The rise of Financial Technology (FinTech) in the Philippines has democratized access to credit through Online Lending Applications (OLAs). While these platforms offer quick financial relief to underserved Filipinos, they have also birthed a predatory ecosystem characterized by aggressive, deceptive, and illegal collection practices.

A particularly egregious phenomenon is loan app harassment continuing even after the debt has been fully settled. This legal article explores the Philippine legal landscape governing OLA harassment, the specific laws violated when collectors target fully-paid borrowers, and the concrete legal steps victims can take to protect themselves and hold these digital predators accountable.

The Anatomy of OLA Harassment

Despite settling their obligations, many borrowers find themselves trapped in a cycle of harassment. This usually happens due to un-updated internal databases, rogue third-party collection agencies incentivized by commissions, or outright extortion schemes by fraudulent apps.

Common tactics include:

Contact List Harvesting: Accessing the borrower’s phone contacts without valid consent or beyond the scope of legitimate processing, followed by sending blast texts to family, friends, and co-workers detailing the alleged debt.
Social Media Shaming: Posting the borrower’s photos, IDs, and curated defamatory statements on public platforms or creating chat groups containing the borrower's contacts.
Grave Threats and Coercion: Sending death threats, threats of physical harm, or fabricated legal documents claiming a criminal case has been filed.
Phantom Debts: Insisting that a balance remains due to arbitrary, hidden interest rates or processing fees that were never disclosed.

The Legal Framework: Philippine Laws Violated

When an OLA harasses a borrower—worse, one who has already paid—it violates a web of civil, administrative, and criminal laws in the Philippines.

1. SEC Memorandum Circular No. 18, Series of 2019 (Prohibition on Unfair Debt Collection Practices)

Issued by the Securities and Exchange Commission (SEC), this circular explicitly prohibits Financing and Lending Companies from engaging in unfair collection practices.

Prohibited acts include:

The use or threat of violence or other criminal means to harm the physical person, reputation, or property of any person.
The use of obscene, defamatory, or profane language.
Disclosing or threatening to disclose the borrower's personal information to third parties, unless explicitly permitted by the borrower or authorized by law.
Making false representations or using deceptive means to collect any debt (such as falsely representing that legal processes have begun).

Note: Engaging in these practices can lead to the suspension or revocation of the OLA’s Certificate of Authority (CA) to operate, alongside heavy administrative fines.

2. Republic Act No. 10173: The Data Privacy Act of 2012 (DPA)

OLAs routinely violate the DPA by processing personal data unlawfully. Under NPC Circular No. 20-01, lending apps are strictly prohibited from harvesting a borrower’s phone contacts, camera roll, or social media accounts as a condition for a loan.

When an OLA contacts your network or posts your information online after you have paid, they commit:

Unauthorized Processing of Personal Information (Section 25, DPA)
Processing for Malicious Purposes (Section 28, DPA) – which carries a penalty of imprisonment ranging from 1 year and 6 months to 5 years, and fines up to PHP 5,000,000.

3. The Revised Penal Code (RPC) and the Cybercrime Prevention Act of 2012 (RA 10175)

Because most OLA harassment occurs online or via telecommunications, the provisions of the RPC are applied in conjunction with RA 10175, which raises the penalties by one degree for crimes committed through Information and Communications Technology (ICT).

Cyber Libel (Section 4(c)(4), RA 10175): Publicly shaming a borrower online, posting them as a "scammer" or "estafador," especially when the debt is paid, constitutes libel.
Grave or Light Threats (Articles 282 and 283, RPC): Threatening to harm the borrower or their family.
Grave Coercion (Article 286, RPC): Compelling the borrower to pay money they do not owe through violence or intimidation.
Unjust Vexation (Article 287, RPC): Any conduct that distresses, annoys, or vexes an individual without justifiable cause.

4. Constitutional Guardrails: No Imprisonment for Debt

A favorite scare tactic of OLAs is threatening borrowers with jail time. Article III, Section 20 of the 1987 Philippine Constitution explicitly states:

"No person shall be imprisoned for debt or non-payment of a poll tax."

While a person can be jailed for criminal acts related to finance (such as issuing bouncing checks under BP 22 or committing estafa through fraud), simple inability to pay a contractual debt—let alone a debt that has already been paid—is strictly a civil matter, not a criminal one.

Step-by-Step Guide: What to Do If You Are Harassed After Full Payment

If you have fully paid your loan but continue to receive threats and harassment, you must shift from a defensive posture to an offensive legal strategy.

Step 1: Secure and Preserve All Evidence

Do not delete messages or call logs out of panic. Your evidence is your leverage.

Proof of Payment: Keep your official receipts, screenshots of bank transfers, GCash/Maya reference numbers, and any "Clearance of Account" or "Certificate of Full Payment" issued by the app.
Screenshots of Harassment: Take screenshots of text messages, Viber messages, email threats, and social media posts. Ensure the sender’s phone number, profile name, and the timestamps are visible.
Call Logs: Record calls if possible (keeping in mind the Anti-Wiretapping Law; however, under jurisprudence, recording a person who is actively threatening or extorting you can be admissible under specific contexts, or at the very least, logs of incoming numbers can be documented).

Step 2: Issue a Formal Cease and Desist Demand

Send a formal email or message to the OLA’s official customer service and compliance officer.

Attach the proof of full payment.
State clearly that the debt is settled.
Demand that they immediately cease all communications and delete your data from their system.
Explicitly cite SEC MC No. 18, s. 2019 and the Data Privacy Act of 2012, informing them that further harassment will result in immediate criminal and administrative complaints.

Step 3: File a Complaint with the National Privacy Commission (NPC)

If the OLA used your contact list or shamed you online, file a formal complaint with the NPC for data privacy violations. You can do this through their online complaints portal. The NPC has a history of ordering the shutdown of non-compliant apps and recommending criminal prosecution for executives of violating OLAs.

Step 4: File an Administrative Complaint with the SEC

Check if the OLA is registered on the SEC’s official list of licensed lending companies and apps.

If registered: File a formal complaint with the SEC’s Corporate Governance and Finance Department (CGFD) for violations of SEC MC No. 18, s. 2019.
If unregistered: They are operating illegally. Report them immediately to the SEC Enforcement and Investor Protection Department (EIPD).

Step 5: Report to Law Enforcement Cybercrime Units

For threats to your life, safety, and reputation (Cyber Libel/Extortion), seek help from law enforcement entities equipped to trace these digital perpetrators:

PNP Anti-Cybercrime Group (PNP-ACG): You can visit their headquarters at Camp Crame or report via their online hotlines.
NBI Cybercrime Division (NBI-CCD): File a complaint directly at the NBI office.

Matrix of Government Agencies and Contact Points

Agency	Specific Violation Handled	Primary Remedy Offered
Securities and Exchange Commission (SEC)	Unfair debt collection, operating without a license.	Revocation of license to operate, administrative fines.
National Privacy Commission (NPC)	Contact list harvesting, unauthorized data exposure, social media shaming.	Cease and Desist Orders, site/app takedowns, criminal recommendations.
PNP-ACG / NBI-CCD	Death threats, extortion, cyber libel, grave coercion.	Criminal investigation, entrapment operations, filing of criminal charges in court.

Conclusion

Loan app harassment after full payment is not a mere customer service error; it is a serious legal violation transitioning into cybercrime. Borrowers must remember that settling their debt strips the lending platform of any legitimate claim or authority over them. By systematically documenting the abuse and engaging the SEC, NPC, and cybercrime authorities, victims can transform from targets into prosecutors, dismantling the culture of impunity enjoyed by predatory FinTech operators in the Philippines.