In the Philippine fintech landscape, Online Lending Applications (OLAs) have provided quick financial relief to millions. However, a dark side persists: predatory collection practices. A particularly alarming trend involves borrowers who, despite having fully settled their obligations, continue to face relentless harassment, threats, and "data shaming" from these apps or their third-party collection agencies.

When debt is fully paid, the legal obligation is extinguished. Continued demands and harassment transition from aggressive collection to outright criminal behavior.

1. The Legal Framework: What Laws Are Violated?

Under Philippine law, fully paying your debt completely dissolves the creditor-debtor relationship. Any subsequent harassment, threat, or unauthorized use of personal data violates several special laws and provisions of the Revised Penal Code (RPC).

SEC Memorandum Circular No. 18, Series of 2019

The Securities and Exchange Commission (SEC) explicitly prohibits Unfair Debt Collection Practices. Even during an active loan, harassment is forbidden. Once a loan is paid, these acts become even more egregious. Prohibited acts include:

Using or threatening to use text, physical, or verbal violence.
Using profane, insulting, or obscene language.
Contacting persons on the borrower’s contact list who were not named as guarantors or co-makers.
Disclosing or threatening to disclose the borrower's loan details to third parties.

Republic Act No. 10173: The Data Privacy Act (DPA) of 2012

OLAs often require access to a user’s contacts, location, and gallery before approving a loan. Once the loan is paid, retaining and processing this data to inflict harm violates the DPA.

Unauthorized Processing: Using your contact list to send spam or threatening messages after payment violates the principle of "legitimate purpose."
Malicious Disclosure: Disclosing your personal and sensitive information to humiliate you constitutes a criminal offense under Section 31 of the DPA.

Republic Act No. 10175: Cybercrime Prevention Act of 2012

Because OLAs operate via digital platforms, smartphones, and social media, their harassing actions cross into cybercrime.

Cyberlibel: Posting your face, ID, and false claims of being a "scammer" or "estafador" on social media platforms or sending these to your Facebook friends violates Section 4(c)(4) of the law.
Identity Theft: Using your personal details or photos to create fake accounts to shame you.

The Revised Penal Code (RPC)

Collectors can be held criminally liable for:

Grave or Light Coercion (Art. 286/287): Forcing you to pay money you no longer owe through intimidation.
Unjust Vexation (Art. 287): Any human conduct that unjustly annoys, irritates, or vexes an innocent person.

2. Why Does Harassment Happen After Full Payment?

Understanding the mechanics of these apps helps in addressing the root cause:

System Glitches / Delayed Syncing: The OLA’s automated system may fail to update your account status, triggering automated collection bots.
Third-Party Collectors: OLAs often sell or outsource "past due" portfolios to aggressive third-party agencies. If the OLA fails to notify the agency of your payment, the agency keeps hounds on the target.
Outright Scams (Illegal OLAs): Unregistered OLAs operate completely outside the law. They often demand "extortion fees," "system updates," or "re-borrowing fees" even after full settlement.

3. Step-by-Step Actions: How to Protect Yourself and Fight Back

If you are facing harassment after fully paying your debt, you must shift from a defensive mindset to an offensive, evidence-gathering approach.

Step 1: Secure Your Proof of Payment

Never delete confirmation messages. Gather and back up:

Bank transfer receipts, e-wallet screenshots (GCash, Maya), or remittance center slips (7-Eleven, Palawan).
The "Clearance Certificate" or "Reference Number" issued by the app confirming zero balance.

Step 2: Document the Harassment

Philippine courts and regulatory bodies require solid evidence. Do not block the harassers immediately until you have:

Taken screenshots of all threatening text messages, including the mobile numbers used.
Saved screenshots of social media posts, direct messages, or group chats where you were shamed.
Recorded phone calls (if possible), noting the date, time, and the name/agency of the collector.

Step 3: Cut Off Their Access

Revoke App Permissions: Go to your phone’s settings, find the loan app, and revoke permissions for Contacts, Storage, Camera, and Location. (Uninstall the app completely after securing screenshots).
Privacy Lock: Tighten your social media privacy settings. Limit who can message you, tag you, or view your friend list.

Step 4: File Formal Complaints with Government Agencies

Agency	Role / Scope	How to Report
Securities and Exchange Commission (SEC)	Handles violations of SEC MC 18 (Unfair Debt Collection) and checks if the OLA is registered.	Submit a formal complaint through the SEC Enforcement and Investor Protection Department (EIPD).
National Privacy Commission (NPC)	Handles "Data Shaming," unauthorized access to contacts, and privacy violations.	File a formal complaint via the NPC’s online complaints portal.
PNP Anti-Cybercrime Group (PNP-ACG) / NBI Cybercrime Division	Handles criminal threats, extortion, and cyberlibel.	Visit their nearest regional office or file a report through their official websites/hotlines for immediate investigation.

4. Key Takeaway: The Debt is Extinguished

Legal Maxim: Id tantum possumus quod de jure possumus (We can do only that which we can do lawfully).

Once a loan is fully paid, you owe the lender nothing—not even your patience. Yielding to threats or paying "extension fees" out of fear only invites further extortion. By asserting your rights under the Data Privacy Act and SEC regulations, you can hold these predatory digital lenders accountable and put an end to cyber-terrorization.