I. Introduction

The rise of online lending platforms in the Philippines has made borrowing faster and more accessible, but it has also created serious legal problems. Many individuals have reported unauthorized loan applications, identity misuse, excessive app permissions, public shaming, threats, harassment of family members and contacts, and aggressive collection tactics by online lending companies, lending apps, collection agents, or scammers pretending to be lenders.

An unauthorized online loan application may occur when a person’s name, phone number, government ID, selfie, bank account, e-wallet, or other personal information is used to apply for a loan without consent. Collection harassment may follow even when the person never borrowed money, already paid the loan, disputes the amount, or is being pressured through threats, humiliation, repeated calls, or messages sent to relatives, employers, friends, and social media contacts.

Philippine law provides several remedies. Depending on the facts, the affected person may pursue administrative complaints, criminal complaints, civil damages, data privacy remedies, complaints before regulators, and protective measures against harassment.

This article discusses the legal framework, rights of victims, available remedies, evidence to preserve, and practical steps in the Philippine context.

II. Common Situations Involving Unauthorized Online Loans

Unauthorized online loan cases usually fall into one or more of the following patterns:

Identity theft or impersonation Someone uses another person’s name, mobile number, identification card, selfie, or personal details to apply for a loan.
Loan app misuse of personal data A lending app obtains access to contacts, photos, messages, or other phone data and later uses that information to pressure the borrower or alleged borrower.
Collection from a non-borrower A person receives collection calls or messages even though they did not apply for or receive any loan.
Harassment of contacts The lender or collector contacts family members, friends, co-workers, employers, or social media contacts to shame or pressure the alleged borrower.
Threats and intimidation Messages may include threats of arrest, criminal charges, public posting, barangay reports, court cases, home visits, or harm.
Defamatory posts or messages The alleged borrower may be called a scammer, thief, criminal, or fraudster in group chats, social media, or messages to contacts.
Fake legal notices Some collectors send intimidating messages pretending to be from lawyers, courts, police, barangays, or government agencies.
Excessive interest and illegal charges Some online lenders impose unclear, unconscionable, or unauthorized charges, sometimes deducting fees upfront and demanding repayment far beyond the amount received.

Each situation may give rise to different legal remedies.

III. Relevant Philippine Laws and Rules

Several laws and regulations may apply to unauthorized online loan applications and collection harassment.

A. Data Privacy Act of 2012

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information and sensitive personal information. It applies to the collection, processing, storage, sharing, and use of personal data.

Online lending platforms typically process personal data such as names, addresses, mobile numbers, contacts, photos, government IDs, bank details, employment details, and device information. If such data is obtained or used without lawful basis, or if it is disclosed to third parties without consent or legal justification, this may violate the Data Privacy Act.

Possible violations include:

Unauthorized collection of personal data;
Unauthorized processing or sharing of personal data;
Accessing a borrower’s phone contacts without proper consent;
Using contacts to shame or pressure a borrower;
Disclosing loan information to third parties;
Posting personal information online;
Using personal data for purposes beyond those disclosed;
Failure to protect personal data from misuse or unauthorized access.

The National Privacy Commission is the main agency for complaints involving misuse of personal data.

B. Lending Company Regulation Act

The Lending Company Regulation Act of 2007, or Republic Act No. 9474, regulates lending companies. Lending companies must be registered and must comply with rules issued by the Securities and Exchange Commission.

Online lending companies and financing companies may be subject to SEC supervision. If they operate without authority, impose abusive practices, or engage in unfair collection methods, complaints may be filed with the SEC.

C. Financing Company Act

Some online lenders operate as financing companies. These entities may fall under the Financing Company Act, as amended, and related SEC rules. Like lending companies, they are subject to regulation and may be sanctioned for unfair, abusive, deceptive, or illegal practices.

D. SEC Rules on Unfair Debt Collection Practices

The Securities and Exchange Commission has issued rules and advisories against abusive collection practices by lending and financing companies. Prohibited or improper acts may include:

Use of threats or violence;
Use of obscene or insulting language;
Disclosure of borrower information to third parties;
False representation that non-payment is a criminal offense;
False threats of arrest or imprisonment;
Contacting persons in the borrower’s contact list who are not guarantors or co-makers;
Public shaming;
Misleading statements about legal action;
Use of fake names, fake agencies, or fake court documents;
Harassing calls or messages at unreasonable hours.

A borrower’s failure to pay a loan is generally a civil matter. It does not automatically make the borrower a criminal. Threats of imprisonment merely for inability to pay a debt may be misleading and abusive.

E. Cybercrime Prevention Act of 2012

The Cybercrime Prevention Act of 2012, or Republic Act No. 10175, may apply when harassment, threats, identity theft, libel, or fraud is committed through electronic means.

Possible cybercrime-related offenses include:

Computer-related identity theft, when someone fraudulently acquires, uses, or misuses another person’s identifying information online;
Cyber libel, when defamatory statements are made online or through electronic systems;
Illegal access, where data or systems are accessed without authority;
Computer-related fraud, where digital means are used to defraud another person;
Cyber threats or harassment, depending on the nature of the acts and applicable laws.

Complaints may be brought to law enforcement units handling cybercrime, such as the PNP Anti-Cybercrime Group or the NBI Cybercrime Division.

F. Revised Penal Code

The Revised Penal Code may also apply, depending on the conduct.

Possible offenses include:

Grave threats, if a collector threatens to commit a crime against the person, honor, or property of the victim;
Light threats or unjust vexation, for certain forms of intimidation or persistent harassment;
Slander or oral defamation, if defamatory statements are spoken;
Libel, if defamatory statements are written or published;
Estafa, if fraud is involved;
Falsification, if documents, IDs, signatures, or records are falsified;
Usurpation of authority, if a collector falsely pretends to be a public officer;
Coercion, if force, intimidation, or threats are used to compel payment or action.

Where the conduct is done online, the Cybercrime Prevention Act may increase penalties or provide a cybercrime framework.

G. Civil Code

The Civil Code of the Philippines provides remedies for damages caused by wrongful acts. A person who suffers injury due to harassment, defamation, invasion of privacy, misuse of identity, or abusive collection may claim damages.

Potential claims include:

Actual damages;
Moral damages;
Exemplary damages;
Attorney’s fees;
Injunction or other court relief, where appropriate.

Civil Code provisions on human relations may also apply, especially where a person willfully causes loss or injury contrary to morals, good customs, or public policy.

H. Consumer Protection Laws and BSP Rules

Some online lending or credit products may also involve consumer protection rules. Where banks, e-wallets, payment platforms, or financial institutions regulated by the Bangko Sentral ng Pilipinas are involved, complaints may also be brought through BSP consumer assistance channels.

This may be relevant when:

Loan proceeds were sent to an e-wallet or bank account;
The victim’s financial account was used without authority;
Unauthorized transactions occurred;
A payment platform failed to act on fraud reports;
A regulated financial institution was involved in the transaction.

IV. Is Non-Payment of a Loan a Criminal Offense?

As a general rule, failure to pay a debt is not a crime in the Philippines. Debt collection is usually a civil matter. A lender may file a civil action for collection of sum of money, subject to proof of the debt and compliance with law.

However, criminal liability may arise if there is fraud, falsification, identity theft, issuance of bouncing checks under applicable circumstances, or other criminal acts. But mere inability or refusal to pay a loan, by itself, does not automatically justify threats of arrest, imprisonment, police action, or public shaming.

Collectors who tell borrowers that they will be jailed simply because they failed to pay may be engaging in misleading, abusive, or illegal collection conduct.

V. Rights of a Person Accused of Taking an Online Loan

A person being pursued for an online loan has the right to:

Demand proof of the loan The lender should be able to show the loan agreement, application details, disbursement records, consent records, repayment schedule, and identity verification documents.
Dispute the loan If the person did not apply for the loan or did not receive the money, they may formally dispute liability.
Demand cessation of harassment The person may demand that the lender or collector stop threats, public shaming, repeated calls, and disclosure of personal information.
Demand correction or deletion of unlawfully processed data Under data privacy principles, a person may request correction, blocking, removal, or destruction of personal data that is inaccurate, unauthorized, or unlawfully processed.
Complain to regulators Complaints may be filed with the National Privacy Commission, SEC, BSP, NBI, PNP, and other relevant agencies.
Seek damages If the harassment caused emotional distress, reputational harm, loss of employment, business loss, or other injury, the victim may pursue civil claims.
Refuse to deal with abusive collectors A person may insist on written communication, proper identification, and lawful collection procedures.

VI. Unauthorized Online Loan Applications: Legal Issues

A. Identity Theft

If someone used another person’s identity to obtain a loan, this may constitute identity theft or fraud. The victim should treat the matter seriously, because the unauthorized loan may affect their reputation, credit standing, employment, or financial accounts.

Possible evidence includes:

Messages from the lender;
Loan app notifications;
Screenshots of alleged loan details;
Proof that the victim did not receive the loan proceeds;
Bank or e-wallet transaction history;
Proof of identity misuse;
Police or cybercrime report;
Affidavit of denial;
Copies of IDs that may have been compromised;
SIM registration details, where relevant;
Communications with the lender disputing the loan.

The victim may file complaints with law enforcement and regulators.

B. Unauthorized Use of Personal Information

If the lender processed personal data without valid consent or legal basis, the issue may fall under the Data Privacy Act. This is especially serious where the company accessed phone contacts or sent messages to third parties.

A lending app cannot freely use personal data just because it appears on a phone. Consent must be informed, specific, and legitimate. Even where a borrower gives consent to process certain data, the lender may not automatically use that consent as a license to harass, shame, or disclose private loan information to others.

C. Unauthorized Disbursement

Sometimes loan proceeds are sent to an account not owned by the victim. In such cases, the victim should request:

Date and time of disbursement;
Recipient account or wallet;
Transaction reference number;
Name of receiving account;
Loan agreement or application form;
IP address or device information, where available;
Copies of identity documents submitted;
Verification records.

If the money was not received by the alleged borrower, that fact should be clearly documented.

D. Forged or Fabricated Loan Agreements

Some loan applications may involve fabricated documents, forged signatures, fake selfies, or misused IDs. This may raise issues of falsification, fraud, identity theft, and unlawful data processing.

VII. Collection Harassment: What Conduct May Be Illegal?

Collection itself is not illegal. Lenders may lawfully ask borrowers to pay valid debts. What the law prohibits is abusive, deceptive, unfair, defamatory, threatening, or privacy-violating conduct.

The following acts may be actionable:

A. Threats of Arrest or Imprisonment

A collector who says, “You will be arrested today,” “Police are coming,” or “You will go to jail if you do not pay,” may be making misleading or threatening statements, especially if there is no lawful basis.

Debt collectors are not courts, prosecutors, police officers, or sheriffs. They cannot order arrest. They cannot imprison a person. They cannot declare someone criminally liable by text message.

B. Public Shaming

Posting a person’s photo, name, ID, address, employer, or loan status online may violate privacy rights and may amount to defamation, harassment, or unlawful processing of personal data.

Examples:

Posting “scammer,” “thief,” or “fraudster” on social media;
Sending defamatory messages to group chats;
Creating posters or edited images to shame the borrower;
Messaging the borrower’s employer to embarrass them;
Sending threats to family members.

C. Contacting Third Parties

Collectors may not freely contact a borrower’s entire phonebook. Contacting relatives, friends, co-workers, employers, or neighbors may be unlawful if the purpose is to shame, pressure, threaten, or disclose the debt.

There is a major difference between verifying contact information and broadcasting private debt information. Disclosure of loan details to third parties may violate privacy law and unfair collection rules.

D. Harassing Calls and Messages

Repeated calls, messages at unreasonable hours, insults, profanity, and intimidation may amount to harassment or unjust vexation. The number, timing, content, and pattern of communications matter.

E. False Legal Claims

Collectors sometimes claim that they are from a law office, police unit, barangay, court, or government agency. If false, this may create separate liability.

Fake legal documents, fake subpoenas, fake warrants, and fake court notices should be preserved as evidence.

F. Threats to Contact Employer

A threat to report a person to their employer may be unlawful if used to shame or coerce payment. If the collector discloses the alleged debt to the employer, this may also raise privacy and defamation issues.

G. Threats to Visit Home or Barangay

A lawful collection visit is different from intimidation. Threatening to embarrass someone in front of neighbors, barangay officials, or family members may be abusive.

Barangays do not collect private online loans for lending companies. A barangay may assist in mediation if a proper complaint is filed, but it cannot imprison a person for debt or force payment without due process.

VIII. Remedies Before the National Privacy Commission

The National Privacy Commission handles complaints involving violations of the Data Privacy Act.

A complaint may be appropriate when:

A lending app accessed or used contacts without proper authority;
The lender disclosed loan information to third parties;
Personal information was posted online;
The lender refused to correct or delete inaccurate data;
Personal data was used for harassment;
An unauthorized loan application used the victim’s personal information;
The company failed to protect personal data;
The lender processed personal information beyond what was necessary.

Possible relief may include orders to stop unlawful processing, remove posts, correct records, delete data, improve privacy practices, and other remedies within the NPC’s authority. Serious violations may also lead to penalties or referral for prosecution.

A complaint should include:

Name of the lending company or app;
Screenshots of messages;
Proof of disclosure to contacts;
Screenshots of social media posts;
Proof of unauthorized use of identity;
Copies of prior requests to stop processing or delete data;
Explanation of harm suffered;
Contact details of witnesses, if any.

IX. Remedies Before the Securities and Exchange Commission

The SEC regulates lending companies and financing companies. A complaint may be filed if the online lender or collector is engaged in unfair collection practices or is operating without proper authority.

A complaint may involve:

Harassment;
Public shaming;
Threats;
Contacting third parties;
Disclosure of borrower information;
Misleading legal threats;
Excessive charges;
Operating without SEC registration or certificate of authority;
Use of unregistered online lending apps;
Failure to disclose loan terms;
Abusive collection practices.

The SEC may investigate, issue warnings, suspend or revoke certificates of authority, impose penalties, or refer matters for further action.

Important evidence includes:

Name of app;
Name of company;
SEC registration details, if known;
Screenshots from app store pages;
Loan agreement;
Disclosure statement;
Messages and call logs;
Names or numbers of collectors;
Proof of payment;
Proof of harassment.

X. Remedies Before Law Enforcement

Victims may file complaints with:

PNP Anti-Cybercrime Group, for cyber harassment, identity theft, cyber libel, online threats, and fraud;
NBI Cybercrime Division, for cybercrime-related complaints;
Local police, for threats, harassment, or other criminal acts;
Prosecutor’s office, for preliminary investigation where criminal charges are pursued.

Possible criminal complaints may include:

Computer-related identity theft;
Cyber libel;
Grave threats;
Unjust vexation;
Coercion;
Slander or libel;
Estafa;
Falsification;
Use of fictitious name or false representation;
Other applicable offenses.

The proper charge depends on the exact facts and evidence.

XI. Civil Remedies

A victim may file a civil action for damages against the lender, collection agency, individual collector, or person who misused the identity.

Possible civil claims include:

A. Moral Damages

Moral damages may be claimed for mental anguish, serious anxiety, wounded feelings, social humiliation, or reputational harm caused by harassment, defamation, or privacy violations.

B. Actual Damages

Actual damages may include financial losses such as:

Lost employment opportunities;
Lost income;
Medical or psychological treatment costs;
Expenses for legal assistance;
Costs incurred to correct records;
Business losses caused by reputational harm.

Actual damages usually require proof, such as receipts, employment records, medical records, or financial documents.

C. Exemplary Damages

Exemplary damages may be awarded in certain cases to deter oppressive, malicious, or abusive conduct.

D. Attorney’s Fees and Litigation Costs

The court may award attorney’s fees in proper cases, especially where the victim was compelled to litigate due to unlawful conduct.

E. Injunction

In serious cases, a victim may seek court orders to stop continued harassment, publication, or misuse of personal information.

XII. Defamation and Cyber Libel

Debt collection becomes especially dangerous for collectors when they accuse someone of being a criminal, scammer, thief, or fraudster without lawful basis.

In the Philippines, defamatory statements may lead to liability for libel, cyber libel, slander, or damages. Cyber libel may apply when the defamatory statement is made through social media, messaging platforms, websites, or other online means.

Examples of potentially defamatory statements:

“This person is a scammer.”
“She is a thief.”
“He committed fraud.”
“Do not hire this person because he does not pay debts.”
“This person is a criminal.”
Publicly posting a photo with accusations of fraud or dishonesty.

Truth, fair comment, privilege, and absence of malice may be raised as defenses, but collectors who broadcast accusations to pressure payment expose themselves and their principals to legal risk.

XIII. Data Privacy Rights of Borrowers and Non-Borrowers

Under data privacy principles, a person has rights over their personal information. These may include:

Right to be informed The person should know what data is collected, why it is collected, how it will be used, and with whom it will be shared.
Right to object A person may object to processing in certain circumstances, especially where processing is unauthorized or excessive.
Right to access A person may request information about what personal data is being processed.
Right to correction A person may request correction of inaccurate, outdated, false, or misleading data.
Right to erasure or blocking A person may request deletion or blocking of unlawfully obtained or unlawfully processed data.
Right to damages A person who suffers injury due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data may claim damages.

For unauthorized loans, these rights are important because the alleged borrower may need to demand proof, correction, deletion, and cessation of unlawful processing.

XIV. What to Do Immediately After Receiving Harassing Collection Messages

A person who receives collection harassment should act calmly and preserve evidence.

A. Do Not Delete Messages

Screenshots should be taken immediately. Save:

Text messages;
Chat messages;
Social media messages;
Emails;
Call logs;
Voice recordings, where lawfully obtained;
Screenshots of posts;
Names and numbers used by collectors;
App name and company name;
Links to posts or profiles;
Payment demands;
Threats;
Messages sent to relatives or employers.

B. Ask Contacts to Preserve Evidence

If the collector contacted friends, family, co-workers, or employers, ask them to screenshot the messages, including:

Sender number or profile;
Date and time;
Full message;
Any photo or attachment;
Group chat details, if applicable.

C. Send a Written Dispute or Demand

The victim may send a written message to the lender or collector stating that:

The loan is disputed;
The person did not authorize the loan, if applicable;
The person demands proof of the loan;
The person demands that harassment stop;
The person demands that third-party disclosure stop;
The person demands deletion or correction of unlawfully processed data;
Further violations will be reported to regulators and law enforcement.

The message should be firm, factual, and non-threatening.

D. Do Not Admit Liability Unless the Debt Is Valid

A person who did not borrow should avoid saying, “I will pay,” “I owe this,” or “Give me more time,” because such statements may be used as implied admissions. Instead, the person may say the loan is disputed and demand proof.

E. Report the App or Account

Victims may report the lending app to the app store, the SEC, and the NPC. Social media accounts used for shaming or threats should also be reported to the platform.

F. Secure Accounts

If identity theft is suspected:

Change passwords;
Enable two-factor authentication;
Check bank and e-wallet transactions;
Report unauthorized transactions;
Contact the telco if SIM misuse is suspected;
Monitor email and social media accounts;
Consider filing a police or cybercrime report.

XV. Evidence Checklist

A strong complaint should include organized evidence. The following checklist is useful:

Personal statement or affidavit
- Explain what happened;
- State whether the loan was unauthorized;
- Identify dates, times, names, numbers, and platforms.
Screenshots
- Harassing messages;
- Threats;
- Public posts;
- Messages sent to contacts;
- Loan app details;
- Account profiles of collectors.
Call logs
- Repeated calls;
- Unknown numbers;
- Times and dates.
Witness statements
- From relatives, friends, co-workers, or employers contacted by the collector.
Loan documents
- Loan agreement;
- Disclosure statement;
- Payment schedule;
- App screenshots;
- Proof of amount allegedly borrowed;
- Proof of actual amount received, if any.
Payment records
- GCash, Maya, bank transfers, receipts, reference numbers.
Proof of non-receipt
- Bank or e-wallet statements showing no loan proceeds received.
Proof of identity theft
- Compromised ID;
- Unauthorized use of selfie;
- Unrecognized device, account, or phone number.
Company details
- App name;
- Corporate name;
- SEC registration number, if available;
- Website;
- Email address;
- Contact numbers.
Prior communications

Demand letters;
Dispute messages;
Requests for deletion or correction;
Replies from lender or collector.

XVI. Demand Letter Against a Lender or Collector

A demand letter may be sent before filing complaints. It should be concise and evidence-based.

A typical demand letter may include:

Identification of the complainant;
Statement that the loan is disputed or unauthorized;
Description of harassment or unlawful disclosure;
Demand for proof of the alleged loan;
Demand to stop contacting third parties;
Demand to stop threats and defamatory statements;
Demand to delete or correct unlawfully processed personal data;
Demand to preserve records;
Warning that complaints will be filed with the NPC, SEC, PNP, NBI, or courts.

The tone should be professional. Avoid insults or threats.

XVII. Sample Demand Message

I dispute the alleged loan being collected from me. I demand that you provide proof of the loan application, loan agreement, identity verification records, disbursement records, account details where the proceeds were sent, and the legal basis for processing my personal information.

You are directed to stop contacting my relatives, friends, employer, co-workers, and other third parties regarding this alleged debt. Any disclosure of my personal information or alleged loan details to unauthorized persons is objected to and may constitute a violation of the Data Privacy Act and applicable rules on unfair debt collection practices.

You are also directed to stop sending threats, defamatory statements, false legal claims, and harassing messages. Please communicate only through proper written channels and identify the legal name of the lending or financing company, its SEC registration details, and the authority of the person collecting.

I reserve all rights to file complaints with the National Privacy Commission, Securities and Exchange Commission, law enforcement agencies, and the courts.

XVIII. Where to File Complaints

A. National Privacy Commission

File with the NPC for:

Unauthorized use of personal data;
Contact list harvesting;
Disclosure to third parties;
Public posting of personal information;
Refusal to delete or correct data;
Data processing without consent or legal basis;
Identity misuse involving personal information.

B. Securities and Exchange Commission

File with the SEC for:

Abusive collection practices;
Unregistered lending or financing operations;
Harassment by online lending apps;
False or misleading collection claims;
Excessive or unclear charges;
Violation of SEC rules.

C. PNP Anti-Cybercrime Group or NBI Cybercrime Division

File with cybercrime authorities for:

Identity theft;
Cyber libel;
Online threats;
Online harassment;
Fraud;
Fake legal notices;
Unauthorized use of accounts or personal data online.

D. Prosecutor’s Office

A criminal complaint may be filed with the Office of the City or Provincial Prosecutor, usually supported by affidavits and evidence.

E. Courts

Civil cases for damages, injunction, or collection disputes may be brought before the proper court, depending on the amount, location, and nature of the claim.

F. Barangay

Barangay conciliation may apply to disputes between individuals residing in the same city or municipality, subject to exceptions. However, many online lending disputes involve corporations, cybercrime issues, or parties in different locations, so barangay proceedings may not always be required.

XIX. Special Issues Involving Contacts and Co-Makers

Collectors often claim that a person in the borrower’s contact list is a “reference,” “guarantor,” or “co-maker.” These are not the same.

A. Contact Person

A contact person is usually someone whose name or number was listed for verification. Being a contact person does not automatically make someone liable for the debt.

B. Reference

A reference may confirm identity or contact details. A reference does not automatically owe the debt.

C. Guarantor

A guarantor may become liable only if they validly agreed to guarantee the debt. A collector must prove the guaranty.

D. Co-Maker

A co-maker is directly liable only if they signed or validly agreed to be a co-maker. A person cannot be made a co-maker merely because their phone number appears in someone’s contacts.

A collector who pressures a mere contact person to pay may be engaging in improper collection conduct.

XX. Online Lending Apps and Phone Permissions

Many online lending apps request broad phone permissions. Some ask for access to contacts, photos, storage, camera, location, or device information.

A key legal question is whether the collection and use of such data is:

Necessary;
Proportionate;
Properly disclosed;
Based on valid consent or another lawful basis;
Used only for legitimate purposes;
Protected against unauthorized disclosure;
Not used for harassment or public shaming.

Even where a borrower grants app permissions, the lender may not use personal data abusively. Consent to install an app is not consent to humiliation, defamation, threats, or disclosure of private loan information to unrelated third parties.

XXI. What If the Borrower Actually Owes the Loan?

Even if the borrower truly owes money, the lender must still collect lawfully. A valid debt does not authorize harassment, threats, privacy violations, or defamation.

The borrower may:

Ask for a statement of account;
Request a breakdown of principal, interest, penalties, and charges;
Verify whether the lender is registered;
Negotiate payment terms;
Pay only through official channels;
Demand receipts;
Object to unlawful collection practices;
File complaints for harassment or data privacy violations.

A borrower should not ignore legitimate obligations, but they also do not lose their legal rights merely because they owe money.

XXII. What If the Loan Is Unauthorized but the Lender Insists It Is Valid?

The alleged borrower should demand specific proof.

The lender should be asked to produce:

Loan application form;
Date and time of application;
Device used;
IP address or digital logs, if available;
ID submitted;
Selfie or verification image;
Mobile number used;
SIM or OTP verification records;
Bank or e-wallet account where proceeds were disbursed;
Loan agreement;
Disclosure statement;
Consent records;
Payment history;
Name of collection agency.

If the lender cannot show credible proof, the alleged borrower has stronger grounds to dispute liability and file complaints.

XXIII. What If the Collector Uses Different Numbers?

Collectors may use multiple numbers or accounts. Preserve all evidence. Do not assume each number is unrelated. Patterns matter.

Useful details include:

Similar wording;
Same loan app name;
Same account number for payment;
Same threats;
Same borrower information;
Same deadline demands;
Same collector aliases.

This helps connect the harassment to the lender or collection agency.

XXIV. Liability of Lending Companies for Collectors

A lending company may be held responsible for the conduct of its collection agents, employees, service providers, or third-party collection agencies, depending on the facts. A company cannot easily escape liability by saying the harassment was done by an outsourced collector if the collector was acting on its behalf.

The company may also be liable for failing to supervise collectors, failing to protect borrower data, or using collection agencies that engage in unlawful practices.

XXV. Fake Online Lenders and Scams

Some harassment does not come from legitimate lending companies. Scammers may use stolen personal data to demand payment for fake loans.

Warning signs include:

Refusal to provide company name;
No SEC registration details;
Payment requested to personal accounts;
Threats of arrest within hours;
Fake court or police documents;
Use of many numbers;
No loan agreement;
No proof of disbursement;
Demands for “processing fees” before release;
Claims that a person owes money despite no loan proceeds received.

In scam cases, law enforcement and cybercrime reporting are especially important.

XXVI. Protection Against Reputational Harm

Victims should act quickly when defamatory or humiliating posts are made.

Steps include:

Screenshot the post, including URL, date, time, poster profile, comments, and shares.
Ask witnesses to preserve screenshots.
Report the post to the platform.
Send a takedown demand to the poster or company.
File complaints with NPC, SEC, and cybercrime authorities.
Consider civil or criminal action for defamation or cyber libel.

Delay may make evidence harder to preserve, especially if posts are deleted.

XXVII. Dealing With Employers and Family Members

If collectors contacted an employer, HR office, supervisor, or family member, the victim may send a calm clarification.

The clarification should state:

The matter is disputed;
The person is addressing it through legal channels;
The collector had no authority to disclose private information;
The recipient should preserve the message as evidence;
The recipient should not engage with the collector.

This helps reduce reputational harm and strengthens the evidence trail.

XXVIII. Loan Collection and Small Claims

If a lender has a valid claim, it may bring a civil action for collection. Some debt claims may fall under small claims procedure, depending on the amount and nature of the case.

A borrower or alleged borrower who receives legitimate court papers should not ignore them. Court papers are different from text threats. Real court documents usually come through proper service and contain case details, court branch, docket number, and instructions.

Fake threats through SMS or chat should be preserved and reported.

XXIX. Distinguishing Real Legal Action from Harassment

A real legal process usually involves:

A formal complaint filed in court or prosecutor’s office;
Docket or case number;
Official notices;
Proper service;
Identifiable court or government office;
Opportunity to respond.

Harassment often involves:

Threats of immediate arrest;
No case number;
No official documents;
Payment deadline within minutes or hours;
Insults and profanity;
Threats to shame the person;
Messages from random numbers;
Fake “warrants” or “subpoenas” sent by chat;
Refusal to identify the company.

A person should verify any alleged legal notice directly with the named court, prosecutor’s office, police station, or government agency.

XXX. Remedies for Victims Whose IDs Were Used

If a government ID was used in an unauthorized loan application, the victim should:

File a police or cybercrime report;
Notify the issuing agency if appropriate;
Monitor financial accounts;
Change passwords and secure email accounts;
Inform banks and e-wallet providers;
File a complaint with the lender demanding records;
Request correction or deletion of unauthorized data;
Consider executing an affidavit of identity theft or unauthorized use.

The affidavit should state that the person did not apply for the loan, did not authorize anyone to use the ID, and did not receive the proceeds.

XXXI. Possible Defenses of Lenders and Collectors

Lenders may argue that:

The borrower consented to data processing;
The borrower agreed to terms and conditions;
The borrower provided contacts voluntarily;
The debt is valid;
The messages came from unauthorized third parties;
The collection agency acted outside instructions;
Communications were limited to lawful collection.

These defenses are not automatically conclusive. Consent must still be lawful, specific, informed, and not excessive. A valid loan does not justify unlawful collection. Companies may still be accountable for agents acting on their behalf.

XXXII. Practical Strategy for Victims

A practical approach is:

Preserve evidence immediately.
Determine whether the loan is valid, disputed, or unauthorized.
Send a written demand for proof and cessation of harassment.
Block abusive numbers only after preserving evidence.
Warn contacts not to engage and to preserve screenshots.
File with the NPC for privacy violations.
File with the SEC for abusive lending or collection practices.
File with PNP/NBI for identity theft, cyber libel, threats, or fraud.
Consider civil damages if reputational or emotional harm is serious.
Consult counsel for severe, repeated, or high-value cases.

XXXIII. Practical Strategy for Borrowers Who Owe but Are Being Harassed

A borrower with a real debt should:

Request a full statement of account;
Pay only to official company channels;
Avoid paying to personal accounts unless verified;
Demand official receipts;
Negotiate in writing;
Keep proof of all payments;
Do not tolerate threats or public shaming;
File complaints for unlawful collection methods;
Avoid borrowing from multiple apps to repay old loans;
Check whether charges are lawful and properly disclosed.

The fact of debt does not remove the borrower’s rights.

XXXIV. Practical Strategy for Non-Borrowers Being Harassed

A non-borrower should:

State clearly that they are not the borrower, guarantor, or co-maker;
Demand that contact stop;
Ask how their number was obtained;
Demand deletion of their personal data;
Screenshot all messages;
Report the lender to NPC and SEC;
Block the number after preserving evidence;
Avoid paying someone else’s debt unless legally obligated.

A contact person is not automatically liable.

XXXV. Remedies Against App Stores and Platforms

Victims may also report abusive lending apps to the platform where the app is distributed. Reports may include:

Harassment;
Privacy abuse;
Contact scraping;
Threats;
Misleading financial services;
Fraud;
Impersonation;
Fake reviews;
Unauthorized use of personal data.

Social media accounts used for shaming can also be reported for harassment, bullying, doxxing, impersonation, or privacy violations.

Platform reporting does not replace legal remedies, but it may help stop ongoing harm.

XXXVI. Importance of Written Communication

Victims should keep communication in writing whenever possible. Written records are easier to preserve and present as evidence.

Phone calls are harder to prove unless legally and properly documented. If a collector calls, the person may respond by saying:

“Please send your claim in writing.”
“Please identify your company and authority to collect.”
“I dispute this debt.”
“Do not contact third parties.”
“Do not disclose my personal information.”

Avoid emotional arguments, insults, or threats.

XXXVII. Limitation: Do Not Fabricate Evidence or Make False Complaints

A victim should be truthful. Fabricating screenshots, denying a valid debt falsely, or making false accusations can create legal exposure. The better approach is to dispute what is genuinely disputed and complain about what is genuinely unlawful.

A borrower may owe money and still have a valid harassment complaint. A non-borrower may have no debt and stronger claims for identity theft, privacy violation, and harassment.

XXXVIII. Preventive Measures

To reduce risk:

Avoid installing suspicious lending apps;
Review app permissions before installation;
Do not upload IDs to unverified platforms;
Do not allow unnecessary contact access;
Borrow only from registered and reputable lenders;
Read loan terms before accepting;
Keep copies of loan agreements and disclosures;
Use strong passwords and two-factor authentication;
Do not share OTPs;
Secure SIM cards and e-wallets;
Monitor bank and e-wallet activity;
Avoid posting IDs or personal documents online.

XXXIX. Legal Remedies Summary

Problem	Possible Remedy
Unauthorized loan in your name	Dispute with lender, file cybercrime complaint, file NPC complaint, seek correction/deletion
Use of your ID without consent	Cybercrime report, police/NBI complaint, NPC complaint
Harassing calls and threats	SEC complaint, police complaint, possible criminal complaint
Contacting family/friends/employer	NPC complaint, SEC complaint, civil damages
Public shaming online	Cyber libel complaint, NPC complaint, takedown request, civil damages
Fake arrest or court threats	SEC complaint, police/NBI complaint
Unregistered online lender	SEC complaint
Excessive or unclear charges	SEC complaint, dispute charges, court defense if sued
Messages to non-borrower contacts	Demand deletion, NPC complaint, SEC complaint
Fake loan scam	Cybercrime complaint, report accounts, secure financial accounts

XL. Conclusion

Unauthorized online loan applications and collection harassment are not merely private inconveniences. They may involve identity theft, privacy violations, unfair debt collection, cybercrime, defamation, civil wrongs, and regulatory breaches.

Philippine law allows victims to demand proof, dispute unauthorized loans, stop unlawful collection practices, seek deletion or correction of personal data, complain to the National Privacy Commission and the Securities and Exchange Commission, report cybercrime and threats to law enforcement, and pursue damages in court.

Debt collection must be lawful. A lender may demand payment of a valid debt, but it may not threaten, shame, deceive, defame, or misuse personal information. A person who never borrowed, never consented, or never received the loan has even stronger grounds to challenge the claim and seek protection.

This article is general legal information and not a substitute for advice from a Philippine lawyer who can review the documents, messages, evidence, and facts of a specific case.