Quick answer

Yes. A lending app or collector may demand payment through lawful, respectful means, but it may not use social media to shame you, publish your personal information, threaten you, use abusive language, or contact people from your phone list who are not consenting guarantors.

Preserve the post before it disappears, report it to the platform, and send a written complaint to the lender demanding removal and an end to the unlawful collection conduct. You may then report:

Unfair collection by a lending or financing company to the Securities and Exchange Commission (SEC);
Misuse or disclosure of personal data to the National Privacy Commission (NPC);
Threats, fraud, extortion, impersonation, or possible cyberlibel to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or DICT Cyber Hotline; and
Conduct by a bank, digital bank, or another BSP-supervised institution to the Bangko Sentral ng Pilipinas (BSP), after first complaining to the institution.

These remedies may be pursued separately or at the same time when appropriate. Reporting the collector does not erase a valid loan, but owing money does not authorize public humiliation or unlawful use of your data.

What collectors are not allowed to do

SEC Memorandum Circular No. 18, Series of 2019 prohibits financing and lending companies—and people acting for them—from engaging in unfair debt collection. Prohibited conduct includes:

Threatening violence, reputational harm, property damage, or an action that cannot legally be taken;
Using obscenities, insults, or profane language that abuses the borrower or amounts to an offense;
Publishing the names or other personal information of borrowers who allegedly refuse to pay, except for disclosures lawfully permitted under the circular;
Communicating false loan information or failing to disclose that a debt is disputed when making a permitted communication;
Using false representations or deceptive methods to collect or obtain information;
Contacting a borrower before 6:00 a.m. or after 10:00 p.m., unless the account is more than 15 days past due or the borrower gave express, provable consent that those are the only convenient times; and
Contacting people in the borrower’s contact list who were not named as guarantors or co-makers.

The complete rule is available from the SEC’s official page for Memorandum Circular No. 18.

The Financial Products and Services Consumer Protection Act also prohibits abusive collection and requires financial service providers to respect client privacy. A provider is responsible for the acts or omissions of its employees and agents and may be solidarily liable with an accredited third-party collector. Contract terms cannot validly waive a consumer’s right to complain, sue, or have nonpublic data protected. See Republic Act No. 11765.

Contact lists, references, and guarantors are different

A character reference is not automatically a guarantor. A guarantor must separately consent to assume responsibility if the borrower defaults.

As a debt-collection tactic, a lender or collector may not contact people from the borrower’s contact list other than consenting guarantors. Unnecessary, excessive, or disproportionate access to contacts is also prohibited. The current government position is summarized in the 18 March 2026 DICT–NPC–SEC Joint Advisory on Online Lending Platforms and in NPC Circular No. 2022-02.

Permission given during installation is not necessarily a blanket license to copy, retain, or publicly use your contacts, photos, location, or other data. Processing must still have a lawful, specified, and proportionate purpose under the Data Privacy Act and the NPC’s loan-related data guidelines.

Preserve evidence before reporting or blocking

Online content can be deleted quickly. Before asking for removal, save evidence in a way that shows where it came from and when you saw it.

Keep:

Screenshots showing the entire screen, account name, profile or page, caption, date, comments, and visible URL;
A screen recording that opens the post from the profile or message thread;
The post URL, profile URL, username, page ID, group name, and date and time you discovered it;
Copies of comments, shares, tags, reactions, private messages, texts, call logs, voice messages, and emails;
The original image, video, or audio file, if available;
Names and contact details of people who saw or received the post;
The loan agreement, disclosure statement, payment history, receipts, account number, and disputed computations;
The app’s privacy notice, permissions screen, consent records, and collector contact details;
Messages connecting the poster or telephone number to the lender, collection agency, or your specific loan; and
Proof of harm, such as employer communications, cancelled transactions, medical records, counselling expenses, or messages from relatives and colleagues.

Do not edit, annotate, or overwrite the only copy. Keep the original device and files, and back them up securely. Electronic evidence must be authenticated; a cropped image with no source, date, or context is easier to challenge. The governing requirements appear in the Supreme Court’s Rules on Electronic Evidence.

How to report the post

1. Deal with immediate danger first

If the collector threatens violence, sends someone to your home, threatens your children, publishes an address that creates an immediate safety risk, or demands money under a threat of harm, call the nationwide Unified 911 service or go to the nearest police station. Do not wait for an SEC or NPC response before seeking protection.

Tell trusted household members or workplace security if the threat names a location. Avoid meeting the collector alone.

2. Send a written complaint to the lender

Use the lender’s consumer assistance unit, customer-service channel, and data protection officer, if listed. Send by email or another channel that produces proof of delivery.

Identify:

Your name and loan or account reference;
The post, account, collector, and date involved;
The personal information disclosed;
Why the post is false, excessive, threatening, or unrelated to a lawful collection purpose;
The people contacted who were not guarantors;
The relief you want; and
A request for a complaint reference number.

Request that the company:

Remove the post and stop further publication or sharing;
Instruct its collector and collection agency to stop the conduct;
Preserve account logs, call recordings, collector assignments, consent records, and communications;
Identify the collection agency or agent handling the account;
Correct false loan or payment information;
Explain the source, purpose, legal basis, recipients, and retention period for the data used; and
Communicate only through a specified lawful channel while the complaint is investigated.

Keep the sent message, delivery confirmation, replies, and ticket number. Do not send unnecessary identity documents through an unverified collector account.

3. Report the content to the platform

Use the platform’s reporting options for harassment, bullying, threats, impersonation, privacy violations, doxxing, or unauthorized disclosure. Include the precise post URL rather than only the profile.

Preserve your evidence first. Platform removal can reduce continuing harm, but it does not replace a complaint to Philippine authorities.

4. File an SEC complaint

For an online lender operated by a lending or financing company, file through the SEC iMessage portal:

Open a new ticket and sign in or register through eSECURE.
Select Financing and Lending Companies Department.
Choose Complaints on Financing and Lending Companies.
Provide the app name and the lender’s corporate name, if known.
Attach the post, messages, loan documents, proof connecting the collector to the lender, and your prior written complaint.
Save the electronic ticket number and monitor the ticket for requests or instructions.

The current SEC hotline for unfair collection complaints is 1-4732 (1-4SEC), as stated in the March 2026 joint advisory.

Include both the app’s trade name and the corporation behind it. If the operator is unknown or appears unlicensed, describe how you downloaded the app, where payments were directed, the telephone numbers used, and any corporate or bank-account names shown.

5. File an NPC complaint for misuse of personal data

Consider an NPC complaint when the post discloses or misuses your name, photograph, loan status, contact details, identification documents, address, workplace, contact list, or other personal data.

Ordinarily, you must first inform the lender, collector, or other respondent in writing and give it an opportunity to act. You may file when it fails to take timely and appropriate action or gives no response within 15 calendar days from receipt. The NPC may waive this requirement for good cause or a serious violation, including grave and irreparable harm, lack of an adequate remedy, or patently illegal conduct. See the 2021 NPC Rules of Procedure, as amended.

For a formal complaint:

Download the NPC’s current Complaint-Affidavit form effective 1 July 2025.
State the respondent, personal data affected, events in chronological order, violations alleged, evidence, and relief requested.
Attach your written notice to the respondent, proof of receipt, response or proof that 15 days passed, and witness affidavits where available.
Complete the verification and certification against forum shopping.
Have the complaint notarized.
Submit it personally, by courier, or as a scanned filing to complaints@privacy.gov.ph, following the NPC’s current filing instructions.

The standard complaint filing fee is ₱500, with additional fees if damages are claimed. Qualified indigent complainants may seek an exemption subject to the documentary requirements in NPC Circular No. 2023-01. Check the NPC’s instructions before paying.

6. Report threats, fraud, scams, or possible cybercrime

The March 2026 joint advisory lists these official channels:

DICT Cyber Hotline: 1326@dict.gov.ph
NBI Cybercrime Division: ccd@nbi.gov.ph; (02) 8523-8231 to 38
PNP Anti-Cybercrime Group: acg@pnp.gov.ph; (02) 8723-0401 local 7491

An investigator or prosecutor must assess the proper offense. Depending on the words, evidence, intent, and surrounding acts, the conduct may raise issues involving threats, coercion, fraud, unlawful use of personal data, or cyberlibel. A regulator’s finding of unfair collection does not automatically prove a criminal charge.

7. Use the BSP route when the lender is BSP-supervised

If the app belongs to a bank, digital bank, nonbank electronic-money issuer, or another BSP-supervised financial institution, first complain through the institution’s Financial Consumer Protection Assistance Mechanism.

If the response is unsatisfactory, escalate through the BSP Online Buddy on the BSP website or submit the BSP complaint form to consumeraffairs@bsp.gov.ph. The BSP’s current procedure and contact details are on its Consumer Assistance Channels page.

Could the post be cyberlibel?

Possibly, but not every insulting or unfair collection post is automatically cyberlibel.

Cyberlibel generally requires a defamatory imputation about an identifiable person, publication to at least one third person, malice as required by law, and use of a computer system or similar technology. Defenses, privileges, authorship, identification, venue, and the exact content and context can change the result. The offense is governed by Section 4(c)(4) of the Cybercrime Prevention Act together with the Revised Penal Code provisions on libel.

The Supreme Court has affirmed that cyberlibel prescribes in one year from discovery by the offended party, the authorities, or their agents. Because calculating prescription and determining what legally interrupts it can be case-specific, consult a lawyer or prosecutor well before the anniversary of discovery. Do not assume that an SEC ticket, platform report, or NPC complaint preserves a possible criminal case. See Causing v. People, G.R. No. 258524, 8 April 2026.

Reporting does not cancel the debt

A legitimate lender may privately demand payment, propose restructuring, endorse a lawful collection, report information through legally authorized credit channels, or sue to collect a due obligation. Regulatory, court, and other disclosures expressly authorized by law are different from public shaming.

However, the existence of a debt does not authorize the lender to publish your photograph, announce your alleged delinquency to social-media contacts, invent criminal accusations, or threaten unlawful consequences.

The Constitution states that no person may be imprisoned merely for debt. This does not protect separate criminal conduct, such as fraud, if its elements are independently proven. See Article III, Section 20 of the 1987 Constitution.

Continue addressing any valid balance through documented channels. If you dispute the amount, request a statement showing the principal, interest, fees, payments, and basis for each charge.

Common mistakes to avoid

Deleting or blocking before preserving evidence. The profile, post, and messages may become inaccessible.
Submitting screenshots with no URL or context. Capture the account, date, caption, comments, and full page.
Naming only the app. Include the corporation, collector, agency, telephone numbers, payment accounts, and other identifying details.
Making only a telephone complaint. Send a written notice and keep proof of receipt, especially for an NPC complaint.
Assuming one complaint reaches every agency. SEC, NPC, BSP, police, and platforms have different jurisdictions and processes.
Publicly reposting the material. Reposting can spread your personal data and increase the harm.
Responding with threats or fabricated accusations. Keep communications factual and professional.
Sending payment to make the post disappear. Verify the creditor and official payment channel. Preserve any demand linking payment to a threat.
Ignoring the underlying account. Challenge incorrect amounts in writing, but continue communicating about any undisputed obligation.
Waiting for the post to go viral. Report promptly; evidence and legal deadlines matter.

When legal help is urgent

Seek help from a lawyer, prosecutor, the Public Attorney’s Office if eligible, or law enforcement promptly when:

The post or message threatens violence, abduction, arrest without legal basis, or damage to property;
The collector demands payment in exchange for not publishing information;
Your home address, children’s information, identity documents, or intimate material has been exposed;
A fake account or altered image is being used to impersonate or shame you;
Your employer, clients, relatives, or large numbers of contacts were messaged;
You suffered job loss, medical or psychological harm, or significant financial loss;
You are approaching one year from discovering a potentially libelous post;
The company denies that the collector is its agent despite evidence connecting them; or
You need damages, an injunction, preservation order, or another court remedy.

Civil remedies may also be available under the Data Privacy Act and Articles 19, 20, 21, and 26 of the Civil Code, but liability and damages require proof of the wrongful act, causation, and actual injury.

Frequently asked questions

Can I complain even if I really owe the loan?

Yes. A valid debt and unlawful collection are separate issues. The lender may collect lawfully, but it may not use prohibited threats, public shaming, or unlawful disclosure.

Is a character reference responsible for my loan?

Not merely because the person was listed as a reference. A guarantor must separately and expressly consent to assume the obligation.

Can the collector message my employer, relatives, or friends?

Using people from your contact list as collection targets is prohibited unless the person is a consenting guarantor. Lawful court processes and disclosures specifically authorized by law are separate matters.

What if a third-party collection agency made the post?

Name both the lender and collection agency in your complaint. Under Republic Act No. 11765, the provider is responsible for its agents and may be solidarily liable with an accredited third-party service provider.

What if the account is fake or anonymous?

Preserve the profile URL, username, page ID, messages, telephone numbers, payment instructions, and any connection to your account. Report it to the platform and cybercrime authorities. In an NPC complaint, state the circumstances that may lead to identification if the respondent’s legal identity is unknown.

Should I uninstall the lending app?

First preserve the loan records, privacy notice, permissions, messages, and account details. Then revoke unnecessary permissions, secure your accounts, and uninstall if appropriate. Changing passwords is prudent if the app or collector may have obtained access beyond what was necessary.

Will the agency immediately delete the post or award damages?

Not necessarily. Agencies must assess jurisdiction, evidence, and the respondent’s explanation. Platform removal, regulatory sanctions, criminal prosecution, and compensation are distinct outcomes.

Do I need a lawyer to submit an initial report?

Usually not for a platform report, SEC ticket, police report, or written complaint to the lender. Legal assistance becomes especially important for a notarized formal complaint, cyberlibel or other criminal proceedings, court relief, substantial damages, or an approaching deadline.

This article provides general Philippine legal information, not advice for a particular case. The proper remedy depends on the exact post, loan documents, identity of the lender and collector, evidence, and dates involved. Laws and official procedures were checked against primary and official government sources as of 4 August 2026.