If an online lending app is threatening you, texting your contacts, posting your name online, or using shame to force payment, the problem is no longer just an unpaid loan. In the Philippines, lenders may collect valid debts, but they cannot use harassment, intimidation, public shaming, false threats, or unlawful use of personal data. This article explains what counts as online lending harassment, which government office to approach, what evidence to prepare, and how to file complaints with the SEC, NPC, PNP, NBI, DICT, or BSP depending on what happened. Recent government guidance specifically warns against online lending platforms that engage in harassment, intimidation, public shaming, and unlawful use of personal data in debt collection.

What Counts as Online Lending Harassment in the Philippines?

Online lending harassment usually happens when a lending company, financing company, online lending platform, collection agency, or collector uses abusive tactics to pressure a borrower into paying.

Common examples include:

Calling or texting repeatedly with insults, profanity, or threats
Messaging your relatives, friends, officemates, or phone contacts about your debt
Telling contacts that you are a scammer, criminal, or “magnanakaw”
Posting your name, face, ID, address, or loan details on social media
Threatening arrest, barangay action, deportation, job termination, or public exposure without legal basis
Demanding payment at unreasonable hours
Using fake names such as “attorney,” “police,” “NBI,” “court sheriff,” or “barangay officer”
Accessing your phone contacts beyond what is necessary for a legitimate loan purpose
Contacting people who were only character references, not guarantors
Inflating the balance with unclear penalties, hidden charges, or unexplained “processing fees”

A lender may remind you of payment, send a statement of account, or pursue lawful collection. What the law does not allow is abusive collection.

The most important practical point is this: owing money does not give a lender the right to violate your privacy, dignity, safety, or reputation.

Your Basic Rights as a Borrower

You cannot be jailed merely for unpaid debt

Article III, Section 20 of the 1987 Philippine Constitution states that no person shall be imprisoned for debt or non-payment of a poll tax. This means a collector cannot truthfully say, “Makukulong ka bukas kung hindi ka magbayad,” merely because you failed to pay a loan. (Supreme Court E-Library)

There are exceptions when a separate criminal act is involved, such as fraud, falsification, threats, cybercrime, or bouncing checks under specific laws. But non-payment of an ordinary loan is generally a civil obligation, not a reason for immediate arrest.

Your contacts are not automatically liable for your loan

Many online lending apps confuse borrowers by using the words “reference,” “emergency contact,” and “guarantor” as if they mean the same thing. They do not.

A character reference is someone who may verify your identity or basic information. A guarantor is someone who separately agrees to answer for the debt if you default. The 2026 DICT-NPC-SEC public advisory states that online lending platforms must have separate interfaces for character references and guarantors, and that a person is considered a guarantor only if that person gave consent to be a guarantor.

So if your mother, friend, coworker, or employer did not agree to be a guarantor, the lender generally has no right to collect your debt from them.

Your personal data must be handled lawfully

Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information in government and private-sector information systems. The National Privacy Commission’s rules on loan-related transactions apply to lending and financing companies, persons acting as such, and third-party service providers involved in loan processing, debt collection, and related activities. (National Privacy Commission) (National Privacy Commission)

Under NPC Circular No. 20-01, as amended by NPC Circular No. 2022-02, online lending apps are not allowed to process personal data excessively or use contact lists in a way that leads to harassment or unfair collection. Online lending apps may only access contacts to the minimum extent necessary for legitimate purposes, such as allowing the borrower to choose references or guarantors. (National Privacy Commission)

Legal Basis: Laws and Rules That Apply to Online Lending Harassment

SEC rules on unfair debt collection

The Securities and Exchange Commission regulates lending companies under Republic Act No. 9474, the Lending Company Regulation Act of 2007, and financing companies under Republic Act No. 8556, the Financing Company Act of 1998. (Lawphil)

SEC Memorandum Circular No. 18, Series of 2019 prohibits unfair debt collection practices by financing companies, lending companies, and third-party service providers hired by them. The circular covers conduct such as threats of violence, threats to take action that cannot legally be taken, insults or profane language, publication of borrower information, false representations, unreasonable contact hours, and contacting people in the borrower’s contact list other than those named as guarantors or co-makers.

The SEC circular also requires lending and financing companies to keep borrower information confidential except in limited lawful situations, and it makes the lending or financing company ultimately responsible even if collection is outsourced to a third-party service provider.

Penalties under the circular include fines, and for serious or repeated violations may include suspension or revocation of authority to operate as a lending or financing company.

Data privacy rules on contact lists and app permissions

The 2026 DICT-NPC-SEC advisory specifically states that unnecessary processing of personal data through mobile applications, including unnecessary permissions, is prohibited. It also states that unauthorized, excessive, or disproportionate processing of contact lists is prohibited, especially when it leads to harassment, collection from people who are not guarantors, or unfair collection practices.

This matters because many online lending harassment cases begin when the app gets access to the borrower’s contacts, photos, call logs, or other phone data. Even if you clicked “allow,” consent may be questioned if the app used deceptive design, forced unnecessary permissions, or made it hard to withdraw consent.

Consumer protection law

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, applies to financial products and services, including digital financial products and services. It recognizes financial regulators such as the BSP, SEC, Insurance Commission, and Cooperative Development Authority, depending on the type of financial service provider involved. (Lawphil)

For online lending complaints, the usual regulator is the SEC if the entity is a lending company or financing company. The BSP may be involved if the complaint is against a bank, e-money issuer, pawnshop, remittance agent, or other BSP-supervised financial institution. (Bureau of Small and Medium Enterprises)

Criminal and civil remedies

Depending on the facts, online lending harassment may also involve:

Revised Penal Code, Article 282 — grave threats, if the collector threatens harm to your person, honor, property, or family
Revised Penal Code, Article 286 — grave coercions, if force, violence, or intimidation is used to compel you to do something against your will
Revised Penal Code, Article 287 — unjust vexation, for acts that maliciously annoy, irritate, or distress another person
Revised Penal Code, Articles 353 and 355, with RA 10175 — libel or cyber libel, if defamatory statements are posted or sent through a computer system
Civil Code, Article 26 — civil action for damages in cases involving meddling with private life, disturbing family relations, intriguing to alienate a person from friends, or humiliating another based on personal condition (Lawphil)

Not every rude message becomes a criminal case. But threats, public shaming, fake legal claims, and repeated contact with third parties can create administrative, privacy, civil, or criminal exposure for the lender or collector.

Which Office Should You File With?

What happened	Best office to approach	Purpose
Abusive collection, threats, public shaming, contacting non-guarantor contacts	SEC Financing and Lending Companies Department / FINLEND	Administrative complaint against lending or financing company
App accessed contacts, used personal data, messaged contacts, exposed your information	National Privacy Commission	Data privacy complaint
Threats, fake arrest threats, cyber libel, fraud, identity misuse, online intimidation	PNP Anti-Cybercrime Group or NBI Cybercrime Division	Criminal investigation
Scam, urgent cyber incident, threats, fraud	DICT Cyber Hotline / 1326	Incident reporting and referral
Complaint against bank, e-wallet, pawnshop, remittance company, or BSP-supervised entity	BSP Consumer Assistance Mechanism	Financial consumer complaint
Pure payment dispute, excessive charges, unclear loan balance	SEC, and possibly small claims/civil court if the lender sues	Regulatory or civil resolution

You may file with more than one office if the facts support it. For example, if the app publicly shamed you and messaged your contacts, you may file with the SEC for unfair debt collection and with the NPC for unlawful processing of personal data. If the collector also threatened violence or posted defamatory statements online, a cybercrime complaint may also be appropriate.

Step-by-Step Guide: How to File a Complaint for Online Lending Harassment

Step 1: Preserve the evidence before blocking or deleting anything

Evidence is often the difference between a complaint that moves and a complaint that gets delayed.

Save the following:

Screenshots of all messages, including the sender’s number, username, date, and time
Screen recordings showing the app profile, messages, account names, and call logs
Voice recordings of calls, if available
The app name, Google Play or App Store link, website, Facebook page, or advertisement
Loan agreement, disclosure statement, payment schedule, and terms and conditions
Proof of amount received, deductions, repayments, and remaining balance
Screenshots of phone permissions requested by the app
Messages received by your contacts, with their screenshots and names
Any public post, group chat message, or edited photo used to shame you
SEC registration number, Certificate of Authority number, or company name shown by the app

Do not rely only on one screenshot. A good evidence file shows the full story: who contacted you, what they said, when they said it, how it connects to the loan, and who else was contacted.

Step 2: Identify the lender behind the app

Many online lending apps use trade names that are different from the registered company name. Look for:

Company name in the loan contract
SEC registration number
Certificate of Authority number
Privacy policy
App developer name
Collection agency name
Payment channel account name
Email address or customer service number
Address in the disclosure statement

If you cannot identify the exact company, still file the complaint. Include the app name, screenshots, phone numbers, payment details, and all available identifiers. Government offices can use those details to trace or evaluate the entity.

Step 3: File a complaint with the SEC for unfair debt collection

For unfair debt collection by lending companies, financing companies, and online lending platforms, file with the SEC through SEC iMessage, the SEC’s online ticketing system. The 2026 advisory directs the public to submit unfair debt collection complaints through imessage.sec.gov.ph and identifies the SEC Financing and Lending Companies Department as the office for this type of complaint. It also lists the SEC hotline as 1-4732 or 1-4SEC.

When preparing the SEC complaint, include:

Your full name and contact details
Name of the lending app and company, if known
Loan date, amount borrowed, amount received, amount paid, and claimed balance
Description of harassment
Names or numbers of collectors who contacted you
Names of contacts who were messaged
Screenshots, recordings, proof of payment, and loan documents
A clear request for investigation for unfair debt collection practices

A practical format is:

Background: “I borrowed ₱____ from [app/company] on [date].”
What happened: “On [dates], collectors sent the following messages…”
Why it is unfair: “They contacted people who were not guarantors / threatened arrest / posted my personal information / used insults.”
Evidence attached: List every screenshot, recording, and document.
Relief requested: “I request investigation and appropriate action under SEC Memorandum Circular No. 18, Series of 2019.”

The SEC complaint is administrative. It may lead to regulatory action, penalties, suspension, or revocation against the lending or financing company, but it does not automatically erase a valid debt.

Step 4: File a data privacy complaint with the NPC

File with the National Privacy Commission when the issue involves personal data, such as:

Accessing your contacts without proper basis
Messaging contacts who are not guarantors
Posting your name, photo, ID, address, employer, or loan details
Using your personal information to shame or threaten you
Keeping or using your data after the purpose has ended
App permissions that are excessive or unrelated to the loan

The NPC requires a formal complaint in a specific format. Its official process says to download the complaint form, print and fill it out, have it notarized, and submit it in person, by courier, or by scanned email submission. (National Privacy Commission)

For NPC complaints, prepare:

Notarized complaint form or complaint-affidavit
Valid government ID
Screenshots and recordings
App privacy policy, permission screens, and loan documents
Messages sent to your contacts
Statements or screenshots from affected contacts
Proof that contacts were not guarantors
Proof of payment or loan transaction, if relevant

NPC fees may apply. NPC Circular No. 2023-01 lists a ₱500 filing fee for complaints, possible additional fees for damages claims, fees for motions or cease-and-desist applications, and exemptions for qualified indigent litigants who submit the required proof.

Step 5: File with PNP-ACG, NBI Cybercrime Division, or DICT for threats, fraud, or cybercrime

If the collector threatens harm, impersonates authorities, posts defamatory content, uses fake accounts, or commits cyber-related harassment, consider filing with cybercrime authorities.

The 2026 advisory lists these reporting channels for other forms of harassment, threats, fraud, or scams:

DICT Cyber Hotline: 1326@dict.gov.ph
NBI Cybercrime Division: ccd@nbi.gov.ph; telephone (632) 8523-8231 to 38
PNP Anti-Cybercrime Group: acg@pnp.gov.ph and onlinecims.ocs@gmail.com; telephone (632) 8723-0401 local 7491

For NBI Cybercrime Division complaints, the NBI Citizen’s Charter describes a walk-in process where the complainant proceeds to the Cybercrime Division, fills out a complaint sheet, undergoes interview and initial investigation, executes sworn statements, and submits supporting documents and relevant devices for examination when needed. The listed initial steps include no fees. (nbi.gov.ph)

For criminal complaints, bring:

Printed screenshots and digital copies
Phone used to receive the messages
Links to posts, profiles, pages, or app listings
IDs and proof of identity
Names and statements of witnesses or contacts
Timeline of events
Loan documents and proof that the messages relate to the loan
Any proof that the collector used a fake identity, fake government office, or threat

A police blotter may help document the incident, but for online harassment, it is usually better to go directly to PNP-ACG or NBI Cybercrime Division when the evidence involves digital accounts, phone numbers, app data, or online posts.

Step 6: File with BSP only if the entity is BSP-supervised

If the lender is a bank, e-money issuer, pawnshop, remittance company, money service business, or other BSP-supervised financial institution, the BSP process usually requires you to report first to the institution’s own Financial Consumer Protection Assistance Mechanism or customer service channel. If unresolved, you may escalate to the BSP Consumer Assistance Mechanism through BSP Online Buddy or other BSP channels. (Bureau of Small and Medium Enterprises)

Do not file with BSP just because the money was received through a bank or e-wallet. File with BSP when the complained-of financial service provider itself is under BSP supervision.

Documents and Evidence Checklist

Document or evidence	SEC	NPC	PNP/NBI/DICT	BSP
Valid ID	Helpful	Required	Required	Required
Loan agreement or disclosure statement	Required	Helpful	Helpful	Required
Screenshots of threats or harassment	Required	Required	Required	Required
Messages sent to contacts	Required	Required	Helpful	Helpful
App permissions and privacy notice	Helpful	Required	Helpful	Helpful
Proof of payment or disbursement	Required	Helpful	Helpful	Required
Timeline of events	Required	Required	Required	Required
Notarized complaint-affidavit	Sometimes requested	Required for formal complaint	Usually required	Sometimes requested
Device used to receive messages	Helpful	Helpful	Often important	Usually not needed
Witness statements from contacted relatives/friends	Helpful	Helpful	Helpful	Helpful

Practical Timelines and Bottlenecks

Timelines vary because agencies may need to review evidence, identify the lender, request comment from the company, or refer the matter to another office. The fastest complaints are usually those with complete screenshots, clear company identity, proof of loan transaction, and a short chronological narrative.

Common delays happen when:

The borrower submits only one cropped screenshot
The app name is given, but not the company name
The complaint is not signed or notarized when required
The complainant deletes the messages before saving them
Contacts refuse to provide screenshots of messages they received
The loan was taken through multiple apps and the facts are mixed together
The borrower asks an agency to “stop harassment” but does not explain what happened, when, and by whom
The complaint is filed with the wrong regulator

A well-organized complaint should have a one-page timeline, labeled attachments, and a simple explanation of the violation.

What to Do If the Lender Contacts Your Employer or Relatives

If the collector messages your employer, HR department, relatives, neighbors, or friends:

Ask the recipient to screenshot the full message with date, time, sender, and profile or number.
Ask whether the collector called, texted, messaged on Facebook, Viber, Telegram, WhatsApp, or another channel.
Save proof that the recipient was not a guarantor or co-maker.
Include these messages in your SEC and NPC complaints.
If the message contains defamatory accusations, threats, or fake legal claims, include it in your cybercrime evidence file.

Under SEC MC 18, contacting people in the borrower’s contact list other than guarantors or co-makers can be an unfair debt collection practice. Under the 2026 DICT-NPC-SEC advisory, contacting persons in the borrower’s contact list other than named guarantors is prohibited for purposes of debt collection.

What If the Online Lending App Is Not Registered?

An unregistered or illegal lender can still be reported. In fact, lack of clear SEC registration, no Certificate of Authority, fake company details, or changing app names can strengthen the need for investigation.

For SEC purposes, submit all identifiers you have:

App name
Developer name
Website
Phone numbers
Payment account names
Screenshots of advertisements
Links to app store listing
Collection messages
Loan documents
Bank or e-wallet receiving account

For privacy or cybercrime purposes, the complaint can proceed based on the unlawful acts even if the company identity is incomplete at the start.

What If You Are a Foreigner or a Filipino Abroad?

Foreigners and Filipinos abroad may still be affected by Philippine online lending harassment, especially if:

The lender is based in the Philippines
The borrower used a Philippine phone number, address, ID, bank, or e-wallet
The borrower’s Philippine contacts are being harassed
The app operates in the Philippine market

Online submissions to SEC or NPC may be possible depending on the complaint requirements. However, if a sworn affidavit, special power of attorney, or other formal document executed abroad must be used in the Philippines, notarization and authentication may become an issue. The Philippines is a party to the Apostille Convention, which took effect for the Philippines on May 14, 2019; a document notarized abroad may generally be used in the Philippines if properly apostilled by the competent authority of the country of origin, where the Apostille Convention applies. (Supreme Court of the Philippines)

If the document is executed in a country that is not part of the Apostille Convention, Philippine consular authentication may still be required. Requirements differ by country, so the safest approach is to check the Philippine Embassy or Consulate instructions in the country where the document will be signed.

Common Mistakes to Avoid

Paying only because of threats

Some borrowers pay immediately because collectors threaten arrest, deportation, barangay raids, or public posting. Paying may reduce collection pressure, but it can also encourage abusive collectors if the balance is inflated or the threat is illegal. Ask for a proper statement of account and keep proof of every payment.

Admitting false balances in chat

Avoid sending messages like “Yes, I owe ₱25,000” if you dispute the computation. Instead, state clearly: “I request a written breakdown of principal, interest, penalties, fees, payments, and remaining balance.”

Deleting the app too early

Deleting the app may remove useful evidence, such as the loan contract, privacy notice, payment schedule, or customer service messages. Save and export evidence first.

Posting back against the collector

It is understandable to feel angry, but posting accusations online can create a separate defamation issue. Keep the evidence and submit it to the proper agencies instead.

Filing a vague complaint

A complaint that says only “This app is harassing me” is weak. A stronger complaint says: “On June 3, 2026, collector number 09XX sent my sister a message saying I was a scammer. She was not my guarantor. Screenshot A shows the message. Screenshot B shows my loan contract. Screenshot C shows the app permission request.”

Frequently Asked Questions

Can I file both SEC and NPC complaints against an online lending app?

Yes. File with the SEC for unfair debt collection practices and with the NPC for misuse of personal data. The same facts can support both complaints when, for example, the lender contacts your phone contacts, posts your personal information, or uses your data for public shaming.

Is it illegal for an online lending app to contact my contacts?

It can be illegal or prohibited if the contact is not a guarantor or co-maker and the message is for debt collection. Current government guidance states that contacting persons on the borrower’s contact list other than named guarantors is prohibited for debt collection.

Can a lending app post my name and photo online because I did not pay?

No. SEC MC 18 treats disclosure or publication of names and other personal information of borrowers who allegedly refuse to pay debts as an unfair collection practice, except in limited circumstances allowed under the circular.

Can I be arrested for not paying an online loan?

Not merely for unpaid debt. The Constitution prohibits imprisonment for debt. However, a person may still face criminal liability if there is a separate criminal act, such as fraud, threats, falsification, cybercrime, or another offense proven under the law. (Supreme Court E-Library)

What if the collector says they are from the police, NBI, court, or barangay?

Ask for their full name, office, case number, and written document. Fake claims of government authority may support a complaint. Real police, NBI agents, courts, and barangays do not collect private online loans by random threatening text messages.

Do I need a lawyer to file an SEC or NPC complaint?

A lawyer is not always required to file an administrative complaint, but your complaint should be organized, factual, signed, and supported by evidence. NPC formal complaints require a specific format and notarization. (National Privacy Commission)

Is a screenshot enough evidence?

A screenshot helps, but a stronger evidence package includes full conversation threads, numbers or usernames, dates and times, app details, loan documents, proof of payment, and screenshots from contacts who were messaged.

What if I really owe the money?

A valid debt should still be addressed, but the lender must collect lawfully. Filing a harassment complaint does not automatically cancel your debt, and paying the debt does not automatically erase the lender’s possible violations.

Can I complain if the harassment is from a collection agency, not the lending app itself?

Yes. SEC MC 18 states that lending and financing companies remain ultimately responsible for collection practices and compliance even when collection is outsourced to a third-party service provider.

Where should I report threats, scams, or cyber harassment connected to an online loan?

For threats, fraud, scams, or cyber harassment, the 2026 advisory lists DICT Cyber Hotline at 1326@dict.gov.ph, NBI Cybercrime Division at ccd@nbi.gov.ph, and PNP Anti-Cybercrime Group at acg@pnp.gov.ph and onlinecims.ocs@gmail.com.

Key Takeaways

Online lenders may collect valid debts, but they cannot threaten, shame, deceive, or harass borrowers.
Contacting your phone contacts for debt collection is prohibited unless the person is a proper guarantor or co-maker.
File with the SEC for unfair debt collection by lending or financing companies.
File with the NPC when the app misuses your personal data, contacts, photos, or private information.
File with PNP-ACG, NBI Cybercrime Division, or DICT if there are threats, fraud, scams, fake authority claims, cyber libel, or online intimidation.
File with BSP only if the complained-of entity is a BSP-supervised financial institution.
Preserve screenshots, recordings, app details, loan documents, proof of payment, and messages sent to your contacts.
Non-payment of a loan does not give collectors the right to violate your privacy, reputation, safety, or dignity.