If an online lending app is threatening to shame you, calling your contacts, sending insults, or saying you will be arrested for an unpaid loan, the problem is no longer just about debt. In the Philippines, lenders may collect legitimate unpaid loans, but they must do it lawfully. Borrowers have rights under SEC rules on unfair debt collection, the Data Privacy Act, the Revised Penal Code, consumer protection laws, and civil law. This guide explains what online lending app harassment means, what evidence to save, where to complain, and what practical steps you can take without making your situation worse.

What Counts as Online Lending App Harassment in the Philippines?

Online lending app harassment usually happens when a lender, collector, or outsourced collection agent uses fear, shame, threats, or personal data to force payment.

A lender can normally send reminders, demand payment, offer a restructuring plan, or file a civil collection case. What it cannot do is collect through unlawful threats, public humiliation, misuse of your phone contacts, false criminal accusations, or abusive language.

Common examples include:

Collection behavior	Why it may be illegal or reportable
“Pay today or we will post your face as a scammer.”	This may involve unfair debt collection, defamation, data privacy violations, or cyber-related offenses.
Calling or messaging your family, employer, officemates, or phone contacts to pressure you	SEC and NPC guidance treats contact with persons other than guarantors or co-makers as an unfair or unlawful collection practice in many cases.
Threatening arrest for ordinary non-payment of a loan	The 1987 Constitution says no person shall be imprisoned for debt. Criminal liability may arise only if there is a separate offense, such as fraud, falsification, threats, or other criminal acts.
Insults, profanity, death threats, or threats to harm your reputation	These may fall under SEC unfair collection rules and, depending on the facts, the Revised Penal Code.
Using your photos, IDs, contacts, or gallery files for public shaming	This can raise serious issues under the Data Privacy Act and NPC rules on online lending platforms.
Sending a clear, truthful reminder about the due date and amount, at reasonable hours	This is generally allowed if done in good faith, without deception, harassment, or unlawful data use.

The key point is this: owing money does not mean you lose your dignity, privacy, or legal rights.

Legal Basis: What Philippine Law Says

SEC Rules on Unfair Debt Collection

Online lending apps operated by lending companies or financing companies are regulated by the Securities and Exchange Commission (SEC). Under SEC Memorandum Circular No. 18, Series of 2019, lending companies, financing companies, and their third-party collection agents must collect debts through reasonable and legally permissible means. The SEC circular prohibits unfair debt collection acts such as violence, threats, insults, profane language, false representations, disclosure or publication of borrowers’ personal information, and contacting people other than named guarantors or co-makers. It also states that when collection is outsourced, the lending or financing company remains ultimately responsible for its third-party service provider.

This matters because many abusive collectors try to hide behind phrases like “third-party collector,” “field officer,” or “legal department.” If the collector is acting for the lending company, the company may still be answerable to the SEC.

Under the same SEC circular, violations may result in administrative penalties. For lending companies, the circular provides penalties such as ₱25,000 for a first offense and ₱50,000 for a second offense, with a third offense potentially leading to higher penalties, suspension, or revocation depending on the circumstances.

Data Privacy Act and NPC Rules on Online Lending Apps

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information and regulates how companies collect, use, store, share, and dispose of personal data. Personal information can include your name, contact number, address, government ID, photo, employment details, phone contacts, device data, and other information that can identify you. The National Privacy Commission (NPC) may receive complaints, investigate, order corrective action, and address violations involving personal data. (National Privacy Commission)

For online lending apps, the privacy issue is often the misuse of phone contacts. In the 2026 DICT-NPC-SEC Public Advisory on Online Lending Platforms, the agencies warned against harassment, intimidation, public shaming, unlawful use of personal data, unnecessary app permissions, and excessive or disproportionate access to contacts. The advisory also emphasized that character references and guarantors are not the same: a guarantor must expressly consent to be a guarantor, and only guarantors may be contacted for debt collection purposes.

This means a lending app should not treat your entire phonebook as a collection tool. A person listed in your contacts is not automatically a guarantor, co-maker, or legal representative.

Truth in Lending and Financial Consumer Protection

Online lenders must also be transparent about the cost of credit. The Truth in Lending Act, Republic Act No. 3765, requires disclosure of finance charges and the true cost of borrowing so borrowers can understand what they are agreeing to before taking a loan. The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, also gives financial regulators, including the SEC for entities under its jurisdiction, authority over financial products and services such as credit. (Lawphil)

High interest, hidden charges, short repayment periods, misleading “zero interest” ads, or undisclosed processing fees may be separate issues from harassment. They can still be relevant in a complaint, especially if the app misrepresented the loan terms or failed to disclose the actual cost.

Revised Penal Code, Cybercrime, and Civil Code Remedies

Some collection tactics may become criminal or civil matters.

Under the Revised Penal Code, threats, coercion, unjust vexation, libel, slander, and threats to publish defamatory material may be relevant depending on the exact words, actions, and evidence. If the abusive act is done online or through electronic systems, authorities may also evaluate possible cyber-related offenses under Republic Act No. 10175, the Cybercrime Prevention Act. (Lawphil)

The Civil Code may also apply. Articles 19, 20, and 21 of the Civil Code recognize that a person must act with justice, give everyone their due, observe honesty and good faith, and may be liable for damages when conduct is contrary to law, morals, good customs, public order, or public policy. (Lawphil)

If the harassment involves sexual threats, edited intimate images, non-consensual posting of private images, or gender-based online abuse, other laws may become relevant, including the Safe Spaces Act, Republic Act No. 11313, and the Anti-Photo and Video Voyeurism Act, Republic Act No. 9995. (Lawphil)

Can You Be Jailed for Not Paying an Online Loan?

For ordinary unpaid debt, no. The 1987 Constitution provides that no person shall be imprisoned for debt or non-payment of a poll tax. (Supreme Court E-Library)

But this does not mean all loan-related situations are risk-free. Criminal issues may arise if there are separate acts such as:

using fake documents;
deliberate fraud from the start;
issuing a bouncing check under circumstances covered by law;
identity theft;
falsification;
threats or harassment committed by either side;
misuse of someone else’s personal information.

For a simple unpaid online loan, the lender’s proper remedy is usually collection, negotiation, reporting to the appropriate credit system if lawful, or filing a civil case. For money claims within the small claims threshold, the Supreme Court’s rules on expedited procedures cover claims arising from contracts of loan and credit accommodations, with the small claims threshold increased to ₱1,000,000. (Supreme Court of the Philippines)

What Borrowers Should Do Immediately

1. Stay calm and protect your safety first

If the message includes death threats, threats of physical harm, stalking, sexual threats, or extortion, treat it as urgent. Save the evidence and report to law enforcement, such as the PNP Anti-Cybercrime Group or the NBI Cybercrime Division.

Do not respond with insults, threats, or public accusations. Emotional replies may be screenshotted and used against you. Keep replies short, factual, and written.

2. Preserve evidence before blocking or uninstalling the app

Many borrowers block collectors too quickly and lose important evidence. Before deleting anything, save:

screenshots of texts, chat messages, emails, social media posts, and call logs;
the collector’s phone number, profile name, email address, or account link;
the date and time of each message or call;
the app name, app store link, website, and screenshots of the app page;
loan agreement, disclosure statement, repayment schedule, and terms;
proof of the amount you actually received;
proof of payments through GCash, Maya, bank transfer, pawnshop, or payment center;
screenshots from family, friends, co-workers, or employers who were contacted;
proof that those people were not guarantors or co-makers;
any privacy notice, consent screen, or app permission screen.

For NPC complaints, evidence is especially important. The NPC’s complaint form instructs complainants to attach evidence, narrate facts clearly and chronologically, and provide supporting documents. It also asks whether the complainant contacted the respondent first, or why that was not done.

3. Check whether the lending app is registered or recorded

Look for the app’s company name, not just the app brand. Many apps use one public brand while the operator has a different corporate name.

Check:

the app’s “About,” “Terms,” “Privacy Policy,” and “Contact Us” pages;
the SEC registration number or Certificate of Authority number;
the name of the lending or financing company;
the payment account or collection wallet name;
the official SEC list of recorded online lending platforms, if available on the SEC website.

If the app appears unregistered, unauthorized, or uses changing app names, include that in your SEC complaint.

4. Revoke unnecessary permissions

If you can still access your phone settings, review the app permissions. Remove access to:

contacts;
camera;
photos or gallery;
microphone;
location;
files and storage.

Back up evidence first. Then consider uninstalling the app if you no longer need it. The 2026 DICT-NPC-SEC advisory warns against unnecessary permissions and says access to camera, gallery, and contacts must be limited to legitimate and proportionate purposes, such as identity verification or selecting a reference or guarantor.

5. Send a written objection to the lender or its Data Protection Officer

Before or while filing complaints, send a short written message to the app’s official email, customer service channel, or Data Protection Officer if available.

Keep it factual:

I am requesting that your company and any collection agent acting for you stop contacting persons who are not my guarantors or co-makers. I did not authorize public shaming, disclosure of my personal information, or collection through threats or insults. Please provide the name of the collecting entity, the basis for processing my personal data, and a copy of my loan disclosure and account computation. I also request that you preserve all records relating to collection activity on my account.

Do not sign a settlement you cannot afford. Do not admit facts that are untrue. Do not agree to “waive complaints” just to stop harassment unless you fully understand what you are signing.

6. File with the correct agency

You may need to file with more than one office because online lending app harassment often involves several legal issues at the same time.

Where to file	Best for	What to prepare	Practical notes
SEC iMessage complaint portal	Unfair debt collection, abusive collectors, unregistered lending app, misleading online lending practices	Screenshots, loan documents, app name, company name, collector details, timeline, proof that contacts were messaged	The SEC iMessage system accepts public complaints and allows ticket tracking. (Securities and Exchange Commission)
National Privacy Commission complaint process	Unauthorized use of contacts, excessive app permissions, public posting of personal data, refusal to delete or correct data	Notarized complaint-affidavit, valid ID, evidence, correspondence with the lender or reason for not contacting it	NPC complaints may be submitted in person, by courier, or by scanned email to the address stated by the NPC. (National Privacy Commission)
PNP Anti-Cybercrime Group	Threats, doxxing, cyber harassment, fake posts, extortion, online defamation	Screenshots, links, phone numbers, account URLs, device used, witness screenshots	The 2026 advisory lists PNP ACG contact channels for abusive online lending behavior.
NBI Cybercrime Division	Serious cyber threats, identity misuse, fake accounts, extortion, coordinated harassment	Printed and digital evidence, valid ID, device, sworn statement or affidavit	NBI’s citizen’s charter describes initial assistance, complaint sheet preparation, interview, sworn statements, and possible device examination. (National Bureau of Investigation)
Credit Information Corporation or relevant regulator	Wrongful or inaccurate credit reporting	Credit report, proof of payment, account statements, dispute letters	CIC guidance also points harassment complaints involving lending and financing companies to the SEC, and privacy violations to the NPC or cybercrime authorities. (Credit Information Corporation (CIC))

How to Organize Your Evidence

A clear complaint is easier to act on. Use a simple folder system:

Folder or file	What to include
01 - Loan documents	Loan agreement, disclosure statement, repayment schedule, screenshots of the app’s loan terms
02 - Payment proof	Receipts, bank confirmations, GCash or Maya screenshots, payment center slips
03 - Harassment screenshots	Messages, threats, insults, call logs, social media posts, emails
04 - Third-party contact evidence	Screenshots from family, friends, employer, co-workers, or neighbors who were contacted
05 - App and company details	App store page, company name, SEC number, website, privacy policy, email addresses
06 - Timeline	A one-page chronology of what happened and when
07 - Your written objections	Emails or messages you sent asking them to stop unlawful collection or data processing
08 - IDs and affidavits	Valid government ID, notarized complaint-affidavit, witness statements if available

When screenshots are important, capture the full screen with date, time, sender, number, or URL visible. If possible, keep the original device because law enforcement may ask to inspect it.

Sample Complaint Narrative

A strong complaint does not need dramatic language. It needs facts.

Use this structure:

Identify the app and company.
State the loan amount, date borrowed, amount received, and due date.
Explain what happened, in chronological order.
Quote the exact abusive words only when necessary.
Identify who was contacted and whether they were guarantors or co-makers.
Attach screenshots and label them clearly.
State what relief you are requesting.

Example:

On 10 June 2026, I obtained a loan through the app [App Name]. The app credited ₱4,000 to my e-wallet, with a due date of 17 June 2026. On 18 June 2026, a collector using mobile number [number] sent me messages calling me a scammer and threatening to send my photo to my contacts. On the same day, my sister and employer received messages about my alleged debt. They were not my guarantors, co-makers, or authorized representatives. Attached are screenshots of the messages, call logs, app page, loan details, and the messages received by third parties.

This kind of narrative helps the SEC, NPC, or law enforcement quickly understand the issue.

Common Scenarios Borrowers Face

The app contacted my family or friends

Save screenshots from each person contacted. Ask them not to argue with the collector. They should simply preserve the message, number, date, and time.

A family member, character reference, or phone contact is not automatically a guarantor. Under the 2026 DICT-NPC-SEC advisory, guarantors must expressly consent, and collection contact should not be made to persons who are not guarantors.

The collector called my employer

This is common and very stressful. Save proof and consider informing HR or your supervisor briefly that an online collector may be using unlawful pressure tactics. Keep your explanation factual. Do not overshare loan details if not necessary.

If the collector tells your employer that you are a criminal, scammer, or dishonest employee, that may raise additional issues involving defamation, privacy, or unfair collection.

The app threatened to post me on Facebook

Preserve the threat before reporting or blocking. If something is already posted, save:

screenshot of the post;
URL;
account name and profile link;
date and time;
comments or shares;
proof that the post identifies you.

Report the post to the platform, but save evidence first. Posting your face, ID, loan details, or “scammer” accusations online may involve unfair collection, privacy violations, and possibly cyber-related offenses depending on the content.

The collector said the police or NBI will arrest me

For ordinary unpaid debt, this is usually a scare tactic. No one may be imprisoned simply for debt. However, take the message seriously as evidence of a possible unfair or deceptive collection practice.

If the message falsely claims that a case has already been filed, ask for the case number, court, prosecutor’s office, or police station. Do not pay to a random wallet just because someone used the words “warrant,” “subpoena,” “NBI,” or “legal department.”

The loan app is not registered

Report it to the SEC. But do not assume that an unregistered app automatically means there is no obligation at all. The correct treatment of the debt may depend on the facts, including whether money was actually received, who lent it, what terms were disclosed, and whether the lender violated lending, consumer protection, or data privacy rules.

For safety, communicate only through traceable written channels and avoid sending payments to personal accounts unless the lender’s authority and account details are clear.

I am an OFW or foreigner outside the Philippines

You can still preserve evidence and file online where the agency allows electronic submission. The Data Privacy Act may apply to acts done inside or outside the Philippines if the processing relates to Philippine citizens or residents, or if the entity has relevant links to the Philippines. (National Privacy Commission)

If a sworn document is required while you are abroad, you may need consular notarization or a locally notarized and apostilled document, depending on the receiving office’s requirements. Keep screenshots showing your time zone and the Philippine time equivalent when possible.

The app used my ID photo or edited image

This is more serious than ordinary collection harassment. Save the image or link without spreading it further. If the content is sexual, fabricated, or threatening, report to cybercrime authorities promptly. Depending on the facts, laws on privacy, cybercrime, gender-based online harassment, or photo and video voyeurism may be relevant.

What Online Lenders Can Still Legally Do

Borrowers should also understand the other side. Reporting harassment does not automatically erase a valid debt.

A lawful lender may still:

send truthful payment reminders;
identify itself and the account being collected;
provide a statement of account;
negotiate a payment plan;
assign the account to a collection agency while remaining responsible for lawful collection conduct;
report accurate credit information if legally allowed;
file a civil collection case.

The best practical approach is to separate two issues:

Debt issue: How much is legally and accurately owed?
Harassment issue: Did the lender or collector violate your rights while collecting?

You can dispute harassment while still asking for a correct computation or payment arrangement.

Practical Tips Before Paying or Settling

Before sending money, especially after threats, check the following:

Is the payment account under the registered lending company or an authorized payment channel?
Did they provide a written statement of account?
Are penalties, interest, rollover fees, or “extension fees” clearly explained?
Will the payment fully settle the account or only extend the due date?
Will they issue an official receipt or confirmation?
Are they asking you to delete complaints or waive rights without clear settlement terms?

Avoid endless “extension fees” if they do not reduce principal or clearly settle the account. Ask for a written restructuring plan showing:

principal;
interest;
penalties;
total amount due;
due dates;
effect of each payment;
confirmation that collection harassment and third-party contact will stop.

Frequently Asked Questions

Can an online lending app call all my contacts in the Philippines?

No, not for debt collection. Philippine regulators have warned that contacting persons other than guarantors or co-makers is an unfair collection practice. The 2026 DICT-NPC-SEC advisory also states that character references and guarantors are different, and guarantors must expressly consent.

Can I be arrested for not paying an online loan?

For ordinary unpaid debt, no. The Constitution prohibits imprisonment for debt. A lender may pursue civil remedies, but threats of arrest for simple non-payment are often misleading. Criminal issues are different if there is fraud, falsification, identity theft, threats, or other separate offenses. (Supreme Court E-Library)

Where do I report online lending harassment?

Report unfair collection practices to the SEC, privacy violations to the NPC, and serious threats or cyber harassment to the PNP Anti-Cybercrime Group or NBI Cybercrime Division. If the same facts involve both contact-list abuse and threats, you may need to report to more than one office.

What evidence do I need for an SEC or NPC complaint?

Prepare screenshots, call logs, app details, loan documents, proof of payments, messages sent to your contacts, and a clear timeline. For NPC complaints, the complaint-affidavit should be notarized, supported by evidence, and should explain whether you first contacted the company or why you did not. (National Privacy Commission)

Should I still pay the loan if the lender harassed me?

If the loan is valid, the principal or lawful charges may still be owed. Harassment does not automatically cancel the debt. However, you can dispute unlawful charges, demand a proper computation, pay only through verified official channels, and separately file complaints for harassment or privacy violations.

Can an online lending app post my face or name online?

Posting your face, name, ID, loan details, or accusations like “scammer” to pressure you into payment can create serious legal issues. Preserve the post, URL, account name, and screenshots before reporting it to the platform or authorities.

Can the lender message my employer?

A lender should not use your employer to shame or pressure you, especially if your employer is not a guarantor or co-maker. If this happens, save the message and include it in your complaint.

What if I already gave the app permission to access my contacts?

Consent must be specific, informed, and proportionate. Regulators have warned against unnecessary permissions and excessive contact access by online lending apps. Giving an app permission for legitimate verification does not automatically authorize harassment, public shaming, or debt collection through your entire phonebook.

Can I file a complaint if I am outside the Philippines?

Yes, especially if the lending company, borrower, processing activity, or affected data has a Philippine link. Electronic filing may be available depending on the agency. If a sworn affidavit is required abroad, check whether consular notarization or apostille is needed.

Can I sue for damages?

Possibly, depending on the evidence and harm suffered. Civil Code provisions on abuse of rights and acts contrary to law, morals, good customs, public order, or public policy may apply. Data privacy violations may also involve remedies before the NPC or courts. Agency complaints are often the first practical step because they create a record and may trigger investigation or regulatory action.

Key Takeaways

Online lenders may collect legitimate debts, but they cannot use threats, insults, public shaming, false criminal accusations, or unlawful contact-list access.
SEC rules prohibit unfair debt collection practices by lending and financing companies, including abusive third-party collectors.
The Data Privacy Act and NPC guidance protect borrowers from excessive app permissions, misuse of contacts, and unauthorized disclosure of personal information.
Ordinary unpaid debt is not punishable by imprisonment, but separate acts like fraud, threats, falsification, or cyber harassment may create criminal issues.
Save evidence before blocking, deleting, uninstalling, or reporting abusive accounts.
File with the SEC for unfair collection, the NPC for privacy violations, and the PNP or NBI for serious cyber threats or harassment.
A harassment complaint does not automatically erase a valid debt, so ask for a written computation and deal only through verified official payment channels.