The proliferation of Online Lending Applications (OLAs) in the Philippines has provided quick financial access to the unbanked sector. However, this convenience has been overshadowed by a surge in predatory practices, including debt shaming, unauthorized data access, and psychological harassment. Philippine law provides a robust framework to protect borrowers from these abuses through various regulatory issuances and criminal statutes.

1. The Regulatory Framework: SEC Memorandum Circular No. 18

The Securities and Exchange Commission (SEC) is the primary regulator of lending and financing companies. To combat abusive collection tactics, the SEC issued Memorandum Circular No. 18, Series of 2019 (Prohibition on Unfair Debt Collection Practices).

Under this circular, the following acts are strictly prohibited:

The Use or Threat of Violence: Any physical force or illegal means to harm the person, reputation, or property of the borrower.
Profane and Abusive Language: Using insults or obscene words to shame the borrower.
Disclosure of Information to Third Parties: Sharing the borrower’s debt status with anyone other than the borrower, their guarantor, or their spouse, except with explicit consent or by court order.
Contact List Harassment: Messaging or calling people in the borrower’s contact list who are not co-makers or guarantors.
False Representation: Pretending to be a lawyer, a court official, or a government agent to intimidate the borrower into paying.
Unreasonable Contact Hours: Contacting the borrower before 6:00 AM or after 10:00 PM, unless the debt is more than 60 days past due or the borrower has given express consent for such timing.

2. Data Privacy and Unauthorized Access

One of the most common violations by OLAs is "contact scraping"—accessing a borrower's phone directory, gallery, and social media accounts. This is a direct violation of Republic Act No. 10173, or the Data Privacy Act of 2012.

The National Privacy Commission (NPC) has clarified through NPC Circular No. 20-01 that:

OLAs cannot require access to contacts, photos, or files as a condition for a loan.
Processing personal data must be for a "declared, specified, and legitimate purpose."
Any form of "Debt Shaming" (posting a borrower’s delinquency on social media or informing their contacts) is a criminal offense under the Data Privacy Act, punishable by imprisonment and heavy fines.

3. Criminal Liability: Cybercrime and the Revised Penal Code

When harassment escalates to threats or public humiliation, the borrower can invoke the Revised Penal Code and Republic Act No. 10175 (Cybercrime Prevention Act of 2012).

Cyber-Libel and Slander

If an OLA representative posts the borrower’s face or name on social media labeling them a "thief" or "scammer," they may be charged with Cyber-Libel. Under the law, the penalty for cyber-libel is higher than traditional libel because of the use of information and communications technology.

Grave and Light Coercion

If a lender uses threats or violence to prevent a borrower from doing something lawful or to compel them to do something against their will (such as paying an illegal fee), they may be guilty of Coercion.

Extortion and Threats

Threatening to kill the borrower, harm their family, or "ruin their life" unless a payment is made constitutes Grave Threats. If the lender demands money beyond what is legally owed through intimidation, it may be classified as Extortion.

4. Interest Rate Caps and the Truth in Lending Act

The Bangko Sentral ng Pilipinas (BSP), through Circular No. 1133 (Series of 2021), imposed ceilings on interest rates and other fees for small-value loans offered by OLAs and financing companies:

Nominal Interest Rate: Capped at 6% per month (approximately 0.2% per day).
Effective Interest Rate (EIR): Capped at 15% per month (this includes the interest plus all other fees like processing and service fees).
Penalties for Late Payment: Capped at 1% per month on the outstanding amount.
Total Cost Cap: The total of all interest, fees, and charges cannot exceed 100% of the loan principal.

Failure to disclose these charges clearly is a violation of Republic Act No. 3765 (Truth in Lending Act).

5. Legal Remedies and Recourse

Borrowers facing harassment have several avenues for legal redress:

Agency	Type of Complaint
SEC Corporate Governance and Finance Dept.	Violations of MC 18 (Harassment), Unregistered OLAs, or Truth in Lending Act violations.
National Privacy Commission (NPC)	Unauthorized access to contacts/photos and public debt shaming.
PNP Anti-Cybercrime Group (ACG)	Identity theft, extortion, and grave threats made via digital platforms.
Bangko Sentral ng Pilipinas (BSP)	Violations regarding interest rate caps and predatory lending fees.

Steps for Victims:

Document Everything: Take screenshots of all threatening messages, call logs, and social media posts.
Do Not Delete the App Immediately: Forensic evidence of the app's permissions may be needed for an NPC or PNP investigation.
Cease Communication: Once a formal complaint is filed, refer the harasser to your legal counsel or the investigating agency.
Report to Platforms: Report the app to the Google Play Store or Apple App Store for violating their policies on predatory lending and harassment.