Quick answer

Save the post and its identifying details before asking for removal. Then report it through the channels that match the conduct:

For an SEC-regulated lending or financing company, online lending platform, or its collection agency, file with the SEC Financing and Lending Companies Department (FINLEND) through the SEC iMessage portal.
If the post disclosed personal data, used your photo to shame you, harvested contacts, or contacted people who were not guarantors, send a written privacy complaint to the lender and consider a formal complaint with the National Privacy Commission (NPC).
Report the post to the social-media platform for harassment, privacy violation, impersonation, or fraud. A platform report can help remove content but does not replace a government complaint.
If there are threats, extortion, fake police or court documents, identity theft, fraud, or potentially defamatory false accusations, report promptly to the PNP Anti-Cybercrime Group or NBI Cybercrime Division. Call 911 if anyone is in immediate danger.
If the actual creditor is a bank, digital bank, or another BSP-supervised institution, complain first to that institution, then escalate through the BSP Consumer Assistance Mechanism if unresolved.

A valid debt does not authorize public shaming, threats, deceptive collection, or unlawful disclosure of personal information. Conversely, reporting misconduct does not automatically cancel a legitimate loan.

What collection conduct may be reported?

Under SEC Memorandum Circular No. 18, Series of 2019, lending and financing companies and their collection providers may use reasonable, lawful means to collect. They may not employ practices such as:

Threatening violence, criminal acts, or harm to a person, reputation, or property;
Threatening action that cannot legally be taken;
Using obscenities, insults, or profane language that abuses the borrower or amounts to an offense;
Publishing a borrower’s name or personal information as a person who allegedly refuses to pay, except where disclosure is lawfully permitted;
Communicating loan information known, or which should be known, to be false—including failing to disclose that a debt is disputed where required;
Using false representations or deceptive methods to collect or obtain information; or
Contacting the borrower before 6:00 a.m. or after 10:00 p.m., subject to the circular’s exceptions for an account more than 15 days past due or the borrower’s express consent regarding convenient contact times.

The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, separately prohibits abusive debt-collection practices and requires fair and respectful treatment of financial consumers.

Examples that should be documented and reported include:

A Facebook, TikTok, Instagram, X, or other post calling you a scammer, criminal, thief, or fraud because of a loan;
A “wanted” poster, edited photograph, fake warrant, fake summons, or fabricated police notice;
Publication of your photograph, address, phone number, employer, government ID, loan balance, payment history, or other identifying information;
Tagging relatives, coworkers, clients, neighbors, or friends to pressure or embarrass you;
Posting in workplace, school, subdivision, marketplace, or community groups;
Sending debt-shaming messages to group chats or to people copied from your phone;
Threatening arrest or imprisonment solely because you cannot pay a debt; or
Continuing to publish an amount that you have already paid or formally disputed without accurately stating that fact.

Article III, Section 20 of the 1987 Constitution provides that no person may be imprisoned for debt or nonpayment of a poll tax. This does not protect separate criminal conduct—such as fraud or an offense involving a dishonored check—if its legal elements are independently established. A collector may not truthfully claim that police or a court has acted when that has not happened.

Special rules for contacts, character references, guarantors, and photos

The rules do not treat everyone in a borrower’s phone as a lawful collection target.

Under NPC Circular No. 20-01, as amended by NPC Circular No. 2022-02:

An app may not engage in unnecessary, excessive, or disproportionate processing of personal data.
Limited contact-list access may be permitted to let the borrower select references or guarantors, or to derive proportional metadata for a specified lawful purpose. Unbridled processing is prohibited.
For debt collection, the lender may contact only a person who was named and who separately consented to be a guarantor.
A character reference is not automatically a guarantor. A reference may be contacted for identity or information verification, not made responsible for the debt or used as a collection target.
The borrower’s photo may not be used to harass or embarrass the borrower into paying.
Camera, gallery, or similar permissions must be limited to legitimate purposes and turned off—or the user must be told that access may be revoked—when the purpose has been completed.

The government reaffirmed these rules in its 18 March 2026 joint advisory on online lending platforms.

A relative, friend, coworker, or other affected person may have a separate privacy complaint if the collector processed or disclosed that person’s own data. The fact that someone appeared in the borrower’s contact list does not make that person a borrower or guarantor.

Preserve the evidence before seeking removal

Online content can be edited, deleted, restricted, or made private without warning. Before blocking the account or requesting takedown, preserve:

Full-screen screenshots showing the post, account or page name, profile identifier, date and time, captions, photographs, comments, reactions, and share count;
The direct URL of each post and the URL of the posting account;
A screen recording that begins at the account profile and navigates to the post;
A print-to-PDF copy of the page, where possible;
Notifications showing that you were tagged or mentioned;
Messages, emails, call logs, voicemails, and text messages connecting the poster to the lender or collector;
The app-store listing, developer name, privacy notice, permission screens, and the corporate name shown in the loan documents;
The loan agreement, promissory note, disclosure statement, account statement, receipts, payment confirmations, and evidence that an amount was disputed or paid;
Your written complaint to the lender and proof of delivery;
Names and statements of people who saw or received the post; and
Any resulting loss, medical expense, employment consequence, or other harm, supported by records.

Keep the original files and the device on which you received or viewed the material. Do not crop, annotate, enhance, or overwrite the only copy. Make separate redacted copies for routine submissions, particularly when an image contains government IDs, account numbers, children’s information, or unrelated third-party data.

Electronic evidence must be authenticated. Preserving its source, integrity, and surrounding context helps meet the Supreme Court Rules on Electronic Evidence.

Identify the actual lender and collector

The app’s brand name may differ from the corporation that granted the loan. Check:

The lender or creditor named in the loan agreement and disclosure statement;
The app’s developer and privacy notice;
Payment instructions and official receipts;
Collection messages identifying the principal and collection agency; and
The company’s registration and authority through Check with SEC or SEC records.

Ask the collector in writing for its full name, company, authority to collect, creditor represented, account reference, and an itemized statement. SEC rules require collectors handling an account to disclose their true identity.

Report the lender as well as the collection provider when the evidence connects both to the conduct. Republic Act No. 11765 makes a financial service provider responsible for its authorized representatives and solidarily liable with accredited third-party service providers for relevant acts or omissions, including debt collection. If the lender and collection agency are separate corporate respondents, follow the SEC instruction to submit one complaint per respondent.

Send a written demand and privacy complaint

Send a concise written complaint to the lender’s consumer-assistance unit, data protection officer, and collection agency. Include:

Your name and account reference, but not passwords, PINs, or unnecessary ID details;
The post URLs, account names, dates, and a short chronological account;
The specific information or image disclosed;
Why the information is false, disputed, excessive, or unauthorized;
The people contacted and whether any of them expressly consented to be guarantors;
A request to remove the post, stop further publication and improper third-party contact, correct inaccurate information, and preserve relevant records;
A request for the collector’s identity and authority;
A request for the source, purpose, lawful basis, recipients, and retention period of the personal data used; and
A reasonable request for a written response.

You may exercise applicable rights to correction, access, erasure, or blocking under Republic Act No. 10173, the Data Privacy Act. Erasure is not absolute: information may still be retained when required by law or reasonably necessary to establish, exercise, or defend legal claims.

Do not sign a waiver, quitclaim, acknowledgment of an unfamiliar balance, or new payment arrangement merely to obtain removal without understanding its effect.

File an SEC complaint

For an SEC-regulated lending or financing company, online lending platform, or collector:

Open the SEC iMessage portal and register or sign in as required.
Direct the concern to the Financing and Lending Companies Department (FINLEND).
Identify the correct corporate respondent, app, collector, account, and post.
Describe the events chronologically and identify the unfair collection practices involved.
Attach a valid government-issued ID and supporting evidence.
Submit a separate complaint for each respondent company.
Save the ticket or reference number and monitor the account or email used for filing.

The latest joint government advisory identifies SEC FINLEND, the iMessage portal, and 1-4732 (1-4SEC) as the reporting channel for unfair debt-collection practices.

The SEC’s complaint guidance warns that incomplete complaints may be dismissed. It also makes clear that a regulatory complaint does not, by itself, authorize the SEC to rewrite payment terms, cancel or settle the debt, void the contract, or declare an interest rate invalid in an ordinary complaint proceeding.

An unregistered or unauthorized lender should still be reported to the SEC. Include the app-store link, website, phone numbers, payment accounts, advertisements, and every corporate or trade name used.

File an NPC complaint when personal data was misused

The NPC route is appropriate when the conduct involves matters such as:

Unauthorized or excessive access to contacts, photos, files, or other phone data;
Disclosure of a borrower’s identity, loan, payment status, address, photograph, ID, or other personal data;
Use of a borrower’s image for public shaming;
Collection messages sent to non-guarantors;
Failure to correct false personal data; or
Continued unauthorized processing after a proper objection or request.

As a general rule, the 2021 NPC Rules of Procedure require the complainant first to notify the personal-information controller or processor in writing. A formal complaint normally will not be given due course unless the respondent failed to take timely or appropriate action or failed to respond within 15 calendar days after receiving the notice.

The NPC may waive that requirement for good cause or a serious violation, including grave and irreparable harm, lack of an adequate remedy, or patently illegal conduct. Explain and prove the reason if immediate NPC intervention is requested. Do not wait 15 days before contacting police or emergency services when safety is at risk.

For a formal complaint:

Use the current NPC Complaint-Affidavit and questionnaire.
Complete it accurately, sign it under oath, and attach the required verification and certification against forum shopping.
Attach the written notice to the respondent, proof of receipt, response or proof of no response, valid ID, and all supporting evidence.
File through a mode authorized by the NPC. The current address, complaint email, and telephone details appear on the NPC contact page.
Keep proof of filing and payment.

The NPC’s May 2025 schedule lists a ₱500 complaint filing fee, plus a legal research fee of 1% of the filing fee but not less than ₱10. A claim for damages carries additional graduated charges: ₱150 for a claim not exceeding ₱20,000; ₱500 for a claim above ₱20,000 up to ₱100,000; and ₱500 for every succeeding ₱100,000 or fraction. Indigent complainants and other qualifying cases may be exempt or obtain a waiver under the NPC rules. Confirm the assessment before paying through an official channel using the current NPC fee form.

Report threats, fraud, identity theft, or possible cyberlibel

A malicious post may raise criminal issues in addition to SEC or NPC violations. For example:

A false public accusation may potentially constitute libel committed through a computer system under Section 4(c)(4) of the Cybercrime Prevention Act, Republic Act No. 10175.
Use of another person’s identifying information without right may potentially constitute computer-related identity theft.
Threats, coercion, extortion, forgery, or impersonation may fall under other penal laws depending on the exact words, conduct, intent, and evidence.

Not every insulting or inaccurate post automatically satisfies the elements of cyberlibel. Publication to a third person, identification of the complainant, defamatory imputation, malice, authorship, defenses, and other circumstances require legal evaluation. Truth may affect a libel case, but it does not necessarily excuse debt-shaming, abusive collection, or unlawful data processing.

The March 2026 government advisory lists these channels:

NBI Cybercrime Division: ccd@nbi.gov.ph, (02) 8523-8231 to 38
PNP Anti-Cybercrime Group: acg@pnp.gov.ph or onlinecims.ocs@gmail.com, (02) 8723-0401 local 7491
DICT Cyber Hotline: 1326@dict.gov.ph

You may also go personally to the appropriate police cybercrime unit, NBI office, or prosecutor’s office. Bring the original device, organized evidence, identification, and a clear timeline. If the collector threatens immediate violence or someone is approaching your home or workplace, call 911 and the nearest police station.

Use the BSP route only when the provider is BSP-supervised

If the loan was actually granted by a bank, digital bank, cooperative bank, or another BSP-supervised institution:

File first with the institution’s Financial Consumer Protection Assistance Mechanism or customer-service channel.
Keep the complaint reference number and response.
If unresolved or unsatisfactory, escalate through the BSP Online Buddy on the BSP website or official Facebook page.
If BOB is unavailable, follow the BSP’s current Complaint/Inquiry/Reply Form procedure and send it with proof that you first complained to the institution.

The BSP’s September 2025 complaint guide expressly directs complaints involving lending and financing companies, online lending platforms, and their collection agencies to the SEC.

Where an e-wallet or marketplace merely hosts a loan offered by another company, use the regulator of the actual creditor identified in the loan documents. A cooperative offering credit is generally under the Cooperative Development Authority, unless it is a BSP-supervised cooperative financial institution.

Report the post to the platform

After preserving evidence, use the platform’s reporting tools. Choose the most accurate category, such as:

Bullying or harassment;
Sharing private or personal information;
Impersonation;
Threats or violence;
Scam or fraud; or
Non-consensual intimate or sexual content, if applicable.

Report both the individual post and the account or page. Include the direct URL and a short explanation that the material was posted by a lender or debt collector to pressure payment. Save the platform’s acknowledgment, case number, and decision.

If the first report is denied, use any available appeal or privacy-removal process. Do not assume that deleting your own tag removes the original post.

Important deadlines

Act promptly even when the post has already been removed.

For an NPC complaint, the ordinary pre-filing step gives the respondent 15 calendar days from receipt of written notice to act or respond, unless the NPC waives exhaustion.
Under Republic Act No. 11765, claims under that Act generally prescribe five years from consummation of the financial transaction or from discovery of deceit or nondisclosure of material facts, with an outer limit of ten years from the violation.
In April 2026, the Supreme Court en banc affirmed that cyberlibel prescribes in one year from discovery by the offended party, authorities, or their agents. A civil action for defamation is also generally subject to a one-year period. See Causing v. People, G.R. No. 258524.
Do not assume that a demand letter, platform report, SEC ticket, or the post’s continued availability stops a criminal or civil prescriptive period. Obtain legal advice and approach the prosecutor well before the earliest possible deadline.

Different offenses and remedies can have different prescriptive rules. Filing quickly also improves the chance of preserving platform, subscriber, and traffic records.

Common mistakes to avoid

Asking for takedown before capturing the post, URL, account, and context;
Keeping only heavily cropped or edited screenshots;
Uninstalling the app or replacing the phone before preserving permissions, messages, and records;
Naming only the app brand and not the corporate lender or collection agency;
Combining unrelated respondent companies in one SEC complaint;
Filing an NPC complaint without first giving written notice—or without explaining why the requirement should be waived;
Publicly counter-posting the collector’s private information, threats, or unsupported accusations;
Sending IDs, account numbers, passwords, PINs, or one-time passwords through public comments or unofficial accounts;
Paying into a collector’s personal account without verifying the creditor and official payment channel;
Assuming that a reference or phone contact is automatically a guarantor;
Assuming a government complaint erases the loan; or
Waiting for a platform decision before reporting threats or preserving legal claims.

When legal help is urgent

Consult a Philippine lawyer or the Public Attorney’s Office promptly when:

The post contains a serious false accusation affecting employment, business, professional standing, or personal safety;
The possible one-year defamation deadline is approaching;
A complaint, subpoena, summons, warrant, or prosecutor’s notice may be genuine;
The collector is demanding that you sign a settlement, waiver, confession, or acknowledgment;
Intimate images, children’s information, government IDs, or sensitive personal information were published;
The harassment is coordinated, repeated, or directed at family members and coworkers;
There are threats of violence, extortion, stalking, or a visit to your home or workplace;
You seek damages or an emergency cease-and-desist order; or
Several proceedings may involve the same facts, making the certification against forum shopping important.

Frequently asked questions

Can a lender post my name and photograph if I really owe money?

Generally, public debt-shaming is not a lawful collection method. SEC rules restrict publication of borrowers’ names and personal information, while NPC rules prohibit using a photograph to harass or embarrass a borrower. Narrow lawful disclosures—to authorized agents, courts, regulators, or credit-information systems, for example—are different from posting publicly to pressure payment.

Can a collector contact my family, friends, or coworkers?

For debt collection, a lender may contact a person who separately consented to be a guarantor. It may not use the borrower’s contact list to pursue non-guarantors. A character reference may be contacted for identity or information verification but is not automatically responsible for the debt.

Does it matter if the post was sent only to a group chat?

It can. Disclosure to other people may still constitute an unfair collection or privacy violation. It may also satisfy the publication component of defamation, depending on the evidence and other legal elements.

What if the collector deletes the post?

Deletion does not erase what happened. Keep screenshots, URLs, recordings, witness details, and platform notifications. Report using the preserved evidence and state when the post disappeared.

Can I demand that every record about me be deleted?

You may request erasure or blocking when the legal conditions are met, but the right is not absolute. A lender may retain records required by law or necessary for legitimate legal claims. Public shaming content and improperly copied contacts present different issues from records lawfully needed to administer or enforce a loan.

Will filing a complaint stop collection calls?

Not automatically. The creditor may continue lawful, reasonable collection while a complaint is pending. Ask that future communications be made in writing and report any continuing abusive conduct as supplemental evidence.

Can I report even if I missed a payment?

Yes. Default does not remove your rights to dignity, privacy, accurate information, fair treatment, and lawful complaint handling.

What if the loan is not mine?

Dispute it immediately in writing, request the application and transaction records, and do not acknowledge the debt merely to stop harassment. Preserve evidence and report suspected identity theft or fraud to the lender, platform, SEC or BSP as applicable, and law enforcement.

This article provides general Philippine legal information, not advice for a particular case. Rights, filing requirements, jurisdiction, and outcomes depend on the actual posts, loan documents, parties, and evidence. Official sources and procedures were checked as of 11 August 2026.