If relentless calls, texts filled with insults, threats of arrest, or messages sent to your family, friends, employer, or even posted publicly are coming from an online lending app, you are facing illegal harassment that Philippine law strongly prohibits. Many borrowers experience exactly this—apps or their collectors accessing phone contacts without proper consent, shaming them to third parties, calling at all hours, or using deceptive and abusive tactics to pressure payment. These practices are not legitimate debt collection. They violate specific regulations and can expose the companies and individuals involved to administrative sanctions, fines, license revocation, civil damages, and even criminal liability.

This article explains what counts as illegal harassment under current Philippine rules, the key laws that protect you, and the precise steps to report it effectively to the right government agencies. You will learn how to gather strong evidence, file complaints that get results, navigate common challenges, and understand realistic timelines so you can take control and stop the abuse.

What Counts as Harassment by Online Lending Apps

Online lending apps (often called OLAs or OLPs) and their collection agents frequently cross the line with tactics such as:

Repeated calls or texts at unreasonable hours (before 6:00 a.m. or after 10:00 p.m.)
Use of obscene, insulting, or profane language
Threats of arrest, lawsuits, or harm that they cannot legally carry out
Contacting people in your phone contacts, neighbors, or workplace who are not guarantors or co-makers on your loan
Public shaming through social media posts, group messages, or disclosures about your debt to third parties
False claims that you committed a crime or that legal action has already been filed
Persistent unwanted communication even after you have asked them to stop or disputed the debt

These actions go far beyond normal collection. They cause real emotional distress, damage reputations, invade privacy, and often target vulnerable borrowers who took small, short-term loans during emergencies. Philippine regulators have seen thousands of similar complaints, leading to license revocations and other enforcement actions against offending companies.

Key Laws and Your Rights Against Unfair Collection Practices

Several overlapping laws and regulations directly address these abuses.

SEC Memorandum Circular No. 18, Series of 2019 (Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies) is the primary rule for registered lending and financing companies and their online platforms. It explicitly bans the practices listed above, including contacting third parties beyond authorized guarantors or co-makers, disclosing borrower information to shame them, using threats or abusive language, and communicating at unreasonable times. Violations by agents or third-party collectors are attributable to the principal company. The SEC can issue cease-and-desist orders, impose fines, suspend operations, or revoke the company’s Certificate of Authority to operate.

The Data Privacy Act of 2012 (Republic Act No. 10173) protects against unauthorized processing or disclosure of your personal information. Accessing and using your phone’s contact list to send shaming messages, or disclosing your debt details to people who have no legitimate need to know, typically violates the law’s principles of purpose limitation, proportionality, transparency, and security. The National Privacy Commission (NPC) investigates these complaints. In serious cases, it can issue cease-and-desist orders, recommend criminal prosecution for unauthorized processing of personal or sensitive personal information, and support claims for damages. The Supreme Court has upheld NPC decisions against lending apps for exactly these contact-list and shaming violations, confirming that borrowers can recover damages.

The Revised Penal Code provides criminal remedies in many situations:

Article 287 (Unjust Vexation) covers any act that annoys, vexes, or irritates a person without legal justification. Persistent harassing calls and messages often fall here.
Articles 282 and 283 (Grave or Light Threats) apply when collectors threaten harm, arrest, or legal action they cannot lawfully take.
Article 286 (Grave Coercion) may apply if threats or intimidation are used to compel payment against your will.

When these acts occur through electronic means, the Cybercrime Prevention Act of 2012 (Republic Act No. 10175) can also apply, particularly for threats or deceptive communications sent via apps or social media.

Additional protections come from the Civil Code (provisions on abuse of rights, quasi-delicts, and moral damages) and the Lending Company Regulation Act of 2007. Note that while a comprehensive Fair Debt Collection Practices Act (Senate Bill No. 1744) was approved by the Senate in March 2026, the existing SEC and NPC frameworks remain fully in force and are actively enforced.

You have the right to be treated with dignity during any legitimate collection process. Debt is a civil obligation, but illegal tactics do not make it enforceable through harassment.

Step-by-Step Guide: How to Report Online Lending App Harassment

Follow these steps in order. You can (and often should) file with multiple agencies because violations overlap.

Gather and preserve strong evidence immediately.
Take clear screenshots of every message, including timestamps, sender numbers or usernames, and full conversation threads. Export or photograph call logs showing dates, times, and durations. Record calls only if you understand the legal implications in your situation (one-party consent is generally permissible for personal evidence in the Philippines, but preserve the original files). Ask any family members, friends, or colleagues who were contacted to provide written statements or affidavits describing what was said and when. Download or screenshot the loan agreement, app terms, privacy policy, and any proof of payments or disputes. Back everything up to cloud storage and do not delete originals. Organize files by date with clear labels—this documentation is the foundation of a successful complaint.
Verify whether the app or company is registered.
Check the official SEC list of recorded Online Lending Platforms on the Securities and Exchange Commission website. Registered companies are subject to direct SEC oversight and the specific rules in MC 18. Unregistered operations are illegal and should still be reported—they strengthen your case for enforcement action.
Send a formal cease-and-desist communication (recommended for your records).
Email or send a written letter (via registered mail or in-app support if available) to the company stating the facts, citing the specific prohibited practices under SEC MC 18 and the Data Privacy Act, and demanding that all contact stop except through proper legal channels. Keep a copy and proof of sending. This creates a paper trail showing the company had notice.
File complaints with the appropriate agencies.
- Securities and Exchange Commission (SEC) — Primary agency for unfair debt collection practices by lending and financing companies and their OLAs. Use the dedicated SEC i-Message portal at imessage.sec.gov.ph or email the appropriate department (commonly flcd_complaints@sec.gov.ph or epd@sec.gov.ph for enforcement matters). Submit a notarized complaint-affidavit detailing who did what, when, and how, attach all evidence and a copy of your valid government ID, and request an immediate cease-and-desist order plus investigation. Processing typically begins within days to weeks; full investigation and decision can take 30–90 days or longer depending on complexity and backlog. The SEC has revoked licenses of multiple apps for repeated violations of these exact rules.
- National Privacy Commission (NPC) — For privacy violations involving contact lists, shaming, or unauthorized data use. File online through the NPC website (privacy.gov.ph) or email complaints@privacy.gov.ph using their complaint form. Attach evidence and ID. The NPC can issue binding orders quickly in urgent cases and refer matters for criminal prosecution. Investigations often lead to monetary penalties and damages for affected individuals.
- Philippine National Police (PNP) — Especially the Anti-Cybercrime Group (ACG) for threats, grave coercion, unjust vexation with electronic elements, or other criminal acts. File a blotter report at your nearest police station or directly with PNP ACG. You will then execute a complaint-affidavit before a prosecutor for preliminary investigation. Hotlines and online options exist; serious threats receive priority.
- Additional channels include the Bangko Sentral ng Pilipinas Consumer Assistance Mechanism if the lender is BSP-supervised, and one-stop complaint centers coordinated with agencies like the Presidential Anti-Organized Crime Commission in some periods.
Consider civil action for damages.
You can file a separate civil case in the appropriate Municipal or Regional Trial Court for moral damages, exemplary damages, and possibly injunctive relief under the Civil Code. This can proceed alongside administrative and criminal complaints. Many borrowers recover compensation when strong evidence of emotional distress and rights violations is presented. Consult a lawyer or the Public Attorney’s Office (PAO) if you qualify for free legal assistance.
Follow up persistently and protect yourself.
Keep records of every reference number, email, and call with agencies. Follow up politely but firmly if you do not receive updates within expected timeframes. Continue blocking numbers and adjusting privacy settings on your phone and social media. If harassment escalates or causes severe anxiety or depression, seek medical or counseling support—these records can further support a damages claim.

Common Pitfalls, Challenges, and Special Situations

Many borrowers delay reporting because they feel ashamed or fear retaliation. Acting quickly with solid evidence is the best protection. Companies sometimes change phone numbers, use multiple apps, or operate through agents—your documentation of patterns helps overcome this. Unregistered apps are common; reporting them anyway triggers enforcement. Government agencies can have backlogs, so multiple parallel filings (SEC + NPC + PNP when appropriate) increase pressure and coverage.

For overseas Filipino workers or foreigners dealing with Philippine lending apps, the same rights apply. File online through the portals above and email evidence. If court action is needed, you may require a Special Power of Attorney (notarized and apostilled if executed abroad) for a representative in the Philippines. Jurisdiction generally exists because the harmful acts target or affect persons in the Philippines.

Another frequent issue is collectors claiming their actions are “legal” or that you consented by downloading the app. Consent to data processing must be informed, specific, and freely given for the stated purpose—shaming third parties almost never qualifies. Excessive or hidden interest charges are separate issues governed by BSP Circular No. 1133 (implemented through SEC rules), but harassment remains illegal regardless of the underlying debt.

Documents, Fees, and Realistic Timelines

Core documents for most complaints:

Valid government-issued ID (passport, driver’s license, UMID, etc.)
Notarized complaint-affidavit or the agency’s standard form
Screenshots, call logs, witness statements, and loan documents
Proof of any prior communication demanding the harassment stop

Fees: Administrative complaints to the SEC and NPC are generally free or involve only minimal costs. Criminal complaints and civil court filings have standard fees (waivable for indigent litigants through PAO). Notarization of affidavits costs a small amount at any notary public.

Timelines: Initial acknowledgment often comes within a few days to two weeks. Cease-and-desist or interim orders can issue faster in clear-cut cases. Full investigations and decisions typically range from one to six months, though complex matters or high caseloads extend this. Criminal preliminary investigation usually takes several months before a case reaches court. Persistence with follow-ups helps move things along.

Key offices: SEC (Makati headquarters and extension offices; imessage.sec.gov.ph), NPC (main office in Quezon City with online options), PNP stations nationwide and ACG headquarters.

Frequently Asked Questions

Is it legal for an online lending app to contact my family, friends, or employer about my debt?
No. Under SEC Memorandum Circular No. 18, Series of 2019, contacting third parties who are not named guarantors or co-makers on your loan agreement constitutes an unfair debt collection practice, even in many cases where the borrower supposedly “consented” in the app terms. This is one of the most common violations reported.

Can I record phone calls from debt collectors to use as evidence?
Yes, recordings made by one party to the conversation are generally admissible as evidence in Philippine proceedings when used to prove harassment or threats. Preserve the original files with metadata intact and consider having them transcribed or notarized for stronger presentation.

What should I do if the app is not listed as registered with the SEC?
Report it anyway to the SEC’s Enforcement and Investor Protection Department. Operating without the required Certificate of Authority is itself illegal and gives regulators additional grounds for action. Include this fact in your complaint.

How long does it usually take for the SEC or NPC to stop the harassment?
Interim relief such as a cease-and-desist order can come relatively quickly when evidence is clear and strong. Full investigation and final sanctions take longer—often one to three months or more—but filing promptly creates an official record that often deters further abuse.

Can I file complaints with more than one agency at the same time?
Yes. SEC handles unfair collection practices, NPC handles data privacy violations, and PNP handles potential criminal acts. Filing with all relevant agencies covers the different legal angles and increases the chances of swift enforcement.

What if the harassment includes fake court orders or threats of immediate arrest?
This is a serious matter that may constitute grave threats or other crimes under the Revised Penal Code. Report it immediately to the PNP and include copies of the fake documents in your complaint. These tactics are explicitly prohibited under SEC rules as well.

I am an OFW abroad—can I still file a complaint effectively?
Yes. Use the online portals (imessage.sec.gov.ph and privacy.gov.ph) and email your evidence and notarized affidavit. You can appoint a representative in the Philippines through a Special Power of Attorney (apostilled if signed abroad) to follow up in person if needed.

Will reporting affect my credit score or make it harder to borrow in the future?
Reporting illegal harassment does not negatively affect legitimate credit reporting. In fact, stopping abusive collectors and documenting everything can protect your overall financial reputation. Focus on resolving any legitimate debt through proper channels if you are able.

Are there support services if the stress from harassment is affecting my mental health?
Yes. Document any medical or counseling visits, as this evidence supports claims for moral damages. You can also reach out to the Public Attorney’s Office for legal assistance if you qualify, or community support organizations familiar with debt-related stress.

Key Takeaways

Harassment by online lending apps through abusive calls, shaming, contact-list misuse, or threats is illegal under SEC Memorandum Circular No. 18, Series of 2019, the Data Privacy Act, and the Revised Penal Code.
Document everything thoroughly with timestamps and witness statements before filing—this is the single most important factor in successful complaints.
File with the SEC (via imessage.sec.gov.ph) for unfair collection practices, the NPC for privacy violations, and the PNP for criminal elements; multiple filings are often the most effective approach.
Expect initial action within days or weeks in clear cases, with full resolutions taking one to several months; follow up using your reference numbers.
You have the right to dignity and privacy regardless of any outstanding debt. Strong evidence and prompt reporting have led to license revocations, cease-and-desist orders, and damages awards for many borrowers in similar situations.
Check whether the app is SEC-registered and preserve all records. Consider civil damages claims in addition to administrative and criminal routes when the harassment has caused significant distress.
Act now—delaying only allows the behavior to continue and weakens your position with the passage of time.

You do not have to endure this alone or in silence. Philippine regulators have clear rules and enforcement mechanisms precisely for situations like yours. Start with solid documentation and the appropriate complaint filings, and you can stop the harassment and hold those responsible accountable.