Quick answer

A creditor may demand payment, send notices, negotiate, report accurate credit information through lawful channels, and file a real collection case. It may not use violence, threats, public shaming, deception, abusive language, unlawful disclosure of personal data, or excessive contact to force payment.

This protection applies even when the debt is valid and overdue. Under the Financial Products and Services Consumer Protection Act (Republic Act No. 11765), regulated financial service providers must treat clients fairly, protect client data, maintain a free complaint mechanism, and refrain from abusive collection or debt-recovery practices. They may also be responsible for what their employees, agents, and accredited third-party collectors do.

If harassment is happening:

Prioritize safety and call 911 if a threat appears immediate.
Preserve messages, call logs, posts, letters, account records, and witness details.
Send a written complaint to the creditor—not merely to the individual collector.
Escalate to the correct regulator: the BSP, SEC, CDA, Insurance Commission, or National Privacy Commission, depending on the lender and violation.
Report threats, coercion, impersonation, or online abuse to the police, PNP Anti-Cybercrime Group, or NBI when appropriate.
Consult a lawyer promptly if there is a credible threat, public exposure, significant damage, or an actual court document.

A harassment complaint does not automatically cancel the debt, stop lawful interest, or prevent a creditor from suing. The collection conduct and the validity or amount of the debt are separate issues.

What counts as unlawful or unfair collection?

The applicable rule depends on whether the creditor is a bank, credit-card issuer, financing company, lending company, cooperative, insurer, or another regulated financial service provider. As a practical guide, the following conduct may violate financial-consumer, privacy, civil, or criminal law:

Threatening to kill, injure, abduct, assault, or damage the property or reputation of the borrower or another person.
Threatening arrest, imprisonment, seizure, garnishment, or another action the collector has no legal power or genuine basis to take.
Using obscene, insulting, or profane language to abuse or humiliate someone.
Falsely claiming to be a lawyer, police officer, court employee, government official, or authorized representative.
Sending a fake warrant, subpoena, summons, court order, barangay document, or government notice.
Falsely stating the amount or status of the debt, or concealing that the amount is genuinely disputed.
Posting the borrower’s name, photograph, identification document, loan details, or accusations on social media, group chats, public pages, or community boards to shame the borrower.
Mass-messaging relatives, co-workers, customers, social-media contacts, or people found in the borrower’s phone.
Repeatedly calling an employer or uninvolved third person to pressure or embarrass the borrower.
Using a borrower’s photograph to create humiliating posters, memes, or “wanted” notices.
Continuing to process phone contacts, photographs, or other personal data in an excessive or unrelated manner.
Collecting through deception, intimidation, or another practice designed to prevent the borrower from making an informed decision.

The SEC’s Memorandum Circular No. 18, Series of 2019 specifically governs unfair collection by financing companies, lending companies, and their third-party service providers. Among other restrictions, it addresses threats, abusive language, publication of borrower information, false representations, contact with people outside the proper parties to the loan, and calls at unreasonable hours.

For entities covered by that circular, contact before 6:00 a.m. or after 10:00 p.m. is generally treated as unreasonable. The circular contains exceptions where the account has been past due for more than 15 days or the borrower expressly agreed that another time was reasonable and convenient. Those exceptions do not authorize threats, humiliation, privacy violations, or relentless calling.

Credit-card issuers and their collection agents must likewise use reasonable and legally permissible means, observe good faith and proper decorum, and must not harass, abuse, oppress, or use unfair practices. Before endorsing a credit-card account to a collection agency—or transferring it to another agency—the issuer must give the cardholder written notice identifying the agency and its contact details. See Sections 19 to 22 of the Philippine Credit Card Industry Regulation Law.

Lawful collection is still allowed

Not every unpleasant reminder is illegal. Subject to the contract and applicable law, a creditor may generally:

Send a demand letter or account statement.
Ask the borrower to pay or propose a repayment arrangement.
Contact the borrower at reasonable times and through lawful channels.
Engage an authorized collection agency or lawyer.
Disclose necessary information to authorized agents for legitimate collection, subject to confidentiality and data-protection requirements.
Report accurate information through a legally authorized credit-information system.
File a civil collection, small-claims, foreclosure, or other proper case.
Enforce a valid security or guaranty through the procedure required by law.

A genuine warning that the creditor intends to file a lawful civil case is not automatically harassment. The line is crossed when the collector fabricates legal authority, threatens an action that cannot legally be taken, or uses the possibility of a case as a vehicle for abuse.

Can a collector threaten arrest for an unpaid loan?

Not for mere nonpayment of debt. Article III, Section 20 of the 1987 Constitution states that no person shall be imprisoned for debt or nonpayment of a poll tax.

A private collector cannot issue an arrest warrant, order the police to arrest a borrower, or imprison someone by sending a text message. Only a court may issue a warrant in a proper criminal proceeding.

This does not mean that every transaction involving an unpaid obligation is immune from criminal investigation. Separate conduct—such as fraud allegedly committed when obtaining the loan—may be evaluated under a criminal law if all its elements are supported by evidence. Nonpayment alone should not be casually equated with fraud. A message claiming that arrest is “automatic” simply because a payment is late is a serious warning sign.

Never ignore a genuine summons, subpoena, prosecutor’s notice, or court order. Verify it directly with the named court or government office using independently obtained official contact information.

Can collectors contact family, friends, or an employer?

Generally, they may not use third persons to shame or pressure the borrower.

The National Privacy Commission’s Circular No. 2022-02 prohibits uncontrolled, excessive, or disproportionate processing of contact lists, including processing that leads to harassment, unfair collection, or collection from people other than the borrower’s named guarantors.

Important distinctions apply:

A character reference is ordinarily provided to help verify the borrower’s identity or information during the loan evaluation. A character reference is not automatically a guarantor.
A lender must inform a character reference how the contact details were obtained and provide an option to have the person’s data removed as a reference.
A character reference may not be contacted for unrelated marketing, cross-selling, or third-party offers.
A guarantor must have separately and expressly agreed to answer for the obligation in accordance with the law on guaranty.
A co-maker may have direct contractual liability depending on the document actually signed.
For debt collection under the NPC circular, the lender may contact the guarantor, but it may not sweep through the borrower’s contact list and contact uninvolved persons.

A limited, necessary attempt to locate a borrower may present different facts from disclosing the debt, demanding that a relative pay, or repeatedly calling an employer. The content, frequency, purpose, audience, and information disclosed all matter.

Public shaming and misuse of personal data

A lender’s access to information during a loan application is not unlimited permission to use that information for any collection tactic.

Under the Data Privacy Act of 2012, personal data must be processed for a lawful, declared purpose and in a manner that is proportionate and not excessive. The NPC’s loan-related rules specifically prohibit using a borrower’s photograph to harass or embarrass the borrower and prohibit uncontrolled processing of phone, email, and social-media contact lists.

Potentially unlawful conduct includes:

Uploading a borrower’s ID or selfie to social media.
Editing the borrower’s photograph into a defamatory collection poster.
Announcing the debt in an office, school, neighborhood, or group chat.
Messaging everyone in the borrower’s phone.
Keeping unnecessary access to the phone’s camera, gallery, or contacts after the legitimate purpose has ended.
Refusing a character reference’s request to remove their data without a valid legal basis.
Disclosing more loan information than is necessary to an authorized collector.

Consent buried in an app screen or loan contract is not necessarily a blanket defense. The validity, specificity, timing, transparency, and purpose of consent—and whether another lawful basis exists—must be assessed from the actual documents and processing activity.

Who is responsible when an outside collection agency harasses you?

Complain to both the collection agency and the original creditor.

Section 13 of Republic Act No. 11765 makes a financial service provider responsible for acts or omissions of its directors, officers, employees, and agents in transactions with financial consumers. It also provides for solidary liability with accredited third-party service providers for relevant acts or omissions, including debt collection.

For credit-card debt, the issuer must also notify the cardholder before endorsing the account to a collection agency and may refer the account to only one collection agency at a time.

Ask the original creditor to confirm in writing:

Whether the collector is authorized.
The collector’s complete legal name and contact details.
The account and amount endorsed.
Whether the debt was merely assigned for collection or legally transferred.
Where payment may safely be made.
Who is handling the formal complaint.

Do not pay a personal bank account or e-wallet merely because a caller demands immediate payment. Verify payment instructions through the creditor’s official website, branch, app, or published customer-service number.

What to do immediately

1. Deal with threats as a safety issue

If the collector threatens immediate violence, appears at your home or workplace behaving aggressively, follows you, or threatens a child or family member:

Move to a safe place.
Call 911 or the nearest police station.
Tell a trusted person, security officer, or employer.
Do not meet the collector alone.
Preserve the threatening message, number, profile, vehicle details, and witness information.
Ask for a police record or reference number.

A regulator’s complaint process is not a substitute for emergency protection.

2. Preserve evidence before blocking accounts

Keep the original data whenever possible:

Full screenshots showing the sender, number or username, date, time, and complete message thread.
Screen recordings showing the profile, URL, post, comments, and account that published the material.
Exported chat histories and downloaded emails with headers.
Call logs, voicemail, envelopes, demand letters, and courier receipts.
Copies of the loan agreement, disclosure statement, promissory note, payment history, and statements of account.
The app’s name, developer, store listing, permissions, privacy notice, and loan screen.
Names and statements of relatives, co-workers, or other recipients.
Proof of complaints previously sent and delivery or read receipts.
Proof of damage, such as medical records, lost-business documents, or employer correspondence, where relevant.

Keep an untouched backup. Avoid cropping away identifying information, altering file names, or editing the original files. Electronic evidence must still be authenticated; the Supreme Court Rules on Electronic Evidence consider the integrity, reliability, and source of electronic material.

Do not secretly record a private telephone or spoken conversation without legal advice and the authorization of all parties. The Anti-Wiretapping Act generally prohibits secretly recording a private communication without authorization from all parties. Written messages, lawful voicemails, call logs, contemporaneous notes, and witness testimony may be preserved without creating that separate risk.

3. Revoke unnecessary app permissions

After preserving evidence:

Turn off access to contacts, camera, photos, microphone, and location if these are no longer necessary.
Change important passwords if the app’s conduct raises security concerns.
Review linked social-media or email permissions.
Warn affected contacts not to engage, disclose information, or send money.
Keep the device and original data available if a formal investigation is likely.

Deleting the app too early may remove useful evidence or account records. Take complete copies first.

4. Send a written complaint and demand

Address the complaint to the creditor’s consumer-assistance unit, compliance officer, or data-protection officer. Copy the collection agency when appropriate. State:

Your name and account reference, without sending unnecessary sensitive data.
The collector’s number, account, agency, and claimed identity.
A chronological description of the conduct.
The exact statements, recipients, posts, and dates involved.
Whether you dispute the debt, amount, fees, payment history, or collector’s authority.
The harm or safety concern.
The action you want taken.

Reasonable requests may include:

Stop threats, public disclosure, third-party messaging, and abusive calls immediately.
Preserve all call records, account notes, messages, and instructions given to the collector.
Confirm the collector’s authority and identity.
Provide a complete statement and computation of the claimed balance.
Correct inaccurate information and record that the amount is disputed.
Remove unlawfully processed data and stop unnecessary access to contacts or photographs.
Communicate only in writing or through a specified reasonable channel.
Give a written investigation result and identify the person handling the complaint.

Do not falsely admit an amount you genuinely dispute. If the principal debt is valid but the computation is unclear, say precisely what is admitted and what requires verification.

For a complaint involving an allegedly disputed amount or unauthorized transaction, Republic Act No. 11765 requires the provider, pending its final investigation report, to suspend the imposition of interest, fees, and charges or provide a similar reasonable accommodation. This does not automatically apply to every complaint or erase charges already lawfully incurred.

Where to file a complaint

BSP: banks, credit-card issuers, e-money issuers, and other BSP-supervised institutions

First complain to the institution through its own consumer-assistance mechanism. If the issue remains unresolved, escalate it through the BSP’s Consumer Assistance Channels.

The BSP currently accepts complaints through the BSP Online Buddy and, as an alternative, through its Complaints, Inquiries and Requests form. Include:

A clear summary and requested resolution.
A copy of the complaint sent to the institution.
The institution’s response, if any.
Supporting documents.
Your current contact information.

Use the BSP’s current official page rather than contact details copied from unofficial social-media posts.

SEC: lending and financing companies

For a lending or financing company, follow the SEC’s official complaint procedure. The SEC currently instructs complainants to:

Complete the prescribed complaint form fully and accurately.
Submit one complaint form per respondent company.
Attach a valid government-issued ID.
Attach the loan documents and all supporting evidence.

The SEC sends the complaint to the company for an answer or comment; its published procedure gives the company 10 days from receipt to respond. The SEC may commence an administrative action when sufficient grounds exist.

An SEC administrative complaint does not itself cancel the loan, rewrite the payment terms, or declare the contract void. Those forms of relief may require adjudication or court action. Privacy violations may also need a separate NPC complaint.

NPC: contact-list abuse, public disclosure, or other misuse of personal data

Before filing a formal NPC complaint, ordinarily notify the lender, collection agency, or other responsible entity in writing and allow it to act. Under the 2021 NPC Rules of Procedure, a complaint will generally not be given due course unless:

The complainant first informed the responsible entity in writing; and
The entity failed to take timely or appropriate action, or did not respond within 15 calendar days from receiving the written notice.

The NPC may waive this exhaustion requirement for good cause or a serious violation—for example, where grave and irreparable harm requires immediate NPC action, no adequate remedy is available from the respondent, or the conduct is patently illegal.

A formal NPC complaint generally must be written, signed, and verified. It should identify the parties, narrate the material facts, state the relief requested, attach the evidence and prior correspondence, and include a sworn certification against forum shopping. Filing fees apply unless the complainant qualifies for an exemption or obtains a waiver. Check the NPC’s current complaint page before filing.

Cooperative, insurance, or another regulated provider

For a cooperative offering credit, the relevant financial regulator may be the Cooperative Development Authority. Cooperative banks remain under BSP supervision, while insurance cooperatives fall under the Insurance Commission. The institution’s license, disclosure statement, contract, and official registry should identify the regulator.

When jurisdiction is unclear, complain first to the provider and ask it to identify its regulator in writing. Republic Act No. 11765 assigns enforcement to the BSP, SEC, Insurance Commission, and CDA according to their respective jurisdictions.

Police, PNP Anti-Cybercrime Group, or NBI

Regulatory complaints address compliance and administrative responsibility. Conduct involving threats, coercion, impersonation, extortion, defamation, or other possible crimes may also be reported for investigation.

Online threats, fake accounts, malicious posts, or electronically transmitted abuse may involve the Cybercrime Prevention Act together with an underlying offense. The exact charge depends on the words used, context, intent, publication, identity of the accused, and admissible evidence. The NBI provides investigative assistance for victims of computer crimes.

Bring originals or reliable copies of the evidence, a chronological statement, identification, account documents, and information identifying the collector. Do not assume that calling conduct “harassment” establishes a particular crime; investigators and prosecutors must determine which offense, if any, is supported.

Possible civil remedies

Depending on the evidence, an aggrieved person may consider a civil action for damages or other appropriate relief.

Articles 19, 20, and 21 of the Civil Code require people to act with justice, give everyone their due, and observe honesty and good faith. They may provide a basis for damages where a legal right is deliberately exercised in bad faith to injure another, or where conduct contrary to law, morals, good customs, or public policy causes damage.

Possible claims may also arise from:

Violations of financial-consumer protection law.
Unlawful processing or disclosure of personal data.
Defamation or invasion of privacy.
Breach of contractual or confidentiality obligations.
Acts of the creditor’s employee, agent, or collection service provider.

Damages are not automatic. The claimant must prove the wrongful act, the responsible parties, causation, and the kind and amount of legally recoverable damage. Screenshots without proof of origin, generalized distress without supporting evidence, or an inability to identify the collector may weaken a claim.

For claims accruing specifically under Republic Act No. 11765 and its implementing rules, Section 14 generally provides a five-year period from consummation of the financial transaction or discovery of deceit or nondisclosure of material facts, subject to an outside limit of 10 years from the violation. Different civil, privacy, and criminal causes of action may have different—and sometimes much shorter—periods. Seek legal advice promptly rather than relying on the longest possible period.

The BSP and SEC are also statutorily empowered to adjudicate certain purely civil financial-transaction claims where the requested relief is solely payment or reimbursement of money not exceeding ₱10 million, subject to their applicable jurisdiction and procedural rules.

Common mistakes to avoid

Ignoring a real court document. Verify it, calendar the deadline, and respond through the proper procedure.
Assuming harassment cancels the debt. It usually does not.
Paying an unverified personal account. Confirm the collector and official payment channel first.
Deleting messages or the lending app immediately. Preserve complete evidence before blocking or uninstalling.
Posting accusations publicly without legal advice. Retaliatory posts can create a separate defamation or privacy dispute.
Secretly recording private calls. This may violate the Anti-Wiretapping Act.
Sending a complaint only to the individual caller. Notify the creditor, collection agency, and relevant compliance or consumer-assistance office.
Submitting incomplete screenshots. Preserve the sender, number, URL, date, time, and surrounding conversation.
Combining many unrelated companies in one SEC complaint. The SEC asks for one form per respondent company.
Filing immediately with the NPC without prior written notice. Unless a waiver is justified, the 15-day exhaustion requirement applies.
Admitting the full balance while disputing it. Be precise about what you accept and what needs verification.
Believing a character reference is automatically liable. Liability requires a valid contractual and legal basis; merely being listed as a reference does not make someone a guarantor.

When legal help is urgent

Consult a Philippine lawyer or the Public Attorney’s Office promptly when:

There is a credible threat of violence or property damage.
The collector has published private information or damaging accusations.
An employer, customer, or family member has been repeatedly contacted.
The lender accessed or distributed the phone’s contact list or photographs.
A significant amount, mortgage, vehicle, salary, or business asset is at risk.
The creditor presents a settlement, waiver, acknowledgment, or restructuring agreement for immediate signature.
You receive a summons, subpoena, foreclosure notice, writ, or prosecutor’s notice.
The claimed debt may involve identity theft, unauthorized transactions, forged documents, or fraud.
You need an injunction, damages, or another court order rather than only administrative sanctions.
A filing deadline or prescriptive period may be approaching.

Frequently asked questions

Can I complain even if I really owe the money?

Yes. A valid debt does not authorize threats, public shaming, deception, or unlawful use of personal data. Continue addressing the legitimate debt separately.

Can I require the collector to communicate only in writing?

You may make that reasonable request, especially after abusive calls. Whether it completely prevents other lawful contact depends on the applicable rules, contract, and circumstances. It does not prevent formal legal service.

Can a collector post my name or photograph on Facebook?

Using personal information to shame or pressure a borrower is generally inconsistent with SEC collection rules and the NPC’s loan-related privacy rules. Preserve the post, URL, account, audience, date, comments, and shares before requesting removal.

Is a family member required to pay?

Not merely because of the relationship. Liability may exist only if that person independently became a borrower, co-maker, guarantor, or otherwise legally bound under a valid document or law.

Is a character reference liable for the loan?

No, not merely by being named as a character reference. A guarantor must separately and expressly consent to the guaranty. The actual signed documents remain controlling.

Does filing a complaint stop collection, interest, or a court case?

Not automatically. A regulator, court, written settlement, or applicable rule must provide the suspension. For qualifying disputed amounts or unauthorized transactions, Republic Act No. 11765 requires suspension of interest, fees, and charges pending the provider’s final investigation report—or a similar reasonable accommodation.

What if the collector refuses to identify the company?

Do not send money or additional personal data. Preserve the communication, ask for the collector’s full identity and written authority, contact the original creditor through an independent official channel, and report suspected impersonation or fraud.

Can the creditor still sue after I report harassment?

Yes. A creditor may pursue a lawful claim while being separately accountable for abusive collection. Harassment is not a substitute defense to the underlying debt, although other defenses may exist based on the contract, computation, payment history, prescription, disclosure, or identity of the borrower.

What is usually the fastest first step?

Send a documented written complaint to the creditor’s consumer-assistance or compliance unit, demand immediate cessation of the specific abusive acts, and preserve proof of receipt. Escalate at once to law enforcement for immediate threats and to the proper regulator if the provider does not act.

Disclaimer

This article provides general Philippine legal information, not legal advice or a prediction of any case. Rights, jurisdiction, deadlines, and remedies depend on the lender’s identity, the loan documents, the collector’s exact conduct, and the available evidence. Official legal and agency sources were checked as of 11 August 2026.