I. Introduction

Online lending apps have become common in the Philippines because they offer quick loans with minimal documentary requirements. Many borrowers are attracted by fast approval, mobile-based application, and easy cash release through e-wallets or bank transfers. However, abusive collection practices by some online lending companies have also become widespread.

Common complaints include repeated threatening calls, harassment through text and chat, contacting the borrower’s family, friends, employer, and social media contacts, public shaming, posting personal data online, creating group chats to humiliate the borrower, threats of arrest, threats of criminal cases, fake legal notices, obscene language, and unauthorized use of the borrower’s contact list, photos, IDs, or other personal information.

In the Philippine legal context, failure to pay a loan does not give a lender the right to harass, threaten, shame, or publicly expose a borrower’s personal data. Debt collection is allowed, but it must be done lawfully, fairly, and with respect for privacy, dignity, and due process.

This article discusses the legal rights of borrowers, the limits of online lending app collection practices, the remedies available against harassment and public posting of personal data, and the potential liabilities of lenders, collection agents, officers, and other persons involved.

II. Borrowing Money Is a Civil Obligation, Not a License to Harass

A loan is generally a civil obligation. If a borrower fails to pay, the lender may demand payment, impose lawful charges if agreed and valid, restructure the loan, file a civil collection case, or pursue lawful remedies.

However, non-payment does not allow the lender to commit illegal acts. A borrower’s default does not authorize:

Threats;

Public humiliation;

Defamation;

Identity exposure;

Posting of photos or IDs;

Contacting unrelated third persons to shame the borrower;

Threats of imprisonment for ordinary debt;

Use of obscene or abusive language;

Unauthorized access to phone contacts;

False claims of police or court action;

Fake warrants;

Fake subpoenas;

Blackmail;

Cyberbullying;

Data privacy violations.

A debtor still has legal rights. Debt does not remove a person’s dignity, privacy, or protection under the law.

III. No Imprisonment for Debt

A common threat made by abusive collectors is that the borrower will be arrested or imprisoned for failing to pay an online loan.

As a general principle, no person may be imprisoned merely for non-payment of debt. Ordinary failure to pay a loan is not, by itself, a criminal offense. It may create civil liability, but it does not automatically result in jail.

However, this does not mean all loan-related conduct is immune from criminal law. Criminal liability may arise in separate situations, such as fraud, falsification, use of false identity, issuance of bouncing checks under applicable law, or other independent criminal acts. But simple inability or failure to pay an online loan is generally a civil matter.

Therefore, threats such as “you will be arrested today,” “police are on the way,” “a warrant has been issued,” or “you will be jailed for not paying” may be misleading, abusive, and potentially unlawful if no actual legal basis exists.

IV. What Is Online Lending App Harassment?

Online lending app harassment refers to abusive, excessive, threatening, humiliating, or unlawful collection behavior committed by a lending company, financing company, online lending platform, collection agency, employee, agent, or third-party collector.

Examples include:

Repeated calls at unreasonable hours;

Calling continuously to intimidate or disturb;

Sending threatening messages;

Using profanity or insults;

Calling the borrower a scammer, thief, criminal, or estafador without judgment;

Threatening to post the borrower’s face online;

Threatening to contact all phone contacts;

Threatening family members, friends, co-workers, or employers;

Creating social media posts about the debt;

Posting the borrower’s photo, ID, address, phone number, workplace, or loan details;

Using edited photos or memes to humiliate the borrower;

Sending messages to the borrower’s employer to cause termination;

Threatening physical harm;

Threatening sexual violence or humiliation;

Threatening to take children, property, or salary without court process;

Sending fake barangay, police, prosecutor, or court notices;

Pretending to be a lawyer, police officer, prosecutor, sheriff, or court employee;

Demanding payment from persons who are not co-borrowers or guarantors;

Using contact lists harvested from the borrower’s phone;

Sending defamatory messages to third persons;

Publishing private data in group chats or public pages.

Debt collection becomes legally problematic when it crosses the line from lawful demand into harassment, coercion, defamation, privacy violation, cybercrime, or unfair debt collection practice.

V. Public Posting of Personal Data

Public posting of personal data is one of the most serious abuses committed by some online lending apps and collectors.

Personal data may include:

Full name;

Nickname;

Photo;

Selfie;

Government ID;

Address;

Phone number;

Email address;

Workplace;

Employer name;

School;

Names of relatives;

Contact list;

Social media profile;

Loan amount;

Loan due date;

Payment history;

Alleged debt status;

Screenshots of conversations;

Bank or e-wallet details;

Sensitive personal information.

Posting or spreading such data without lawful basis may violate Philippine privacy and cybercrime laws, especially when done to shame, threaten, pressure, or punish the borrower.

The fact that a borrower submitted personal information during loan application does not automatically mean the lender may publicly post it. Consent to process data for loan evaluation or collection is not the same as consent to public humiliation, social media exposure, or disclosure to unrelated third persons.

VI. The Data Privacy Act and Online Lending Apps

The Data Privacy Act protects personal information and sensitive personal information. Online lending companies process large amounts of borrower data, including identity documents, selfies, phone numbers, addresses, employment details, and sometimes device data.

A lending app or its operator may be considered a personal information controller or processor. It must comply with privacy principles, including:

Transparency;

Legitimate purpose;

Proportionality;

Security;

Confidentiality;

Lawful processing;

Respect for data subject rights.

A. Transparency

Borrowers must be informed how their data will be collected, used, stored, shared, and protected. Privacy notices should not be vague, hidden, misleading, or overly broad.

B. Legitimate Purpose

Data must be used for a declared and lawful purpose. Loan evaluation and lawful collection may be legitimate purposes. Public shaming is not.

C. Proportionality

Collection and use of data must be adequate, relevant, suitable, necessary, and not excessive. Accessing or uploading an entire contact list for debt shaming may be disproportionate.

D. Security

The lender must protect personal data from unauthorized access, disclosure, misuse, and breach.

E. Confidentiality

Employees, agents, and collection partners must handle borrower data confidentially. A collector cannot freely disclose a borrower’s debt to strangers, relatives, co-workers, or social media users.

VII. Unauthorized Access to Phone Contacts

Many online lending complaints involve apps accessing a borrower’s contact list. The app may have requested permission during installation, but legal questions remain:

Was consent freely given, specific, informed, and legitimate?

Was access necessary for the loan purpose?

Was the borrower clearly told that contacts may be used for collection?

Were the contacts themselves informed or did they consent?

Was the contact list used to harass or shame the borrower?

Was the data shared with collectors or third parties?

Even if a borrower clicked “allow,” the app’s use of contacts may still be challenged if the processing was excessive, deceptive, coercive, or used for unlawful harassment.

Phone contacts are not automatically fair game. The people in the borrower’s contact list did not borrow money and usually did not consent to being contacted, threatened, or dragged into a collection campaign.

VIII. Contacting Family, Friends, Employers, or Co-Workers

A lender may have limited reasons to contact references or guarantors if the borrower voluntarily provided them for verification or if they legally bound themselves. But contacting unrelated persons to shame or pressure the borrower may be unlawful.

Collectors should not:

Demand payment from persons who are not legally liable;

Tell third persons that the borrower is a fraudster or criminal;

Disclose loan details to unrelated persons;

Threaten relatives or friends;

Call employers to embarrass the borrower;

Ask co-workers to collect from the borrower;

Send group messages exposing the borrower’s debt;

Use family members as emotional pressure targets;

Harass references who did not guarantee the loan.

A debt is generally personal to the borrower, co-maker, surety, or guarantor. A friend in the phonebook is not automatically liable.

IX. Defamation, Libel, and Cyberlibel

Publicly accusing a borrower of being a scammer, thief, estafador, criminal, or fraudster may expose the collector or lender to defamation liability if the accusation is false, malicious, or not legally established.

In the Philippines, defamatory statements may lead to:

Civil liability for damages;

Criminal libel, if made through writing or similar means;

Cyberlibel, if committed through a computer system or online platform.

Examples that may create legal risk include:

Posting the borrower’s photo with “scammer”;

Sending messages to the borrower’s employer saying the borrower is a criminal;

Posting on Facebook that the borrower committed estafa without conviction;

Creating a public group chat to shame the borrower;

Sending edited images implying sexual or criminal conduct;

Publishing loan details with insulting captions;

Messaging relatives that the borrower is a thief.

Truth may be a defense in some defamation contexts, but even true statements can create privacy, harassment, or unfair collection issues if disclosed unlawfully or maliciously. A lawful debt does not automatically justify public shaming.

X. Grave Threats, Unjust Vexation, Coercion, and Other Criminal Issues

Some collection tactics may implicate criminal laws depending on the facts.

A. Grave Threats

Threatening to harm the borrower, family, child, property, reputation, or livelihood may constitute a criminal offense if the elements are present.

B. Coercion

Forcing a borrower to do something against their will through violence, intimidation, or unlawful pressure may raise coercion issues.

C. Unjust Vexation

Repeated acts intended to annoy, irritate, disturb, or torment a person may be complained of as unjust vexation, depending on the facts.

D. Slander or Oral Defamation

Verbal insults or defamatory accusations made orally to others may lead to oral defamation issues.

E. Alarm and Scandal

Public disturbances, abusive conduct, or scandalous acts may be relevant depending on the conduct.

F. Identity Misuse

Using the borrower’s photos, IDs, contacts, or personal details to create fake posts, accounts, or humiliating content may raise separate legal issues.

The correct criminal classification depends on the exact words, acts, platform used, public or private nature of the communication, and available evidence.

XI. Cybercrime Issues

Because online lending harassment often occurs through mobile phones, messaging apps, social media, and online platforms, cybercrime laws may be relevant.

Possible cyber-related concerns include:

Cyberlibel;

Illegal access;

Misuse of devices or systems;

Identity-related offenses;

Online threats;

Posting defamatory content online;

Unauthorized use of personal data through digital systems;

Creation of fake accounts or fake posts;

Distribution of altered photos or screenshots.

Cybercrime complaints require careful evidence preservation. Screenshots are useful, but original links, URLs, account names, phone numbers, timestamps, and device records may also matter.

XII. SEC Regulation of Lending and Financing Companies

Online lending companies and financing companies in the Philippines may be subject to regulation by the Securities and Exchange Commission if they operate as lending or financing entities. The SEC has issued rules, advisories, and enforcement actions concerning unfair debt collection practices and abusive online lending activities.

Lenders may face regulatory consequences for:

Operating without proper registration or authority;

Using abusive collection methods;

Threatening borrowers;

Using obscenity or insults;

Disclosing borrower information to third persons;

Misrepresenting legal consequences;

Using unfair or deceptive collection methods;

Charging unlawful or excessive fees;

Violating disclosure requirements;

Failing to comply with lending company regulations.

A borrower may file a complaint with the SEC if the lender is a lending company, financing company, or online lending platform under its jurisdiction.

XIII. National Privacy Commission Complaints

If the issue involves unauthorized collection, use, sharing, or posting of personal information, the National Privacy Commission may be an appropriate forum.

Complaints may involve:

Unauthorized access to contacts;

Disclosure of personal data to third persons;

Posting of borrower data online;

Use of personal photos or IDs for shaming;

Failure to protect borrower data;

Excessive data collection;

Misleading privacy notice;

Refusal to delete or correct data where legally required;

Data breach;

Use of personal data beyond legitimate purpose.

The borrower should prepare evidence showing what data was used, who used it, where it was posted, who received it, when it happened, and how it harmed the borrower.

XIV. Complaints with Police, NBI, or Prosecutor

If the harassment involves threats, cyberlibel, identity misuse, hacking, obscene messages, blackmail, or other criminal conduct, the borrower may seek assistance from:

Philippine National Police;

Anti-Cybercrime units;

National Bureau of Investigation Cybercrime Division;

City or provincial prosecutor;

Women and children protection desks if the threats involve gender-based abuse, children, or sexual harassment;

Barangay, for blotter and immediate local documentation.

A criminal complaint should be supported by clear evidence, including screenshots, links, phone numbers, caller IDs, recordings where lawfully obtained, witness statements, and proof of identity of the sender where possible.

XV. Barangay Blotter and Local Assistance

A barangay blotter is not a final judgment and does not by itself punish the collector. However, it can help document threats, harassment, or visits by collectors.

A barangay may help if:

Collectors visit the home;

Collectors threaten the borrower in person;

Collectors cause public scandal;

Neighbors are being told about the debt;

The borrower needs a record of harassment;

The borrower wants mediation for local disturbances.

For online-only harassment, specialized agencies such as the NPC, SEC, PNP, NBI, or prosecutor may be more appropriate, but barangay documentation can still help.

XVI. Public Shaming Through Social Media

Public shaming is one of the most damaging collection tactics. It can affect employment, family relationships, mental health, reputation, and safety.

Examples include:

Posting “wanted” posters;

Posting the borrower’s photo with insulting labels;

Posting ID cards or selfies;

Posting screenshots of loan details;

Tagging relatives and friends;

Commenting on the borrower’s public posts;

Messaging social media contacts;

Creating fake accounts to shame the borrower;

Posting in community groups;

Creating TikTok, Facebook, or group chat content about the debt.

This conduct may involve privacy violations, cyberlibel, unjust vexation, harassment, and regulatory violations. The borrower should immediately preserve evidence before the post is deleted.

XVII. Fake Legal Notices and False Claims

Collectors may send messages pretending that a case has already been filed, that a warrant exists, or that police are coming. Some use official-looking seals, fake law firm names, fake court documents, or fake prosecutor notices.

Borrowers should know:

A real court case usually involves formal service of summons, notices, pleadings, or subpoenas through proper channels.

Police do not arrest people merely because a collector sends a text.

A warrant of arrest is issued by a court, not by a lending app collector.

A collector cannot create a criminal case simply by calling the debt “estafa.”

A lawyer’s demand letter is not the same as a court judgment.

A threat of legal action is not automatically illegal if truthful and made properly, but false representation of official action may be abusive or unlawful.

If a borrower receives a supposed legal document, they should examine the issuing office, docket number, signature, contact information, and authenticity before panicking.

XVIII. Threats to File Estafa

Collectors often threaten borrowers with estafa. But failure to pay a loan is not automatically estafa.

Estafa generally requires deceit, abuse of confidence, or other specific elements under criminal law. If the borrower honestly borrowed money and later failed to pay due to inability, hardship, excessive charges, or default, that does not automatically mean estafa.

However, if a borrower used false identity, fake documents, fraudulent representations, or never intended to pay from the start, the lender may attempt to argue fraud. Each case depends on evidence.

Collectors should not casually accuse borrowers of estafa merely to frighten them into paying.

XIX. Threats to Visit the Home or Workplace

Collection visits are not always illegal. A lender may attempt lawful collection. But visits become problematic when collectors:

Threaten violence;

Shout or cause scandal;

Tell neighbors about the debt;

Post notices on doors;

Humiliate the borrower in public;

Enter the home without consent;

Refuse to leave;

Threaten family members;

Misrepresent themselves as police or court personnel;

Seize property without court authority;

Go to the workplace to embarrass the borrower.

A collector has no automatic right to enter a home, seize property, or disturb a workplace. Property seizure generally requires legal process.

XX. Threats to Garnish Salary or Seize Property

A lender cannot simply garnish salary or seize property by text message. Garnishment, attachment, execution, or seizure generally requires court process or lawful authority.

Collectors may threaten:

“We will garnish your salary tomorrow.”

“We will take your appliances.”

“We will coordinate with your employer.”

“We will freeze your bank account.”

“We will send sheriff to your house.”

Unless there is a real case, judgment, writ, or lawful process, such statements may be misleading and abusive.

Borrowers should distinguish between a lawful demand to pay and a false claim of immediate legal enforcement.

XXI. Excessive Interest, Penalties, and Charges

Online loans often involve small principal amounts but large deductions, processing fees, service fees, daily penalties, rollover charges, and high interest.

Philippine law allows parties to agree on interest and charges, but courts and regulators may scrutinize unconscionable, excessive, hidden, or deceptive charges.

Issues may include:

Interest not clearly disclosed;

Net proceeds much lower than stated loan amount;

Very short repayment periods;

Daily compounding penalties;

Automatic rollover fees;

Charges exceeding the principal;

Fees not agreed to;

Misleading annual or monthly cost;

Unfair or abusive terms;

Failure to provide disclosure statement.

A borrower may dispute excessive or unlawful charges while still acknowledging a legitimate principal obligation.

XXII. Disclosure Requirements in Lending

Lenders are expected to disclose important loan terms clearly. Borrowers should be informed of:

Principal amount;

Net proceeds;

Interest rate;

Finance charges;

Processing fees;

Due date;

Penalties;

Total amount payable;

Consequences of default;

Collection practices;

Data processing policies;

Identity of lender;

Customer service or complaint channels.

Failure to disclose may support complaints before regulators or be raised in disputes.

XXIII. Borrower Consent and App Permissions

A common defense by online lending apps is that the borrower consented by installing the app, agreeing to terms, and granting permissions.

Consent is important, but it is not unlimited. Consent may be challenged if it is:

Not informed;

Too broad;

Hidden in vague terms;

Forced as a condition for unnecessary data access;

Used for an unlawful purpose;

Applied to persons who did not consent;

Used beyond what is necessary;

Contrary to law or public policy.

A borrower’s acceptance of app terms does not legalize harassment, defamation, threats, or public posting of personal data.

XXIV. Data of Third Persons in the Borrower’s Contacts

The borrower’s phone contacts often include people who never consented to the lending app: relatives, friends, co-workers, customers, doctors, lawyers, teachers, employers, and others.

These third persons may also have rights if their data is accessed, stored, used, or contacted without lawful basis.

A lender that sends messages to third persons may be processing not only the borrower’s data but also the personal information of those third persons. This can create additional privacy concerns.

XXV. Workplace Harassment

Collectors may contact the borrower’s workplace to embarrass the borrower or pressure payment. This can cause reputational damage, disciplinary problems, or job loss.

Examples include:

Calling HR repeatedly;

Messaging supervisors;

Sending debt notices to company email;

Posting in workplace group chats;

Telling co-workers that the borrower is a scammer;

Threatening to report the borrower to management;

Visiting the workplace and causing scandal.

This may lead to claims or complaints for privacy violation, defamation, harassment, and damages.

A borrower should inform HR or a trusted supervisor calmly if necessary, explain that a collector is harassing them, and request that the company not entertain unauthorized disclosure or disruption.

XXVI. Harassment of Relatives and Friends

Collectors may message relatives and friends with statements such as:

“Tell your relative to pay or we will post them.”

“You are listed as emergency contact, so you must pay.”

“Your friend is a scammer.”

“We will file a case against your family.”

“You will also be liable.”

Unless the relative or friend is a co-maker, guarantor, surety, or legally bound party, they are generally not liable for the borrower’s loan.

Harassing unrelated persons may strengthen the borrower’s complaint.

XXVII. Gender-Based and Sexual Harassment

Some abusive collectors use sexual insults, threats to post edited nude images, threats to shame women, or gendered abuse. This may raise additional legal issues, especially when the harassment is sexual, misogynistic, or directed at women and children.

Examples include:

Threatening to post edited sexual photos;

Calling a borrower sexually degrading names;

Sending obscene images;

Threatening rape or sexual harm;

Using the borrower’s gender or family status to shame them;

Sending sexual comments to relatives or co-workers.

Such conduct should be documented and may warrant urgent reporting to police, cybercrime units, women’s desks, or prosecutors.

XXVIII. Mental Health and Emotional Harm

Online lending harassment can cause anxiety, depression, panic, shame, family conflict, work disruption, and fear.

Legal complaints may include claims for damages where the law allows, especially if the conduct caused reputational harm, emotional suffering, job loss, business loss, or family distress.

Borrowers should consider seeking emotional support and, if needed, professional help. Medical or psychological records may support claims of harm, though privacy should be protected.

XXIX. What Borrowers Should Do Immediately

A borrower facing harassment should take practical steps.

1. Preserve Evidence

Save:

Screenshots of messages;

Call logs;

Voice recordings, where legally and safely obtained;

Links to posts;

URLs;

Profile names;

Phone numbers;

Account names;

Group chat names;

Names of collectors;

Time and date stamps;

Payment records;

Loan documents;

App screenshots;

Terms and conditions;

Proof of public posting;

Statements from relatives or friends who received messages.

Screenshots should include the full context, sender identity, date, and time.

2. Do Not Delete the App Immediately Without Saving Evidence

The app may contain loan details, repayment schedule, lender identity, and terms. Save these first.

3. Revoke App Permissions

Where appropriate, revoke access to contacts, camera, photos, location, microphone, and storage. Also consider uninstalling after preserving evidence.

4. Change Privacy Settings

Secure social media accounts, limit public posts, hide friends list, and update passwords.

5. Inform Contacts

If contacts are being harassed, briefly inform them that they are not liable unless they signed as guarantors or co-makers, and ask them to save screenshots.

6. Communicate in Writing

Avoid phone arguments. Written communication creates a record.

7. Demand That Harassment Stop

A concise written demand may help establish that the borrower objected to unlawful collection practices.

8. File Complaints

Depending on the conduct, complaints may be filed with the SEC, NPC, PNP, NBI, prosecutor, or other appropriate office.

XXX. Evidence Checklist

Useful evidence includes:

Loan agreement or screenshots of loan terms;

App name and developer name;

SEC registration details, if available;

Disclosure statement, if any;

Amount borrowed;

Amount received;

Amount demanded;

Payment history;

Screenshots of harassment;

Screenshots of public posts;

Screenshots of messages to contacts;

Contact statements from relatives or co-workers;

Call logs;

Audio recordings, if available and lawfully obtained;

Names and numbers of collectors;

E-wallet or bank transaction receipts;

Demand letters;

Fake legal notices;

Social media links;

Proof of emotional, employment, or reputational harm;

Police or barangay blotter;

Medical or psychological records, if relevant.

Evidence should be organized chronologically.

XXXI. Sample Chronology of Events

A borrower may prepare a timeline such as:

January 5 — Downloaded loan app and applied for ₱5,000 loan.

January 5 — Received only ₱3,500 after deductions.

January 12 — Due date. App demanded ₱6,200.

January 13 — Collector began calling repeatedly.

January 14 — Collector messaged my mother and employer.

January 15 — Collector posted my photo on Facebook with the word “scammer.”

January 15 — Collector sent threats of arrest and fake subpoena.

January 16 — I saved screenshots and reported to the app customer service.

January 17 — Harassment continued despite request to stop.

January 18 — Filed complaint with authorities.

A clear timeline helps agencies understand the pattern.

XXXII. Sample Message to Collector

A borrower may send a calm message such as:

“I acknowledge your demand, but I object to harassment, threats, public shaming, and disclosure of my personal data to third persons. Please communicate only through lawful written channels. Do not contact my family, friends, employer, or other persons who are not legally liable for this loan. Do not post or share my personal information, photos, IDs, or loan details. I am preserving all evidence and will file complaints with the proper authorities if this continues.”

This message should be adjusted to the facts and should not include admissions beyond what the borrower is comfortable making.

XXXIII. Sample Complaint Narrative

A complaint may state:

“I borrowed from an online lending application called ______ on . I received ₱ but was required to pay ₱__ by ______. When I was unable to pay on the due date, collectors using the numbers/accounts ______ began sending threatening and abusive messages. They contacted my relatives, friends, and employer, who were not co-borrowers or guarantors. They disclosed my loan information and called me a scammer. They also posted/shared my photo, name, phone number, and loan details in ______. I did not consent to public posting or harassment. I am requesting investigation for unlawful collection practices, data privacy violations, cyber harassment, and other violations of law.”

The complaint should attach screenshots and evidence.

XXXIV. Forums and Remedies

A. Securities and Exchange Commission

File with the SEC if the complaint involves an online lending company, financing company, abusive debt collection, or unregistered lending operation.

Possible relief includes investigation, penalties, suspension, revocation, or regulatory action.

B. National Privacy Commission

File with the NPC for unauthorized use, processing, disclosure, or public posting of personal data.

Possible relief includes investigation, orders to stop processing, correction or deletion where appropriate, and penalties depending on the case.

C. PNP or NBI Cybercrime Units

Appropriate where there are online threats, cyberlibel, fake accounts, identity misuse, hacking, obscene posts, or public online shaming.

D. Prosecutor’s Office

Appropriate for filing criminal complaints supported by affidavits and evidence.

E. Barangay

Useful for local harassment, in-person visits, threats, and documentation.

F. Courts

Civil or criminal cases may be filed depending on the facts. A borrower may seek damages or injunctive relief in appropriate cases.

XXXV. Possible Liable Persons

Liability may attach not only to the company but also to individuals involved, depending on evidence.

Possible responsible parties include:

The lending company;

Financing company;

App operator;

Corporate officers, if personally involved or legally accountable;

Collection agency;

Third-party collector;

Employee or agent who sent threats;

Person who posted personal data;

Person who created fake posts;

Data protection officer, in privacy-related accountability contexts;

App developer or service provider, depending on involvement;

Unknown account holders identified through investigation.

The borrower should identify all known names, numbers, accounts, and company details.

XXXVI. Unregistered or Illegal Online Lending Apps

Some online lending apps may operate without proper authority. Borrowers should check whether the lender is registered or authorized. If the app is unregistered, this may strengthen regulatory complaints.

However, even if a lender is registered, it must still follow the law. Registration does not authorize harassment.

If the lender is unregistered, borrowers may still owe money depending on the underlying transaction, but the lender may face regulatory consequences and may not use illegal collection practices.

XXXVII. What If the Borrower Really Owes the Debt?

Owing money does not erase the borrower’s rights.

A borrower may owe a valid amount and still complain about:

Harassment;

Threats;

Data privacy violations;

Defamation;

Excessive charges;

Unfair collection;

Unauthorized disclosure;

Fake legal claims.

The legal issue should be separated:

Debt issue — how much is lawfully owed and how it should be paid.

Harassment issue — whether collection practices violated the law.

A borrower should avoid denying a legitimate debt if it is real, but may dispute unlawful charges and abusive conduct.

XXXVIII. What If the Borrower Gave Permission to Contact References?

If the borrower provided reference persons, the lender may argue that it was allowed to contact them. Still, the scope matters.

A lawful reference check is different from harassment. A collector should not:

Disclose unnecessary loan details;

Insult the borrower;

Demand payment from the reference;

Threaten the reference;

Repeatedly disturb the reference;

Post the reference’s data;

Use the reference to shame the borrower.

Reference consent does not authorize abuse.

XXXIX. What If the Borrower’s Contacts Were Uploaded Automatically?

Automatic upload of contacts may raise serious privacy concerns. The borrower may ask:

Did the app clearly disclose contact access?

Was contact upload necessary?

Were contacts informed?

How long were contacts stored?

Were contacts shared with collectors?

Were contacts used for harassment?

Was there an option to refuse?

Was consent bundled with loan approval?

Did the app collect more data than necessary?

These facts are important in a privacy complaint.

XL. What If the App Is Foreign or Has No Office?

Some online lending apps may have foreign developers, hidden operators, fake addresses, or changing names. This makes enforcement harder but not impossible.

Borrowers should preserve:

App name;

Package name;

Developer name;

Website;

Email address;

Payment account;

Bank or e-wallet recipient;

Collector numbers;

Social media pages;

Messages;

Loan agreement;

Screenshots from app store;

Any business registration claims.

Authorities may trace local payment channels, agents, registered entities, or service providers.

XLI. Payment Channels as Evidence

Online lenders often collect through:

GCash;

Maya;

Bank deposits;

Payment centers;

QR codes;

Remittance centers;

Named individual accounts;

Corporate accounts.

Payment instructions can help identify who is collecting the loan. Borrowers should save screenshots of payment demands, account names, account numbers, receipts, and confirmation messages.

XLII. Demand Letters From Law Firms

Some borrowers receive demand letters from law firms or collection agencies. A real demand letter may be lawful if it is professional, truthful, and not abusive.

A borrower should check:

Name of law firm;

Lawyer’s roll number or office address;

Client name;

Loan details;

Amount demanded;

Legal basis;

Deadline;

Whether threats are exaggerated;

Whether the letter is signed;

Whether it contains fake court language.

A demand letter is not a judgment. It is a demand. The borrower may respond, dispute the amount, request a breakdown, or negotiate.

XLIII. Settlement and Restructuring

Borrowers who owe legitimate amounts may consider settlement or restructuring. But settlement should not excuse harassment.

A settlement should state:

Correct principal;

Interest and charges;

Discount, if any;

Payment schedule;

Mode of payment;

Final settlement terms;

Cessation of collection calls;

Deletion or non-use of unlawfully posted data;

Confirmation of full payment after settlement;

Official receipt or acknowledgment.

Borrowers should avoid paying to personal accounts unless they can verify that the account is authorized.

XLIV. Overpayment and Illegal Charges

If a borrower already paid more than the lawful or agreed amount, they may dispute further demands. Evidence of payments is critical.

A borrower may request:

Statement of account;

Breakdown of charges;

Official receipts;

Proof of authority of collector;

Copy of loan agreement;

Disclosure statement;

Recalculation of interest and penalties.

If the lender refuses and continues harassment, this may support complaints.

XLV. Protecting One’s Digital Privacy

Borrowers should take digital safety steps:

Revoke app permissions;

Uninstall suspicious apps after preserving evidence;

Change passwords;

Enable two-factor authentication;

Hide social media friend lists;

Limit who can tag or post on profile;

Report abusive social media accounts;

Block harassing numbers after saving evidence;

Use spam filters;

Update phone security;

Check app permissions regularly;

Avoid giving access to contacts unless necessary;

Avoid uploading unnecessary IDs or photos.

Digital self-protection does not replace legal remedies, but it reduces harm.

XLVI. Responding to Public Posts

If a borrower is publicly posted, immediate steps include:

Take screenshots showing URL, date, time, poster, caption, comments, and shared data;

Ask trusted contacts to take screenshots from their accounts;

Report the post to the platform;

Send a preservation request if possible;

Avoid emotional public fights;

Send a written demand to remove the post;

File complaints with appropriate agencies;

Consider a cybercrime complaint if defamatory or threatening;

Document harm, such as employer notice or family distress.

A public reply may sometimes worsen exposure, so the borrower should be strategic.

XLVII. Platform Reporting

Social media platforms may remove posts that expose personal data, harass, bully, impersonate, or threaten users. Borrowers may report:

Doxxing;

Harassment;

Bullying;

Impersonation;

Hate or sexual content;

Unauthorized use of images;

Threats;

Scams;

Fake accounts.

Platform removal does not replace legal complaints, but it can reduce ongoing harm.

XLVIII. Doxxing

Doxxing is the publication of private or identifying information online, often to harass, threaten, or shame. In online lending cases, doxxing may include posting:

Address;

Phone number;

Workplace;

Family details;

ID cards;

Photos;

Loan information;

Social media profiles;

Contact list.

Doxxing may support complaints for privacy violations, cyber harassment, defamation, or other legal action depending on the content and intent.

XLIX. Data Subject Rights

A borrower, as a data subject, may have rights over personal data, including rights to be informed, access, object, erasure or blocking in proper cases, damages, and complaint mechanisms.

A borrower may ask the lender:

What data do you hold about me?

Why are you processing it?

Who received my data?

Why were my contacts accessed?

Who are your collection agents?

Why was my data posted or shared?

Delete or stop using unlawfully processed data.

However, some data may be retained for lawful purposes such as accounting, legal claims, or regulatory compliance. The key issue is whether processing is lawful, necessary, proportionate, and secure.

L. Cease-and-Desist Demand

A borrower or lawyer may send a cease-and-desist demand requiring the collector to stop:

Threatening messages;

Third-party contact;

Public posting;

Use of personal data for shaming;

Defamatory statements;

Fake legal claims;

Workplace harassment;

Contact outside lawful channels.

The demand may also request deletion of posts, preservation of records, identity of collectors, statement of account, and confirmation of lawful basis for data processing.

LI. Damages

A borrower may seek damages in proper cases if harassment caused injury. Possible damages may include:

Actual damages, such as lost employment or documented expenses;

Moral damages for mental anguish, serious anxiety, humiliation, or reputational harm;

Exemplary damages in appropriate cases to deter abusive conduct;

Attorney’s fees, if legally justified.

Damages require proof. The borrower should document harm and preserve evidence.

LII. The Role of Employers

When collectors contact the workplace, employers should be careful. An employer should not automatically discipline an employee based solely on collector allegations. Employers should respect employee privacy and avoid spreading the matter.

The borrower may request HR to:

Ignore unauthorized collectors;

Not disclose employee information;

Preserve any received messages;

Avoid entertaining collection calls at work;

Refer legal matters to proper channels.

An employer who improperly spreads the borrower’s debt information may create additional privacy or labor issues.

LIII. Children and Family Members

If collectors contact or threaten children, elderly parents, or vulnerable relatives, the conduct becomes more serious. Threats involving children should be documented and reported promptly.

Collectors should not use children as pressure points. They should not send messages to minors, threaten to report parents to schools, or shame children for a parent’s debt.

LIV. Borrower’s Own Conduct Matters

Borrowers should avoid actions that may weaken their position, such as:

Threatening collectors;

Posting false accusations;

Using fake IDs;

Making payment promises they know they cannot meet;

Borrowing from multiple apps without repayment plan;

Deleting all evidence;

Ignoring actual court documents;

Paying unknown personal accounts without proof;

Sharing sensitive data publicly;

Engaging in online arguments.

A borrower can assert rights firmly without committing unlawful acts.

LV. When a Real Case Is Filed

If a real case is filed, the borrower should not ignore it. A real complaint, subpoena, summons, or court notice requires proper response.

The borrower should check authenticity and seek legal advice. Missing deadlines may lead to adverse consequences.

A borrower may raise defenses such as:

No loan or wrong identity;

Payment already made;

Excessive or unlawful charges;

Lack of proper disclosure;

Unconscionable interest;

Wrong computation;

Lack of authority of claimant;

Prescription, if applicable;

Invalid assignment of debt;

Harassment and damages counterclaims, where proper.

LVI. Prescription and Timing

Claims and complaints are subject to time limits depending on the law involved. Borrowers should act promptly, especially for cybercrime, privacy complaints, civil damages, and criminal complaints.

Delaying may make evidence harder to obtain, allow posts to disappear, and weaken recall of facts.

LVII. Red Flags of Abusive Online Lending Apps

Borrowers should be cautious if an app:

Requires access to contacts, photos, location, camera, and storage beyond necessity;

Does not clearly disclose lender identity;

Has no clear SEC registration or business address;

Offers very short repayment terms with high charges;

Deducts large fees upfront;

Has vague privacy policy;

Uses threats in reviews or messages;

Requires social media access;

Uses individual payment accounts;

Refuses to provide statement of account;

Has many complaints of harassment;

Changes app name frequently;

Uses fake legal threats.

Prevention is easier than remedy.

LVIII. Legal Collection Practices

A lender may lawfully:

Send professional demand letters;

Call or message at reasonable times;

Provide statement of account;

Negotiate restructuring;

File a civil collection case;

Use lawful collection agencies;

Report to lawful credit information systems, if compliant with law;

Pursue remedies under contract and law;

Ask for payment without threats, insults, or public shaming.

The key is that collection must remain lawful, truthful, proportionate, and respectful of privacy.

LIX. Illegal or Abusive Collection Practices

A lender should not:

Use threats of violence;

Use obscene or insulting language;

Call repeatedly to harass;

Call at unreasonable hours;

Threaten arrest without basis;

Pretend to be police, court, prosecutor, or government agency;

Disclose debt to unrelated persons;

Post personal data;

Use contact lists for shaming;

Send defamatory messages;

Threaten relatives;

Seize property without court process;

Visit workplace to humiliate;

Create fake legal documents;

Use fake social media accounts;

Manipulate photos;

Threaten sexual exposure;

Pressure minors or elderly relatives.

Such acts may give rise to regulatory, civil, criminal, and privacy complaints.

LX. What to Include in a Complaint

A strong complaint should include:

Complainant’s name and contact details;

Name of online lending app;

Name of lending company, if known;

Loan date and amount;

Amount received;

Amount demanded;

Due date;

Names, numbers, and accounts of collectors;

Description of harassment;

List of persons contacted;

Description of public posts;

Screenshots and evidence;

Statement that contacts were not co-borrowers or guarantors;

Statement that public posting was unauthorized;

Relief requested;

Signature and verification or affidavit if required.

The complaint should be factual, chronological, and evidence-based.

LXI. Affidavit Format

An affidavit may include:

Personal details of borrower;

How the loan was obtained;

What permissions the app requested;

What personal data was submitted;

Payment history;

Events of harassment;

Exact words used by collectors;

Who received messages;

Where data was posted;

Effect on borrower;

Evidence attached;

Certification that statements are true based on personal knowledge.

Affidavits should avoid exaggeration. Exact screenshots are more persuasive than general claims.

LXII. If the Borrower Paid After Harassment

Payment does not erase the harassment. A borrower who paid because of threats may still complain about unlawful collection practices.

Evidence should show:

The threats made;

The payment date;

The amount paid;

The collector’s demand;

That payment was made under pressure;

Continuing harassment, if any.

A borrower may also request written confirmation that the account is fully settled.

LXIII. If the Borrower Wants to Negotiate but Stop Harassment

The borrower may write:

“I am willing to discuss payment of the lawful amount, but I will not communicate with collectors who threaten, shame, or disclose my personal data. Please send a written statement of account, official payment channels, and a reasonable payment proposal. All further communication should be professional and limited to me.”

This separates willingness to resolve the debt from objection to abusive methods.

LXIV. If the Collector Refuses to Identify the Company

Collectors who refuse to identify themselves, use aliases, or hide the company name create suspicion. Borrowers should ask:

What is your full name?

What company do you represent?

Are you an employee or collection agency?

What is your authority to collect?

What is the official account number?

Can you send a statement of account?

What is your business address?

If they refuse and continue harassment, preserve the refusal as evidence.

LXV. If Multiple Apps Are Harassing the Borrower

Some borrowers take loans from several apps, and harassment comes from many numbers. Organization is critical.

Create a table with:

App name;

Loan date;

Amount received;

Amount demanded;

Due date;

Collector numbers;

Harassment evidence;

Payment status;

Complaint status.

This helps avoid confusion and supports separate complaints against each app.

LXVI. Use of Collection Agencies

A lending company may outsource collection, but it may still be responsible for the conduct of its authorized collectors, depending on the facts and applicable rules.

The company should ensure collectors comply with law, privacy obligations, and fair collection standards. It cannot simply say “the collector did it” if the collector was acting for the company and using borrower data provided by the company.

Borrowers should complain against both the app/company and the collection agency when appropriate.

LXVII. Data Sharing With Third-Party Collectors

If borrower data is shared with a collection agency, there should be lawful basis, proper data sharing or outsourcing arrangements, confidentiality, and security.

A collection agency should not use the borrower’s data for purposes beyond collection. It should not post data publicly or disclose it to unrelated persons.

Uncontrolled sharing of borrower data may be a serious privacy issue.

LXVIII. Data Breach Issues

If borrower data appears in public groups, third-party lists, or unknown collector networks, there may be a data breach or unauthorized disclosure.

Borrowers may ask:

Who accessed my data?

Was there a breach?

Was the NPC notified?

Were affected data subjects notified?

What measures were taken to contain it?

Why do unknown collectors have my information?

Data breach issues may be raised with the NPC.

LXIX. Blacklisting and Credit Reporting

Collectors may threaten to “blacklist” the borrower. Credit reporting is regulated and should be done through lawful channels. A lender cannot use fake blacklists or public shame lists as intimidation.

A borrower may be reported to legitimate credit information systems if legally allowed and compliant with law. But public posting in social media as a “blacklist” is different and may be unlawful.

LXX. Borrowers’ Practical Defense Against Fake Threats

When threatened, borrowers should ask:

What case number?

What court?

Who is the complainant?

What law was violated?

Can you send the official document?

Who signed it?

Is there a receiving stamp?

Why am I being threatened by text instead of served properly?

This does not mean ignoring legal notices. It means verifying authenticity.

LXXI. The Role of Lawyers

A lawyer may help by:

Reviewing the loan terms;

Sending cease-and-desist letters;

Filing complaints with SEC or NPC;

Preparing affidavits;

Filing criminal complaints;

Negotiating settlement;

Handling civil collection cases;

Seeking damages;

Protecting the borrower from false legal threats.

Legal aid may be available through the Public Attorney’s Office, law school legal aid clinics, NGOs, or local government assistance programs, depending on eligibility and location.

LXXII. Common Misconceptions

“If I owe money, they can post me online.”

Incorrect. Debt does not authorize public shaming or unlawful disclosure of personal data.

“They can arrest me immediately for unpaid online loan.”

Generally incorrect. Ordinary debt is civil. Arrest requires a criminal case and lawful process.

“Because I clicked allow, they can message all my contacts.”

Incorrect. App permission does not authorize abusive, excessive, or unlawful use of data.

“My contacts must pay because they are in my phonebook.”

Incorrect. Contacts are not liable unless they legally agreed to be co-borrowers, guarantors, or sureties.

“A demand letter means I already lost a case.”

Incorrect. A demand letter is not a court judgment.

“If the app is registered, its collection tactics are legal.”

Incorrect. Registered lenders must still comply with law.

“If I pay, I can no longer complain.”

Incorrect. Payment does not erase prior harassment or privacy violations.

LXXIII. Best Practices for Borrowers Before Taking Online Loans

Before using any online lending app, borrowers should:

Check if the company is registered and authorized;

Read reviews and complaints;

Read the privacy policy;

Avoid apps requiring excessive permissions;

Check interest, fees, and penalties;

Compute total repayment amount;

Avoid borrowing from multiple apps to pay old apps;

Take screenshots of loan terms before accepting;

Use official payment channels only;

Avoid uploading unnecessary personal data;

Protect contact lists and social media accounts;

Borrow only what can realistically be repaid.

LXXIV. Best Practices for Online Lenders

Online lenders should:

Disclose loan terms clearly;

Avoid excessive app permissions;

Process only necessary personal data;

Use lawful and professional collection practices;

Train collectors;

Prohibit threats, insults, and shaming;

Avoid contacting unrelated third persons;

Maintain data security;

Use written data processing agreements with collectors;

Provide borrower complaint channels;

Issue statements of account and receipts;

Respect data subject rights;

Comply with SEC and NPC requirements;

Avoid deceptive legal threats.

Compliance is not only legal protection. It also builds trust in digital lending.

LXXV. Conclusion

Online lending app harassment and public posting of personal data are serious legal issues in the Philippines. A borrower’s failure to pay does not give a lender the right to threaten, shame, defame, dox, or expose private information. Debt collection must remain lawful, professional, proportionate, and respectful of privacy.

Borrowers have remedies. Depending on the facts, they may complain to the Securities and Exchange Commission for abusive lending and collection practices, to the National Privacy Commission for data privacy violations, to police or cybercrime authorities for threats, cyberlibel, identity misuse, or online harassment, and to courts or prosecutors for civil or criminal remedies.

The strongest response begins with evidence. Borrowers should save screenshots, call logs, public links, account names, numbers, payment records, loan terms, and statements from people contacted by collectors. They should distinguish between the legitimate debt issue and the unlawful harassment issue. A borrower may still owe a lawful amount, but no lender may collect through intimidation, humiliation, or illegal disclosure of personal data.

In Philippine law, the right to collect a debt is not a right to destroy a person’s reputation, privacy, employment, or peace of mind. Online lending must operate within the boundaries of law, fairness, and human dignity.