights, remedies, jurisdiction, and liability depend on the post’s exact contents, the parties’ identities, the loan documents, and available evidence. Official sources and procedures were checked as of 29 August 2026.