If you are receiving repeated threatening calls or messages from an online lending app, or worse, if the app or its agents are contacting your family, friends, employer, or posting about your debt on social media, this is not something you have to endure silently. Many Filipinos, including overseas workers, face exactly this kind of pressure after borrowing through mobile lending applications. Philippine law provides clear protections against these tactics. This article explains what counts as illegal harassment, the specific laws that apply, your rights as a borrower, how to document everything properly, where and how to file complaints with government agencies, and the practical steps you can take to stop the abuse while handling any legitimate debt separately.

Common Harassment Tactics Used by Some Online Lending Apps

Some online lending apps and their collection agents use aggressive methods once a borrower misses a payment or two. These often go far beyond simple reminders. Typical illegal tactics include:

Repeated calls or text messages at unreasonable hours (very early morning or late at night) or in excessive volume.
Messages or calls to your phone contacts, family members, friends, co-workers, or employer disclosing your debt and pressuring them to make you pay or shaming you.
Public or semi-public shaming, such as posting your name, photo, alleged debt amount, or “scammer” labels on social media, group chats, or even fake “wanted” posters.
Threats of arrest, imprisonment, lawsuits, or visits from “NBI agents” or police—often using fake legal documents or impersonating authorities.
Use of profane, insulting, sexist, or degrading language in messages or calls.
Accessing and misusing your phone’s contact list, photos, or other data that the app harvested when you installed it, then weaponizing that information.
Adding hidden penalties, roll-over fees, or inflated amounts that were not clearly disclosed upfront.

These practices create real fear, anxiety, and reputational harm. They are not legitimate collection methods.

Your Rights as a Borrower Under Philippine Law

You have a civil obligation to repay a legitimate loan, but that obligation does not give any lender or collector the right to harass, threaten, shame, or violate your privacy. Several layers of law protect you.

Data Privacy Act of 2012 (Republic Act No. 10173)

This is one of the strongest tools against online lending harassment. The law requires that any collection and use of your personal data (including contacts) must be lawful, necessary, and based on informed, specific consent for a legitimate purpose.

The National Privacy Commission (NPC) issued Circular No. 20-01 in 2020 specifically addressing online lenders. It prohibits apps from harvesting your phone contacts, email lists, or social media contacts for debt collection or harassment purposes. It also bans using your photos or other data to embarrass or pressure you. Apps must follow “privacy by design,” limit permissions to what is truly needed (such as basic KYC for loan approval), and securely dispose of data they obtained improperly. Violations have led to shutdown orders against dozens of apps and referrals for criminal prosecution.

Your family members and contacts whose data was misused can also file complaints as data subjects.

SEC Memorandum Circular No. 18, Series of 2019

All financing companies and lending companies registered with the Securities and Exchange Commission (SEC) must follow this circular, which prohibits unfair debt collection practices. Key banned acts include:

Using or threatening violence or other criminal means against any person’s body, reputation, or property.
Threatening to take any action that cannot legally be taken (for example, threatening jail time for simple non-payment of debt).
Using obscenities, insults, or profane language that abuses or humiliates the borrower.
Disclosing or publishing the names, photos, or personal information of borrowers who allegedly refuse to pay, especially to third parties for shaming purposes.
Contacting third parties in a manner that harasses or embarrasses the borrower.

The circular applies to the lending company itself and any third-party collectors or agents it uses. Unregistered operators are even more vulnerable to enforcement because they lack any legal authority to lend in the first place.

Revised Penal Code and the Cybercrime Prevention Act of 2012 (RA 10175)

Several provisions of the Revised Penal Code directly address common tactics:

Article 282 (Grave Threats): Threatening to inflict a wrong amounting to a crime (such as harm or false criminal charges).
Article 286 (Grave Coercion): Compelling you to do something (pay immediately) against your will through intimidation or threats.
Article 287 (Unjust Vexation): Any act that annoys or irritates without legal justification—often used for persistent harassing calls and messages.
Libel or slander provisions if false statements damage your reputation publicly.

When these acts occur through SMS, social media, messaging apps, or online platforms, the Cybercrime Prevention Act applies additional penalties and procedures. Online shaming and threats fall squarely under this law.

Civil Code Provisions on Damages and Abuse of Rights

Articles 19, 20, and 21 of the Civil Code make persons who abuse their rights or act in a manner contrary to morals, good customs, or public policy liable for damages. You can claim moral damages for the mental anguish, humiliation, and anxiety caused by harassment, plus exemplary damages to punish particularly bad conduct and actual damages if you suffered financial loss (such as medical expenses or lost income). These claims can be filed alongside criminal or administrative complaints.

Constitutional Protection

Article III, Section 20 of the 1987 Constitution explicitly states that no person shall be imprisoned for debt. Threats of arrest or jail for unpaid loans are therefore not only empty—they are themselves illegal acts that strengthen your case for complaints and damages.

The Supreme Court has also consistently ruled that interest rates or penalties that are “iniquitous, unconscionable, exorbitant, or shocking to the judicial conscience” are void from the beginning. In such cases, only the legal interest rate (currently 6% per annum for loans) generally applies.

Step-by-Step Practical Guide: What to Do Right Now

Preserve every piece of evidence before deleting anything.
Take clear, full screenshots of all messages, chats, and posts—including timestamps, sender numbers or usernames, the full conversation thread, and any images or threats. Export or photograph your call logs showing dates, times, and durations. Ask family or friends who received messages to do the same and send you copies. Save everything in a secure folder (cloud backup recommended) with dates noted. Do not delete the app, clear chats, or factory-reset your phone until you have solid backups. Evidence is the foundation of every successful complaint.
Identify the responsible company.
Note the exact app name, developer or company name shown in the app store or Google Play, and any contact details or SEC registration numbers mentioned in the loan agreement or app. Search the SEC website to check if the company is a registered lending or financing company. Many problematic apps operate without proper registration.
Send a written demand to stop illegal conduct (optional but helpful).
You can email or send a formal letter (keep a copy and proof of sending) stating that you object to any harassing, threatening, or privacy-violating communications and demand they cease immediately. This creates a paper trail. Avoid lengthy discussions about the debt amount at this stage if you are still verifying figures.
File complaints with the proper government agencies.
You can pursue multiple remedies at the same time.
- National Privacy Commission (NPC) — Best starting point for contact-list harvesting, public shaming, or unauthorized disclosure of your data.
  Download the official Complaint Affidavit form from the NPC website. Print it, fill it out completely (include a clear narration of facts, timeline, and specific violations), attach all your evidence, have it notarized, and submit it by email to complaints@privacy.gov.ph, in person, or by courier to the NPC office in Quezon City. Check the current schedule of fees on their site. The NPC can investigate, order the company to stop processing your data, require deletion of illegally obtained information, impose fines, and refer cases for criminal prosecution under the Data Privacy Act.
- Securities and Exchange Commission (SEC) — For violations of unfair debt collection rules under Memorandum Circular No. 18, s. 2019, or if the lender is unregistered. File an administrative complaint with supporting evidence. The SEC can impose fines, suspend or revoke registration, and order cessation of illegal practices.
- Law enforcement for criminal acts — For threats, grave coercion, unjust vexation, or cyber-related offenses, go to your local barangay to have the incident blottered (this is often required or helpful first step). Then file a complaint with the Philippine National Police (PNP) Anti-Cybercrime Group or the National Bureau of Investigation (NBI) Cybercrime Division. Serious or repeated threats may warrant immediate police attention. The prosecutor’s office will conduct preliminary investigation if charges are filed.
- Civil action for damages — If the harassment caused significant harm, consult a lawyer about filing a civil case in the appropriate trial court (RTC or MTC depending on amount) for moral, exemplary, and actual damages. This can be done independently or as a counter-claim if the lender sues you for the debt.
Handle the underlying debt on its own track.
If the loan is legitimate, review the original agreement for the exact principal, interest, and fees. Challenge any unconscionable charges. You may negotiate a settlement in writing that includes clear terms on total amount, payment schedule, and confirmation that all data will be deleted and harassment will stop. If sued civilly, you can raise defenses and counter-claim for harassment damages. Never ignore court summons.
Protect yourself and your network going forward.
Block the numbers and restrict app permissions where possible after preserving evidence. Inform close contacts that any further messages from the app should be documented and forwarded to you. Consider changing privacy settings on social media.

Common Pitfalls and Real-Life Scenarios

Many borrowers delete messages or the app in panic, destroying crucial evidence. Others pay extra “to make it stop,” only to face continued demands or later disputes about what was actually owed. Some assume that because the app is popular or was in the app store, it must be legitimate—yet numerous apps have operated without proper SEC registration.

Overseas Filipino workers often face extra pressure because agents target family members back home, creating emotional and sometimes financial strain on relatives. Unregistered or fly-by-night operators can be harder to pin down, but complaints to the NPC and SEC have still succeeded when victims provide strong documentation of the app’s operations and the specific harassing acts.

Third-party collection agencies sometimes claim they are “just doing their job,” but the lending company remains responsible for their agents’ actions under SEC rules.

Where to Report, Documents Needed, and Typical Timelines

National Privacy Commission
Required: Notarized Complaint Affidavit form (download from privacy.gov.ph), complete narrative, attached screenshots/logs/evidence, copy of valid ID.
Submission: Email scan to complaints@privacy.gov.ph, in person, or courier to NPC office (PIA Building, Quezon City).
Timeline: Investigations often take several months; urgent orders to stop processing can be issued faster in clear cases. Criminal referrals follow separate DOJ processes.

Securities and Exchange Commission
File administrative complaint with evidence of unfair collection practices or lack of registration. Check sec.gov.ph for current procedures and contact details for the Enforcement and Investor Protection Department.

Law Enforcement / Prosecutors
Barangay blotter + complaint-affidavit for threats or unjust vexation. Supporting documents: screenshots, call logs, witness statements, medical records if anxiety or stress required treatment.
Criminal cases can take longer (preliminary investigation to trial), but penalties under the Revised Penal Code and Cybercrime Act include fines and imprisonment.

Civil Damages Suit
Complaint with evidence of harm and violations. Court timelines vary widely depending on docket and complexity.

Always keep copies of everything you submit.

Frequently Asked Questions

Can online lending apps legally contact my family, friends, or employer about my debt?
No. Under the Data Privacy Act and SEC Memorandum Circular No. 18, s. 2019, disclosing your debt to third parties to shame or pressure you is prohibited in most circumstances. Mass-messaging contacts or involving your workplace is a frequent basis for successful NPC complaints and can also support criminal charges for unjust vexation or grave coercion.

Is it true that I can go to jail for not paying a lending app loan?
No. The 1987 Constitution prohibits imprisonment for debt. Threats of arrest or jail for simple non-payment are illegal and themselves constitute grave threats or unjust vexation under the Revised Penal Code. Only separate criminal acts (such as fraud in obtaining the loan) could lead to criminal liability.

What evidence works best for complaints against these apps?
Clear, timestamped screenshots of messages and posts, call logs with dates and times, records of third-party contacts, the original loan agreement, and any proof of harm (medical certificates, affidavits from affected family members). Preserve everything before deleting the app or messages.

How do I check if an online lending app or company is legitimate?
Search the exact company or developer name on the SEC website to verify registration as a lending or financing company. Many problematic apps are unregistered. You can also check recent SEC advisories on unauthorized lending activities.

Can I file complaints even if I am an OFW abroad or the app seems to have disappeared?
Yes. NPC complaints can be filed by email with notarized documents (you may need to have documents apostilled or authenticated depending on your location). Many victims abroad have successfully pursued cases through representatives or direct digital submission. Unregistered operators can still be pursued through the individuals or evidence of their operations in the Philippines.

If I settle the debt, will the harassment automatically stop?
Not always immediately, and some operators continue despite payment. Get any settlement in writing, including confirmation that all data will be deleted and all collection activity (including by agents) will cease. Continue documenting if harassment persists after settlement.

What if the interest rates or penalties look extremely high?
You can challenge them. The Supreme Court has repeatedly ruled that unconscionable or exorbitant interest and penalties are void. Only the legal rate generally applies in such cases. Raise this in negotiations or in court if sued.

Can my family members or contacts who were also harassed file their own complaints?
Yes. Anyone whose personal data was processed without proper basis or who was subjected to shaming or threats can file separate or supporting complaints with the NPC and law enforcement.

Do I need a lawyer to file complaints with the NPC or SEC?
No for the initial administrative complaints—you can file yourself with the required form and evidence. However, for criminal prosecution or a civil damages case, consulting a lawyer (or the Public Attorney’s Office if qualified) is strongly recommended for stronger presentation and court proceedings.

Key Takeaways

Harassment tactics such as contacting your network, public shaming, threats of jail, obscene language, and misuse of your personal data are illegal under the Data Privacy Act, SEC Memorandum Circular No. 18, s. 2019, the Revised Penal Code, and the Cybercrime Prevention Act.
Your duty to pay a valid debt never justifies illegal collection methods.
Preserve complete, timestamped evidence first—screenshots, logs, and third-party records are essential.
File with the National Privacy Commission for privacy violations, the SEC for unfair collection practices, and law enforcement for criminal threats or harassment. These remedies can proceed simultaneously.
Unconscionable interest or penalties can be challenged; only the legal rate typically applies when rates are voided by the courts.
Strong documentation and prompt reporting have led to app shutdowns, fines, and successful claims for damages in many documented cases.
You have real, enforceable rights. Taking systematic steps to document and report protects you and helps hold violators accountable under Philippine law.