If an online lending app is threatening you, calling your family or employer, posting your name online, or using your photo to shame you into paying, the important thing to know is this: a valid debt may still have to be paid, but debt collection in the Philippines has legal limits. Borrowers are protected by the Constitution, the Civil Code, SEC rules on lending companies, the Data Privacy Act, cybercrime laws, and criminal laws against threats, coercion, and defamation. This guide explains what counts as online lending harassment in the Philippines, what evidence to save, where to complain, and how to handle the debt without giving up your rights.

What Counts as Online Lending Harassment in the Philippines?

Online lending harassment usually happens when a lending app or its collector goes beyond lawful collection and uses fear, humiliation, or misuse of personal data to force payment.

Common examples include:

Calling, texting, or messaging your contacts who are not guarantors or co-makers
Sending messages to your employer, work group chat, relatives, neighbors, or Facebook friends
Threatening arrest, imprisonment, deportation, or a “police case” for ordinary non-payment
Posting your photo, ID, or name online with words like “scammer,” “fraudster,” or “estafador”
Sending edited or humiliating photos
Using obscene, insulting, or threatening language
Calling repeatedly very early in the morning or late at night
Claiming to be from the police, NBI, court, barangay, or a law office when that is false
Demanding payment through personal e-wallet accounts without a proper receipt
Accessing your contacts, gallery, camera, location, or files beyond what is necessary for the loan

In a 2026 public advisory, the DICT, National Privacy Commission (NPC), and Securities and Exchange Commission (SEC) specifically warned against online lending platforms that engage in harassment, intimidation, public shaming, and unlawful use of personal data. The advisory also emphasized that unnecessary, unauthorized, excessive, or disproportionate processing of personal data—including contact lists—is prohibited.

A Borrower Can Owe Money and Still Have Rights

Many borrowers feel trapped because they did borrow money. That is understandable. But Philippine law does not allow a lender to say, “Because you owe us, we can shame you, threaten you, or contact everyone in your phone.”

There are two separate issues:

Issue	What it means
The debt	If the loan is valid, the borrower may still have a civil obligation to pay the principal, lawful interest, and lawful charges.
The harassment	If the lender or collector uses threats, public shaming, unlawful contact-list access, false statements, or abusive methods, those acts may be reportable to the SEC, NPC, police, NBI, or prosecutor.

The Civil Code recognizes that contracts have the force of law between the parties and must be complied with in good faith. It also provides that no interest is due unless it is expressly stipulated in writing; the Supreme Court has applied these rules in cases involving contractual obligations and interest, including Lara’s Gifts & Decors, Inc. v. Midtown Industrial Sales, Inc. (Supreme Court E-Library)

This means a borrower should not simply ignore a valid loan. But it also means a lender cannot invent charges, impose interest not properly disclosed, or use abusive collection tactics.

Legal Basis: Philippine Laws and Rules That Protect Borrowers

No one can be jailed just for unpaid debt

The 1987 Constitution states that no person shall be imprisoned for debt. (Lawphil)

So if a collector says, “Makukulong ka bukas,” “May warrant ka na,” or “Papahuli ka namin sa barangay/pulis,” be careful. Ordinary non-payment of a loan is generally a civil matter, not a criminal case.

However, this does not mean every loan-related dispute is automatically civil. Criminal issues may arise if there are separate facts such as:

Using a fake identity or falsified documents
Issuing bouncing checks in certain circumstances
Committing fraud from the beginning
Threatening or coercing someone
Defaming someone online
Impersonating law enforcement or court officers

But failure to pay alone is not a reason to jail a borrower.

Lending companies and financing companies are regulated by the SEC

The Lending Company Regulation Act of 2007, or Republic Act No. 9474, regulates lending companies and recognizes the State’s policy to prevent and mitigate prejudicial practices in lending. (Lawphil)

The SEC also issued Memorandum Circular No. 18, Series of 2019, titled “Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies.” (SEC Appointment System) Under this rule, lending and financing companies, including their third-party service providers and collectors, may use only reasonable and legally permissible collection methods. The circular prohibits practices such as threats of violence, threats to take actions that cannot legally be taken, obscenities, insults, public disclosure of borrower information, false representations, deceptive means, and contacting people in the borrower’s contact list other than named guarantors or co-makers.

The same SEC circular also makes the lender responsible for third-party collectors acting as its agents. In other words, a lender cannot easily escape responsibility by saying, “Hindi namin employee ang collector.”

Contact-list harassment can violate data privacy rules

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information in information and communications systems. (Lawphil)

The NPC issued Circular No. 20-01 on the processing of personal data for loan-related transactions. It covers lending and financing companies, persons acting as such whether or not SEC-authorized, personal information processors, and third-party service providers. The circular says personal data collection must be adequate, relevant, necessary, and not excessive. It also prohibits online lending apps from accessing unnecessary phone permissions.

Most importantly for borrowers, NPC Circular No. 20-01 prohibits the harvesting, copying, or saving of contact lists for debt collection or harassment. It also says loan apps should have a separate interface for borrower-provided references or co-makers, instead of grabbing the borrower’s entire phonebook.

In the 2026 DICT-NPC-SEC advisory, the agencies again stressed that for debt collection, only the guarantor may be contacted, and contacting the borrower’s contact list other than named guarantors is prohibited. The advisory also explains that a character reference is different from a guarantor: a guarantor must expressly consent and assume liability.

Threats, coercion, and online defamation may become criminal issues

Depending on what was said or done, abusive collection may involve the Revised Penal Code, including provisions on threats, coercions, unjust vexation, and libel. (Lawphil)

If the abusive act is done through a computer system, social media, messaging apps, or other online channels, the Cybercrime Prevention Act of 2012, or Republic Act No. 10175, may also become relevant. (Lawphil)

Examples that may justify police, NBI, or prosecutor attention include:

“Papatayin ka namin pag hindi ka nagbayad.”
“Ipapadala namin nude/edited photo mo sa contacts mo.”
Fake court summons or fake arrest warrants
A Facebook post accusing you of a crime
A collector pretending to be police, NBI, a judge, or a prosecutor
Repeated threats to your family, employer, or children

What To Do Immediately If an Online Lending App Harasses You

1. Do not panic, and do not argue emotionally

Collectors often provoke borrowers into angry replies. Avoid insults, threats, or admissions you do not fully understand.

Use short, calm messages. For example:

“Please send the full statement of account, name of the lending company, SEC registration details, and official payment channels. I object to any harassment, threats, public shaming, or contacting of persons who are not my guarantors or co-makers.”

This keeps the focus on lawful collection and preserves your position.

2. Preserve evidence before blocking or deleting anything

Screenshots are useful, but they are stronger when they show the full context.

Save:

Evidence	Why it matters
Screenshots of texts, chats, and emails	Shows exact words used by collectors
Call logs	Shows frequency, time, and numbers used
Voice recordings or voicemails, if available	Helps prove threats or abusive language
App name, website, and download page	Helps identify the platform
Loan agreement, disclosure statement, or screenshots of loan terms	Shows principal, interest, fees, due date, and account details
Proof of payments	Helps dispute inflated balances
Messages sent to your contacts	Proves contact-list harassment
Screenshots of public posts	Supports complaints for shaming, privacy violations, or cyberlibel
Collector names, numbers, and claimed office	Helps agencies trace the source

Ask affected contacts to send you screenshots from their own phones. If possible, ask them not to crop out timestamps, phone numbers, group names, or sender details.

3. Revoke unnecessary app permissions

Check your phone settings and remove access to contacts, camera, gallery, microphone, location, and files if those permissions are no longer needed.

The 2026 DICT-NPC-SEC advisory says borrowers should download apps only from official or verified sources, read consent prompts carefully, and watch out for deceptive design patterns that may invalidate consent. It also says camera or gallery access should be limited to legitimate know-your-customer purposes and turned off after the purpose is completed, while unbridled access to contact lists is prohibited.

Do not delete the app immediately if it is your only source of the loan agreement, account number, payment history, or collector messages. Save those first.

4. Send a written demand to stop unlawful collection

A written message is useful because it creates a record. Keep it firm but professional.

You may use this format:

I acknowledge your message regarding the alleged loan account. Please send the complete statement of account, loan contract, disclosure statement, official company name, SEC registration or certificate of authority details, and official payment channels.

I object to threats, insults, public shaming, false statements, and contacting persons who are not my guarantors or co-makers. I also object to any unauthorized processing, sharing, or disclosure of my personal data and the personal data of my contacts.

Please communicate only through lawful channels and provide the name and contact details of your data protection officer or authorized representative.

For NPC complaints, this step can also matter because the NPC’s formal complaint process generally requires proof that you first informed the respondent in writing and allowed action, or that no timely or appropriate response was given after 15 days. (National Privacy Commission)

5. Warn your family, employer, and contacts without oversharing

A short message is enough:

“A lending app/collector may message you about me. You are not my guarantor or co-maker. Please do not engage. Kindly screenshot any message, including the number and timestamp, and send it to me for evidence.”

This reduces panic and helps you collect proof.

6. Pay only through official channels

If you intend to pay or settle, ask for:

Full statement of account
Breakdown of principal, interest, penalties, and other fees
Official payment channel under the lending company’s name
Official receipt or electronic acknowledgment
Written confirmation if the account is fully settled

Avoid paying to random personal GCash, Maya, bank, or crypto accounts unless the company gives written proof that the account is an authorized payment channel.

Where to File a Complaint

Different agencies handle different parts of the problem. In many harassment cases, you may need more than one complaint because SEC, NPC, and law enforcement handle different issues.

Where to file	Best for	Practical notes
SEC Financing and Lending Companies Division / SEC iMessage	Unfair debt collection by lending companies, financing companies, online lending platforms, and their collectors	File through SEC iMessage and attach screenshots, loan details, collector numbers, and proof of harassment. The 2026 advisory lists SEC FINLEND and the SEC iMessage portal as the reporting channel.
National Privacy Commission	Contact-list access, disclosure of personal data, public shaming, misuse of photos/IDs, unauthorized processing of data	NPC formal complaints require a complaint form or verified complaint, supporting evidence, notarization, and proof of written exhaustion of remedies unless an exception applies. (National Privacy Commission)
PNP Anti-Cybercrime Group	Online threats, cyber harassment, impersonation, fake warrants, cyberlibel-type posts	The 2026 advisory lists PNP ACG contact channels for reports involving cybercrime concerns.
NBI Cybercrime Division	Serious cyber threats, organized harassment, fake identities, online defamation, coordinated scams	The 2026 advisory also lists the NBI Cybercrime Division as a reporting channel.
DICT Cyber Hotline	Cyber incident reporting and referral support	The 2026 advisory includes the DICT Cyber Hotline email for cyber-related reports.
Prosecutor’s Office	Criminal complaint for threats, coercion, libel/cyberlibel, unjust vexation, or related offenses	Usually requires affidavits, evidence, and identifying details of the respondents.

Realistic timelines

Agency action is not always immediate. Expect practical bottlenecks such as incomplete company names, collectors using burner numbers, unregistered apps changing names, and heavy agency caseloads.

In practice:

Police or NBI reporting may begin the same day if threats are urgent, but investigation and case build-up can take longer.
SEC complaints may take weeks or months depending on evidence, identification of the company, and whether the entity is registered.
NPC complaints require procedural completeness. A notarized complaint, proof of written notice to the respondent, screenshots, affidavits, and clear identification of privacy violations can prevent delays.
Criminal complaints before the prosecutor often require sworn affidavits and may go through preliminary investigation before any court case is filed.

How to File a Strong SEC Complaint

For unfair debt collection, prepare a complaint packet with:

Your name, contact details, and loan account number, if available
App name, website, company name, and SEC registration or certificate of authority number, if known
Date of loan, amount received, maturity date, and amount being demanded
Screenshots of the loan offer, disclosure statement, repayment schedule, and charges
Screenshots of threats, insults, false statements, or public shaming
Call logs showing repeated or late-night calls
Screenshots from relatives, friends, co-workers, or employers contacted by the collector
Proof that those persons were not guarantors or co-makers
Payment receipts and settlement offers, if any
A short chronological summary of what happened

Do not submit only one angry screenshot without context. Agencies can act better when the evidence shows the full pattern: loan date, due date, collector identity, exact messages, affected contacts, and the lender or app connected to the conduct.

How to File a Strong NPC Complaint

The NPC’s formal complaint process is more document-heavy than many borrowers expect. The NPC states that a formal complaint may be filed using its complaint-assisted form or a verified complaint, with evidence and witness affidavits. It may be submitted in person, by registered mail, courier, or email, and the complaint generally needs to be notarized. (National Privacy Commission)

Before filing, prepare:

Your notarized complaint or completed NPC complaint form
Copy of valid ID
Screenshots of the app permissions requested
Screenshots showing access to or use of your contacts, photo, ID, or personal information
Messages sent to your contacts
Public posts or group messages identifying or shaming you
Proof that you wrote the lender or app about the privacy violation
Proof that the lender failed to act properly, or did not respond within 15 days
Affidavits from affected contacts, if available

The NPC process can lead to enforcement action, and in appropriate cases the NPC may recommend criminal prosecution to the Department of Justice. (National Privacy Commission)

If You Still Owe Money: How to Handle the Debt Safely

A harassment complaint does not automatically erase the loan. Handle the debt separately and carefully.

Ask for a correct statement of account

Request a written breakdown of:

Principal actually received
Interest
Penalties
Processing fees
Extension fees
Collection charges
Payments already made
Remaining balance

Compare the statement with your own screenshots and receipts.

Check if the loan is covered by SEC interest and fee caps

SEC Memorandum Circular No. 3, Series of 2022, which took effect on March 3, 2022, applies to certain unsecured, general-purpose loans offered by lending companies, financing companies, and online lending platforms. It covers loans not exceeding ₱10,000 with a loan tenor of up to four months and sets a nominal interest rate ceiling equivalent to 6% per month, along with a total cost cap of 100% of the amount borrowed for covered loans. (Bureau of Small Enterprises)

This does not mean every loan in the Philippines has the same cap. Coverage depends on the loan type, amount, tenor, date, and lender. But if your app loan is a small, short-term, unsecured online loan, this rule is worth checking.

Negotiate in writing

If you want to settle, negotiate by text, email, or in-app message so there is a record. Ask for written confirmation of:

Settlement amount
Payment deadline
Official payment channel
Whether payment fully closes the account
Whether the lender will stop collection and update your account status
Whether your personal data will no longer be used for collection except as legally required

Do not rely only on a phone call.

If the Lender Files a Case Against You

For many ordinary loan collection cases, the lender may file a civil collection case. If the money claim does not exceed ₱1,000,000, it may fall under the small claims procedure in first-level courts such as the Metropolitan Trial Court, Municipal Trial Court in Cities, Municipal Trial Court, or Municipal Circuit Trial Court. Small claims are designed for simpler money claims and may include claims arising from loans or credit accommodations. (Supreme Court of the Philippines)

If you receive court papers:

Read the summons and attachments immediately.
Check the deadline. Small claims defendants are generally required to file a verified response within 10 calendar days from receipt of summons and statement of claim. (Office of the Court Administrator)
Attach proof of payments, screenshots, statement of account disputes, and any settlement communications.
Do not ignore the case just because the lender harassed you.
Keep your harassment complaints separate, but preserve the evidence because it may be relevant to penalties, counterclaims, or separate complaints.

Common Scenarios Borrowers Face

“They messaged my mother, boss, or officemates. I never made them guarantors.”

That is one of the clearest red flags. Philippine regulators have stated that for debt collection, contacting the borrower’s contact list other than named guarantors is prohibited. A character reference is not automatically a guarantor, and a guarantor must expressly consent and assume liability.

Save screenshots from each person contacted and file with the SEC and NPC.

“They said I will be arrested tonight.”

For ordinary non-payment of debt, that is misleading. The Constitution prohibits imprisonment for debt. (Lawphil)

If the collector also threatens harm, pretends to be police, sends fake warrants, or uses intimidation, preserve the messages and report to law enforcement.

“They posted my name and photo on Facebook.”

This may involve unfair debt collection, unauthorized disclosure of personal information, and possibly criminal or cybercrime issues depending on the words used and the facts. Save the post URL, screenshots, comments, date, time, and profile or page details. Ask friends to screenshot it too, especially if the post is later deleted.

“I am an OFW or a foreigner outside the Philippines.”

You can still preserve digital evidence and use online reporting channels such as SEC iMessage. For sworn statements, affidavits, or a Special Power of Attorney for a representative in the Philippines, documents executed abroad may need consular notarization or an apostille, depending on where they were signed and how they will be used. Philippine consular posts commonly notarize private documents such as affidavits and SPAs, while documents executed in some countries may be apostilled for use in the Philippines. (Philippine Embassy)

“The app is not registered or disappeared from the app store.”

Still report it. Include the app name, screenshots, phone numbers, payment accounts, website, social media pages, and download links if available. Unregistered or shifting app identities are common bottlenecks, so every identifying detail helps.

Frequently Asked Questions

Can an online lending app contact my contacts?

For debt collection, regulators have made clear that contacting a borrower’s contact list other than named guarantors is prohibited. A person listed as a “character reference” is not automatically liable for the debt.

Can I be jailed for not paying an online loan in the Philippines?

No one can be imprisoned for debt alone. The Constitution expressly prohibits imprisonment for debt. But separate criminal acts, such as fraud, threats, coercion, falsification, or cyberlibel, may be treated differently depending on the facts. (Lawphil)

Is online lending harassment a data privacy violation?

It can be, especially if the app accessed your contacts, used your photo or ID for shaming, disclosed your debt to third parties, or processed personal data beyond what was necessary for the loan. NPC Circular No. 20-01 specifically restricts excessive app permissions and prohibits harvesting contact lists for debt collection or harassment.

Should I block the collectors?

You may block abusive numbers after saving evidence. Before blocking, capture screenshots, call logs, account details, and payment instructions. If the lender has an official email, app support channel, or registered office, use that for written communications.

Should I uninstall the loan app?

Revoke unnecessary permissions first and save all records. If the app contains your contract, repayment history, account number, or messages, document those before uninstalling. Removing the app without saving evidence can make complaints harder.

Where should I complain first, SEC or NPC?

If the main problem is abusive collection by a lending or financing company, start with the SEC. If the main problem is misuse of personal data, such as contact-list harassment, public shaming, or use of your photo or ID, file with the NPC. If there are threats, fake warrants, impersonation, or online defamation, consider PNP ACG, NBI Cybercrime Division, or the prosecutor’s office as well.

Does filing a complaint cancel my loan?

No. A complaint about harassment or privacy violations does not automatically cancel a valid debt. It can, however, help stop unlawful collection practices, support regulatory action, and preserve your rights if the balance or collection conduct is disputed.

What if the collector uses a different company name from the app?

Document both names. Many borrowers see one app name, another company name in payment instructions, and a different collector name in messages. Send all of these to the SEC or NPC because they may help connect the app, lender, payment channel, and third-party collector.

Can they post that I am a scammer if I really failed to pay?

Failure to pay a debt does not automatically make a person a scammer. Public shaming, insults, or accusations of a crime can create separate legal issues. SEC rules prohibit public disclosure of borrower information as an unfair debt collection practice, subject to limited exceptions.

What is the strongest evidence in an online lending harassment complaint?

The strongest evidence usually shows a pattern: the loan details, identity of the app or lender, exact abusive messages, proof that non-guarantor contacts were contacted, screenshots from affected contacts, call logs, public posts, payment records, and your written request for lawful communication.

Key Takeaways

A borrower may still owe a valid loan, but lenders and collectors must collect lawfully.
No one can be jailed for debt alone in the Philippines.
Online lending apps and collectors generally cannot contact your phonebook for debt collection; only named guarantors or co-makers are relevant.
Character references are not automatically guarantors.
Threats, public shaming, obscene messages, fake legal claims, and contacting employers or relatives may violate SEC rules, privacy law, and sometimes criminal laws.
Save evidence before blocking, uninstalling, or deleting messages.
File with the SEC for unfair debt collection, the NPC for data privacy violations, and PNP/NBI/prosecutors for threats, impersonation, cyber harassment, or online defamation.
Handle the debt separately: ask for a statement of account, verify charges, pay only through official channels, and keep written proof of any settlement.