I. Introduction

Online lending app harassment has become a serious consumer protection and privacy issue in the Philippines. Many borrowers complain that after downloading a lending app, applying for a loan, or falling behind on payments, the lender or its collection agents begin contacting the borrower’s relatives, friends, co-workers, employer, phone contacts, social media connections, or even persons who never agreed to be involved in the loan.

The usual complaint is not merely that the lender is demanding payment. Creditors may lawfully collect valid debts. The problem arises when collection is done through harassment, shaming, threats, unauthorized disclosure of personal information, repeated calls, defamatory messages, false accusations, abusive language, or contact with third persons who did not consent to be contacted or made part of the loan transaction.

In the Philippine context, online lending app contact harassment may involve issues under data privacy law, consumer protection rules, debt collection standards, civil liability, criminal law, cybercrime law, and regulatory rules for lending and financing companies. The borrower’s obligation to pay a legitimate debt does not give the lender unlimited authority to invade privacy, disclose debt information, threaten the borrower, or harass uninvolved persons.

This article explains the legal principles, rights, remedies, evidence, defenses, and practical steps relevant to online lending app contact harassment without borrower consent in the Philippines.

II. What Is Online Lending App Contact Harassment?

Online lending app contact harassment refers to abusive, intrusive, or unlawful collection practices committed through mobile applications, calls, text messages, messaging apps, social media, email, or other digital channels.

It may include:

Calling the borrower repeatedly at unreasonable hours;
Sending threatening or insulting messages;
Contacting persons in the borrower’s phone contacts;
Informing relatives, friends, co-workers, or employers about the debt;
Sending group messages to shame the borrower;
Posting the borrower’s photo, name, or debt information online;
Threatening arrest, imprisonment, lawsuit, barangay blotter, or public humiliation;
Using profane, abusive, or degrading language;
Pretending to be a lawyer, police officer, court employee, or government official;
Threatening to contact all contacts in the borrower’s phone;
Accessing the borrower’s contact list without valid consent;
Collecting, storing, or using personal data beyond what is necessary;
Contacting emergency contacts or references in a harassing manner;
Telling third persons that the borrower is a scammer, estafador, thief, or criminal;
Sending edited photos, memes, or defamatory content;
Using automated systems to flood the borrower or contacts with messages;
Calling the borrower’s workplace to pressure the employer;
Threatening family members or unrelated contacts.

Not every collection attempt is harassment. A polite payment reminder sent to the borrower through an agreed channel may be legitimate. Harassment arises when the method becomes abusive, excessive, deceptive, defamatory, coercive, or privacy-invasive.

III. Borrowing Money Does Not Waive Privacy Rights

A borrower who takes a loan remains entitled to privacy, dignity, fair treatment, and protection from abusive collection practices.

A lender may argue that the borrower agreed to the app’s privacy policy or gave access to contacts. However, consent under privacy law must be valid, informed, specific, and freely given. Broad, vague, hidden, forced, or excessive permissions may be challenged.

Even if a borrower owes money, the lender may not automatically:

Access the entire contact list without legitimate basis;
Disclose the loan to third persons;
Shame the borrower publicly;
Threaten criminal prosecution without basis;
Use abusive language;
Harass relatives or co-workers;
Misrepresent itself as law enforcement;
Publish personal information;
Use personal data beyond the purpose for which it was collected.

Debt collection must still comply with law.

IV. Consent in Online Lending Apps

Consent is central in online lending harassment cases.

Many lending apps ask users to grant permissions such as access to contacts, camera, photos, location, storage, microphone, or device information. Borrowers often click “allow” because the app will not proceed otherwise.

The legal issue is whether the borrower truly consented to the collection and use of such personal data.

For consent to be meaningful, the borrower should be informed about:

What data will be collected;
Why the data is collected;
How the data will be used;
Whether the data will be shared;
Who will receive the data;
How long the data will be retained;
How the borrower may withdraw consent;
What happens if consent is refused;
Whether third-party contacts will be contacted;
Whether collection agents will use the data.

Consent is questionable when the app collects more information than necessary, buries permissions in long terms and conditions, or uses contact data for harassment rather than legitimate loan processing.

V. Contacting Third Persons Without Consent

One of the most serious issues is contacting people who are not parties to the loan.

A borrower’s relative, friend, co-worker, or employer may have no relationship with the lender. If that person did not co-sign, guarantee, or agree to be contacted, the lender generally has no reason to demand payment from that person or disclose the borrower’s loan information.

Third-person contact may be problematic when the lender:

Reveals that the borrower has a debt;
Asks the third person to pressure the borrower;
Sends defamatory statements about the borrower;
Demands payment from the third person;
Calls repeatedly despite being told to stop;
Uses the person’s contact details obtained from the borrower’s phone;
Sends threats or insults;
Contacts the borrower’s workplace in a humiliating way;
Creates group chats to shame the borrower;
Publishes the borrower’s debt to social circles.

The borrower’s consent does not automatically substitute for the consent of third persons whose data is also processed.

VI. The Role of Data Privacy Law

Online lending app harassment often involves the Data Privacy Act of 2012 and related privacy principles.

Personal information includes information that identifies an individual, such as name, phone number, address, email, photo, social media profile, workplace, or contact details.

Loan information may also be sensitive or confidential in practical effect because it concerns a person’s financial obligations and reputation.

Data privacy issues may include:

Unauthorized access to phone contacts;
Excessive data collection;
Use of personal data for harassment;
Disclosure of debt information to third parties;
Sharing data with collection agents without proper safeguards;
Retaining data longer than necessary;
Failure to secure personal data;
Refusal to honor data subject rights;
Inadequate privacy notice;
Use of misleading consent mechanisms.

A lending app that collects contacts for verification cannot necessarily use those contacts for public shaming, intimidation, or debt pressure.

VII. Data Minimization

A key privacy principle is that personal data collection should be limited to what is necessary.

In online lending, a lender may need certain information to verify identity, evaluate credit risk, prevent fraud, or contact the borrower. However, full access to the borrower’s entire phonebook may be excessive if the same purpose can be achieved through less intrusive means.

Questions to ask include:

Why does the app need the full contact list?
Would one or two references be enough?
Were the contacts informed?
Did the contacts consent?
Are contacts used only for verification?
Are contacts used for collection pressure?
How long are contacts stored?
Are contacts shared with third-party collectors?
Can the borrower withdraw permission?
Is the borrower denied service unless excessive permissions are granted?

Excessive collection may support a complaint.

VIII. Purpose Limitation

Personal data should be used only for declared, specified, and legitimate purposes.

If the app states that contacts are collected for identity verification, using those contacts later for harassment or public shaming may exceed the original purpose.

For example, the app may not fairly say:

“We collected contacts to verify your identity,”

then later use them to send messages such as:

“Your friend is a delinquent borrower. Tell him to pay now or we will expose him.”

That use is different, harmful, and potentially unlawful.

IX. Disclosure of Debt to Third Persons

Debt information should be handled carefully.

Disclosure to third persons may violate privacy, damage reputation, and cause emotional distress. Even if the debt is real, unnecessary disclosure may be unlawful or actionable.

Examples of improper disclosure include:

Telling a borrower’s employer about the loan;
Messaging co-workers that the borrower is unpaid;
Calling parents or siblings to reveal the debt;
Sending the loan amount to contacts;
Posting the borrower’s name and photo online;
Creating a group chat to shame the borrower;
Informing neighbors of the debt;
Publishing payment status on social media;
Sending screenshots of loan records;
Labeling the borrower as a criminal.

A lender may pursue collection against the borrower, but public disclosure is a different matter.

X. Debt Collection Is Legal, Harassment Is Not

Creditors have the right to collect valid debts. A borrower’s failure to pay does not erase the debt.

However, debt collection must be lawful.

Legitimate collection may include:

Sending payment reminders to the borrower;
Calling during reasonable hours;
Sending statements of account;
Offering restructuring;
Sending demand letters;
Referring the account to a legitimate collection agency;
Filing a civil case;
Reporting to lawful credit information systems, if permitted;
Enforcing contractual remedies;
Negotiating settlement.

Improper collection may include:

Threats of violence;
Threats of imprisonment for ordinary debt;
Insults and profanity;
Repeated calls meant to annoy or intimidate;
Disclosure to unrelated persons;
False claims of court action;
Fake police or lawyer messages;
Public shaming;
Contacting the borrower’s entire contact list;
Defamation.

The law allows collection; it does not allow abuse.

XI. Threats of Arrest or Imprisonment

Many online lending collectors threaten borrowers with arrest, imprisonment, estafa, cybercrime charges, or police action.

In general, nonpayment of a loan is a civil obligation. A borrower is not automatically imprisoned merely for failing to pay a debt.

Criminal liability may arise only if there are independent criminal acts, such as fraud, falsification, or deceit at the time of obtaining the loan. Mere inability to pay, by itself, is not automatically a crime.

Misleading threats of arrest may be abusive and may support complaints against the lender or collector.

XII. Fake Legal Threats

Some collectors send messages claiming:

A case has already been filed;
A warrant has been issued;
Police are coming;
Barangay officials will arrest the borrower;
The borrower is blacklisted from all employment;
The borrower will be imprisoned immediately;
A lawyer has approved criminal prosecution;
The court will seize property within hours.

If these statements are false, exaggerated, or misleading, they may be considered unfair, abusive, or deceptive collection practices.

A real legal demand should identify the creditor, amount due, basis of claim, and proper legal remedy. It should not rely on intimidation or fake authority.

XIII. Harassment Through Borrower’s Contacts

The most distinctive abuse by online lending apps is harvesting phone contacts and using them for collection pressure.

Harassment may include:

Sending messages to all contacts;
Calling random contacts;
Sending defamatory warnings;
Asking contacts to pay the borrower’s debt;
Threatening to expose the borrower further;
Sending personal photos;
Using contact names to intimidate the borrower;
Creating lists of people to be contacted;
Telling contacts the borrower used them as guarantors without their consent;
Claiming that contacts are liable even though they never signed anything.

This practice may violate privacy rights of both the borrower and the contacts.

XIV. Are Emergency Contacts or References Liable?

Usually, no.

A person listed as an emergency contact or reference is not automatically a co-maker, guarantor, surety, or debtor.

To be liable for another person’s loan, a third person generally must clearly agree to be bound, usually through a written undertaking or recognized electronic consent. Being named as a contact does not automatically create legal liability.

Collectors who tell references that they must pay may be misleading them.

XV. Co-Makers, Guarantors, and References

It is important to distinguish:

A. Reference

A reference may confirm identity or contact information. A reference is not necessarily liable for the debt.

B. Emergency Contact

An emergency contact may be contacted in true emergencies or verification contexts. This does not automatically mean the person agreed to debt collection.

C. Co-Maker

A co-maker is directly liable with the borrower if the co-maker validly agreed to the obligation.

D. Guarantor or Surety

A guarantor or surety may be liable depending on the contract signed.

If the person did not sign or validly agree, the lender should not treat that person as liable.

XVI. Contacting the Borrower’s Employer

Contacting an employer is especially sensitive.

A lender may attempt to verify employment, but disclosure of the debt to supervisors, HR officers, co-workers, or company group chats may be improper.

Harassment through the workplace may cause:

Embarrassment;
Reputational harm;
Employment consequences;
Mental distress;
Workplace disruption;
Defamation issues;
Privacy violations.

A collector should not pressure an employer to discipline, shame, or dismiss the borrower.

XVII. Public Shaming and Social Media Posts

Some online lenders or collectors use social media to shame borrowers.

They may post:

Borrower’s name;
Photo;
Loan amount;
Alleged delinquency;
Personal address;
Employer;
Family details;
Accusations of fraud;
Edited images;
Insults or threats.

This may expose the responsible persons to liability for privacy violations, cyber libel, unjust vexation, grave threats, civil damages, or regulatory sanctions, depending on facts.

Even if the borrower owes money, public humiliation is not a lawful collection method.

XVIII. Defamation and Cyber Libel Concerns

Statements that falsely or maliciously impute a crime, vice, defect, dishonesty, or discreditable conduct may raise defamation issues.

Online posts, group chats, public messages, or digital communications may raise cyber libel concerns when defamatory statements are made through computer systems or the internet.

Examples of risky statements include calling the borrower:

Scammer;
Thief;
Estafador;
Criminal;
Fraudster;
Swindler;
Addict;
Prostitute;
Irresponsible employee;
Public menace.

Truth is not always a complete practical shield if the statements are made maliciously, unnecessarily, or in an improper context. Debt collection should not become character assassination.

XIX. Threats, Coercion, and Intimidation

Collectors may cross the line when they threaten:

Physical harm;
Harm to family members;
Arrest without basis;
Posting private information;
Sending messages to all contacts;
Going to the borrower’s house to shame the family;
Reporting to employer in a malicious way;
Filing false criminal complaints;
Seizing property without court process;
Harassing children or elderly relatives.

Depending on the wording and circumstances, these acts may support criminal, civil, privacy, or regulatory complaints.

XX. Repeated Calls and Messages

Repeated calls may become harassment when they are excessive, intentionally annoying, or made at unreasonable times.

Relevant factors include:

Number of calls per day;
Time of calls;
Whether the borrower requested communication in writing;
Whether abusive language was used;
Whether the calls were made to third persons;
Whether the calls disrupted work or sleep;
Whether calls continued after dispute or complaint;
Whether different numbers were used to evade blocking;
Whether robocalls or auto-dialers were used;
Whether the purpose was collection or intimidation.

A few reasonable reminders are different from dozens of abusive calls.

XXI. Use of Personal Photos and IDs

Online lending apps often require borrowers to upload selfies, IDs, and personal documents.

Using these documents for verification is one thing. Using them to shame, threaten, or expose the borrower is another.

Improper acts include:

Sending the borrower’s ID to contacts;
Posting selfies online;
Editing photos with defamatory captions;
Sharing government ID numbers;
Threatening to publish documents;
Sending documents to employers;
Sharing personal data with unauthorized collectors.

Government IDs contain sensitive personal information. Mishandling them may aggravate privacy violations.

XXII. Unauthorized App Permissions

Some apps request access to contacts, photos, SMS, call logs, location, or storage.

A borrower should be cautious when an app demands permissions unrelated to lending.

Potentially excessive permissions include:

Full contact list access;
SMS reading;
Photo gallery access;
Microphone access;
Location tracking beyond verification;
Call log access;
Social media account access;
Device file access;
Clipboard access;
Background data extraction.

If the permission is not necessary for the loan, the borrower may question its legitimacy.

XXIII. Privacy Notice and Terms of Service

The lender should provide a clear privacy notice.

The notice should explain:

The identity of the personal information controller;
Data collected;
Purpose of processing;
Data sharing;
Collection agencies involved;
Borrower rights;
Data retention;
Security measures;
Contact details of data protection officer;
Complaint mechanism.

A vague privacy policy that gives the lender unlimited rights over all data may be challenged as unfair, unclear, or inconsistent with privacy principles.

XXIV. Lending Company Registration and Regulation

Online lending operators may be lending companies, financing companies, or service platforms. They may be subject to registration, licensing, disclosure, and fair collection requirements.

Borrowers should verify whether the lending app is connected with a registered company and whether the app is authorized to operate.

Unregistered or abusive lending apps may be subject to complaints with appropriate regulators.

A borrower should record:

App name;
Company name;
SEC registration details, if shown;
Certificate of authority details, if shown;
Website;
Office address;
Contact numbers;
Email addresses;
Names of collectors;
Screenshots of app pages and terms.

XXV. Liability of Collection Agencies

Lenders often outsource collection to third-party collection agencies.

A lender may not avoid responsibility simply by saying the harassment was done by a collector. If the collector acts on the lender’s behalf, the lender may still face regulatory, civil, or privacy consequences depending on control, authorization, and negligence.

Collection agencies themselves may also be liable for unlawful acts.

Important questions include:

Who sent the message?
Was the number associated with the lender?
Did the collector identify the lender?
Did the lender provide borrower data to the collector?
Did the collector disclose data to third persons?
Did the lender act after receiving complaints?
Was the collector authorized?
Did the collector violate the lender’s own policy?

XXVI. The Borrower’s Debt Remains Separate From Harassment Claims

A borrower should understand that harassment complaints do not automatically erase the debt.

There are two separate issues:

Whether the borrower owes a valid loan;
Whether the lender or collector used unlawful collection methods.

A borrower may still need to pay a valid debt, but the lender may still be liable for harassment or privacy violations.

Likewise, a borrower should not ignore legitimate obligations merely because the collector behaved abusively. The better approach is to dispute the harassment while addressing the debt through lawful channels.

XXVII. What Borrowers Should Do Immediately

A borrower experiencing contact harassment should take practical steps.

Stop engaging emotionally with abusive collectors;
Do not admit false accusations;
Do not send additional personal documents unnecessarily;
Take screenshots of messages;
Record call logs;
Save audio recordings if lawfully obtained;
Ask contacts to forward screenshots;
Identify the app and company;
Download copies of terms, privacy notice, and loan agreement;
Revoke app permissions where possible;
Uninstall suspicious apps after preserving evidence;
Change passwords if concerned about device access;
Send a written cease-and-desist or privacy objection;
File complaints with proper agencies;
Consider paying or restructuring valid debt through official channels only.

Documentation is critical.

XXVIII. Evidence to Preserve

Evidence may include:

Screenshots of text messages;
Screenshots of chat messages;
Call logs;
Voice recordings, where lawfully obtained;
Names and numbers of collectors;
Screenshots from contacts who were messaged;
Social media posts;
App permission screenshots;
Privacy policy;
Loan agreement;
Disclosure statement;
Payment records;
Demand letters;
Emails from the lender;
Proof of unauthorized contact;
Timeline of incidents;
Witness statements from contacted persons;
Copies of defamatory posts;
URLs or profile links;
Device notifications.

Screenshots should show date, time, sender, phone number or profile, and full message where possible.

XXIX. Documenting Third-Party Contact Harassment

If friends or relatives were contacted, the borrower should ask them to preserve evidence.

They should save:

Screenshot of the message;
Caller number;
Date and time of call;
Name used by collector;
Audio recording if available and lawfully obtained;
Exact words used;
Whether debt information was disclosed;
Whether threats were made;
Whether they told the collector to stop;
Whether the collector continued.

Third persons may have their own privacy complaint because their data was processed and used without consent.

XXX. Sending a Cease-and-Desist Letter

A borrower may send a written notice to the lender or collection agency demanding that harassment stop.

The letter may state:

Borrower’s name and loan account;
Acknowledgment or dispute of the debt, if appropriate;
Demand to stop contacting third persons;
Demand to stop disclosing debt information;
Demand to communicate only through designated channels;
Objection to unauthorized processing of contact data;
Demand to delete unlawfully collected contact data;
Request for accounting of the loan;
Request for identity of data protection officer;
Warning that complaints will be filed if harassment continues.

The borrower should keep proof of sending.

XXXI. Sample Cease-and-Desist Letter

Dear Sir/Madam:

I refer to my loan account with your company under the name __________.

I demand that you and your collection agents immediately stop contacting my relatives, friends, co-workers, employer, phone contacts, and other third persons regarding my alleged loan obligation. These persons are not parties to the loan, did not consent to be contacted for collection, and did not authorize disclosure of my personal and financial information.

I also demand that you stop using abusive, threatening, defamatory, or humiliating messages in connection with collection. Any lawful communication regarding the account should be sent only to me through __________.

I request a written statement of account, the name of your company, your office address, your data protection officer or privacy contact, and the basis for your processing and disclosure of my personal data and contact information.

This letter is sent without prejudice to my rights to file complaints with the National Privacy Commission, the Securities and Exchange Commission, law enforcement authorities, and the courts.

Sincerely,

The wording should be adjusted to the actual facts.

XXXII. Complaint With the National Privacy Commission

If the harassment involves unauthorized data collection, contact harvesting, disclosure of debt information, or misuse of personal data, the borrower or affected contacts may consider filing a complaint with the National Privacy Commission.

A privacy complaint may involve:

Unauthorized access to contacts;
Unauthorized disclosure of loan information;
Processing without valid consent;
Excessive data collection;
Use of personal data for harassment;
Failure to respect data subject rights;
Inadequate privacy notice;
Security breaches;
Failure to respond to privacy requests;
Harm caused by misuse of data.

Evidence should include screenshots, app permissions, privacy notices, messages to contacts, and proof of harm.

XXXIII. Complaint With the Securities and Exchange Commission

Many lending and financing companies are regulated by the Securities and Exchange Commission. Complaints may be filed against abusive online lending companies or financing companies for unfair debt collection, abusive practices, or violations of regulatory rules.

The complaint should include:

App name;
Company name;
SEC registration details, if known;
Loan account details;
Screenshots of harassment;
Messages sent to contacts;
Call logs;
Privacy violations;
Proof of abusive collection;
Borrower’s statement of facts.

The SEC may impose sanctions on regulated entities depending on violations.

XXXIV. Complaint With Law Enforcement

If threats, extortion, cyber harassment, identity misuse, cyber libel, or other criminal conduct is involved, the borrower may consider approaching appropriate law enforcement cybercrime units or police authorities.

Examples requiring law enforcement attention include:

Threats of physical harm;
Posting defamatory content online;
Identity theft;
Use of fake official authority;
Blackmail;
Unauthorized access to accounts;
Distribution of private documents;
Creation of fake social media posts;
Threats to children or family;
Repeated cyber harassment.

The borrower should bring printed and digital copies of evidence.

XXXV. Civil Remedies

A borrower or affected third person may consider civil remedies when harassment causes damage.

Possible civil claims may involve:

Damages for invasion of privacy;
Moral damages;
Actual damages;
Nominal damages;
Exemplary damages;
Attorney’s fees;
Injunction to stop harassment;
Damages for defamation;
Breach of contract or abusive collection;
Other relief depending on facts.

Civil action may be appropriate when the harm is serious, the harassment is documented, and regulatory complaints are insufficient.

XXXVI. Criminal Law Issues

Depending on the facts, abusive collection may implicate criminal law.

Possible issues include:

Grave threats;
Light threats;
Unjust vexation;
Slander or oral defamation;
Libel or cyber libel;
Coercion;
Identity-related offenses;
Falsification;
Usurpation of authority, if pretending to be an official;
Other offenses depending on the conduct.

Not every rude message is a crime. But threats, defamatory publications, coercive tactics, and fake legal authority may create criminal exposure.

XXXVII. Barangay Remedies

For some disputes involving individuals in the same locality, barangay conciliation may be relevant. However, many online lending app cases involve corporations, unknown collectors, different locations, or cyber-related conduct, which may not fit ordinary barangay settlement.

Still, if the collector or agent is personally known and located within the same city or municipality, barangay remedies may sometimes be considered for related personal disputes.

For app-based harassment, regulatory and privacy complaints are often more appropriate.

XXXVIII. Small Claims and Debt Collection Cases

If the lender has a valid monetary claim, it may file a civil collection case or small claims case, depending on the amount and circumstances.

Borrowers should not be misled into believing that every collection threat is real. A legitimate case requires proper filing, notice, and court process.

A borrower should respond to actual court papers and should not ignore them.

Harassment messages are not court summons. A screenshot saying “final warning before warrant” is not the same as a lawful court order.

XXXIX. Can a Borrower Be Imprisoned for Nonpayment?

As a general principle, failure to pay a debt is not automatically punishable by imprisonment. Civil debt is collected through civil remedies.

However, criminal liability may exist if the borrower committed fraud, falsified documents, used another person’s identity, or deceived the lender from the beginning.

Collectors often exaggerate criminal threats to frighten borrowers. Borrowers should distinguish between:

Genuine legal proceedings;
Civil collection;
Criminal complaint based on actual fraud;
Fake threats meant to pressure payment.

XL. Responsible Borrower Conduct

Borrowers should also act responsibly.

They should:

Read loan terms before borrowing;
Avoid borrowing from unknown apps;
Check whether the lender is registered;
Avoid submitting false information;
Pay valid debts when due;
Communicate when unable to pay;
Request restructuring if needed;
Keep payment receipts;
Pay only through official channels;
Avoid taking new loans to pay old abusive loans;
Report harassment promptly;
Protect personal data.

A borrower’s misconduct may weaken claims or create separate liability.

XLI. Identifying Illegal or Predatory Lending Apps

Warning signs include:

No clear company name;
No physical office address;
No registration or authority details;
Excessive app permissions;
Very short repayment periods;
Hidden charges;
Interest and fees not clearly disclosed;
Automatic deductions before release;
Threats in reviews or messages;
Contact harvesting;
No proper customer service;
Fake legal threats;
Use of many changing phone numbers;
Refusal to provide statement of account;
Harassment of contacts.

Borrowers should avoid apps that rely on intimidation rather than transparent lending practices.

XLII. Loan Agreement and Disclosure Statement

A legitimate lender should provide clear loan documents.

These should show:

Principal amount;
Interest rate;
Service fees;
Processing fees;
Net proceeds;
Payment schedule;
Total amount due;
Penalties;
Collection policy;
Privacy policy;
Company details;
Borrower obligations.

If the app releases less than the stated principal because of hidden deductions, or if the fees are unclear, the borrower may raise consumer protection issues.

XLIII. Interest, Penalties, and Unconscionable Charges

Online lending disputes often involve excessive charges.

Possible issues include:

Extremely high daily interest;
Large processing fees;
Short repayment terms;
Automatic rollover fees;
Penalties higher than principal;
Threats based on inflated balances;
Lack of clear disclosure;
Charges not agreed upon;
Interest computed in misleading ways;
Multiple fees for the same default.

Excessive or unconscionable charges may be challenged depending on the facts and applicable rules.

XLIV. Paying the Debt Does Not Cure Harassment

Some borrowers pay just to stop harassment. Payment may settle the debt, but it does not necessarily erase prior violations.

If the lender or collector unlawfully disclosed personal data, defamed the borrower, or harassed contacts, the borrower may still preserve evidence and file complaints.

However, if the borrower signs a waiver, settlement, or quitclaim, it may affect future claims. Borrowers should read settlement documents carefully.

XLV. Settlement With the Lender

If the borrower wants to settle the loan, settlement should be documented.

A settlement agreement should state:

Correct lender name;
Loan account number;
Principal and charges;
Discount, if any;
Final settlement amount;
Payment deadline;
Official payment channel;
Promise to issue clearance;
Cessation of collection activity;
Deletion or non-use of unlawfully processed contacts;
No further claims after payment;
Contact person for confirmation.

The borrower should demand an official receipt and certificate of full payment.

XLVI. Avoid Paying Collectors Personally

Borrowers should avoid sending money to personal accounts of unknown collectors unless verified by the lender.

Risks include:

Payment not credited;
Collector disappearing;
Continued harassment;
Fake settlement;
No receipt;
Duplicate demand;
Account compromise;
Further extortion.

Payments should be made only through official, documented channels.

XLVII. Demand for Statement of Account

A borrower may demand a clear statement of account.

The statement should show:

Original principal;
Amount actually released;
Interest;
Fees;
Penalties;
Payments made;
Balance;
Due date;
Legal basis for charges;
Official payment methods.

If the lender refuses to provide a statement but continues harassment, that refusal may strengthen the borrower’s complaint.

XLVIII. Rights of Third Persons Who Were Contacted

Relatives, friends, co-workers, or employers contacted by the lending app may also have rights.

They may complain if:

Their phone numbers were collected without consent;
They were repeatedly called or messaged;
Their privacy was invaded;
They were threatened;
They were falsely told they were liable;
They received defamatory statements about the borrower;
Their workplace was disrupted;
They were added to group chats;
Their personal information was used without consent;
They suffered harm.

They may preserve evidence and file privacy or other complaints in their own names.

XLIX. Employer’s Role

If collectors contact the workplace, the employer should avoid participating in harassment.

An employer may:

Inform the employee that a call was received;
Refuse to disclose employee information;
Tell the collector not to call the workplace;
Protect workplace privacy;
Preserve evidence of abusive calls;
Avoid disciplining the employee based solely on collector accusations;
Refer the matter to HR or legal counsel.

Employers should not act as debt collectors for online lending apps.

L. Protecting Phone Contacts

Borrowers can take preventive steps:

Avoid installing lending apps that require contact access;
Deny unnecessary app permissions;
Use official financial institutions where possible;
Review app permissions before applying;
Read privacy policies;
Do not upload unnecessary documents;
Avoid giving fake references;
Inform references before listing them;
Revoke permissions after use;
Use device privacy settings;
Report suspicious apps;
Delete apps that misuse data after preserving evidence.

Prevention is important because once contact data is uploaded, damage may be difficult to undo.

LI. Data Subject Rights

A borrower may exercise data subject rights, including requests to:

Be informed about data processing;
Access personal data held by the lender;
Correct inaccurate data;
Object to processing;
Withdraw consent where applicable;
Request deletion or blocking where justified;
Know who received the data;
Complain about misuse;
Seek damages in proper cases.

A written privacy request should be sent to the lender’s data protection officer or official privacy contact, if available.

LII. Sample Privacy Objection Letter

Dear Data Protection Officer:

I object to the processing, use, sharing, and disclosure of my personal information and the personal information of my phone contacts for harassment, public shaming, or debt collection through third persons.

I request confirmation of what personal data your company collected from my device, the purpose of collection, the legal basis for processing, the persons or entities to whom my data was disclosed, and the retention period.

I also request the deletion or blocking of unlawfully collected contact data and demand that your company and agents stop contacting persons who are not parties to the loan.

Please respond in writing within the period required by applicable rules.

Sincerely,

LIII. If the App Is No Longer Available

Some abusive lending apps disappear, change names, or operate through multiple similar apps.

The borrower should still preserve:

App screenshots;
Download history;
Package name, if visible;
Developer name;
Emails from app store;
Loan agreement screenshots;
Payment channels;
Bank or e-wallet recipient names;
Collector numbers;
Company names in messages;
Privacy policy screenshots;
App store reviews.

These details may help identify the responsible company.

LIV. If the Borrower Gave Permission Accidentally

A borrower may have clicked “allow” without understanding the consequences.

The borrower should:

Revoke app permissions;
Check device privacy settings;
Uninstall the app after preserving evidence;
Change passwords if necessary;
Monitor accounts;
Inform contacts to ignore harassment;
Send objection to the lender;
File complaints if data was misused.

Accidental or coerced permission does not necessarily justify abusive use of data.

LV. If the Borrower Used a Contact as Reference Without Permission

If a borrower listed someone as a reference without permission, that may cause personal conflict. However, the lender still should not harass the reference or disclose unnecessary debt details.

The reference may tell the lender:

They did not consent to be contacted;
They are not liable for the loan;
They demand deletion of their number;
They will file a complaint if contacted again.

Borrowers should avoid listing references without informing them.

LVI. If the Collector Pretends to Be a Government Official

Some collectors may claim to be from:

Police;
NBI;
Court;
Barangay;
Prosecutor’s office;
Law office;
Credit bureau;
Government task force.

If the claim is false, it may aggravate liability.

The borrower should ask for:

Full name;
Position;
Office;
Case number;
Written notice;
Official email;
Court or agency document.

A real government office does not usually collect private app loans through threatening text blasts.

LVII. If the Collector Claims a Case Has Been Filed

The borrower should distinguish between a real case and a threat.

A real case normally involves:

A specific court or office;
Docket or case number;
Written complaint;
Proper service of summons or notices;
Identified parties;
Official documents.

A text message saying “case filed today, warrant tomorrow” without details may be intimidation.

If the borrower receives actual court documents, the borrower must respond properly and within deadlines.

LVIII. If Contacts Receive Defamatory Messages

If contacts receive defamatory messages, the borrower should ask them to save the messages and avoid replying aggressively.

The borrower may send a notice to the lender demanding retraction and cessation. If the statement was posted publicly or sent to many people, the borrower may consider complaints for privacy violations, cyber libel, or civil damages depending on content.

Important evidence includes:

Exact words used;
Sender identity;
Recipients;
Date and time;
Whether the message was public or private;
Whether the statement was false or malicious;
Harm caused.

LIX. If the Borrower Is Actually in Default

If the borrower is in default, the borrower should not ignore the debt.

Practical options include:

Request statement of account;
Verify charges;
Negotiate payment plan;
Pay principal and lawful charges;
Ask for waiver of excessive penalties;
Settle through official channels;
Request certificate of full payment;
Keep all receipts;
Continue harassment complaint separately if needed;
Avoid taking more predatory loans.

Default does not authorize harassment, but it does mean the lender may still pursue lawful collection.

LX. If the Borrower Denies the Loan

If the borrower claims they never borrowed, the issue may involve identity theft or fraud.

The borrower should:

Demand loan documents;
Ask for application records;
Ask for disbursement details;
Check whether IDs were misused;
File police or cybercrime complaint if identity theft is suspected;
File privacy complaint;
Inform contacts that the loan is disputed;
Monitor financial accounts;
Secure identity documents;
Consider affidavit of denial.

The borrower should not pay a debt that may be fraudulent without verifying.

LXI. If the App Deducted Fees Before Release

Some apps advertise one amount but release a lower amount after deducting fees. For example, a borrower applies for ₱5,000 but receives only ₱3,500 and is asked to repay ₱5,000 in seven days.

This may raise issues of transparency, excessive fees, and unfair lending practices.

The borrower should preserve:

Advertisement;
Loan offer;
Amount approved;
Amount actually received;
Fees deducted;
Repayment schedule;
Disclosure statement;
Screenshots of app computation.

This may be relevant in a regulatory complaint.

LXII. If the App Threatens to Contact All Contacts

A threat to contact all phone contacts is itself significant evidence.

The borrower should screenshot the threat and respond in writing, if safe, stating that the lender is not authorized to disclose personal information or contact third persons.

If the threat is carried out, the borrower should gather evidence from affected contacts and include it in complaints.

LXIII. If the Borrower Wants the Contacts Deleted

The borrower may request deletion or blocking of unlawfully collected contact data.

The request should state:

Contacts were collected without valid consent;
Contacts are not parties to the loan;
Use of contacts for collection is objected to;
Disclosure to contacts is unauthorized;
The lender must stop processing and delete or block the data;
The lender must confirm compliance.

The lender may claim it needs some data for legal claims, but that does not justify harassment or unnecessary disclosure.

LXIV. If the Lender Sends Messages After Full Payment

If the borrower has fully paid but harassment continues, the borrower should demand immediate correction.

Documents needed:

Proof of payment;
Official receipt;
Certificate of full payment, if available;
Screenshot of continued demands;
Statement of account showing zero balance;
Messages to contacts after payment.

Continued collection after full payment may support complaints for harassment, unfair collection, and data misuse.

LXV. If the Lender Refuses to Issue Clearance

A borrower who has settled should request a written clearance.

The request should ask for:

Confirmation of full payment;
Zero balance statement;
Loan account closure;
Cessation of collection;
Correction of records;
Deletion of unnecessary personal data;
Notice to collection agents to stop.

Without written clearance, borrowers may face repeated demands from different collectors.

LXVI. If the Borrower’s Family Is Threatened

Threats to family members should be taken seriously.

The borrower should:

Preserve messages;
Tell family not to engage;
Record dates and times;
File complaints if threats are serious;
Consider police assistance for threats of violence;
Include family members as complainants if they were directly harassed;
Avoid meeting collectors alone;
Do not disclose home schedules or locations.

Debt collection should never involve threats against family.

LXVII. If the Borrower Is a Public Employee or Professional

Harassment may be especially damaging if collectors contact:

Government office;
School;
Hospital;
Law firm;
Employer;
Clients;
Licensing body;
Professional colleagues.

The borrower should document reputational harm. If messages imply dishonesty or criminality, defamation issues may arise.

LXVIII. If the Borrower Is a Student

If collectors contact classmates, teachers, school administrators, or parents, privacy and harassment concerns may arise.

If the borrower is a minor, additional legal issues may arise because minors have special protection. Lending to minors, collecting from minors, or harassing minors may create serious problems for the lender.

LXIX. If the Borrower Is Deceased

If the borrower dies, collectors may contact family members.

The estate may be liable for valid debts depending on estate rules, but relatives are not automatically personally liable unless they co-signed or guaranteed the loan.

Collectors should not harass grieving relatives or falsely claim that family members must personally pay.

Family members may provide a death certificate and demand that harassment stop, while handling any legitimate claims through the estate process.

LXX. If the Borrower Changes Number

Changing number may reduce harassment but does not solve data misuse if contacts are already harvested.

The borrower should still:

Preserve old messages;
Inform contacts;
File complaints if serious;
Secure accounts;
Address valid debt through official channels;
Avoid using new number for suspicious apps.

LXXI. If the Borrower Wants to Report the App Store Listing

Borrowers may report abusive lending apps to app stores, especially if the app misuses permissions, harasses users, or violates platform policies.

Evidence may include:

App name;
Developer;
Screenshots of permissions;
Screenshots of harassment;
Privacy policy;
Loan practices;
Reviews from other users.

App store removal does not replace legal complaints but may prevent further harm.

LXXII. Practical Complaint Package

A strong complaint package may include:

Written narration of facts;
Timeline of loan application and harassment;
Borrower’s name and contact;
App name and company name;
Loan amount and date;
Screenshots of app permissions;
Loan agreement or terms;
Privacy notice;
Messages from collectors;
Messages sent to contacts;
Call logs;
Social media posts;
Proof of payment or dispute;
Names and statements of affected contacts;
Cease-and-desist letter;
Response or non-response of lender;
Requested relief.

A clear timeline helps regulators understand the pattern.

LXXIII. Reliefs the Borrower May Request

Depending on the forum, the borrower may request:

Stop harassment;
Stop contacting third persons;
Delete unlawfully collected contacts;
Provide data processing information;
Correct account records;
Provide statement of account;
Impose sanctions on lender;
Investigate collection agents;
Remove defamatory posts;
Issue apology or retraction;
Pay damages;
Recognize full payment;
Refund unlawful charges;
Suspend or revoke app authority;
Refer criminal conduct for prosecution.

The available relief depends on the agency or court.

LXXIV. Possible Defenses of the Lender

A lender may argue:

Borrower consented through app permissions;
Borrower agreed to privacy policy;
Contacts were used only for verification;
Messages were sent by unauthorized third-party collector;
Borrower defaulted;
Statements were true;
No debt information was disclosed;
Calls were reasonable;
Borrower listed the contacts as references;
The lender has legitimate interest in collection.

These defenses are not automatically decisive. The key question is whether collection and data processing were lawful, fair, necessary, proportionate, and non-abusive.

LXXV. Counterarguments by Borrower

The borrower may respond:

Consent was not valid or informed;
Contact access was excessive;
Third persons never consented;
Debt disclosure was unnecessary;
Collection became harassment;
Messages were threatening or defamatory;
App permissions were used beyond stated purpose;
Lender failed to supervise collectors;
Loan default does not justify privacy violations;
Charges are unclear or excessive.

Evidence is critical to support these counterarguments.

LXXVI. Liability of Company Officers and Agents

Depending on the facts, liability may extend to:

Lending company;
Financing company;
App operator;
Collection agency;
Individual collectors;
Company officers who authorized abusive practices;
Data protection officer, for privacy compliance issues;
Third-party processors;
App developers, in some cases;
Persons who posted defamatory content.

Determining liability requires identifying who controlled the data and who committed the act.

LXXVII. Emotional Distress and Moral Damages

Harassment can cause anxiety, humiliation, family conflict, workplace embarrassment, and emotional distress.

Moral damages may be claimed in proper cases, especially where there is bad faith, defamation, privacy invasion, or abusive conduct.

Evidence may include:

Screenshots of humiliating messages;
Witness statements;
Medical or psychological records, if any;
Employment impact;
Family impact;
Public posts;
Repeated harassment despite demands to stop.

The more severe and documented the harm, the stronger the claim.

LXXVIII. Injunction or Immediate Relief

In serious cases, a borrower may seek legal relief to stop continuing harassment, especially public posting or repeated third-party contact.

Possible relief may include orders to:

Stop contacting third persons;
Remove posts;
Stop processing certain data;
Stop defamatory communications;
Preserve evidence;
Prevent further disclosure.

Immediate court relief can be more complex and may require legal assistance.

LXXIX. Prescription and Timeliness

Borrowers should act promptly. Delays may cause problems because:

Messages may be deleted;
App pages may disappear;
Numbers may be deactivated;
Social media posts may be removed;
Witnesses may forget;
Regulators may need timely evidence;
Legal deadlines may apply.

Even if the borrower is negotiating payment, evidence should be preserved immediately.

LXXX. Ethical Collection Standards

Fair collection should observe:

Respectful communication;
Accurate statement of debt;
Reasonable contact times;
No threats or insults;
No public shaming;
No unauthorized third-party disclosure;
No false legal claims;
Proper identification of collector;
Clear payment channels;
Respect for privacy rights.

A lender that cannot collect without harassment may face regulatory and legal consequences.

LXXXI. Preventive Advice Before Using Lending Apps

Before using an online lending app, a borrower should:

Check if the company is registered and authorized;
Read reviews carefully;
Check app permissions;
Avoid apps requiring full contact access;
Read the privacy policy;
Check interest, fees, and penalties;
Confirm repayment schedule;
Save loan documents;
Avoid multiple simultaneous apps;
Borrow only what can be repaid;
Prefer banks, cooperatives, or established lenders;
Avoid apps with reports of contact harassment.

Prevention is often easier than remedy.

LXXXII. Practical Advice for Contacts Who Are Harassed

A third person contacted by a lending app should:

Do not pay unless legally obligated;
Ask the collector to identify the company;
State that they are not a borrower, co-maker, or guarantor;
Demand deletion of their number;
Tell the collector not to contact them again;
Screenshot messages;
Record call details;
Inform the borrower;
File their own complaint if harassment continues;
Block numbers after preserving evidence.

A contact should not be intimidated into paying someone else’s debt.

LXXXIII. Sample Reply by Contact

A contacted person may respond:

I am not a borrower, co-maker, guarantor, or party to any loan with your company. I did not consent to be contacted for debt collection or to have my personal data processed for this purpose. Do not contact me again. Delete my number from your records. Any further harassment or disclosure will be reported to the proper authorities.

This should be followed by evidence preservation.

LXXXIV. Special Concern: Children and Elderly Contacts

If collectors contact minors, elderly parents, or vulnerable family members, the conduct may be viewed more seriously.

The borrower should document:

Age or vulnerability of contacted person;
Exact messages;
Emotional impact;
Medical impact, if any;
Repeated nature of contact;
Threats or insults used.

Harassing vulnerable persons to pressure a borrower may support stronger complaints.

LXXXV. When to Get Legal Help

Legal assistance is advisable when:

The harassment is severe;
Contacts or employer were messaged;
Photos or IDs were posted;
Threats of violence were made;
A real court case was filed;
The borrower denies the loan;
Identity theft is suspected;
Large amounts are involved;
Defamatory posts caused job loss or serious harm;
The borrower wants damages or injunction.

A lawyer can help evaluate whether to pursue privacy, civil, criminal, or regulatory remedies.

LXXXVI. Conclusion

Online lending app contact harassment without borrower consent is a serious legal issue in the Philippines. A lender may collect a valid debt, but it must do so lawfully, fairly, and respectfully. The existence of a loan does not authorize contact harvesting, public shaming, threats, defamatory messages, harassment of relatives and co-workers, or disclosure of private debt information to persons who are not parties to the loan.

The key legal concerns include data privacy, consent, excessive data collection, misuse of phone contacts, third-party disclosure, unfair debt collection, defamation, threats, and regulatory compliance. Borrowers and affected contacts should preserve evidence, demand that harassment stop, request a proper statement of account, file privacy or regulatory complaints when appropriate, and distinguish the debt obligation from the lender’s unlawful collection methods.

For borrowers, the best protection is prevention: avoid suspicious lending apps, deny unnecessary permissions, verify registration, read the terms, and borrow only from reputable sources. For those already affected, the strongest remedy begins with evidence: screenshots, call logs, messages to contacts, app permissions, privacy policies, loan documents, and proof of payment or dispute.

A lawful lender may demand payment through proper channels. An abusive lender that uses personal data as a weapon may face administrative, civil, or criminal consequences.