If an online lending app is threatening you, messaging your contacts, posting your name online, calling your employer, or using your photos to shame you into paying, you are not powerless. In the Philippines, lenders may collect legitimate debts, but they must do it lawfully. Recent government advisories specifically recognize reports of online lending platforms using harassment, intimidation, public shaming, and unlawful personal data use in collection practices. This guide explains what counts as online lending app harassment, where to report it, what evidence to prepare, and how to choose between the SEC, National Privacy Commission, NBI, PNP Anti-Cybercrime Group, DICT Cyber Hotline, and other offices.

What Counts as Online Lending App Harassment in the Philippines?

Online lending app harassment usually happens when a lender, collector, or third-party collection agent goes beyond lawful collection and uses pressure, threats, humiliation, or misuse of personal data.

Common examples include:

Repeated abusive calls or messages
Threats of arrest, imprisonment, barangay blotter, deportation, “blacklisting,” or public exposure
Messaging your relatives, friends, co-workers, employer, or Facebook contacts about your debt
Posting your name, photo, ID, contact number, or alleged debt on social media
Calling you “scammer,” “fraudster,” “estafador,” or similar accusations in messages sent to other people
Using obscene, insulting, or degrading language
Threatening to visit your home or workplace to embarrass you
Accessing your phone contacts, photo gallery, camera, or social media without a proper lawful basis
Forcing you to pay “extension fees” or “rollover fees” while refusing to issue a proper statement of account

A borrower may still owe money, but the existence of a debt does not give the lender a license to harass, shame, threaten, or misuse personal data.

Your Key Legal Rights Against Online Lending App Harassment

You cannot be jailed just because you failed to pay a debt

Article III, Section 20 of the 1987 Constitution states that no person shall be imprisoned for debt or non-payment of a poll tax. (Supreme Court E-Library) This is why threats like “ipapakulong ka namin bukas” or “may warrant ka na” are usually misleading when the issue is only non-payment of a civil loan.

However, this does not mean every loan-related case is purely civil. Separate criminal issues may arise if there is fraud, identity theft, falsification, cyberlibel, threats, or other crimes. The important point is this: non-payment alone is different from a criminal act.

Lending companies and financing companies are regulated by the SEC

Republic Act No. 9474, or the Lending Company Regulation Act of 2007, requires a lending company to operate as a corporation and prohibits it from conducting business unless it has authority from the Securities and Exchange Commission. The same law gives the SEC power to regulate, supervise, and impose sanctions on lending companies. (Supreme Court E-Library)

This is why complaints against most online lending apps are usually filed first with the SEC, especially when the complaint involves unfair debt collection, unauthorized online lending platforms, or abusive collectors.

SEC rules prohibit unfair debt collection practices

SEC Memorandum Circular No. 18, Series of 2019 applies to financing companies, lending companies, and third-party service providers hired by them. It recognizes that lenders may use reasonable and legally permissible means to collect, but they must observe good faith, reasonable conduct, and restraint.

Under the SEC circular, unfair collection practices include:

Use or threat of violence or other criminal means
Threats to take action that cannot legally be taken
Obscene, insulting, or profane language
Disclosure or publication of borrowers’ names and personal information, except in limited lawful situations
Communicating false loan information, including failure to say that a debt is disputed
False representations or deceptive means to collect
Contacting borrowers at unreasonable hours, generally before 6:00 a.m. or after 10:00 p.m., subject to stated exceptions
Contacting people in the borrower’s contact list other than named guarantors or co-makers

The circular also makes clear that outsourcing collection does not free the lending or financing company from responsibility. The third-party collector is treated as the lender’s agent for collection purposes.

SEC penalties under this circular may include fines, suspension, or revocation depending on the offense and circumstances. For example, the circular lists fines for first and second offenses and allows heavier sanctions, including suspension or revocation of authority, for serious or repeated violations.

Online lenders cannot freely harvest and misuse your contacts

The National Privacy Commission has specifically warned that online lenders are prohibited from harvesting phone and social media contact lists for harassment and shaming. The NPC explained that this issue arose from complaints involving illegal use of borrowers’ data and data of people in their contact lists. (National Privacy Commission)

The 2026 DICT-NPC-SEC public advisory also states that unnecessary mobile app permissions, excessive processing of contact lists, contact-list use leading to harassment, and contacting persons other than guarantors for debt collection are prohibited. It also distinguishes between character references and guarantors: a person is not a guarantor unless that person separately consented to assume responsibility for the loan in case of default.

This matters because many borrowers enter names and numbers as “references” during app registration. A reference is not automatically liable for the loan. A lender generally cannot treat your reference, co-worker, or Facebook friend as someone it may shame or pressure for payment.

You have financial consumer rights

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, protects financial consumers and recognizes rights such as fair treatment, disclosure and transparency, data privacy and protection, and timely handling of complaints. (Supreme Court E-Library) For online lending app harassment, this supports the idea that a borrower should receive fair treatment and a real avenue for complaint, not threats and humiliation.

You have a right to clear loan disclosures

Republic Act No. 3765, or the Truth in Lending Act, requires creditors to give borrowers a clear written statement before the loan transaction showing key credit information such as finance charges and the simple annual rate. (Lawphil) If the app deducted hidden fees, failed to show the real cost of credit, or changed charges without clear disclosure, include that in your SEC complaint.

Civil damages may be available in serious cases

The Civil Code may also apply. Articles 19, 20, and 21 require people to act with justice, good faith, and respect for morals and public policy, while Article 26 protects dignity, privacy, and peace of mind. (Lawphil) Article 2176 on quasi-delicts also provides that a person who causes damage to another through fault or negligence may be liable for damages. (Lawphil)

In practical terms, this may become relevant if harassment caused reputational damage, job problems, emotional distress, or harm to your family life. Civil action is separate from filing administrative complaints with the SEC or NPC.

Where to Report Online Lending App Harassment

Situation	Best office to start with	Why
Abusive collection, threats, public shaming, contacting your employer or relatives	SEC Financing and Lending Companies Department	The SEC regulates lending and financing companies and accepts complaints on financing and lending companies through its iMessage system. (Securities and Exchange Commission)
App accessed or used your contacts, photos, ID, employer details, or other personal data improperly	National Privacy Commission	The NPC handles violations of the Data Privacy Act and has a formal complaint process. (National Privacy Commission)
Death threats, extortion, fake warrants, identity theft, cyberlibel, scam, hacking, or use of dummy accounts	NBI Cybercrime Division or PNP Anti-Cybercrime Group	These may involve cybercrime or criminal offenses, not just regulatory violations. The 2026 advisory lists NBI, PNP ACG, and DICT channels for threats, frauds, and scams.
Suspicious links, phishing, fake apps, scam lending pages, or urgent cyber fraud concerns	DICT Cyber Hotline / 1326 channel	The public advisory identifies DICT’s cyber hotline email as a reporting channel for other forms of harassment, threats, fraud, and scams.
Collector physically visits your home or workplace and causes disturbance	Barangay and local police, plus SEC/NBI/PNP if needed	A barangay blotter can document local disturbance, but it does not replace an SEC, NPC, or cybercrime complaint.

Step-by-Step Guide: How to Report Online Lending App Harassment

1. Preserve evidence before blocking, deleting, or uninstalling anything

Before you delete the app or block the numbers, save proof. Evidence is often the difference between a complaint that moves and a complaint that gets delayed.

Save the following:

Screenshots of SMS, Viber, Messenger, WhatsApp, Telegram, email, or in-app messages
Full phone numbers, usernames, profile links, and email addresses used by collectors
Call logs showing dates, times, and frequency of calls
Screenshots of posts, comments, group chats, or messages sent to your contacts
Screenshots showing the app name, developer name, Google Play or App Store listing, and website
Loan agreement, disclosure statement, repayment schedule, and statement of account
Proof of payments, receipts, bank transfers, GCash/Maya receipts, or screenshots
Screenshots of app permissions, especially access to contacts, camera, photos, location, SMS, or files
Names and contact details of witnesses who received messages about your debt

For social media posts, capture the URL, date, time, account name, and comments. If possible, use screen recording to show the account profile and the post in one continuous capture.

2. Identify the lender’s legal name, not just the app name

Many online lending apps use trade names that differ from the SEC-registered corporate name. For example, the app name may be different from the lending company or financing company behind it.

Check:

App name
Developer name in the app store
Website and privacy policy
Terms and conditions
Disclosure statement or loan agreement
SEC registration number or Certificate of Authority number, if shown
Payment recipient name in bank or e-wallet transactions
Collection agency name, if different from the lender

The 2026 DICT-NPC-SEC advisory reminds borrowers to download online lending platforms only from official or verified sources and ensure that the platforms are operated by duly registered and licensed entities.

3. Revoke unnecessary app permissions

After saving evidence, revoke permissions that are not necessary. On your phone settings, check whether the app has access to contacts, camera, photos, microphone, location, SMS, or files.

The 2026 advisory says online lending platforms should not require unnecessary permissions and should prompt users to turn off or revoke permissions once the purpose has been achieved. It also states that camera or photo access should be tied to legitimate purposes like identity verification and turned off once fulfilled.

4. File a complaint with the SEC

For unfair debt collection, harassment by collectors, unrecorded online lending platforms, or abusive practices by lending and financing companies, file with the SEC.

The SEC’s iMessage system is its web-based platform for public inquiries, complaints, incidents, and requests. The SEC user guide explains that the system creates an electronic ticket and allows users to track ticket status. (Securities and Exchange Commission)

In the SEC iMessage system, choose the service related to complaints on financing and lending companies. The SEC user guide lists “Complaints on Financing and Lending Companies” under the Financing and Lending Companies Department’s Monitoring and Compliance Division. (Securities and Exchange Commission)

In your SEC complaint, include:

Your full name, contact number, and email address
App name and lender’s legal name, if known
Loan amount, date released, amount actually received, due date, and amount demanded
Description of harassment
Names, numbers, and accounts used by collectors
Whether they contacted your family, friends, employer, or references
Whether they posted or threatened to post your personal information
Whether the debt amount is disputed
Attachments: screenshots, call logs, proof of payment, loan agreement, and app permissions

A clear subject line helps, such as:

Complaint for Unfair Debt Collection Practices Against [App Name / Company Name]

5. File a complaint with the National Privacy Commission if your data was misused

File with the NPC when the issue involves personal data, such as:

Contact-list harvesting
Messaging your contacts about your debt
Using your photo, ID, address, employer, or family details
Processing data beyond what was necessary for the loan
Refusing to delete data after the purpose has ended
Using deceptive consent screens or forced app permissions

The NPC formal complaint process requires using the proper complaint form, printing and filling it out, having it notarized, and submitting it to the NPC in person, by courier, or by scanning and emailing it to the NPC complaints address. (National Privacy Commission)

For an NPC complaint, prepare:

Notarized complaint form
Valid ID
Screenshots of app permissions
Screenshots of the privacy notice and consent screens, if available
Proof that third parties were contacted
Affidavits or written statements from contacts who received messages
Screenshots showing the content of the messages sent to contacts
Loan documents and the app’s terms and conditions

If your contacts were messaged, ask them to save screenshots from their own phones. Evidence from the recipient is often stronger than a forwarded screenshot.

6. Report criminal threats, extortion, scams, or identity theft to cybercrime authorities

Go beyond SEC/NPC and report to cybercrime authorities when collectors or unknown persons:

Threaten physical harm
Threaten to publish edited photos, fake scandals, or humiliating posts
Demand money outside the official app or lender account
Use fake police, court, or barangay documents
Pretend to be lawyers, prosecutors, police, NBI, or court staff
Create dummy accounts using your name or photos
Send phishing links
Use your ID to create accounts or scam others

The 2026 public advisory lists the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group as reporting channels for other forms of harassment, threats, fraud, and scams. The NBI website identifies its Cybercrime Division and official division email, while a PNP FOI response points complainants to the PNP Anti-Cybercrime Group e-complaint channel and email for cybercrime complaints. (National Bureau of Investigation) (www.foi.gov.ph)

Bring or attach:

Printed screenshots
Digital copies on your phone or USB drive
Valid ID
Timeline of events
Names, phone numbers, usernames, and links
Proof of payment or demands
Complaint-affidavit, if required
Your device, if investigators need to inspect messages or metadata

The Cybercrime Prevention Act of 2012, Republic Act No. 10175, covers cybercrime offenses, and online libel is one recognized cybercrime issue. (Lawphil) In Disini v. Secretary of Justice, the Supreme Court upheld cyberlibel as constitutional as applied to the original author of a libelous online post, while limiting liability for mere receipt or reaction to such posts. (Supreme Court E-Library)

7. Make a simple timeline

Agencies handle complaints faster when the facts are organized. Use a table like this:

Date and time	What happened	Person/account involved	Evidence
Jan. 5, 9:13 a.m.	Collector texted threat of public posting	09xx xxx xxxx	Screenshot 1
Jan. 5, 10:40 a.m.	Collector messaged my employer	Messenger account “ABC Collections”	Screenshot from employer
Jan. 6, 7:00 a.m.	App accessed contacts and sent messages	App name	Screenshots from 3 contacts
Jan. 6, 11:20 p.m.	Collector called repeatedly after 10 p.m.	09xx xxx xxxx	Call log

This timeline should be factual. Avoid emotional language in the complaint body. Let the screenshots show the abuse.

What to Write in Your Complaint

A practical complaint does not need to sound complicated. It should be complete, organized, and specific.

Sample SEC complaint wording

Subject: Complaint for Unfair Debt Collection Practices Against [App Name / Company Name]

I am filing this complaint against [App Name / Company Name] for unfair debt collection practices. I obtained a loan on [date] in the amount of ₱[amount], but I received only ₱[amount received] after deductions. The due date was [date]. Beginning [date], collectors using the numbers/accounts listed below repeatedly harassed me and contacted people who were not guarantors or co-makers.

The collectors sent threats, used insulting language, and disclosed my alleged debt to my contacts. They also threatened to post my personal information online. I dispute the amount being demanded because [brief reason, if any].

Attached are screenshots, call logs, proof of payment, loan documents, and screenshots from contacts who received messages.

I respectfully request investigation for possible violations of SEC Memorandum Circular No. 18, Series of 2019, and other applicable SEC rules.

Sample NPC complaint wording

Subject: Complaint for Unauthorized Processing and Use of Personal Data by [App Name / Company Name]

I am filing this complaint because [App Name / Company Name] accessed and used my personal data and contact list for debt collection and harassment. The app or its collectors contacted people in my phone/social media contacts who were not guarantors and disclosed my alleged loan information to them.

Attached are screenshots of the messages sent to my contacts, app permissions, privacy notice or consent screen if available, loan documents, and statements from recipients.

I request investigation for possible violations of the Data Privacy Act of 2012, NPC issuances on online lending platforms, and related regulations.

Practical Timelines and Bottlenecks

Timelines vary depending on the completeness of your evidence, the number of complaints, whether the lender is identifiable, and whether cybercrime investigation is needed.

Step	Practical timeline	Common bottleneck
Saving evidence	Same day	Screenshots missing sender details, dates, or profile links
SEC iMessage ticket	Usually immediate ticket creation	Wrong category or incomplete attachments
SEC evaluation	Days to weeks, sometimes longer	App name differs from corporate name
NPC complaint filing	Depends on notarization and completeness	Complaint not in required format or missing proof of data misuse
NBI/PNP cybercrime complaint	Initial reporting may be quick; investigation can take weeks or months	Anonymous numbers, dummy accounts, deleted posts
Prosecutor or court case	Often months or longer	Need for affidavits, subpoenas, digital evidence preservation

A common mistake is filing only a short emotional complaint like “the app is harassing me.” Agencies need the who, what, when, where, how, and proof.

Common Mistakes That Weaken Online Lending Harassment Complaints

Deleting messages too early

Do not delete threats before saving them. Block only after preserving evidence.

Sending angry replies

Collectors sometimes provoke borrowers into sending insults or threats. Keep your replies short and neutral. A good response is:

“Please communicate only with me through this number/email. Do not contact my employer, relatives, friends, or references. I dispute the unlawful collection methods and am preserving evidence for complaint.”

Paying random collectors outside official channels

If you decide to pay, pay only through verified official channels and demand receipts. Avoid sending money to personal e-wallets of collectors unless the lender clearly confirms that the account is authorized.

Assuming references are guarantors

A reference is usually for identity verification. A guarantor is someone who separately agrees to answer for the debt. The 2026 advisory specifically says guarantors must give separate consent before being bound to an obligation.

Posting your own accusations online without care

It is understandable to feel angry, but public posts accusing named individuals or companies of crimes can create separate defamation or cyberlibel risks if not handled carefully. Use official complaint channels and factual reporting.

Filing only with the barangay

A barangay blotter can help document a physical disturbance or local harassment, but online lending app cases usually need SEC, NPC, and sometimes cybercrime authorities. A barangay cannot revoke an SEC Certificate of Authority, order data privacy compliance, or investigate cybercrime networks.

Special Situations

The app contacted my employer. What should I do?

Save the message received by your employer. Ask the employer or HR staff to send you a screenshot showing the sender, date, time, and full message. If the message falsely accuses you of a crime or exposes your private loan information, include it in both your SEC and NPC complaints.

If your employment is affected, keep written proof: HR notices, memos, emails, or witness statements. This may matter later for civil damages.

The collector threatened to have me arrested

Ask for the case number, court, prosecutor’s office, police station, and name of the officer. Fake arrest threats are common. A real criminal case has traceable details. If they send a fake warrant, police ID, court order, or NBI document, preserve it and report to cybercrime authorities.

The lender is not on the SEC recorded list

Still file. An unrecorded or unauthorized app may create additional issues. RA 9474 prohibits lending companies from doing business without SEC authority, and the SEC can investigate unauthorized lending activity. (Supreme Court E-Library)

I am an OFW or foreigner outside the Philippines

You may still prepare evidence and file online where the agency allows it. If a formal affidavit is needed for use in a Philippine proceeding, documents executed abroad may need notarization before a Philippine Embassy or Consulate, or notarization abroad followed by apostille if the country is part of the Apostille Convention. If the document is in a foreign language, a certified English translation may also be needed.

If the harassment is happening to your family in the Philippines, ask the affected family member to preserve screenshots from their own device and consider filing a local report as a direct recipient of the messages.

I really owe the money. Can I still report harassment?

Yes. Reporting harassment does not erase a valid debt, but a valid debt does not justify illegal collection methods. You can dispute abusive collection while also requesting a proper statement of account and paying through legitimate channels if the debt is correct.

The app deducted huge fees before releasing the loan

Include this in your SEC complaint. RA 3765 requires clear disclosure of finance charges and credit terms before the transaction. (Lawphil) Attach screenshots showing the approved loan amount, actual amount received, deductions, due date, and amount demanded.

Frequently Asked Questions

Can I report an online lending app even if I still owe money?

Yes. The complaint is about the collection method, data misuse, threats, or harassment. The debt issue and the harassment issue are separate. A borrower may owe a balance, but the lender must still follow SEC rules, privacy laws, and criminal laws.

Which agency should I report online lending harassment to first?

For abusive debt collection by an online lending app, start with the SEC. If the app accessed your contacts or disclosed your loan to others, also file with the National Privacy Commission. If there are threats, extortion, fake warrants, scams, identity theft, or dummy accounts, report to NBI Cybercrime Division, PNP Anti-Cybercrime Group, or DICT cyber channels.

Is it illegal for an online lending app to message my contacts?

It can be illegal or prohibited when the contacts are not guarantors or co-makers and the lender uses them for debt collection, pressure, or shaming. The 2026 DICT-NPC-SEC advisory says contacting persons on a borrower’s contact list other than guarantors is prohibited for debt collection.

Can a lending app post my name and photo online because I did not pay?

No. SEC rules prohibit disclosure or publication of borrowers’ names and other personal information in unfair collection situations, subject only to limited lawful exceptions. Public shaming can also raise data privacy, civil damages, and possible cybercrime issues depending on the facts.

Can I be arrested for not paying an online loan?

Not for non-payment alone. The Constitution prohibits imprisonment for debt. (Supreme Court E-Library) But if there are separate criminal allegations such as fraud, falsification, identity theft, or cybercrime, those are different issues and must be handled based on evidence and proper procedure.

What evidence is strongest in an online lending harassment complaint?

The strongest evidence usually includes screenshots showing the sender, date, time, and full message; call logs; screenshots from third parties who were contacted; loan documents; payment receipts; and proof of app permissions. A clear timeline also helps agencies understand the pattern of harassment.

Do I need a lawyer to file with the SEC or NPC?

A person can file complaints personally. The SEC iMessage system accepts public complaints and creates tickets for tracking. (Securities and Exchange Commission) The NPC provides a formal complaint process with a downloadable form, notarization, and submission options. (National Privacy Commission) For serious criminal threats, large damages, or court cases, professional legal help can make preparation and strategy clearer.

Should I uninstall the lending app?

Preserve evidence first. Take screenshots of the app name, loan details, messages, permissions, privacy notice, and terms. After saving evidence, revoke unnecessary permissions. Then decide whether uninstalling is safe. If the app is still needed to access loan records, capture those records before removing it.

Can my references be forced to pay my loan?

Not merely because you listed them as references. A guarantor must separately consent to be responsible for the loan. The 2026 advisory specifically says online lending platforms must distinguish character references from guarantors and that guarantors must expressly consent to assume responsibility in case of default.

What if the collector uses many different numbers?

List all numbers and accounts in your complaint. Attach call logs and screenshots. If the numbers send threats, phishing links, fake documents, or extortion demands, include the issue in a cybercrime report as well.

Key Takeaways

A valid debt does not allow an online lending app to threaten, shame, or harass you.
Report unfair collection practices by lending and financing companies to the SEC.
Report contact-list harvesting, unauthorized disclosure, and misuse of personal data to the National Privacy Commission.
Report threats, extortion, fake warrants, identity theft, scams, and cyberlibel issues to NBI Cybercrime Division, PNP Anti-Cybercrime Group, or DICT cyber channels.
Save screenshots, call logs, app permissions, loan documents, payment receipts, and messages received by your contacts before blocking or deleting anything.
References are not automatically guarantors.
You cannot be jailed for debt alone, but separate criminal acts are treated differently.
A clear timeline and complete evidence make your complaint much stronger.