Online lending harassment can feel terrifying because collectors often attack the exact things borrowers fear most: family, work, reputation, photos, contacts, and public shame. In the Philippines, however, an unpaid loan does not give a lender the right to threaten you, curse you, post your name online, message your employer, scrape your contacts, or pretend to be the police. Philippine law allows legitimate debt collection, but it must be done lawfully, fairly, and with respect for privacy and dignity.

This guide explains what counts as illegal or abusive online lending collection, which government agency handles each type of complaint, what evidence to prepare, and what practical steps borrowers, relatives, employers, OFWs, and foreigners can take when dealing with abusive loan apps or collectors in the Philippines.

What Is Online Lending Harassment?

Online lending harassment usually happens when a lending app, financing company, or third-party collection agency uses pressure tactics that go beyond normal reminders or lawful demand letters.

Common examples include:

Threatening to post your photo, ID, or name as a “scammer”
Sending your loan details to relatives, friends, co-workers, or employers
Calling your contact list repeatedly
Creating group chats to shame you
Using profanity, insults, or degrading language
Threatening arrest for a purely civil debt
Claiming that a barangay, police officer, prosecutor, or court case already exists when it does not
Calling before 6:00 a.m. or after 10:00 p.m. in circumstances prohibited by SEC rules
Using your uploaded selfie, ID, or contacts to embarrass you
Harassing people who did not borrow, sign, guarantee, or co-make the loan

The important distinction is this: collection is not automatically illegal, but harassment, deception, public shaming, and misuse of personal data are illegal or sanctionable.

A lender may send reminders, demand payment, negotiate restructuring, refer the account to a legitimate collection agency, or file a civil collection case. But it must still follow the Securities and Exchange Commission (SEC), National Privacy Commission (NPC), Data Privacy Act, Civil Code, Revised Penal Code, and other applicable Philippine laws.

Legal Basis: Your Rights Against Abusive Online Lending Collectors

SEC Memorandum Circular No. 18, Series of 2019

The most direct rule against abusive online lending collection is SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices by lending companies, financing companies, and their third-party service providers. The circular was issued because the SEC had received complaints that some lenders were harassing borrowers and using abusive, unethical, and unfair means to collect debts.

Under SEC MC 18, the following are unfair collection practices:

Use or threat of violence or other criminal means to harm a person, reputation, or property
Threatening to take an action that cannot legally be taken
Use of obscenities, insults, or profane language
Disclosure or publication of borrowers’ names and personal information because they allegedly refuse to pay
Communicating or threatening to communicate false loan information
Using false representation or deceptive means to collect a debt or obtain borrower information
Contacting borrowers at unreasonable or inconvenient times
Contacting people in the borrower’s contact list other than those named as guarantors or co-makers

The rule also makes it clear that outsourcing collection does not remove responsibility. If a lending company or financing company hires a third-party collector, the collector is treated as the lender’s agent, and the lender remains ultimately responsible for collection practices.

SEC Penalties for Unfair Collection

SEC MC 18 provides administrative penalties. For lending companies, the first offense is ₱25,000 and the second offense is ₱50,000. For financing companies, the first offense is ₱50,000 and the second offense is ₱100,000. A third offense may lead to a higher fine, suspension of lending or financing activities for 60 days, or revocation of the Certificate of Authority, depending on the facts and gravity of the violation.

This matters because many borrowers assume “walang mangyayari” if they complain. In reality, SEC enforcement can affect the company’s authority to operate.

RA 9474: Lending Company Regulation Act of 2007

Republic Act No. 9474, or the Lending Company Regulation Act of 2007, regulates lending companies in the Philippines and gives the SEC authority over their establishment and operations. The law’s policy is to regulate lending companies, prevent practices prejudicial to public interest, and set minimum standards for doing business. (Supreme Court E-Library)

A company that lends money as a business should not simply hide behind an app name. Borrowers should identify the actual corporation, SEC registration, Certificate of Authority, and recorded online lending platform.

RA 8556: Financing Company Act of 1998

Financing companies are also SEC-regulated. Republic Act No. 8556, or the Financing Company Act of 1998, recognizes financing companies as corporations that extend credit facilities and requires SEC authorization before a company may hold itself out as a financing company. (Lawphil)

This is why an app’s branding is not enough. “Fast Cash,” “Quick Peso,” or “Easy Loan” may be only the product name. The legal respondent is usually the corporation behind the app.

RA 11765: Financial Products and Services Consumer Protection Act

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, also protects financial consumers. It prohibits financial service providers from using abusive collection or debt recovery practices and recognizes privacy and protection of client data as a financial consumer protection issue. (Supreme Court E-Library)

This law strengthens the point that borrowers are not merely “debtors.” They are also financial consumers with rights to fair treatment, transparency, privacy, and redress.

Data Privacy Act of 2012 and NPC Rules on Loan Apps

Republic Act No. 10173, the Data Privacy Act of 2012, protects personal information. Online lending harassment often becomes a data privacy case when the app or collector uses your contacts, photos, ID, employer details, phone number, address, or messages for purposes you did not lawfully consent to.

The National Privacy Commission has specifically addressed online lending apps. NPC Circular No. 2022-02 amended rules on loan-related data processing and states that online loan apps must not require unnecessary permissions involving personal and sensitive personal information. It also prohibits “unbridled processing” of contact lists, including processing that leads to harassment, debt collection outside guarantors, or unfair collection practices.

A character reference is not automatically a guarantor. Under NPC Circular No. 2022-02, a guarantor must separately and expressly consent to be responsible if the borrower defaults. For debt collection, lending and financing companies may contact the guarantor; contacting people in the borrower’s contact list other than named guarantors is prohibited.

In 2026, the DICT, NPC, and SEC issued a public advisory after receiving reports of online lending platforms engaging in harassment, intimidation, public shaming, and unlawful use of personal data. The advisory reiterated that unnecessary processing of personal data, excessive access to contact lists, and contacting persons other than guarantors for debt collection are prohibited.

Civil Code Remedies: Damages for Abuse of Rights and Humiliation

Even when a debt exists, the Civil Code still requires people and companies to act with justice, give everyone their due, and observe honesty and good faith. Articles 19, 20, and 21 of the Civil Code allow damages when someone abuses a right, violates the law, or willfully causes injury in a manner contrary to morals, good customs, or public policy. (Lawphil)

This is relevant when collectors humiliate a borrower, damage employment relationships, cause reputational harm, or intentionally shame the borrower’s family.

Revised Penal Code and Cybercrime Law

Some collection acts may also become criminal complaints, depending on the exact words, evidence, and circumstances.

Possible criminal issues include:

Collector’s act	Possible legal issue
“Ipapahiya ka namin sa Facebook”	Threats, coercion, cyber libel if posted
Posting “scammer,” “magnanakaw,” or similar accusations online	Libel or cyber libel
Calling and cursing repeatedly	Unjust vexation or harassment-related complaints, depending on facts
Threatening violence or harm	Grave threats or light threats
Forcing payment through intimidation	Coercion
Seizing property without court process	Possible coercion, theft, robbery, or other offenses depending on facts

The Revised Penal Code penalizes threats, coercions, unjust vexations, libel, slander, and related offenses. (Lawphil) If the defamatory statement is made through a computer system or similar digital means, Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may apply. The Supreme Court in Disini v. Secretary of Justice upheld online libel under Section 4(c)(4) of RA 10175 with respect to the original author of the post, while limiting liability for mere receipt or reaction to online content. (Lawphil)

Does Harassment Cancel the Debt?

No. Harassment does not automatically erase a valid loan.

A borrower may still owe the principal, lawful interest, penalties, or charges that were properly disclosed and legally enforceable. The Truth in Lending Act, Republic Act No. 3765, requires disclosure of finance charges and the true cost of credit so borrowers are not misled about loan costs. (Lawphil)

But the lender’s right to collect does not include the right to abuse. The debt issue and the harassment issue should be handled separately:

Debt issue: Is the loan valid? How much is actually due? Were interest, fees, and penalties properly disclosed?
Harassment issue: Did the collector violate SEC, NPC, civil, criminal, or consumer protection rules?

This separation is important. A borrower should not assume that filing a harassment complaint removes the need to respond to a valid demand. At the same time, a lender should not assume that a borrower’s default gives it permission to shame, threaten, or misuse data.

What to Do Immediately If an Online Lending App Is Harassing You

1. Stop arguing by phone

Collectors often call repeatedly because verbal conversations are hard to prove and easy to twist. If possible, move the discussion to text, email, or in-app messaging.

A simple written response is better:

“I dispute the abusive collection methods being used. Please send the loan details, computation, and official company information in writing. Do not contact my employer, relatives, friends, or other persons who are not guarantors or co-makers.”

Avoid long emotional exchanges. Do not threaten back. Do not post insults online. Your goal is to create a clear record.

2. Preserve evidence before blocking or deleting

Save evidence immediately. Many borrowers block collectors too early, then lose access to call logs, messages, app screens, and abusive threats.

Prepare:

Screenshots of messages, including sender number, date, and time
Screen recordings showing the app name, account page, loan details, and permissions
Call logs showing repeated calls
Voice recordings, if legally and safely available
Screenshots of Facebook, Messenger, Viber, Telegram, SMS, WhatsApp, or email messages
Names and numbers of collectors
Messages sent to your employer, relatives, friends, or contacts
Proof of payment
Loan agreement, disclosure statement, amortization, or computation
App store page showing app name and developer
SEC registration or lack of registration, if verified

For agency complaints, a chronological timeline helps more than emotional narration. Write dates, times, exact words, and persons contacted.

3. Identify the real company behind the loan app

Do not file only against “the app” if you can identify the corporation.

Look for:

Registered corporate name
SEC registration number
Certificate of Authority number
App name or online lending platform name
Website
Email address
Business address
Names of officers, if available
Collection agency name, if disclosed

The SEC i-Message portal links to SEC online services, including “Check with SEC,” which helps the public verify company information. (SEC Philippines) SEC records and lists of registered lending companies, financing companies, and recorded online lending platforms are also commonly used to confirm whether the lender is authorized. (www.foi.gov.ph)

4. File with the SEC for unfair debt collection

File with the SEC when the respondent is a lending company, financing company, online lending platform, or collector acting for them.

Use SEC complaint channels such as the SEC i-Message portal. The portal is designed for submitting complaints and checking ticket status. (SEC Philippines)

Your SEC complaint should include:

Borrower’s full name and contact details
Company/app name
Loan account number, if available
Date of loan and due date
Amount borrowed and amount being demanded
Description of harassment
Screenshots, call logs, recordings, and proof that contacts were messaged
Proof that contacted persons were not guarantors or co-makers
Any written demand for the company to stop abusive collection

Ask the SEC to investigate unfair debt collection practices under SEC MC 18, possible violations of SEC MC 19 reporting rules for online lending platforms, and related financial consumer protection rules.

5. File with the NPC for misuse of personal data

File with the National Privacy Commission when the issue involves:

Contact list harvesting
Messaging relatives, friends, employer, or co-workers
Posting or threatening to post personal data
Using your selfie, ID, address, or phone number for shame tactics
Excessive app permissions
Refusal to remove a character reference’s data
Processing your data for a purpose unrelated to legitimate loan evaluation or collection

The NPC requires a formal complaint in a specific format. Its filing page states that a complainant should download the complaint form, fill it out, have it notarized, and submit it in person, by courier, or by scanned email. (National Privacy Commission) The NPC complaint-affidavit form also reminds complainants to attach evidence, provide a valid government ID, identify the personal data processed, narrate facts clearly and chronologically, and specify the alleged privacy violations.

Typical NPC grounds in online lending harassment include unauthorized processing, processing for unauthorized purposes, malicious disclosure, and unauthorized disclosure under the Data Privacy Act.

6. File a criminal complaint when threats, extortion, or public shaming are serious

Go to law enforcement when the conduct involves:

Threats of physical harm
Extortion-like messages
Fake police, prosecutor, or court threats
Cyber libel or online public shaming
Identity theft or impersonation
Unauthorized access or hacking
Posting your ID, face, or private information online

Cyber-related complaints may be brought to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or the DOJ Office of Cybercrime, depending on the facts and available access. The DOJ Office of Cybercrime acts on complaints and referrals related to cybercrime investigation and prosecution. (Department of Justice) The NBI also lists cybercrime among its investigation services. (National Bureau of Investigation)

For criminal complaints, bring printed and digital copies of evidence. Investigators usually need the original device, account links, message headers, screenshots with dates, URLs of posts, and details showing who sent or published the material.

7. Handle the debt separately and in writing

Ask for:

Full statement of account
Principal amount
Interest rate
Penalties
Service fees
Payments already credited
Loan agreement and disclosure statement
Name of the creditor and authorized collector

If you can pay, negotiate in writing. If you cannot pay immediately, request restructuring or a written settlement. Do not rely only on verbal “discounts” or “amnesty” promises from collectors.

Where to File: SEC, NPC, Police, NBI, or Court?

Problem	Best first office	Why
Collector curses, threatens shame, contacts your phonebook	SEC	Unfair debt collection by lending/financing company or collector
App accessed contacts, photos, ID, or employer info and used them for collection	NPC	Data Privacy Act and loan-related data processing
Collector posts your face/name as “scammer” online	PNP ACG, NBI Cybercrime, prosecutor, and possibly NPC/SEC	Cyber libel, privacy violation, unfair collection
Threats of physical harm or extortion	Police, prosecutor, PNP ACG/NBI if online	Criminal complaint
Fake court/police threats	SEC and law enforcement	Deceptive collection and possible criminal issues
Wrong computation, hidden charges, unclear interest	SEC	Lending/financing disclosure and consumer protection
You want damages for reputational harm	Court	Civil action under Civil Code and related laws
Collector comes to your house and threatens to take property	Police/barangay for immediate safety; SEC/NPC for complaint	No one may seize property without lawful basis and proper process

Required Documents and Evidence

Document or evidence	Why it matters
Valid government ID	Required for agency complaint identification
Notarized complaint-affidavit	Commonly required, especially for NPC and criminal complaints
Screenshots with date/time	Shows what was said and when
Call logs	Shows frequency and unreasonable timing
Screen recordings	Useful for app permissions, account details, and deleted content
Loan agreement or disclosure statement	Shows legal terms and charges
Proof of payments	Prevents inflated or false balances
Messages sent to third parties	Proves contact-list harassment
Affidavits from relatives/employer/co-workers	Helps prove reputational harm and disclosure
App store page and developer details	Helps identify the online lending platform
SEC verification results	Helps identify whether the company is registered or recorded

If the borrower is abroad, the complaint can still be prepared carefully from overseas. For Philippine proceedings, documents signed abroad may need proper notarization, consular acknowledgment, or apostille depending on where they were executed and what the receiving office requires. The DFA has an Apostille/authentication system for documents that need official authentication for cross-border use. (Apostille Services)

For foreigners in the Philippines, the same basic protection applies because the Data Privacy Act protects “data subjects,” meaning individuals whose personal information is processed. The practical challenge is usually evidence, identification, and jurisdiction—not nationality.

Common Online Lending Harassment Scenarios

“They messaged my contacts even though I allowed contact access.”

Consent is not a magic shield. Under SEC MC 18, contacting persons in the borrower’s contact list other than guarantors or co-makers is an unfair collection practice even if the borrower gave some form of consent. Under NPC rules, unbridled processing of contact lists is prohibited, and for debt collection, lenders may contact only guarantors.

“They called my employer and told HR I have an unpaid loan.”

That may be unfair collection and a privacy violation if your employer is not a guarantor, co-maker, or otherwise legally involved. It becomes more serious if the collector disclosed the amount, called you a scammer, threatened employment consequences, or repeatedly disturbed your workplace.

“They said I will be arrested tomorrow if I do not pay.”

Non-payment of a private loan is generally a civil matter unless there is a separate crime, such as fraud proven by specific facts. A collector who falsely threatens arrest, police action, or imprisonment may be using deceptive or unlawful collection tactics. Save the message and verify any alleged case directly with the court, prosecutor, police station, or barangay—not with the collector.

“They created a group chat with my family and friends.”

This is one of the strongest fact patterns for an SEC and NPC complaint. It may show both unfair debt collection and unauthorized or excessive disclosure of personal data. Preserve the full group chat, member list, timestamps, and messages.

“The collector came to my house.”

A field visit is not automatically illegal, but it must be peaceful and lawful. Collectors cannot trespass, threaten, shame you before neighbors, seize appliances, take your motorcycle, or force entry into your home.

For an unsecured online cash loan, the collector usually cannot just take property. Court processes such as a civil case, judgment, writ of execution, or proper foreclosure/replevin procedure may be required depending on the type of obligation and collateral.

“They are harassing me even after I already paid.”

Send proof of payment in writing and demand an updated statement of account. If they continue, file a complaint with proof of payment, collection messages, and the lender’s failure to update the account. This may involve unfair collection, inaccurate data processing, and possible damages.

“They are messaging me, but I am only a reference.”

A character reference is not automatically liable for the loan. NPC rules state that a character reference is used to verify identity and information, and the reference must be given the option to have personal data removed. A guarantor is different because a guarantor expressly binds himself or herself to answer for the borrower’s obligation if the borrower defaults.

If you never signed as guarantor or co-maker, tell the collector in writing:

“I am not the borrower, guarantor, or co-maker. Do not contact me for collection. Remove my personal data from your records and confirm deletion.”

Save the response or lack of response.

Practical Timelines and Bottlenecks

Agency complaints are not always resolved quickly. The usual bottlenecks are incomplete evidence, unclear respondent identity, missing notarization, missing proof that third parties were contacted, and screenshots that do not show date, time, sender, or context.

Typical practical expectations:

Step	Practical timeline
Evidence gathering	Same day to 1 week
SEC complaint submission	Same day once documents are ready
SEC ticket acknowledgment or routing	Days to a few weeks, depending on volume
NPC complaint preparation	1–2 weeks if notarization and evidence are complete
NPC evaluation	Weeks to months, depending on sufficiency and docket
Cybercrime complaint	Immediate for urgent threats; investigation varies
Prosecutor/court case	Months to years depending on evidence, docket, and respondent location

The fastest way to reduce delay is to submit a clean timeline, identify the company, label each screenshot, and attach proof that the people contacted were not guarantors or co-makers.

Mistakes That Can Hurt Your Complaint

Avoid these common mistakes:

Deleting the app before recording loan details
Blocking all numbers before saving evidence
Posting revenge accusations online
Paying a “settlement” without written confirmation
Sending your OTP, passwords, or new IDs to collectors
Relying on verbal promises from unknown agents
Filing a complaint with only emotional statements and no screenshots
Naming only the app, not the corporation
Ignoring legitimate court papers if a real case is filed
Assuming that harassment automatically cancels the debt

A strong complaint is factual, organized, and evidence-based.

Frequently Asked Questions

Can online lending apps contact my contacts in the Philippines?

For debt collection, they should not contact people in your contact list unless those persons are proper guarantors or co-makers under applicable rules. NPC rules also prohibit contacting contact-list persons other than guarantors for debt collection.

Is it legal for a loan app to post my name and photo on Facebook?

No. Posting or threatening to post your name, photo, ID, or loan details to shame you may violate SEC MC 18, the Data Privacy Act, the Civil Code, and possibly cyber libel laws, depending on the content and facts.

Can I go to jail for not paying an online loan?

Non-payment of a private loan is usually a civil debt issue. Jail becomes a risk only if there is a separate crime proven by evidence, such as fraud, falsification, threats, or other criminal conduct. A collector’s statement that you will automatically be arrested for non-payment is usually a red flag.

What if the loan app is SEC-registered?

A registered lender can still violate the law. SEC registration or a Certificate of Authority allows the company to operate, but it does not authorize harassment, public shaming, false threats, or misuse of personal data.

What if the loan app is not SEC-registered?

Report it to the SEC. Operating as a lending or financing company without proper authority is a separate regulatory issue. Still preserve harassment evidence because an unregistered app may also be involved in privacy violations or cybercrime.

Can I file both SEC and NPC complaints?

Yes. SEC and NPC complaints address different aspects. The SEC focuses on lending/financing regulation and unfair collection. The NPC focuses on personal data misuse. The same facts—such as messaging your contacts—may support both complaints.

Do I need a lawyer to file an SEC or NPC complaint?

For many administrative complaints, borrowers can file personally if the facts and evidence are organized. More serious cases involving cyber libel, damages, court injunctions, or complex corporate respondents may require more careful legal drafting and evidence handling.

Can a collector visit my house or barangay?

A collector may attempt lawful communication, but cannot threaten, trespass, shame you, seize property, or pretend to have court authority. Barangay involvement does not turn a private loan into a criminal case. If a barangay proceeding is actually initiated, verify the notice directly with the barangay.

What should I do if collectors message my employer?

Save the messages, ask the employer or HR to preserve screenshots, and request a short written statement identifying what was received, when, and from whom. This evidence is useful for SEC, NPC, and possible civil or criminal complaints.

Can OFWs or foreigners file complaints from abroad?

Yes, but the practical requirements matter. Prepare clear digital evidence, valid ID, contact details, and a properly notarized complaint-affidavit if required. Documents signed abroad may need apostille or consular authentication depending on the agency or proceeding.

Key Takeaways

A valid debt does not give collectors the right to harass, shame, threaten, or misuse personal data.
SEC MC 18 prohibits unfair debt collection by lending companies, financing companies, and their third-party collectors.
Loan apps cannot freely use your contact list for debt collection; NPC rules prohibit unbridled contact-list processing and contacting non-guarantors.
File with the SEC for unfair collection, the NPC for data privacy violations, and law enforcement for threats, extortion, cyber libel, or serious online abuse.
Preserve screenshots, call logs, app details, loan documents, proof of payment, and third-party messages before blocking or deleting anything.
Harassment does not automatically erase the debt, but it can expose the lender or collector to administrative penalties, privacy liability, civil damages, and possible criminal complaints.