If you have been receiving threatening messages, repeated calls at odd hours, or social media posts shaming you and your family from a lending app, or if you noticed unexpected deductions from your bank account, GCash, Maya, or other e-wallet after borrowing through a mobile lending platform in the Philippines, you are facing a situation that affects thousands of Filipinos every year. Many online lending apps use aggressive and often illegal tactics to collect payments. Philippine law gives you clear rights and practical remedies against threats, harassment, public shaming, misuse of your personal data, and unauthorized charges. This article explains exactly what the law prohibits, which government agencies can help, and the step-by-step actions you can take right now to protect yourself and seek accountability.

Understanding the Problem: Threats, Harassment, and Unauthorized Charges

Lending apps often require borrowers to grant broad phone permissions, including access to contacts, photos, and location. Some then use this data to pressure repayment by calling or messaging relatives, employers, or friends, or by posting edited photos and debt details on social media or group chats. Others send threats of arrest, lawsuits, or harm, or make repeated calls and messages that feel designed to wear you down.

Unauthorized charges usually appear as hidden fees, inflated penalties, or direct deductions from linked accounts that go beyond what you clearly agreed to in the loan terms. These practices cross legal lines even when you genuinely owe money. A legitimate debt remains a civil obligation that can be collected through proper channels such as demand letters or court cases, but never through threats, humiliation, or secret access to your data and money.

Legal Protections Under Philippine Law

Several laws directly address these issues and give you enforceable rights.

Revised Penal Code and the Cybercrime Prevention Act

The Revised Penal Code makes certain collection tactics criminal. Article 282 punishes grave threats—threatening to harm your person, honor, or property, or that of your family, to force payment. Article 287 covers unjust vexation, which includes any act that annoys, irritates, or vexes you without legal justification, such as relentless unwanted calls and messages. When these acts happen online or through apps, the Cybercrime Prevention Act of 2012 (Republic Act No. 10175) applies additional penalties for online threats, computer-related fraud, or data interference. Public shaming that falsely accuses you of a crime or serious misconduct can also support a cyber libel claim under the same law.

Data Privacy Act of 2012 (Republic Act No. 10173)

This law requires any company handling your personal information to follow principles of transparency, legitimate purpose, and proportionality. Lending apps cannot freely share your debt details with your contacts or the public, nor use your data in ways that cause you harm. The National Privacy Commission (NPC) has investigated and ordered takedowns of multiple apps for exactly these violations—harassment through contact scraping and public disclosure of personal debt information. You have the right to demand that they stop processing your data and delete it.

SEC Memorandum Circular No. 18, Series of 2019 – Prohibition on Unfair Debt Collection Practices

This is one of the most direct protections for borrowers. Issued by the Securities and Exchange Commission, it applies to all financing companies and lending companies under its supervision. It explicitly prohibits:

Threats of violence, arrest, or legal action that the collector has no authority to carry out
Use of profane, insulting, or abusive language
Contacting third parties (family, friends, employers) who are not co-makers or guarantors, except to locate you under strict limits
Disclosing or publicizing your debt to third parties or on social media
False representations, such as pretending to be from a court, police, or government agency
Any other unfair, deceptive, or abusive collection method

Violations can lead to fines of up to one million pesos, suspension or revocation of the company’s authority to operate, and referral for criminal prosecution. Even unregistered apps can be reported; operating without SEC registration already violates the Lending Company Regulation Act of 2007 (Republic Act No. 9474).

Civil Code Provisions on Abuse of Rights and Damages

Articles 19, 20, and 21 of the Civil Code require every person to act with justice, honesty, and good faith. When a lending app causes you damage through bad-faith collection tactics or privacy violations, you can sue for moral damages (emotional suffering and humiliation), exemplary damages (to punish and deter), actual damages if you lost money or opportunities, and attorney’s fees. Courts have awarded these in cases involving abusive debt collection.

No one can be jailed solely for unpaid civil debt. Threats of imprisonment are almost always empty scare tactics and can themselves become the basis for criminal or civil action against the app or its agents.

Step-by-Step Practical Guide to Protecting Yourself and Seeking Remedies

Document everything immediately and thoroughly.
Take clear, unedited screenshots of every message, call log entry, social media post, and transaction showing unauthorized charges. Include dates, times, phone numbers or usernames, and full context. Record the screen while scrolling if needed. Back up your phone to the cloud and a computer. Note any third parties who received messages and ask them for their own screenshots or statements. Keep the original loan agreement, terms and conditions, and records of any permissions you granted the app. Strong documentation is the foundation of every successful complaint.
Stop engaging with the collectors.
Do not reply to threats or argue. Block numbers and accounts only after you have preserved the evidence. Continuing the conversation often gives them more material and increases your stress.
Check whether the lender is properly registered.
Visit the Securities and Exchange Commission website and search the list of recorded online lending platforms. If the app or company does not appear, or if it is on any warning list, note this in your complaints—it strengthens your position.
Send a Data Subject Request if your personal data was misused.
Email or message the app’s Data Protection Officer (many list this in their privacy policy or app settings) demanding that they immediately stop processing and contacting you and your contacts, delete your data, and confirm in writing within a reasonable time (usually 15–30 days). Keep proof of this request. If they ignore it or continue, proceed to the NPC.
File complaints with the appropriate government agencies.
You can and should file with more than one agency because they address different violations.
- File with the SEC for unfair debt collection practices under Memorandum Circular No. 18. Download the complaint form from the SEC website, attach your evidence and a valid government ID, and submit it online or in person.
- File with the National Privacy Commission for data privacy violations. Send a detailed complaint to complaints@privacy.gov.ph or use their online system. Include a sworn statement describing what happened and attach evidence. The NPC can order the app to stop, delete data, and impose penalties; it has ordered immediate takedowns in serious cases.
- If bank or e-wallet deductions are involved, first dispute the transactions directly with your bank, GCash, Maya, or other provider through their app or customer service (most have strict time limits, often 7 to 60 days). If unresolved, escalate to the Bangko Sentral ng Pilipinas Consumer Affairs unit.
- For criminal threats, harassment, or online offenses, go to your nearest police station for a blotter entry or directly to the PNP Anti-Cybercrime Group. They can help you prepare a complaint-affidavit for filing with the Office of the City or Provincial Prosecutor.
Consider a civil case for damages and injunctive relief.
A lawyer can help you file a complaint in the appropriate trial court (Municipal Trial Court for smaller amounts or Regional Trial Court) seeking moral and exemplary damages plus an order stopping the harassment and any public postings. If the amount claimed is within the small claims limit (currently up to one million pesos), the process is simpler and faster, and you may not need a lawyer for every hearing. If the lender later sues you for the debt, you can raise your claims as a counterclaim in the same case.
Follow up and keep records.
Agencies assign docket numbers. Keep copies of everything you submit and all responses. Persistent but polite follow-up helps move cases forward.

Common Pitfalls, Challenges, and Special Situations

Many people hesitate to report because of shame or fear that complaining will make things worse. In reality, agencies treat these complaints seriously and confidentiality rules protect your information in most processes. Deleting the app or messages before documenting them destroys valuable evidence. Paying under extreme pressure does not always stop the harassment and may weaken your position if you later want to challenge hidden or excessive charges.

Unregistered or short-lived apps can be harder to pursue civilly because there may be no clear company to sue, but regulatory complaints to the SEC and NPC, plus criminal reports, still work and often lead to takedowns or operator investigations.

If family members or friends were also contacted or shamed, they have their own separate rights to file complaints for privacy violations and unjust vexation.

For overseas Filipino workers and foreigners: You can file most complaints by email or online portals from abroad. For formal sworn statements needed by prosecutors or courts, have the document notarized before a Philippine consul or authorized notary and apostille it (the Philippines is part of the Apostille Convention). Philippine courts generally have jurisdiction when the lending app targeted people in the Philippines or the harm occurred here. A Philippine lawyer can represent you through a Special Power of Attorney. Enforcement of any monetary judgment abroad can be more complicated, so prioritize stopping the harassment through Philippine regulators and law enforcement first.

Act quickly on unauthorized financial transactions—delay reduces the chance of easy reversal by your bank or e-wallet provider.

Where to File Complaints, Required Documents, and Typical Timelines

Securities and Exchange Commission (SEC)
Best for: Unfair collection practices by lending or financing companies.
How: Download form from sec.gov.ph; email or submit with evidence and ID.
Key documents: Complaint form, screenshots, loan records, valid ID.
Timeline: Initial review within weeks; full investigation and possible orders in one to several months.

National Privacy Commission (NPC)
Best for: Misuse of personal data, contact scraping, public shaming.
How: Email complaints@privacy.gov.ph or file at their PICC office.
Key documents: Detailed sworn complaint, evidence of data misuse, ID.
Timeline: Swift action possible on takedown orders; full cases take months.

PNP Anti-Cybercrime Group or local police, then Prosecutor’s Office
Best for: Criminal threats, unjust vexation, cyber offenses.
How: Police blotter first, then complaint-affidavit to prosecutor.
Key documents: Sworn complaint-affidavit (notarized), evidence, ID.
Timeline: Blotter immediate; preliminary investigation often one to three months or longer.

Bangko Sentral ng Pilipinas (BSP)
Best for: Unauthorized deductions involving banks or e-money issuers.
How: Through their consumer assistance channels or email.
Key documents: Transaction records, communications with provider.
Timeline: Faster for transaction disputes under BSP timelines.

Court civil cases vary: small claims move faster (several months) while regular cases can take a year or more. Filing fees are low or fixed for small claims; regular cases scale with the amount claimed. Notarization for affidavits usually costs a few hundred pesos.

Frequently Asked Questions

How do I stop a lending app from harassing me and contacting my family?
Document everything, send a Data Subject Request to stop processing your data, then file complaints with the SEC (for unfair collection under Memorandum Circular No. 18) and the National Privacy Commission (for privacy violations). These agencies have the power to order the app to cease contact and can impose penalties or takedowns.

Can lending apps legally contact my friends, relatives, or employer about my debt?
Generally no. SEC Memorandum Circular No. 18 strictly limits third-party contact, and the Data Privacy Act prohibits using your contacts to harass or shame you. This is one of the most common and actionable violations.

What should I do about unauthorized deductions from my bank account or e-wallet?
Contact your bank or e-wallet provider immediately through their dispute or complaint channel and request reversal. Keep records. If they do not resolve it satisfactorily, escalate to the Bangko Sentral ng Pilipinas. Act within the provider’s deadline, which is often short.

Is it illegal for a lending app to post my debt or edited photos on social media or group chats?
Yes. This violates the Data Privacy Act and SEC rules against publicizing debts and unfair collection. It can also support criminal complaints for unjust vexation or cyber-related offenses. Report it right away to the NPC and PNP Anti-Cybercrime Group.

Do I still owe the loan if the app harassed me or charged unauthorized fees?
You may still owe the legitimate principal plus reasonable interest, but you can challenge excessive or hidden charges and seek damages for illegal collection practices. Many courts reduce unconscionable interest rates. File your complaints separately from any payment negotiations.

Can I file complaints if the lending app is not registered with the SEC?
Yes. Report it to the SEC anyway—they act against illegal operators. Also file with the NPC for privacy issues and with police for any criminal acts. Unregistered lending itself violates Republic Act No. 9474.

As an OFW abroad, can I still file complaints against a Philippine lending app?
Yes. Use email and online portals for the SEC, NPC, and BSP. For formal affidavits, have them notarized before a Philippine consul and apostilled. You can authorize a Philippine lawyer or trusted representative through a Special Power of Attorney.

What is the best evidence to support my complaints?
Clear, dated, unedited screenshots showing the sender, full message content, timestamps, and context. Call logs, bank or e-wallet statements for unauthorized charges, and statements from affected third parties are also very helpful. Preserve everything before deleting apps or messages.

Will filing complaints automatically stop the harassment?
Often it leads to quick orders to cease, especially from the SEC and NPC. Criminal reports add further pressure. Continue documenting any continued contact after you file—it shows a pattern of violation.

Do I need a lawyer to start the process?
No for initial complaints to the SEC, NPC, BSP, or police. A lawyer becomes helpful for civil damages cases, court injunctions, or when you need to defend against a collection suit. Free or low-cost legal aid is available through the Public Attorney’s Office if you qualify, or through some Integrated Bar of the Philippines chapters and NGOs assisting lending app victims.

Key Takeaways

Threats, repeated harassment, public shaming, and misuse of your contacts or data by lending apps violate the Revised Penal Code, the Cybercrime Prevention Act, the Data Privacy Act, and especially SEC Memorandum Circular No. 18, Series of 2019.
You have the right to report to multiple agencies at once: SEC for unfair collection, NPC for privacy violations, PNP or NBI for criminal acts, and BSP for unauthorized financial transactions.
Document every incident thoroughly with screenshots and records before blocking or deleting anything—this evidence drives successful complaints and court cases.
A legitimate debt does not give anyone the right to harass or shame you; illegal collection practices can support claims for damages even while you address the underlying obligation.
Act quickly on unauthorized bank or e-wallet charges—dispute them directly with your provider first, within their deadlines, then escalate if needed.
OFWs and foreigners can file most complaints remotely and use apostilled documents or authorized representatives for formal proceedings in the Philippines.
Free or low-cost help exists through government agencies and legal aid offices; you do not have to face this alone or pay expensive lawyers to begin protecting your rights.
Many borrowers in your exact situation have successfully stopped the abuse, obtained orders against the apps, and in some cases recovered damages by following these steps and persisting with the proper agencies.

The sooner you start documenting and reporting, the stronger your position becomes. Philippine law is on your side when these apps cross the line.