A death threat from an online lending app is not “normal collection.” Even if you really owe money, a lender or collection agent cannot threaten to kill you, harm your family, shame you online, message your contacts, or scare you into paying through illegal means. In the Philippines, borrowers can pursue several remedies at the same time: an SEC complaint for unfair debt collection, an NPC complaint for misuse of personal data, and a criminal complaint with the PNP, NBI, or prosecutor for threats, harassment, cybercrime, or related offenses.

The Most Important Point: Debt Is Civil, Death Threats Are Criminal

A loan creates an obligation to pay. If the loan is valid, the lender may collect through lawful means: reminders, demand letters, restructuring, settlement, or a civil case such as small claims.

But the lender cannot turn a debt into a license to terrorize you.

The 1987 Constitution states that no person shall be imprisoned for debt or non-payment of a poll tax. That means a borrower generally cannot be jailed simply because they failed to pay a loan. However, a collector who threatens violence, uses fake criminal accusations, publicly shames the borrower, or misuses personal data may face administrative, civil, or criminal consequences. (Supreme Court E-Library)

In real life, abusive online lenders often say things like:

“Ipapapatay ka namin kapag hindi ka nagbayad.”
“Pupuntahan ka namin sa bahay ninyo.”
“Ipapahiya ka namin sa Facebook.”
“Tatawagan namin lahat ng contacts mo.”
“Ipapahuli ka namin for estafa kahit loan lang ito.”
“Send payment now or we will post your ID and pictures.”

Those messages should be documented carefully. They may support complaints for grave threats, unfair debt collection, data privacy violations, cyber libel, unjust vexation, or other offenses depending on the facts.

What Laws Protect Borrowers From Online Lending Death Threats?

Revised Penal Code: Grave Threats, Coercion, and Harassment

A death threat can fall under Article 282 of the Revised Penal Code on grave threats if the collector threatens to inflict a wrong amounting to a crime against your person, honor, property, or family. The law treats the threat more seriously when it is made in writing or through a middleman, which can matter when threats are sent by text, chat, social media message, or a third-party collector. (Lawphil)

Depending on the exact message and conduct, other Revised Penal Code provisions may also be relevant:

Conduct by collector	Possible legal issue
“I will kill you” or “We will harm your family”	Grave threats under Article 282
Threatening a wrong not amounting to a crime	Light threats under Article 283 or other light threats under Article 285
Forcing the borrower to do something through threats or intimidation	Grave coercion or related coercion issues under Articles 286–287
Repeated insults, intimidation, or tormenting messages	Unjust vexation under Article 287, depending on facts
Publicly calling the borrower a scammer, criminal, or estafador without basis	Possible libel or cyber libel
Contacting employers, relatives, or friends with false claims	Possible unfair collection, data privacy violation, defamation, or civil damages

The exact charge is usually determined by the police investigator, cybercrime investigator, prosecutor, or court after reviewing the messages, call logs, witness statements, and surrounding circumstances.

Cybercrime Prevention Act: When the Threat Is Sent Online

If the threats are sent through Facebook Messenger, Viber, WhatsApp, Telegram, SMS, email, app notifications, or other electronic means, the Cybercrime Prevention Act of 2012, Republic Act No. 10175, may apply.

RA 10175 covers certain computer-related and content-related offenses, including computer-related identity theft and cyber libel. It also provides that crimes under the Revised Penal Code and special laws, when committed through information and communications technology, are covered by the Cybercrime Prevention Act, with a higher penalty where applicable. (Supreme Court E-Library)

This matters because many abusive online lending cases are not just “debt collection.” They involve digital conduct such as:

fake social media accounts used to threaten borrowers;
messages sent to the borrower’s entire contact list;
public posts using the borrower’s name, photo, ID, or workplace;
threats sent through multiple phone numbers or messaging apps;
fake accusations of estafa, theft, or fraud;
edited photos or humiliation posts.

RA 10175 also gives the NBI and PNP authority to handle cybercrime investigations, and it contains rules on preservation and disclosure of computer data through proper legal process. Service providers may be required to preserve traffic data and subscriber information for specific periods, while disclosure generally requires proper authority or a court warrant. (Supreme Court E-Library)

SEC Rules: Unfair Debt Collection by Lending and Financing Companies

The Securities and Exchange Commission regulates lending companies and financing companies. Under SEC Memorandum Circular No. 18, Series of 2019, financing companies, lending companies, and their third-party service providers may collect debts only through reasonable and legally permissible means.

SEC MC No. 18 identifies unfair collection practices, including:

use or threat of violence or other criminal means to harm a person, reputation, or property;
threats to take action that cannot legally be taken;
obscenities, insults, or profane language that abuse the borrower or amount to a criminal offense;
disclosure or publication of names and personal information of borrowers who allegedly refuse to pay;
communicating false loan information or failing to say that a debt is disputed;
false representations or deceptive means to collect;
contacting at unreasonable or inconvenient times, subject to the circular’s stated exceptions;
contacting people in the borrower’s contact list other than those named as guarantors or co-makers.

The same circular states that collection outsourcing does not let the lender escape responsibility. If the lender hires a third-party collector, that collector is treated as the lender’s agent for collection purposes, and the ultimate responsibility remains with the financing or lending company.

SEC penalties under the circular can include fines, suspension of lending or financing activities, or revocation of the company’s Certificate of Authority, depending on the offense and circumstances.

Financial Consumer Protection Act: Borrowers Must Be Treated Fairly

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, strengthens the rights of financial consumers. It applies to financial products and services, including credit products, and empowers regulators such as the SEC and BSP to act against abusive practices.

RA 11765 specifically provides for fair and respectful treatment of clients, prohibits abusive collection or debt recovery practices, requires financial service providers to protect client data, and makes providers responsible for acts or omissions of their agents in marketing and transactions, including debt collection. (Supreme Court E-Library)

This is important in online lending harassment because many lenders blame “third-party collectors.” Under Philippine financial consumer protection rules, that excuse is weak if the collector was acting for the lender.

Data Privacy Act: Contact List Harassment Can Be a Separate Violation

The Data Privacy Act of 2012, Republic Act No. 10173, protects personal information. Personal data must be processed with transparency, legitimate purpose, and proportionality. It must be adequate and not excessive for the purpose for which it was collected. (Supreme Court E-Library)

In online lending cases, common data privacy violations include:

accessing the borrower’s phone contacts without a valid and proportionate purpose;
messaging relatives, friends, employers, or co-workers who are not guarantors;
telling third parties about the borrower’s alleged debt;
posting the borrower’s ID, selfie, workplace, address, or loan details;
using personal data to shame, threaten, or coerce payment;
processing data for a purpose beyond what the borrower validly consented to.

The NPC has previously recommended prosecution of an online lending operator after complaints that its app accessed contact lists, contacted third persons, disclosed loan information, and used personal data to damage reputation, harass, threaten, or coerce borrowers. (National Privacy Commission)

In 2026, the DICT, NPC, and SEC issued a public advisory on online lending platforms, reiterating that unnecessary app permissions, excessive processing of contact lists, harassment, public shaming, threats of violence, and contacting people in the borrower’s contact list other than guarantors are prohibited.

What Borrowers Should Do Immediately After Receiving Death Threats

1. Prioritize Safety First

If the threat sounds immediate or specific, do not treat it as “just chat.”

Take urgent steps:

Go to a safe place.
Inform a trusted family member or friend.
Report to the nearest police station or barangay for immediate assistance.
If there is an imminent danger, call emergency responders or the nearest PNP station.
Do not agree to meet the collector alone.

A police blotter does not automatically file a criminal case, but it creates an official record of the incident. For serious threats, ask what unit will handle the investigation and whether you should file directly with the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or prosecutor’s office.

2. Preserve Evidence Before Blocking or Deleting

Many borrowers block the number immediately. That is understandable, but first preserve the evidence.

Save:

screenshots of the full conversation, not just the threatening line;
the sender’s phone number, username, profile URL, email address, or account link;
date and time shown on the phone;
call logs and missed calls;
voice recordings or voicemail, if any;
screen recordings showing the account profile and messages;
loan app name, app store page, website, and privacy policy;
loan agreement, disclosure statement, repayment schedule, and payment receipts;
proof of any messages sent to your contacts;
affidavits or written statements from contacts who received harassment messages.

Do not edit screenshots. Do not crop out the number, date, account name, or surrounding messages. If possible, keep the original device because electronic evidence may later need authentication.

Under the Rules on Electronic Evidence, a party presenting an electronic document has the burden of proving authenticity. Courts look at whether the evidence is reliable and properly authenticated, so preserving the original messages and device can be important. (Lawphil)

3. Identify the Actual Lending Company

Online lending apps often use app names different from the registered company name. Try to identify:

app name;
corporate name;
SEC registration number;
Certificate of Authority number, if shown;
website;
email address;
office address;
payment recipient account;
collector name or alias;
third-party collection agency, if disclosed.

If you cannot identify the company, still file the report. Investigators may use phone numbers, payment accounts, app data, platform records, or subscriber information to trace the responsible parties.

4. File an SEC Complaint for Unfair Debt Collection

For abusive collection by lending companies, financing companies, and online lending platforms, file a complaint with the Securities and Exchange Commission, particularly its Financing and Lending Companies Department.

The 2026 DICT-NPC-SEC advisory tells the public to report unfair debt collection practices to the SEC through imessage.sec.gov.ph and the SEC hotline 1-4732 / 1-4SEC.

Include:

your name and contact details;
app name and company name, if known;
loan account details;
screenshots of threats;
proof of messages to your contacts;
call logs;
names or numbers of collectors;
a short timeline of events;
what relief you are requesting, such as investigation, sanctions, stopping abusive collection, or correction of records.

The SEC complaint is administrative. It can lead to regulatory action against the company, fines, suspension, or revocation, but it is not a substitute for a criminal complaint if there are death threats.

5. File an NPC Complaint for Contact List Harassment or Data Misuse

If the lender accessed your contacts, messaged your family, posted your personal information, or used your data to shame you, file a complaint with the National Privacy Commission.

The NPC’s formal complaint procedure requires a complaint in the proper format. The NPC instructs complainants to download the form, fill it out, have it notarized, and submit it in person, by courier, or by scanned email. (National Privacy Commission)

Attach evidence showing:

the app requested unnecessary permissions;
your contacts were messaged;
the message disclosed your debt or personal information;
the contact was not a guarantor;
your personal data was posted, shared, or misused;
you tried to raise the issue with the lender, if you did.

NPC proceedings can take time, especially if the case requires evaluation, orders to comment, mediation, investigation, or recommendation for prosecution. But a well-documented complaint is often stronger than a general statement that “the app harassed me.”

6. File a Criminal Complaint With PNP, NBI, or the Prosecutor

For death threats, serious intimidation, fake criminal accusations, identity misuse, or cyber harassment, consider filing a criminal complaint.

You may report to:

Office	When it is useful	What to bring
Local police station	Immediate safety threat, blotter, first response	ID, screenshots, phone, witnesses
PNP Anti-Cybercrime Group	Threats or harassment through online accounts, SMS, messaging apps, fake profiles	Phone/device, screenshots, account links, URLs, call logs
NBI Cybercrime Division	Cybercrime investigation, tracing accounts, serious online threats	Same digital evidence, IDs, affidavit
City or Provincial Prosecutor	Filing a criminal complaint for preliminary investigation	Complaint-affidavit, evidence, witness affidavits

The 2026 public advisory lists the NBI Cybercrime Division and PNP Anti-Cybercrime Group among the authorities for other forms of harassment, threats, frauds, and scams.

A criminal complaint usually requires a complaint-affidavit, which is your sworn written statement. It should clearly state:

who you are;
how you obtained the loan;
what app or lender was involved;
what threats were made;
when and how the threats were sent;
why you believe the respondent is connected to the lender;
what evidence supports your complaint;
names of witnesses or contacts who were also harassed.

If the collector is unknown, you can still describe the phone number, account name, payment account, app, and company. The investigating agency or prosecutor will determine how to proceed.

Documents and Evidence Checklist

Evidence	Why it matters
Government ID	Establishes identity of complainant
Loan agreement or app screenshots	Shows lender, loan amount, terms, and relationship
Disclosure statement / repayment schedule	Helps identify loan and charges
Payment receipts	Shows payments already made
Screenshots of threats	Main proof of threatening language
Full chat thread	Shows context and sender identity
Call logs	Shows frequency and timing of calls
Screen recording	Helps prove account profile and messages are real
Witness screenshots from contacts	Proves third-party harassment
Affidavits of relatives, friends, employer, or co-workers	Supports privacy, defamation, or harassment claims
App permissions screenshot	Useful for data privacy issues
SEC registration or company details	Helps identify respondent
Police blotter	Creates immediate official record

Practical Timelines and What to Expect

Action	Typical practical timeline	Common bottleneck
Police blotter	Same day	Station may treat it as “debt issue” unless threats are clearly shown
PNP/NBI cyber report	Same day to several weeks for initial action	High case volume; need complete digital details
SEC complaint	Days to weeks for docketing/initial action	Identifying the registered company behind the app
NPC complaint	Weeks to months	Formal complaint requirements, notarization, completeness of evidence
Prosecutor complaint	Several months or more	Subpoena, counter-affidavit, clarificatory hearings, resolution
Court case	Months to years	Congested dockets, difficulty identifying collectors

A common mistake is filing only one complaint when several legal issues exist. For example, if the collector says “I will kill you,” posts your ID online, and messages your employer, that may justify separate action with law enforcement, the SEC, and the NPC.

Common Scenarios

The lender messaged my contacts. Is that legal if I allowed app permissions?

Not necessarily. Broad app permission does not automatically allow harassment, debt shaming, or messaging your entire contact list. The 2026 DICT-NPC-SEC advisory states that contacting persons in the borrower’s contact list other than those named as guarantors is prohibited for debt collection. It also says guarantors must give separate consent before being bound to any obligation.

The collector said they will file estafa if I do not pay today. Can they do that?

A lender may file a legitimate legal complaint if there is a real criminal basis, such as fraud from the beginning. But a simple inability to pay a loan is generally civil. Threatening criminal action that cannot legally be taken may be unfair debt collection under SEC rules.

The online lender is not registered. Can I still complain?

Yes. In fact, lack of registration can make the situation more serious. File reports with the SEC, PNP, NBI, and NPC as appropriate. Provide the app name, website, phone numbers, payment accounts, and screenshots.

I am an OFW or foreigner outside the Philippines. Can I still complain?

Yes, but practical requirements may be harder. If you need to submit a sworn affidavit from abroad, ask the receiving agency whether it will accept a notarized, consularized, or apostilled document. For foreign-issued public documents used in the Philippines, apostille or consular authentication rules may matter depending on the country. The DFA’s Apostille resources explain current authentication processes for documents. (Apostille Philippines)

For urgent cyber threats, you can also ask a trusted representative in the Philippines to help preserve evidence, coordinate with agencies, and receive notices, but the complaint-affidavit should come from the person with direct knowledge whenever possible.

Frequently Asked Questions

Can an online lending app legally threaten to kill me if I do not pay?

No. A death threat may be treated as a criminal matter, not lawful collection. It may also be an unfair debt collection practice and, if sent through electronic means, may involve cybercrime issues.

Can I go to jail for not paying an online loan in the Philippines?

Generally, no one is imprisoned merely for debt. The lender’s remedy for an unpaid loan is usually civil collection. However, separate criminal liability may arise if there is fraud, identity misuse, falsified documents, or another crime independent of mere non-payment.

Where do I report online lending death threats?

For immediate danger, report to the nearest police station. For online threats, report to the PNP Anti-Cybercrime Group or NBI Cybercrime Division. For unfair debt collection, report to the SEC. For misuse of personal data or contact list harassment, report to the NPC.

What if the collector uses many different numbers?

Save each number and screenshot. Do not assume the case is hopeless. Multiple numbers can still be connected through payment accounts, scripts, app records, call logs, or digital investigation.

Is it legal for the lender to call my employer or relatives?

It is highly problematic if they disclose your debt, shame you, threaten them, or contact people who are not guarantors. The 2026 advisory states that, for debt collection, lenders and those acting for them may only contact the guarantor.

Can I file both SEC and NPC complaints?

Yes. SEC complaints focus on lending and financing regulation and unfair debt collection. NPC complaints focus on personal data misuse. If the conduct involves both abusive collection and unlawful data processing, both agencies may be relevant.

Should I still pay the loan after receiving threats?

If the loan is valid, the obligation may still exist. But payment should not be made because of death threats or coercion. Keep records of all payments, ask for an updated statement of account, and avoid sending money to suspicious personal accounts without proof that the payment will be credited to your loan.

What if the app posted my face, ID, or loan details online?

Take screenshots immediately, including the URL, profile, date, time, caption, comments, and shares. Report the post to the platform, then include the evidence in your SEC, NPC, and possibly criminal complaint. Public posting can raise privacy, defamation, cybercrime, and civil damages issues.

Do I need a lawyer to file a complaint?

Many administrative and criminal complaints can be initiated by the borrower personally, especially when the evidence is clear. However, legal assistance can be helpful for drafting affidavits, organizing evidence, identifying proper respondents, and pursuing civil damages or criminal remedies.

Can I sue for damages?

Yes, depending on the facts. Civil Code Articles 19, 20, 21, and 26 require people to act with justice, honesty, good faith, and respect for dignity, privacy, and peace of mind. Conduct that humiliates, harasses, or injures another person may support a civil action for damages even apart from administrative or criminal complaints. (Lawphil)

Key Takeaways

Owing money does not give an online lender the right to threaten, shame, or harass you.
Death threats may be criminally actionable under the Revised Penal Code and, if sent online, may also involve the Cybercrime Prevention Act.
SEC MC No. 18 prohibits violent threats, unlawful threats, insults, public shaming, deceptive collection, and improper contact with people in the borrower’s contact list.
Contact list harassment and public posting of borrower information may violate the Data Privacy Act and NPC rules.
File with the right office: police/PNP/NBI for threats, SEC for unfair debt collection, NPC for data misuse.
Preserve complete evidence before blocking, deleting, uninstalling, or changing phones.
The debt may still be payable if valid, but collection must remain lawful, fair, and respectful.