I. Introduction

Online lending has become common in the Philippines because it offers fast access to cash through mobile applications, websites, e-wallet integrations, and digital loan platforms. Many borrowers turn to online lending companies because the process is quick, document requirements are minimal, and approval can happen within minutes.

However, this convenience has also produced serious abuses. Some online lending platforms and collection agents engage in harassment, public shaming, threats, unauthorized access to phone contacts, abusive text blasts, excessive collection calls, fake legal notices, social media exposure, and misuse of personal data. These practices may violate Philippine laws on lending, consumer protection, debt collection, cybercrime, criminal threats, and data privacy.

The central legal point is this:

A borrower’s failure to pay a debt does not give a lender the right to harass, shame, threaten, defame, deceive, or misuse personal data.

A lender may collect a valid debt through lawful means. But the lender must respect the borrower’s rights, dignity, privacy, and due process.

II. Nature of Online Lending in the Philippines

Online lending usually involves a loan contract entered into through a mobile app, website, chat platform, or digital marketplace. The lender may be:

A financing company;
A lending company;
A digital lending platform;
A loan app operator;
A third-party collection agency;
An informal online lender;
A foreign-operated lending app;
A scam operation pretending to be a lender.

Online lenders commonly require borrowers to submit:

Full name;
Address;
Mobile number;
Government ID;
Selfie or facial verification;
Bank or e-wallet details;
Employment information;
Emergency contacts;
Phone contact access;
Device permissions;
Location data;
Social media information;
Income details.

These data points are sensitive because they can be weaponized against borrowers when collection becomes abusive.

III. The Main Problem: Debt Collection Abuse

A valid loan does not authorize unlawful collection practices. Even if the borrower is in default, lenders and collectors must use lawful, fair, and proportionate methods.

Abusive online lending practices may include:

Calling the borrower repeatedly at unreasonable hours;
Sending threats of arrest or imprisonment;
Threatening to contact the borrower’s employer;
Contacting all phone contacts;
Sending humiliating messages to relatives, friends, co-workers, or clients;
Posting the borrower’s photo or ID online;
Calling the borrower a scammer, thief, criminal, or estafador;
Creating group chats to shame the borrower;
Sending fake barangay, police, court, or prosecutor notices;
Using profane, insulting, or sexually abusive language;
Threatening physical harm;
Threatening to kidnap, stalk, or visit the borrower’s home;
Threatening to disclose private information;
Editing the borrower’s photo into defamatory images;
Sending messages to the borrower’s children, spouse, parents, employer, or neighbors;
Using the borrower’s contact list without consent;
Refusing to identify the lender or collector;
Charging undisclosed or excessive fees;
Collecting loans already paid;
Harassing the borrower over another person’s debt.

Many of these practices may create civil, criminal, administrative, and data privacy liability.

IV. Borrowing Money Is Not a Crime

One of the most common threats made by abusive online lenders is that the borrower will be arrested or jailed for non-payment.

As a general rule, mere inability to pay a debt is not a crime. The Philippine Constitution protects against imprisonment for debt. A creditor may file a civil case for collection of sum of money, but a debtor is not jailed simply because he or she failed to pay.

However, criminal liability may arise if there is fraud, deceit, falsification, use of fake identity, issuance of bouncing checks, or other independent criminal conduct. But the lender cannot automatically label every unpaid loan as estafa.

Thus, messages such as “you will be arrested today,” “police are on the way,” or “we filed a criminal case and you will go to jail” may be misleading or unlawful if no proper basis exists.

V. Legal Framework

Online lending harassment may implicate several areas of Philippine law:

Data Privacy Act;
Lending Company Regulation Act;
Financing Company Act;
SEC rules and regulations on lending and financing companies;
Consumer protection rules;
Civil Code provisions on damages, abuse of rights, and human dignity;
Revised Penal Code provisions on threats, coercion, unjust vexation, slander, libel, grave coercion, and other offenses;
Cybercrime Prevention Act, where online communications or computer systems are used;
Anti-Violence Against Women and Their Children law, if harassment occurs in a domestic context;
Labor-related concerns, if the borrower’s workplace is contacted;
Special laws on identity theft, electronic evidence, and online abuse where applicable.

A borrower may have multiple remedies depending on the facts.

VI. Data Privacy Act Issues

The Data Privacy Act of 2012 is one of the most important laws in online lending harassment cases. Online lenders process large amounts of personal information. They must do so lawfully, fairly, transparently, and only for legitimate purposes.

A. Personal Information

Personal information includes information from which a person’s identity is apparent or can reasonably be determined.

For online lending, this may include:

Name;
Address;
Phone number;
Email address;
Employer;
ID number;
Selfie;
Device data;
Contacts;
Location;
Loan history;
Payment records;
Chat logs.

B. Sensitive Personal Information

Sensitive personal information includes more protected categories, such as:

Government-issued ID information;
Health information;
Biometric data;
Financial information where applicable;
Data involving proceedings or offenses;
Other information classified as sensitive under law.

Government ID images, facial verification, and financial details require stricter handling.

C. Data Collection Must Be Lawful and Proportionate

A lender may collect data necessary to evaluate and administer a loan. But it should not collect excessive information unrelated to lending.

For example, an app that demands full access to contacts, photos, messages, call logs, location, and social media accounts may be collecting more than necessary.

The principle is proportionality: the lender should collect only what is necessary for a legitimate purpose.

D. Consent Must Be Real and Informed

Many online lenders rely on app permissions and privacy policies. However, consent should be informed, specific, and freely given. It should not be hidden in confusing terms or obtained through deceptive interface design.

A borrower’s consent to apply for a loan does not automatically mean consent to:

Harass contacts;
Publicly shame the borrower;
Post the borrower’s photo online;
Use contact lists for collection blasts;
Send defamatory messages to employers;
Access unrelated device data;
Sell data to third parties;
Use data for threats or intimidation.

Consent cannot legalize abusive or unlawful acts.

E. Purpose Limitation

Data collected for loan processing should be used for legitimate lending purposes. It should not be repurposed for harassment, humiliation, or public shaming.

If a lender collects an emergency contact for verification, it should not use that contact to broadcast accusations, threats, or defamatory statements.

F. Transparency

Borrowers must be informed about:

What data is collected;
Why it is collected;
How it will be used;
Who will receive it;
How long it will be stored;
How the borrower may exercise data rights;
How to contact the data protection officer;
Whether data will be shared with collection agencies.

Vague privacy policies may be insufficient if they fail to clearly explain actual collection and collection practices.

G. Unauthorized Disclosure

Sending a borrower’s loan information to contacts, relatives, co-workers, or social media groups may be unauthorized disclosure of personal information.

Even if the borrower gave an emergency contact, that does not automatically authorize disclosure of the borrower’s full debt details to everyone in the phonebook.

H. Security Obligation

Lenders must protect borrower data. If borrower data is leaked, sold, exposed, or accessed by unauthorized collectors, the lender may face data privacy liability.

I. Rights of the Data Subject

Borrowers have data privacy rights, including the right to:

Be informed;
Access their personal data;
Object to improper processing;
Correct inaccurate data;
Erase or block unlawfully processed data;
File complaints;
Seek damages for privacy violations where proper.

These rights are especially relevant where a borrower wants the lender to stop contacting unrelated third parties or delete unlawfully collected contact data.

VII. Common Data Privacy Violations by Online Lending Apps

A. Unauthorized Access to Contacts

One of the most abusive practices is harvesting a borrower’s phone contacts and using them for collection pressure.

This may violate data privacy principles because the borrower’s contacts did not consent to have their information collected or used by the lender.

The borrower may also not have given valid consent for the lender to access, store, or message the full contact list.

B. Contacting Third Parties About the Debt

A lender may have a legitimate reason to contact a named reference or co-maker in limited circumstances. But mass messaging friends, relatives, co-workers, neighbors, or clients may be unlawful.

Messages such as “Your friend is a scammer,” “Tell her to pay,” or “We will file a case against your whole family” may violate privacy and defamation laws.

C. Public Shaming

Posting the borrower’s name, photo, ID, loan details, or accusations online is highly risky and may be unlawful.

Public shaming may give rise to:

Data privacy complaint;
Cyberlibel complaint;
Civil damages;
Administrative sanctions;
Criminal complaint for threats or coercion depending on content.

D. Use of Borrower’s ID Photos

Some lenders use the borrower’s ID photo or selfie in threatening posters or messages. This is a serious misuse of personal and possibly sensitive personal information.

E. Fake Legal Notices

Some collectors send documents that look like court orders, police notices, barangay summons, or prosecutor subpoenas even when no case exists.

This may be deceptive, coercive, or potentially criminal depending on the facts.

F. Excessive App Permissions

Loan apps may request permissions unrelated to lending, including access to:

Contacts;
Gallery;
SMS;
Call logs;
Location;
Camera;
Microphone;
Social media accounts.

Excessive permissions may support a privacy complaint, especially if the data is later used for harassment.

G. Sharing Data With Unidentified Collection Agents

Borrowers often receive messages from unknown numbers claiming to be collectors. If the lender discloses borrower data to third-party collectors without transparency, safeguards, or lawful basis, privacy issues arise.

VIII. Harassment as Unfair Debt Collection

Debt collection must be fair, truthful, and respectful. Online lending harassment may be actionable even apart from data privacy.

Unfair collection practices may include:

Threatening criminal prosecution without basis;
Threatening imprisonment for debt;
Using obscene or insulting language;
Contacting borrowers at unreasonable hours;
Contacting employers to embarrass the borrower;
Misrepresenting legal status of a claim;
Falsely claiming to be a lawyer, court officer, police officer, or government agent;
Threatening violence;
Threatening public exposure;
Harassing people who are not borrowers;
Collecting undisclosed charges;
Refusing to provide a statement of account;
Continuing harassment after payment;
Using fake names or unregistered entities.

A lender has the right to demand payment, but not to abuse that right.

IX. Civil Liability

A borrower may consider a civil action for damages if harassment caused injury.

Civil liability may be based on:

Abuse of rights;
Acts contrary to morals, good customs, or public policy;
Violation of dignity, personality, privacy, and peace of mind;
Defamation;
Breach of contract;
Negligent or unlawful processing of personal data;
Intentional infliction of harm through abusive conduct;
Damages arising from unlawful collection.

Possible damages include:

Actual damages;
Moral damages;
Exemplary damages;
Attorney’s fees;
Litigation costs.

A. Actual Damages

Actual damages require proof of measurable loss, such as:

Lost employment;
Lost business clients;
Medical expenses;
Counseling expenses;
Cost of changing phone number;
Lost income due to reputational harm;
Expenses incurred in responding to the harassment.

B. Moral Damages

Moral damages may be claimed for mental anguish, serious anxiety, social humiliation, besmirched reputation, wounded feelings, or similar injury, if legally justified and proven.

Online lending harassment often causes intense distress because collectors target family, employers, and social networks.

C. Exemplary Damages

Exemplary damages may be available if the conduct was wanton, oppressive, malicious, fraudulent, or socially harmful.

D. Attorney’s Fees

Attorney’s fees may be claimed where the borrower was compelled to litigate because of the lender’s unjustified acts.

X. Criminal Liability

Some collection tactics may expose lenders, employees, or collection agents to criminal liability.

A. Grave Threats

If a collector threatens to harm the borrower, the borrower’s family, property, reputation, or livelihood, the facts may support a complaint for threats.

Examples:

“We will hurt you if you do not pay.”
“We will go to your house and destroy your things.”
“We will abduct you.”
“We will make sure something happens to your family.”

The seriousness depends on the exact wording, context, and evidence.

B. Grave Coercion

If the collector uses threats, violence, or intimidation to force the borrower to do something against his or her will, coercion may be considered.

C. Unjust Vexation

Persistent harassment, repeated abusive calls, insults, and annoying conduct may amount to unjust vexation depending on the circumstances.

D. Slander or Oral Defamation

If collectors verbally accuse the borrower of being a criminal, scammer, thief, or immoral person, especially to third parties, oral defamation may be considered.

E. Libel or Cyberlibel

Written defamatory messages may constitute libel. If made through online platforms, social media, messaging apps, or digital communications, cyberlibel issues may arise.

Examples include:

Posting the borrower’s photo with “scammer”;
Messaging co-workers that the borrower is a criminal;
Creating a public post accusing the borrower of fraud;
Sending defamatory group chat messages.

F. Identity Misuse and Falsification

If the collector uses fake government notices, fake court documents, or false identities, other criminal laws may be implicated.

G. Estafa Allegations by Lenders

Lenders often threaten estafa. But a loan default is not automatically estafa. Estafa requires elements such as deceit, abuse of confidence, or fraudulent intent depending on the mode.

A borrower who genuinely intended to pay but later became unable to do so should not automatically be treated as a criminal.

However, borrowers should not submit fake IDs, false employment information, fabricated documents, or intentionally fraudulent applications, as those may create criminal exposure.

XI. Cybercrime Issues

Because online lending harassment often occurs through phones, apps, messages, and social media, cybercrime law may be relevant.

Possible cyber-related issues include:

Cyberlibel;
Computer-related identity theft;
Illegal access;
Misuse of computer systems;
Unauthorized data processing;
Online threats;
Use of electronic evidence;
Fake websites or phishing links;
Malicious use of borrower photos or IDs;
Unauthorized account access.

The use of technology can aggravate the harm because messages spread quickly and can be permanently saved or shared.

XII. Administrative Remedies

Borrowers may file complaints with appropriate government agencies, depending on the nature of the violation.

A. National Privacy Commission

For data privacy violations, the borrower may complain to the National Privacy Commission.

Complaints may involve:

Unauthorized access to contacts;
Unauthorized disclosure of loan details;
Public posting of personal data;
Use of ID photos for harassment;
Failure to honor data subject rights;
Excessive data collection;
Lack of privacy notice;
Unlawful sharing with collection agents;
Data breach;
Refusal to delete unlawfully processed data.

B. Securities and Exchange Commission

Lending and financing companies are generally subject to regulation. Complaints may be brought to the SEC where the lender is a registered lending or financing company, or where an entity is operating without proper authority.

SEC-related complaints may involve:

Unregistered lending operations;
Abusive collection practices;
Excessive or undisclosed charges;
Misrepresentation;
Violation of lending company rules;
Failure to disclose corporate identity;
Use of abusive collection agents;
App-based harassment;
Operating despite revoked or suspended authority.

C. Department of Trade and Industry

If consumer protection issues are involved, DTI remedies may be considered, especially where deceptive, unfair, or unconscionable practices are present.

D. Bangko Sentral ng Pilipinas

If the lender is connected with a BSP-supervised financial institution, e-wallet, payment provider, or bank, complaints may be directed through appropriate channels.

E. Police or Cybercrime Authorities

For threats, cyberlibel, identity misuse, hacking, or online fraud, law enforcement and cybercrime units may be approached.

F. Barangay

Some disputes may begin at the barangay level, especially if the collector or lender is local. However, barangay proceedings may not be appropriate for all online lending or cybercrime cases, especially where parties are in different cities or the issue involves regulated entities.

XIII. Remedies Against Unregistered or Illegal Online Lenders

Some loan apps operate without proper registration or authority. Borrowers should check whether the entity is legitimate.

If the lender is unregistered, remedies may include:

Complaint to SEC;
Complaint to app stores;
Complaint to payment channels;
Police or cybercrime complaint for fraud or harassment;
Data privacy complaint;
Blocking and reporting abusive numbers;
Civil or criminal action against identifiable individuals;
Reporting fake legal threats.

An unregistered lender may still try to collect. But lack of proper authority may expose it to regulatory sanctions and may affect enforceability of charges.

Borrowers should distinguish between the obligation to repay money actually received and the lender’s unlawful collection methods. Even if a loan exists, unlawful harassment remains actionable.

XIV. Excessive Interest, Hidden Charges, and Unfair Terms

Many online lending disputes arise because the amount demanded is far higher than the amount borrowed. Some apps advertise low interest but impose:

Processing fees;
Service fees;
Platform fees;
Penalties;
Daily overdue charges;
Collection fees;
Extension fees;
Insurance fees;
Disbursement fees;
Hidden deductions.

For example, a borrower may apply for PHP 5,000 but receive only PHP 3,500 after deductions, then be required to repay PHP 5,500 within seven days. This structure may be challenged if charges were not properly disclosed or are unconscionable.

Borrowers should demand a detailed statement of account showing:

Principal;
Interest rate;
Fees;
Penalties;
Payment history;
Remaining balance;
Legal basis of charges;
Name of the creditor;
Registration details of the lender.

Unconscionable charges may be reduced or invalidated in appropriate proceedings.

XV. Employer Harassment

Contacting a borrower’s employer is a common intimidation tactic.

A lender may not freely disclose a borrower’s debt to an employer just to shame the borrower. Such disclosure may violate privacy rights, damage employment, and constitute harassment.

Employer harassment may include:

Calling HR repeatedly;
Telling supervisors the borrower is a scammer;
Sending the borrower’s ID and debt details to co-workers;
Threatening to file complaints at work;
Claiming the borrower committed a crime;
Asking the employer to deduct salary without lawful basis;
Threatening to have the borrower fired.

If the borrower loses work or suffers disciplinary consequences due to false or unauthorized disclosures, damages may be sought.

XVI. Harassment of Family, Friends, and Contacts

Online lenders often pressure borrowers by contacting relatives and friends.

This is especially problematic when:

The contact is not a co-maker or guarantor;
The contact did not consent to be contacted;
The message discloses loan details;
The message uses shame or insults;
The message threatens the contact;
The message falsely says the contact is liable;
The message asks the contact to pay;
The message sends the borrower’s photo or ID;
The message creates reputational harm.

A person who is merely in the borrower’s phonebook is generally not liable for the borrower’s debt.

Contacts who are harassed may also have their own complaints, especially if their personal data was collected and used without consent.

XVII. Threats of Barangay, Police, Court, or NBI Action

Many collectors use fake or exaggerated legal threats.

Common examples:

“Your barangay case is filed.”
“Police will arrest you today.”
“NBI warrant issued.”
“Court sheriff will seize your property.”
“Subpoena is ready.”
“You are blacklisted nationwide.”
“Immigration hold departure order issued.”
“Your employer will be notified by court.”
“You are charged with syndicated estafa.”
“Your relatives will be included in the case.”

A lawful case requires actual filing before the proper office, proper notices, and due process. A private collector cannot issue warrants, subpoenas, court orders, or police directives.

Fake legal threats can support complaints for harassment, misrepresentation, and possibly criminal offenses.

XVIII. Borrower Rights During Collection

A borrower has rights even when in default.

The borrower may:

Ask for the collector’s full name, company, and authority;
Ask for the lender’s registration details;
Demand a statement of account;
Ask for the legal basis of charges;
Refuse abusive calls;
Keep communication in writing;
Object to unauthorized disclosure of personal data;
Demand that the lender stop contacting third parties;
Demand deletion of unlawfully collected contact data;
File complaints for harassment;
Negotiate payment terms;
Pay through traceable channels only;
Refuse to pay unknown collectors without proof of authority;
Preserve evidence;
Seek legal assistance.

Borrowers should not respond with threats or defamatory statements. The best approach is to remain factual and evidence-based.

XIX. What Borrowers Should Do Immediately

A borrower experiencing harassment should take practical steps.

Step 1: Preserve Evidence

Save:

Screenshots of messages;
Call logs;
Voice recordings where lawful and safe;
Names and numbers of collectors;
Dates and times;
Social media posts;
Group chat messages;
Messages sent to contacts;
Fake legal notices;
App permissions;
Privacy policy screenshots;
Loan agreement;
Disbursement records;
Payment receipts;
Statement of account;
Proof of harassment to employer or relatives.

Evidence should be organized chronologically.

Step 2: Revoke App Permissions

Borrowers may review phone settings and revoke unnecessary permissions such as contacts, photos, location, SMS, and call logs.

Uninstalling the app may help stop further data harvesting, although previously collected data may already be in the lender’s possession.

Step 3: Send a Written Objection

Send a written notice stating that the borrower objects to:

Harassment;
Threats;
Contacting third parties;
Disclosure of loan information;
Use of contacts;
Use of photos or ID;
Processing beyond legitimate collection;
Misrepresentation of legal consequences.

Step 4: Request Statement of Account

Ask for a clear computation of the debt.

Step 5: Pay Only Through Verified Channels

If the borrower intends to pay, payment should be made only to official channels. Avoid sending money to random personal accounts unless verified.

Step 6: File Complaints

File complaints with the proper agencies depending on the violation.

Step 7: Inform Contacts

If contacts are being harassed, tell them they are not automatically liable and ask them to preserve screenshots.

Step 8: Avoid Further Loans to Pay Harassing Lenders

Borrowers should avoid taking new high-cost loans to pay old online loans, as this may create a debt spiral.

XX. Sample Message to an Abusive Collector

A borrower may send a short written response such as:

I acknowledge your message regarding the alleged loan obligation. Please send a complete statement of account, the name and registration details of the lending company, your authority to collect, and the legal basis for all charges. I object to any harassment, threats, defamatory statements, and disclosure of my personal information to third parties. You are not authorized to contact my relatives, employer, friends, or phone contacts regarding this matter. Any further unlawful collection activity, unauthorized data processing, or public shaming will be documented and reported to the proper authorities.

This keeps the tone firm but professional.

XXI. Sample Data Privacy Demand

A borrower may write:

I hereby object to the processing, use, disclosure, and sharing of my personal information beyond legitimate loan administration and lawful collection. I demand that you stop accessing, using, or contacting persons in my phone contacts, employer, relatives, friends, and other third parties who are not parties to the loan. I further demand that you delete or block any unlawfully collected personal data and provide the identity of all persons or entities to whom my personal data has been disclosed.

This may support a later privacy complaint.

XXII. Sample Complaint Narrative

A complaint may state:

The date the loan was obtained;
The amount borrowed and amount received;
The amount demanded;
The name of the app or lender;
The permissions required by the app;
The dates of harassment;
The exact messages sent;
The persons contacted;
Whether photos or IDs were used;
Whether the lender threatened arrest or public shaming;
Whether the lender contacted the employer;
Whether the borrower suffered harm;
The relief requested.

A concise narrative is more effective than emotional general accusations. Attach evidence.

XXIII. Reliefs That May Be Requested

Depending on the forum, the borrower may ask for:

Cessation of harassment;
Deletion or blocking of unlawfully processed data;
Disclosure of data recipients;
Investigation of the lender;
Suspension or revocation of authority to operate;
Administrative fines;
Criminal investigation;
Civil damages;
Correction of records;
Removal of defamatory posts;
Written apology, where appropriate;
Accurate statement of account;
Restructuring or settlement;
Refund of excessive charges, where legally proper.

XXIV. Liability of Collection Agencies

Lenders often outsource collection to third-party agencies. This does not automatically absolve the lender.

A lender may still be liable if:

It authorized the collection agency;
It gave borrower data to the agency;
It failed to supervise the agency;
It benefited from abusive collection;
It ignored complaints;
It used agencies known for harassment;
It failed to impose privacy and collection safeguards.

The collection agency and individual collectors may also be directly liable for their own acts.

XXV. Liability of App Operators, Officers, and Employees

Depending on the facts, liability may extend to:

The lending company;
The financing company;
The app operator;
Directors and officers;
Data protection officer;
Collection manager;
Third-party collection agency;
Individual collectors;
Developers or affiliates involved in unlawful data processing;
Foreign principals with local operations.

For criminal acts, individual participation matters. For administrative and privacy violations, corporate responsibility may also be examined.

XXVI. When the Borrower Used False Information

Borrowers should understand that their own conduct matters.

If the borrower used:

Fake ID;
False name;
False employer;
Another person’s bank or e-wallet account;
Fraudulent documents;
Intentionally false representations;
Multiple accounts to evade payment;
Stolen identity;

then the lender may have stronger grounds for legal action. Data privacy rights do not excuse fraud.

However, even if the borrower made mistakes or defaulted, the lender still may not use harassment, threats, public shaming, or unlawful data disclosure.

XXVII. When the Loan Is Already Paid

Some borrowers continue to be harassed after payment. In that case, the borrower should gather:

Payment receipts;
Transaction reference numbers;
Screenshots of app balance;
Confirmation messages;
Bank or e-wallet records;
Messages showing continued collection.

The borrower may demand correction of records and cessation of collection. Continuing to collect a paid debt may support complaints for harassment, unfair collection, and damages.

XXVIII. When the Borrower Never Applied for the Loan

Some people receive collection messages for loans they never took. This may involve identity theft or mistaken identity.

Steps include:

Demand proof of loan application;
Request copy of alleged loan documents;
Ask for ID and account used;
Deny the debt in writing;
File identity theft or data privacy complaint if personal data was used;
Notify bank or e-wallet if accounts were compromised;
Preserve all collection messages;
Report the app or lender.

A person is not liable for a loan merely because someone used their number as a reference.

XXIX. Harassment of References and Emergency Contacts

References and emergency contacts have rights too.

A reference may tell the collector:

They are not the borrower;
They are not a co-maker or guarantor;
They do not consent to further contact;
They object to use of their personal data;
Further harassment will be reported.

A reference who receives defamatory or threatening messages may file their own complaint.

XXX. Difference Between Reference, Co-Maker, Guarantor, and Debtor

Collectors often confuse or intentionally blur these roles.

A. Reference

A reference merely confirms identity or contact information. A reference is not automatically liable for the loan.

B. Emergency Contact

An emergency contact may be contacted for limited legitimate reasons, but is not automatically liable.

C. Guarantor

A guarantor may be liable if there is a valid agreement to answer for the debt under legal requirements.

D. Co-Maker or Co-Borrower

A co-maker or co-borrower may be directly liable if they signed or agreed to the loan.

A lender cannot impose liability on someone simply because their name appears in the borrower’s contact list.

XXXI. The Role of Consent in Contacting Third Parties

Some loan apps include language saying the borrower authorizes the lender to contact references or phone contacts. Such clauses should not be treated as unlimited permission.

Even if the borrower agreed to some contact, the lender must still comply with law. The lender cannot:

Harass;
Defame;
Threaten;
Shame;
Disclose unnecessary details;
Use excessive data;
Contact unrelated persons indiscriminately;
Process third-party data without lawful basis.

Consent must be interpreted narrowly and lawfully.

XXXII. Loan App Permissions and Device Security

Borrowers should be cautious about app permissions.

Before installing or using a lending app, check if it requests access to:

Contacts;
Photos;
Camera;
Microphone;
SMS;
Call logs;
Location;
Installed apps;
Storage;
Social media accounts.

A legitimate lender should not need unlimited access to everything on the phone. Borrowers should avoid apps that require excessive permissions as a condition for borrowing.

After harassment begins, borrowers should:

Revoke permissions;
Uninstall suspicious apps;
Change passwords;
Enable two-factor authentication;
Check e-wallet and bank activity;
Warn contacts not to respond to suspicious messages;
Scan phone for malware;
Avoid clicking links from collectors.

XXXIII. Evidence Tips

Good evidence can make or break a complaint.

A. Screenshots

Screenshots should show:

Sender number or account;
Date and time;
Full message;
Context of conversation;
Group chat members, if relevant;
URLs or account names.

B. Call Logs

Keep records of repeated calls, including time and frequency.

C. Witnesses

Ask harassed contacts to save messages and prepare short written statements if needed.

D. App Evidence

Preserve:

App name;
Developer name;
Download page;
App permissions;
Privacy policy;
Terms and conditions;
Loan agreement;
Collection notices;
Account dashboard.

E. Payment Evidence

Save official receipts, transaction IDs, and bank/e-wallet screenshots.

F. Do Not Edit Evidence

Avoid cropping or editing screenshots in a way that removes context. Keep originals.

XXXIV. Settlement and Negotiation

Some borrowers prefer settlement. This is practical if the loan is valid and the borrower wants to stop escalation.

Settlement tips:

Demand written computation;
Negotiate reduction of excessive charges;
Pay only official channels;
Require written confirmation of full settlement;
Require cessation of collection;
Require correction or closure of account;
Require deletion of unnecessary personal data where legally proper;
Keep receipts;
Do not rely on verbal promises;
Avoid paying random collectors without authority.

A settlement of the debt does not automatically waive the borrower’s right to complain about prior harassment unless a valid waiver is knowingly executed. Even then, certain administrative or criminal matters may still proceed depending on law and public interest.

XXXV. Civil Collection Case by the Lender

A legitimate lender may file a civil case to collect unpaid debt.

In a civil collection case, the lender must prove:

Existence of the loan;
Identity of the borrower;
Amount released;
Terms and conditions;
Interest and fees;
Default;
Amount due.

The borrower may raise defenses such as:

Payment;
Excessive interest;
Hidden charges;
Lack of disclosure;
Identity theft;
Unconscionable terms;
No authority of lender;
Incorrect computation;
Invalid assignment to collector;
Harassment as basis for counterclaim.

A borrower should not ignore actual court documents. Fake threats are different from real summons.

XXXVI. Small Claims

Many loan collection cases may fall under small claims procedure if the amount is within the applicable threshold. Small claims are designed to be faster and simpler.

In small claims, the borrower should prepare:

Loan documents;
Payment receipts;
Statement of account;
Screenshots showing disputed charges;
Harassment evidence if relevant to counterclaim or defense;
Proof of settlement offers;
Proof that the lender is not the real creditor, if applicable.

XXXVII. When to Take Threats Seriously

Some threats are fake. But borrowers should take the following seriously:

Actual court summons;
Official subpoena from a prosecutor or law enforcement office;
Barangay notice from the proper barangay;
Written demand from a law office that identifies the client and obligation;
Notice from a regulator;
Bank or e-wallet fraud investigation notice.

Verify authenticity before responding. Do not ignore official documents, but also do not panic over screenshots sent by anonymous collectors.

XXXVIII. What Collectors Should Not Say

Collectors should avoid statements such as:

“You will be jailed for debt.”
“Police will arrest you today.”
“We will post your face online.”
“We will tell your employer you are a scammer.”
“Your family is also liable.”
“Your contacts must pay for you.”
“We have a warrant.”
“You are guilty of estafa already.”
“We will ruin your life.”
“We will come to your house and harm you.”
“Pay now or we will expose your ID.”
“Your children will be affected.”

Such statements can create liability.

XXXIX. What Lawful Collection Looks Like

A lawful collection process should generally involve:

Clear identification of lender and collector;
Accurate statement of account;
Reasonable communication times;
Professional language;
No threats of violence or imprisonment;
No public shaming;
No unnecessary disclosure to third parties;
Respect for privacy rights;
Written demand before legal action;
Filing of proper civil case if collection fails;
Compliance with regulator rules;
Proper handling of personal data.

A creditor may be firm without being abusive.

XL. Special Issue: Online Lending Apps and Foreign Operators

Some online lending apps may be operated by foreign entities using local agents, shell companies, or payment channels.

This creates practical problems:

Difficulty identifying the real lender;
Anonymous collectors;
Foreign data storage;
Cross-border data transfers;
App store enforcement issues;
Disappearing entities;
Use of multiple app names;
Rebranding after complaints.

Borrowers should document the app name, developer, payment recipient, bank or e-wallet account, and all phone numbers used.

Complaints may target local registered companies, payment recipients, collection agents, app operators, and data processors.

XLI. The Role of App Stores and Platforms

If an app is abusive, borrowers may report it to app stores or platform providers.

Reports should include:

App name;
Developer name;
Screenshots of harassment;
Excessive permissions;
Privacy violations;
Fake legal threats;
Unauthorized contact use;
Misleading charges.

Removal from app stores may prevent future harm, though it does not replace legal remedies.

XLII. Preventive Advice Before Taking an Online Loan

Borrowers can reduce risk by:

Checking whether the lender is registered;
Reading the loan agreement;
Checking interest and fees;
Avoiding apps requiring full contact access;
Avoiding apps with many harassment complaints;
Borrowing only what can be repaid;
Keeping screenshots from the start;
Using official payment channels;
Avoiding multiple loan apps;
Not submitting fake information;
Not using another person’s ID or account;
Understanding the due date and penalties;
Asking for all terms before accepting disbursement.

The best protection is not to install predatory loan apps.

XLIII. Special Concerns for Vulnerable Borrowers

Online lending harassment often affects people who are already financially vulnerable.

This includes:

Minimum wage workers;
Overseas Filipino families;
Single parents;
Students;
Senior citizens;
Persons with disabilities;
Employees afraid of workplace embarrassment;
Small business owners;
Victims of prior scams;
Borrowers with medical emergencies.

Abusive collection can lead to anxiety, depression, job loss, family conflict, and social humiliation. These harms are legally relevant when claiming damages or requesting regulatory intervention.

XLIV. Mental Health and Safety

Borrowers experiencing severe harassment should prioritize safety.

Practical steps include:

Tell trusted family or friends what is happening;
Do not meet collectors alone;
Report threats of physical harm;
Block abusive numbers after preserving evidence;
Seek help from legal aid, public attorney, or consumer protection offices;
Seek mental health support if distress becomes overwhelming;
Inform employer or HR if collectors are harassing the workplace;
Do not self-harm over debt.

Debt can be negotiated. Harassment can be reported. There are legal remedies.

XLV. Workplace Strategy

If collectors contact an employer, the borrower may consider informing HR or a supervisor:

That the matter is a personal debt dispute;
That the lender is not authorized to disclose details;
That messages may be part of harassment;
That the employer should preserve communications;
That the borrower is addressing the matter legally.

This can reduce the collector’s power to shame the borrower.

XLVI. Remedies for Contacts Who Are Harassed

A friend, relative, or co-worker who receives messages may respond:

I am not the borrower, co-maker, guarantor, or debtor. I do not consent to being contacted regarding this matter. Do not use my personal information or contact me again. Any further harassment or disclosure will be documented and reported.

Contacts should save screenshots and avoid engaging in arguments.

XLVII. Data Deletion and Blocking Requests

A borrower may request deletion or blocking of personal data that is:

Unlawfully obtained;
Excessive;
No longer necessary;
Used for harassment;
Shared without authority;
Inaccurate;
Retained beyond lawful purpose.

However, lenders may retain certain records required by law, such as loan records, accounting records, or compliance documents. The borrower’s right to deletion is not absolute, but unlawful processing should stop.

XLVIII. Data Breach Concerns

If a lender’s system exposes borrower data or collectors leak borrower information, a data breach issue may arise.

Signs of breach include:

Unknown people contacting the borrower about the loan;
Borrower data appearing in public groups;
ID photos circulating online;
Multiple unrelated apps contacting the borrower after one application;
Spam or scams after loan app registration;
Unauthorized account access.

A borrower may report suspected breach and ask what data was disclosed, to whom, and what remedial measures were taken.

XLIX. Interaction With Credit Reporting

Some lenders threaten to blacklist borrowers. Legitimate credit reporting must comply with applicable law and accuracy requirements.

A lender should not submit false, inflated, or malicious reports. Borrowers may dispute inaccurate information.

Threats of “blacklisting” are often used loosely. Borrowers should ask:

What credit bureau?
What amount will be reported?
What is the legal basis?
What records support the report?
How can the borrower dispute inaccurate data?

L. Public Attorney and Legal Aid

Borrowers who cannot afford a private lawyer may seek help from:

Public Attorney’s Office, if qualified;
Legal aid clinics;
Law school legal aid offices;
Consumer protection desks;
Data privacy complaint channels;
Barangay assistance where appropriate;
Women and children protection desks if gender-based threats are involved.

Legal help is especially important if there are threats, employer harassment, public shaming, or actual court papers.

LI. Remedies Summary by Violation

A. Unauthorized Contact Harvesting

Possible remedies:

Data privacy complaint;
Demand deletion or blocking;
Administrative complaint;
Civil damages if harm is proven.

B. Public Shaming

Possible remedies:

Data privacy complaint;
Cyberlibel complaint;
Civil damages;
Takedown request;
Administrative complaint.

C. Threats of Harm

Possible remedies:

Police complaint;
Criminal complaint for threats or coercion;
Protection measures if safety is at risk;
Civil damages.

D. Fake Legal Notices

Possible remedies:

Administrative complaint;
Criminal complaint depending on content;
Complaint against the collector or lender;
Evidence in a harassment case.

E. Excessive Charges

Possible remedies:

Demand computation;
Challenge unconscionable interest or fees;
Regulatory complaint;
Defense in collection case;
Settlement negotiation.

F. Employer Harassment

Possible remedies:

Data privacy complaint;
Civil damages;
Defamation complaint if false statements were made;
Administrative complaint;
Workplace evidence preservation.

LII. Frequently Asked Questions

1. Can I be jailed for not paying an online loan?

Generally, no. Mere non-payment of debt is not a crime. But fraud, falsification, bouncing checks, or other criminal acts may create separate liability.

2. Can the lender contact my contacts?

Not indiscriminately. Contacting references for limited verification may be different from mass messaging contacts to shame or threaten you. Unauthorized disclosure may violate privacy laws.

3. Can the lender post my photo online?

Generally, public shaming using your photo, ID, or loan details may create data privacy, defamation, civil, administrative, and criminal issues.

4. Can they call my employer?

They should not disclose your debt to your employer merely to embarrass you. Unauthorized workplace disclosure may be unlawful.

5. What should I do if they threaten arrest?

Ask for official case details and preserve the message. Private collectors cannot issue warrants. Verify any alleged legal document with the issuing office.

6. Should I still pay the loan?

If the loan is valid, the obligation may remain. But you may dispute excessive charges and unlawful collection. Pay only through verified official channels.

7. Can I file a complaint even if I owe money?

Yes. Owing money does not strip you of privacy and dignity rights.

8. What if they message my relatives?

Ask relatives to save screenshots. You may include those messages in data privacy, administrative, civil, or criminal complaints.

9. Can I sue for damages?

Yes, if you can prove unlawful acts and resulting injury. Evidence is critical.

10. Can I demand deletion of my data?

You may object to unlawful processing and request deletion or blocking where legally proper, but lenders may retain certain lawful records.

11. What if the app is no longer in the app store?

You may still complain against the company, payment recipient, collection agents, or identifiable persons involved.

12. Is a screenshot enough evidence?

Screenshots are useful, but stronger evidence includes full conversations, call logs, witness screenshots, payment records, app details, and official documents.

LIII. Practical Complaint Checklist

A borrower preparing a complaint should gather:

Borrower’s full name and contact details;
Name of lending app;
Name of lending company, if known;
Screenshots of app profile and developer;
Loan agreement;
Privacy policy;
App permissions;
Amount borrowed;
Amount received;
Amount demanded;
Due date;
Payment records;
Names and numbers of collectors;
Harassing messages;
Messages sent to contacts;
Social media posts;
Fake legal notices;
Employer communications;
Medical or employment evidence of harm, if any;
Written demands or objections sent to lender.

Organize the complaint by date.

LIV. Legal Strategy

A strong strategy usually separates three issues:

A. The Debt

Is the loan valid? How much was actually borrowed? What charges are lawful?

B. The Collection Conduct

Did the lender harass, threaten, shame, deceive, or defame?

C. The Data Privacy Violation

Did the lender collect, use, disclose, or retain personal data unlawfully?

This separation is important because a borrower may still owe a valid principal amount while also having valid claims for harassment and privacy violations.

LV. Conclusion

Online lending is not illegal by itself. Legitimate lenders may provide useful financial services and may collect valid debts. But online lending becomes unlawful when collection methods involve harassment, threats, public shaming, defamation, fake legal notices, excessive charges, unauthorized access to contacts, or misuse of personal data.

In the Philippines, borrowers have remedies under data privacy law, lending regulations, consumer protection rules, civil law, criminal law, and cybercrime law. A borrower may complain to regulators, seek deletion or blocking of unlawfully processed data, file criminal complaints for threats or defamation, defend against excessive charges, and claim damages where legally justified.

The most important practical step is evidence preservation. Save messages, call logs, app permissions, payment receipts, fake notices, and screenshots sent to contacts. Demand a statement of account. Communicate in writing. Pay only through verified channels. Report unlawful conduct.

Debt collection must remain lawful. A borrower’s default does not give any lender the right to destroy the borrower’s privacy, dignity, employment, family relationships, or reputation.