I. Introduction

Online lending has become a common source of quick credit in the Philippines. Through mobile apps, websites, digital wallets, social media pages, and text-based loan offers, borrowers can apply for loans without visiting a physical office. This convenience, however, has also produced serious legal problems: unauthorized loan disbursements, hidden charges, abusive collection, threats, public shaming, misuse of contacts, identity theft, harassment, and loans allegedly released without the borrower’s informed consent.

An unauthorized loan disbursement occurs when money is released to a person’s bank account, e-wallet, or other payment channel even though the person did not validly agree to borrow, did not complete the application, did not understand that a loan had been approved, cancelled the application, or was a victim of identity theft or fraudulent use of personal data.

An online lending complaint may be filed when an online lending company, financing company, lending app, collection agent, employee, or third-party service provider violates laws on lending, consumer protection, data privacy, fair debt collection, cybercrime, or contractual obligations.

This article explains the Philippine legal context, rights of borrowers, obligations of online lenders, possible violations, remedies, evidence, and complaint mechanisms.

II. What Is an Unauthorized Loan Disbursement?

An unauthorized loan disbursement may happen in several ways:

A person installs a lending app but does not knowingly submit a final loan application.
A user checks loan eligibility and later receives money without confirming acceptance.
A borrower cancels the loan, but the lender still releases funds.
A lending app disburses a lower amount than advertised but demands repayment of a higher amount.
The loan proceeds are sent to the wrong account.
A person’s identity is used by another person to obtain a loan.
A borrower’s phone number, ID, or e-wallet account is used fraudulently.
The loan is renewed or rolled over without clear consent.
A loan is automatically reborrowed after repayment.
A user receives a small amount and is later charged excessive fees, penalties, and interest.
The lender claims the borrower agreed through app clicks, but the borrower denies informed consent.
The app uses deceptive interface design, making a loan approval look like an inquiry or promotional offer.
The lender disburses money despite failing to disclose key terms such as interest, fees, maturity date, penalties, and total amount due.

The central legal question is whether there was a valid, informed, voluntary, and provable loan agreement.

III. The Nature of a Loan Contract

Under Philippine civil law principles, a loan is a contract. A contract requires consent, object, and cause. In a loan, the borrower receives money or something fungible and agrees to return the same amount or equivalent, usually with interest if lawfully stipulated.

For an online loan to be enforceable, the lender should be able to show that the borrower validly agreed to the loan terms. This may include:

Borrower identity verification,
Application records,
Electronic consent,
Loan agreement,
Disclosure statement,
Amount disbursed,
Date of disbursement,
Repayment schedule,
Interest and fees,
Penalty provisions,
Proof that the borrower accepted the terms.

A mere claim by the lender that “the app approved the loan” is not enough if the borrower credibly disputes consent and the lender cannot produce reliable records.

IV. Electronic Consent and Online Loan Agreements

Online loan agreements are often formed through electronic documents, tick boxes, one-time passwords, electronic signatures, app confirmations, or digital acceptance buttons. Philippine law recognizes electronic transactions, but recognition does not mean that every electronic record is automatically valid.

The lender must still show that:

The borrower was properly identified.
The borrower was shown the loan terms.
The borrower had an opportunity to review the terms.
The borrower gave consent.
The consent was not obtained through fraud, mistake, intimidation, undue influence, or deceptive design.
The amount and repayment obligations were sufficiently disclosed.
The electronic record can be authenticated.

If a loan was released through a confusing, misleading, or deceptive process, the borrower may challenge the validity or enforceability of the loan or certain charges.

V. Common Forms of Online Lending Abuse

A. Disbursement without final confirmation

Some borrowers report that they merely explored an app or applied for a “pre-approval” but later received a loan they did not intend to accept. If the lender cannot prove final consent, the borrower may dispute the loan.

B. Hidden fees and net proceeds manipulation

A lender may advertise a loan of PHP 5,000 but release only PHP 3,000 after “processing fees,” “service fees,” “platform fees,” or “insurance fees,” while requiring repayment of PHP 5,000 or more.

This may raise issues of unfair, deceptive, or unconscionable lending practices, especially if fees were not clearly disclosed before acceptance.

C. Extremely short repayment periods

Some apps require repayment within 7, 10, or 14 days while imposing high charges. Short terms are not automatically illegal, but they may become abusive when combined with poor disclosure, excessive penalties, deceptive fees, or harassment.

D. Automatic loan renewal

A lender may treat a partial payment as a renewal or automatically issue another loan after repayment. Without clear consent, such conduct may be disputed.

E. Unauthorized use of personal information

A borrower may discover that the lending app accessed contact lists, photos, messages, employer details, or social media data. The app may later use this information to shame or pressure the borrower.

This raises serious data privacy and cyber harassment concerns.

F. Threatening and abusive collection

Common complaints include:

Threats of imprisonment,
Threats to post the borrower’s photo online,
Threats to contact the borrower’s employer,
Threats to shame relatives and friends,
Sending messages to the borrower’s entire contact list,
Calling repeatedly at unreasonable hours,
Using insults, profanity, or false legal threats,
Pretending to be from a court, police office, barangay, or government agency,
Sending fake subpoenas or warrants,
Publishing the borrower as a scammer,
Threatening physical harm.

These acts may create administrative, civil, criminal, and data privacy liability.

VI. Legal Framework in the Philippines

A. Civil Code principles on contracts and obligations

The Civil Code governs consent, contracts, obligations, damages, fraud, mistake, intimidation, and breach. If the borrower did not validly consent, the lender may have difficulty enforcing the loan. If the lender acted in bad faith, the borrower may seek remedies.

B. Lending Company Regulation Act

Lending companies in the Philippines are regulated under laws requiring registration and compliance with lending rules. A lending company must generally be duly registered and authorized to operate. An online lending operator that is not properly registered may face regulatory consequences.

C. Financing Company rules

Some online lenders operate as financing companies rather than lending companies. Financing companies are also subject to registration, regulation, and compliance obligations.

D. Securities and Exchange Commission regulation

The Securities and Exchange Commission has regulatory authority over lending and financing companies. It has issued rules and advisories addressing abusive online lending practices, unfair debt collection, disclosure requirements, and the operation of online lending platforms.

The SEC may act against registered or unregistered lending and financing companies, including by suspending, revoking, penalizing, or directing corrective action.

E. Truth in Lending Act

The Truth in Lending Act requires creditors to disclose important credit terms so borrowers can understand the cost of borrowing. In online lending, this means borrowers should be informed of relevant charges before they accept the loan.

Important disclosures may include:

Amount financed,
Finance charges,
Interest rate,
Service fees,
Processing fees,
Penalties,
Payment schedule,
Total amount payable,
Net proceeds,
Consequences of default.

A borrower who was not clearly informed of the real cost of the loan may have grounds to complain.

F. Consumer protection law

Borrowers may be protected against deceptive, unfair, or unconscionable acts. Misleading advertisements, hidden fees, false representations, fake urgency, and confusing app flows may support consumer complaints.

G. Data Privacy Act

The Data Privacy Act is central to online lending complaints. Lending apps often collect sensitive personal and financial information. They may also request access to contacts, photos, location, device data, or other information.

The lender must have a lawful basis for processing personal data and must observe transparency, legitimate purpose, proportionality, security, and data subject rights.

Accessing or using a borrower’s contact list to shame, threaten, or pressure payment may violate data privacy principles.

H. Cybercrime Prevention Act

Online harassment, identity theft, unauthorized access, cyber libel, threats, and fraudulent online conduct may implicate cybercrime laws depending on the facts.

I. Revised Penal Code

Certain acts may also constitute crimes under general penal laws, including threats, unjust vexation, coercion, grave coercion, slander, libel, estafa, or falsification, depending on the specific conduct.

J. Anti-Financial Account Scamming and identity-related concerns

Where unauthorized loans involve stolen identities, fraudulent SIM registration, mule accounts, e-wallet abuse, or unauthorized financial account use, additional laws and regulations on financial fraud, cybercrime, and identity misuse may be relevant.

VII. Is the Borrower Required to Repay an Unauthorized Loan?

The answer depends on the facts.

A. If there was no consent and the borrower did not use the funds

If money was deposited without valid consent, the borrower should not treat it as free money. The safest position is to notify the lender in writing, dispute the loan, and offer to return the exact amount actually received, without interest, fees, or penalties, subject to proper documentation.

Keeping and spending money one knows was mistakenly or improperly sent may create complications.

B. If there was no consent but the borrower used the funds

If the borrower used the funds, the lender may argue that the borrower accepted or benefited from the loan. The borrower may still dispute interest, fees, penalties, abusive collection, and defective consent, but the obligation to return the principal actually received may be harder to deny.

C. If identity theft occurred

If the borrower did not apply, did not receive the funds, and was a victim of identity theft, the borrower should immediately dispute the loan and file reports with the lender, e-wallet or bank, police cybercrime authorities, and relevant regulators.

D. If the lender disbursed less than the stated loan amount

The borrower may challenge being charged interest or penalties on amounts never actually received, especially if deductions were not clearly disclosed.

E. If the borrower clicked acceptance but terms were hidden

A lender may argue that the borrower agreed electronically. The borrower may argue that consent was not informed or was obtained through deceptive or unclear disclosure. The strength of either position depends on app records, screenshots, disclosures, and user flow.

VIII. “I Did Not Borrow, But They Sent Money”: What to Do

A person who receives an unauthorized loan disbursement should act quickly.

Step 1: Do not ignore it

Ignoring the issue may allow the lender to impose penalties or begin collection.

Step 2: Preserve evidence

Take screenshots of:

App screens,
Loan approval notice,
Disbursement message,
Amount received,
Date and time received,
Bank or e-wallet transaction,
Loan agreement, if visible,
Interest and fees,
Repayment demand,
Messages from collector,
App permissions,
Terms and conditions,
Any cancellation request.

Step 3: Send a written dispute

Send a message or email stating that the loan was not authorized, that consent is disputed, and that the borrower requests cancellation or reversal.

Step 4: Do not pay inflated charges immediately

If the loan is disputed, paying the entire demanded amount may be interpreted as acceptance. If repayment is appropriate, consider clearly stating that payment is made under protest, especially if paying only the principal actually received.

Step 5: Ask for documentation

Request:

Copy of loan agreement,
Proof of electronic consent,
Disclosure statement,
Computation of charges,
Proof of disbursement,
Collection authority,
Company registration details,
Data privacy policy.

Step 6: Report abusive conduct

If threats, harassment, contact shaming, or data misuse occurs, preserve screenshots and file complaints.

IX. Rights of Borrowers

Borrowers and alleged borrowers have the right to:

Be informed of the real cost of credit.
Receive clear loan terms before acceptance.
Refuse a loan before final acceptance.
Dispute unauthorized disbursements.
Receive a proper statement of account.
Be treated fairly during collection.
Be free from threats, insults, and public shaming.
Have personal data processed lawfully and proportionately.
Demand correction or deletion of inaccurate data where legally applicable.
File complaints with regulators and law enforcement.
Challenge illegal, excessive, or undisclosed charges.
Seek damages where legally justified.

A debt, even if valid, does not give a lender the right to harass, shame, threaten, or misuse personal data.

X. Obligations of Online Lenders

Online lenders should:

Be properly registered and authorized.
Clearly disclose interest, fees, penalties, net proceeds, and repayment terms.
Obtain valid and informed consent.
Provide borrowers with loan documents.
Avoid deceptive app design.
Protect borrower data.
Collect only necessary and proportionate personal information.
Avoid unauthorized access to contacts, photos, messages, or device data.
Use lawful and fair collection practices.
Supervise collection agents.
Avoid false threats of imprisonment or criminal prosecution.
Keep accurate records.
Provide complaint channels.
Correct errors promptly.
Respect borrower privacy and dignity.

XI. Disclosure Requirements and Hidden Charges

A major legal issue in online lending is whether the borrower was clearly informed of charges before the loan was accepted.

A proper disclosure should make clear:

Principal amount,
Net amount to be received,
Deductions,
Interest rate,
Effective rate,
Processing fee,
Service fee,
Platform fee,
Insurance fee, if any,
Penalty rate,
Due date,
Extension or rollover charges,
Total amount due,
Consequences of late payment.

A lender should not rely on vague statements such as “fees may apply” if the actual charges are substantial. Hidden charges may be challenged as deceptive, unfair, or not part of the borrower’s informed consent.

XII. Excessive Interest, Penalties, and Charges

Philippine law generally allows parties to agree on interest, but courts and regulators may scrutinize unconscionable rates, excessive penalties, or abusive charges.

Online lending disputes often involve a small disbursed amount that rapidly grows due to daily interest, penalties, rollover charges, collection fees, and service fees.

A borrower may challenge charges that are:

Undisclosed,
Misleading,
Grossly excessive,
Imposed after unauthorized disbursement,
Computed on amounts not actually received,
Added through automatic rollover without consent,
Penal in nature and disproportionate.

Even where the borrower owes the principal, abusive charges may be disputed.

XIII. The Myth of Imprisonment for Debt

Many collectors threaten borrowers with jail. As a general rule, a person is not imprisoned simply for failure to pay a debt. The Philippine Constitution prohibits imprisonment for debt.

However, this does not mean all loan-related conduct is free from criminal consequences. Criminal liability may arise from independent fraudulent acts, such as using fake identity, issuing bouncing checks, falsifying documents, or committing estafa. But ordinary inability to pay a loan is generally a civil matter, not a basis for immediate imprisonment.

Collectors who threaten automatic arrest or imprisonment for nonpayment may be engaging in deceptive or abusive collection.

XIV. Abusive Debt Collection Practices

Online lending complaints frequently involve collection abuse. Examples include:

Calling the borrower dozens of times per day.
Calling at unreasonable hours.
Sending insulting or profane messages.
Threatening to post the borrower’s face online.
Calling relatives, friends, coworkers, or employers.
Disclosing the debt to third parties.
Claiming the borrower committed a crime without basis.
Sending fake court documents.
Pretending to be police, NBI, barangay, or court staff.
Threatening physical harm.
Creating group chats to shame the borrower.
Posting edited photos or defamatory captions.
Using the borrower’s contact list without proper authority.
Telling third parties to pay the borrower’s debt.
Harassing emergency contacts beyond lawful verification.

Debt collection must be lawful, fair, and respectful. A valid debt does not justify unlawful collection.

XV. Contact List Harassment and Data Privacy

One of the most serious online lending abuses is the use of the borrower’s contact list.

Many lending apps request device permissions. Some then use the contact list to send messages such as:

“Your friend is a scammer.”
“Tell this person to pay their debt.”
“You are listed as guarantor.”
“We will post this person online.”
“This person used you as reference.”

This can violate privacy rights if the lender had no lawful basis to access, store, or use third-party contacts for collection. Even if the borrower granted app permission, consent must be specific, informed, and proportionate. Broad or forced consent may be questioned.

The borrower’s friends and relatives may also have privacy rights if their personal data was collected or used without proper basis.

XVI. Are Emergency Contacts Liable?

Usually, an emergency contact, reference, relative, friend, coworker, or phone contact is not liable for the borrower’s loan unless that person clearly agreed to be a co-borrower, surety, guarantor, or solidary debtor.

Merely being listed as a contact does not make a person responsible for payment.

Collectors who tell contacts that they are legally required to pay may be misleading them unless there is a valid written obligation.

XVII. Employer Harassment

Some collectors contact employers or coworkers to pressure payment. This may be unlawful or abusive, especially if the lender discloses the debt, insults the borrower, or threatens employment consequences.

A lender may have limited legitimate reasons to verify employment if the borrower authorized it during application. But repeated calls, disclosure of debt details, shaming, or threats to the employer may violate privacy and fair collection principles.

XVIII. Fake Legal Threats

Borrowers often receive messages claiming:

“Final warning before arrest.”
“Police will visit your house.”
“NBI case filed today.”
“Cybercrime case approved.”
“Warrant of arrest issued.”
“Barangay blotter filed.”
“Court summons will be served tomorrow.”
“You will be blacklisted nationwide.”
“You are guilty of estafa.”

Some of these may be false or exaggerated. A legitimate court process has formal requirements. A collector cannot simply declare a person criminally liable.

Borrowers should preserve these messages because fake legal threats may support complaints for harassment, deception, unfair collection, or other violations.

XIX. Public Shaming and Defamation

If a lender or collector posts the borrower’s name, photo, ID, address, employer, or debt details on social media, group chats, or public pages, possible legal issues include:

Data privacy violation,
Cyber libel,
Libel,
unjust vexation,
harassment,
civil damages,
unfair collection practice.

Truth is not always a complete defense to improper disclosure of private financial information. A person may owe money, but that does not automatically allow the lender to publicly shame them.

XX. Identity Theft and Fraudulent Loans

Unauthorized online loans may be caused by identity theft. A person may receive collection messages for a loan they never applied for because another person used their:

Name,
Phone number,
Valid ID,
Selfie,
E-wallet,
Bank account,
SIM card,
Email address,
Address,
Employer information.

In identity theft cases, the alleged borrower should:

Deny the loan in writing.
Ask for proof of application and disbursement.
Ask where the funds were sent.
Report to the lender’s fraud department.
Report to the e-wallet or bank.
File a police or cybercrime report.
File complaints with relevant regulators.
Monitor credit records, if applicable.
Replace compromised passwords and secure accounts.
Preserve all collection messages.

The key issue is whether the complainant actually applied for and received the loan.

XXI. The Role of the SEC

Complaints against lending and financing companies, including online lending platforms, may be brought to the Securities and Exchange Commission when the company is registered or should be registered as a lending or financing company.

The SEC may be relevant for complaints involving:

Unregistered lending operations,
Abusive collection,
Unauthorized lending apps,
Misleading loan terms,
Excessive or hidden charges,
Harassment by agents,
Failure to disclose terms,
Operation under suspended or revoked authority.

The SEC may impose administrative sanctions and issue directives depending on its rules and findings.

XXII. The Role of the National Privacy Commission

The National Privacy Commission is relevant when the complaint involves misuse of personal data.

Common NPC-related issues include:

Unauthorized access to contacts,
Disclosure of debt to third parties,
Posting personal data online,
Using borrower photos for shaming,
Collecting excessive app permissions,
Processing personal information without proper consent,
Refusing to delete or correct inaccurate data,
Data breach or unauthorized sharing.

A complaint to the NPC should include screenshots, app permissions, privacy notices, messages to contacts, and proof of disclosure.

XXIII. The Role of the Bangko Sentral ng Pilipinas

The Bangko Sentral ng Pilipinas may become relevant when the lender is a BSP-supervised financial institution or when the dispute involves banks, e-wallets, payment channels, unauthorized transfers, or financial account misuse.

If the issue concerns the e-wallet or bank account used for disbursement, payment, or fraud, the borrower should also complain to the relevant financial institution.

XXIV. The Role of the Department of Trade and Industry

The Department of Trade and Industry may be relevant in consumer complaints involving deceptive or unfair trade practices. However, lending and financing companies are often primarily under SEC or BSP depending on the entity type. Still, DTI may be considered when there are broader consumer protection concerns involving online platforms or deceptive offers.

XXV. The Role of Law Enforcement

Law enforcement may be involved when there is:

Identity theft,
Cyber harassment,
Threats,
Extortion,
Public shaming,
Fake legal documents,
Fraud,
Unauthorized account access,
Use of stolen IDs,
SIM or e-wallet abuse,
Repeated scam lending operations.

The complainant may approach appropriate police cybercrime units or other law enforcement authorities. Evidence should be organized clearly.

XXVI. Evidence Needed for an Online Lending Complaint

A strong complaint should include:

Full name of lending app or company.
App screenshots.
Website or social media page.
Loan account number, if any.
Date of application.
Date and amount of disbursement.
Bank or e-wallet transaction records.
Amount actually received.
Amount demanded.
Loan agreement or disclosure statement, if available.
Screenshots of interest, fees, and due date.
Messages from collectors.
Call logs.
Voice recordings, if lawfully obtained.
Screenshots from contacts who were harassed.
Proof of public posts or group chats.
App permission screenshots.
Privacy policy screenshots.
Proof of cancellation or dispute.
Proof of payments made.
Government ID used, if identity theft is involved.
Police report, if already filed.
Email complaints sent to the lender.
Replies from the lender or app support.

The complaint should be factual, chronological, and supported by attachments.

XXVII. Sample Chronology for a Complaint

A borrower may organize the facts this way:

On [date], I downloaded [app name].
I checked eligibility but did not intend to accept a loan.
On [date and time], PHP [amount] was credited to my [bank/e-wallet].
I did not receive clear disclosure of interest, fees, and total amount due before disbursement.
I immediately contacted the app through [channel] and disputed the loan.
The app demanded PHP [amount] due on [date].
The amount demanded includes charges that were not clearly disclosed.
On [date], collectors began sending messages.
On [date], collectors contacted my relatives/friends/employer.
On [date], collectors threatened [specific threat].
I am requesting [cancellation/reversal/refund/deletion of data/cessation of harassment/investigation].

XXVIII. Sample Complaint Statement

I respectfully file this complaint against [name of lending app/company] for unauthorized loan disbursement, unclear and excessive charges, and abusive collection practices.

On [date], I [downloaded/used/visited] the app for inquiry purposes. I did not knowingly and voluntarily accept the final loan terms. Despite this, on [date], the amount of PHP [amount] was credited to my [bank/e-wallet account].

The app later demanded payment of PHP [amount], which includes charges, fees, interest, and/or penalties that were not clearly disclosed to me before the disbursement. I disputed the loan through [email/chat/app support] on [date], but the company continued to demand payment.

Thereafter, its collectors sent threatening and harassing messages, including [describe threats]. They also contacted [my relatives/friends/employer/contacts] and disclosed my alleged debt without my consent.

I request an investigation, cancellation or correction of the disputed loan, removal of unauthorized or excessive charges, cessation of collection harassment, protection of my personal data, and such other reliefs as may be appropriate under Philippine law.

Attached are screenshots, transaction records, messages, call logs, and other supporting documents.

XXIX. Sample Letter to the Lender Disputing Unauthorized Disbursement

[Date]

[Name of Lending Company / App] [Email Address / Office Address]

Subject: Dispute of Unauthorized Loan Disbursement

Dear Sir/Madam:

I am writing to formally dispute the alleged loan under account/reference number [number], if any.

On [date], the amount of PHP [amount] was credited to my [bank/e-wallet account]. I dispute that I knowingly, voluntarily, and validly accepted a loan from your company under the terms now being demanded. I also dispute the charges, fees, interest, penalties, and repayment amount stated in your collection messages.

Please provide the following:

Complete copy of the alleged loan agreement;
Proof of my electronic consent and the exact date and time of such consent;
Disclosure statement showing the amount financed, net proceeds, interest, fees, penalties, due date, and total amount payable;
Proof of disbursement;
Your company’s registration and authority to operate;
Name and authority of any collection agency handling this account;
Your privacy notice and basis for processing my personal data.

Pending resolution of this dispute, I demand that your company and agents cease abusive, threatening, misleading, or third-party collection communications. You are also directed not to disclose my alleged debt or personal information to my contacts, employer, relatives, friends, or any unauthorized third party.

This letter is sent without prejudice to my rights and remedies under Philippine law, including complaints before the appropriate regulatory agencies and courts.

Sincerely, [Name] [Contact Information]

XXX. Sample Cease-and-Desist Message Against Harassment

This is to formally demand that you stop sending threatening, abusive, defamatory, misleading, and privacy-violating messages regarding the disputed loan account.

You are not authorized to contact my relatives, friends, employer, coworkers, or phone contacts regarding this alleged debt. They are not borrowers, guarantors, sureties, or co-makers. Any further disclosure of my personal information or alleged debt to unauthorized third parties will be documented and may be used in complaints before the appropriate agencies.

Please communicate only through lawful, professional, and official channels.

XXXI. What If the Borrower Actually Owes the Loan?

Even if the borrower actually owes the loan, the lender must still collect lawfully. A valid debt does not authorize:

Threats of violence,
Public shaming,
Contact list harassment,
Fake criminal cases,
False court documents,
Misrepresentation as police or government staff,
Disclosure of debt to unrelated third parties,
Excessive or undisclosed charges,
Unlawful data processing.

The borrower should separate two issues:

Debt validity — whether the borrower owes money and how much.
Collection legality — whether the lender’s methods are lawful.

A borrower may owe the principal while still having valid complaints for illegal collection or data misuse.

XXXII. Settlement and Payment Under Protest

Some borrowers pay because they fear harassment. If paying a disputed amount, the borrower may state in writing:

The payment is made under protest,
The borrower does not admit the legality of disputed charges,
The borrower demands cessation of harassment,
The borrower requests official receipt and full statement of account,
The borrower reserves the right to complain.

This helps avoid the appearance that the borrower fully accepted all charges.

XXXIII. Data Subject Rights

A borrower whose data is processed by a lending app may invoke rights such as:

Right to be informed,
Right to access,
Right to object,
Right to erasure or blocking where applicable,
Right to correction,
Right to damages for improper processing,
Right to file a complaint.

These rights are not absolute. For example, a lender may retain certain records for legal or regulatory purposes. But the lender cannot use retention as an excuse to harass, shame, or unlawfully disclose data.

XXXIV. App Permissions and Excessive Data Collection

Lending apps may ask for permissions such as:

Contacts,
Camera,
Photos,
Location,
SMS,
Device ID,
Microphone,
Installed apps,
Storage.

Some permissions may be justifiable for identity verification or fraud prevention. But collecting more data than necessary may violate proportionality. Using collected data for harassment is especially problematic.

Borrowers should review app permissions and revoke unnecessary access where possible.

XXXV. Harassment of Third Parties

When collectors message third parties, those third parties may also complain if their personal data was used without consent or if they were harassed.

A third party may reply:

I am not the borrower, co-maker, guarantor, or surety for this alleged loan. I did not consent to the use of my personal data for debt collection. Do not contact me again regarding this matter. Any further messages will be documented and may be reported to the proper authorities.

XXXVI. Online Lending Blacklists and Credit Reporting

Some lenders threaten to blacklist borrowers. Legitimate credit reporting is subject to applicable law and regulation. A lender cannot simply publish a borrower’s personal information online as a “blacklist.”

If a lender reports credit information, it should be accurate, lawful, and made through proper channels. False or malicious reporting may be challenged.

Borrowers should ask:

Where will the information be reported?
What exact amount will be reported?
What is the legal basis?
How can inaccurate information be corrected?
Is the reporting entity authorized?

XXXVII. Barangay Complaints and Demand Letters

For small disputes, some parties consider barangay conciliation. However, online lending companies may not always be within the same city or municipality, and corporate or regulatory issues may be more appropriate for agency complaints.

Demand letters can still be useful. A borrower may send a demand for correction, cancellation, data protection, or cessation of harassment.

XXXVIII. Court Remedies

Court action may be considered when:

The amount is significant,
There is serious damage to reputation,
Personal data was publicly disclosed,
Harassment caused measurable harm,
Fraud or identity theft occurred,
The lender refuses to correct an unauthorized account,
The borrower seeks damages or injunction.

Possible civil remedies include damages, declaratory relief depending on the case, or other appropriate relief. Criminal complaints may be filed for conduct that violates penal laws.

XXXIX. Common Mistakes by Borrowers

Borrowers often weaken their case by:

Deleting messages.
Uninstalling the app before taking screenshots.
Ignoring notices until penalties grow.
Paying without asking for a statement.
Admitting liability for disputed charges.
Failing to document harassment.
Responding with threats or insults.
Giving more personal data to collectors.
Allowing app permissions to remain active.
Not securing e-wallet, SIM, and email accounts.
Not reporting identity theft promptly.
Making public accusations without preserving evidence.

XL. Common Mistakes by Lenders

Lenders expose themselves to liability when they:

Disburse funds without clear consent.
Hide fees or disclose them only after release.
Use confusing app interfaces.
Fail to provide loan agreements.
Charge interest on amounts not actually received.
Automatically renew loans without consent.
Use abusive collection agents.
Contact unrelated third parties.
Threaten imprisonment for ordinary debt.
Use fake legal documents.
Publicly shame borrowers.
Access excessive personal data.
Fail to supervise outsourced collectors.
Operate without proper registration.
Continue collection after a credible identity theft dispute without investigation.

XLI. Practical Checklist for Unauthorized Loan Disbursement

A person disputing an unauthorized loan should prepare the following:

Name of app/company,
Date of app installation or application,
Screenshots of app screens,
Amount received,
Account where funds were received,
Whether funds were used or untouched,
Date of dispute message,
Demanded amount,
Computation of charges,
Collection messages,
Evidence of third-party contact,
App permissions,
Proof of identity theft, if applicable,
Complaint emails and replies,
Payment receipts, if any.

The dispute should be filed quickly and consistently.

XLII. Practical Checklist for Harassment Complaint

For harassment, preserve:

Screenshots of threats,
Phone numbers used,
Names used by collectors,
Call logs,
Audio recordings where lawful,
Messages sent to relatives or friends,
Social media posts,
Group chat screenshots,
Fake legal notices,
Employer communications,
Proof linking collector to lender,
Timeline of events.

A harassment complaint is stronger when it shows repeated conduct, specific language, dates, times, and recipients.

XLIII. What Relief Can Be Requested?

Depending on the case, a complainant may request:

Cancellation of unauthorized loan.
Correction of loan records.
Removal of unauthorized charges.
Acceptance of return of principal actually received.
Official statement of account.
Refund of overpayment.
Deletion or blocking of unlawfully processed data.
Cessation of third-party contact.
Investigation of abusive collectors.
Penalties against the lender.
Revocation or suspension of authority.
Damages.
Criminal investigation for fraud, threats, or identity theft.

The requested relief should match the evidence.

XLIV. Can the Borrower Keep the Money?

A borrower should not assume that unauthorized disbursement means free money.

If money was received by mistake or without valid loan consent, the prudent approach is to dispute the loan and arrange return of the amount actually received, without admitting unlawful charges. Keeping the funds may weaken the claim that the borrower rejected the loan.

If the borrower never received the money, the borrower should demand proof of disbursement and identify where the funds were sent.

XLV. Can the Lender Demand Interest on an Unauthorized Loan?

If the loan was truly unauthorized and the borrower promptly rejected it, the lender’s right to collect interest, fees, and penalties is questionable. At most, the lender may have a claim to recover money actually received, depending on the circumstances.

If the borrower used the funds despite disputing the loan, the lender may argue implied acceptance or unjust enrichment. Still, undisclosed, excessive, or abusive charges may be contested.

XLVI. The Importance of Timing

Timing matters greatly.

A borrower who immediately disputes an unauthorized loan is in a stronger position than one who waits until after the due date.

Important dates include:

Date of app download,
Date of application,
Date of alleged consent,
Date of disbursement,
Date of cancellation request,
Date of first dispute,
Due date,
Date of first collection message,
Date of harassment,
Date of payment, if any,
Date of complaint filing.

A clear timeline helps regulators understand the case.

XLVII. Online Lending Through Social Media

Not all online lending happens through apps. Some lenders operate through Facebook pages, Messenger, Telegram, Viber, WhatsApp, or SMS.

Risks include:

No written contract,
High interest,
Identity document collection,
ATM card or SIM retention,
Harassment,
Unauthorized deductions,
Public shaming,
Fake business names,
Loan sharks posing as registered lenders.

Borrowers should verify the lender’s identity and authority before sending IDs, selfies, bank details, or e-wallet access.

XLVIII. Salary Loans, ATM Collateral, and Payroll Deduction

Some informal online lenders ask borrowers to surrender ATM cards, payroll cards, SIM cards, passwords, or online banking access. This is highly risky.

Borrowers should be cautious about any lender that asks for:

ATM card and PIN,
SIM card,
E-wallet password,
Online banking credentials,
Blank checks,
Government ID plus selfie without clear privacy protections,
Access to employer payroll systems.

Such practices may raise serious legal, privacy, and financial security issues.

XLIX. Practical Advice for Borrowers Before Using Lending Apps

Before using an online lender:

Verify whether the company is registered and authorized.
Read the full loan terms.
Check the net proceeds and total repayment amount.
Screenshot disclosures before accepting.
Avoid apps with vague fees.
Avoid apps that demand excessive permissions.
Do not give access to contacts unless truly necessary.
Do not use lenders that threaten borrowers in reviews.
Use only official app stores when possible.
Avoid lenders that operate only through personal accounts.
Do not provide passwords, PINs, or OTPs.
Check whether the due date and charges are reasonable.
Keep copies of everything.

L. Practical Advice After Borrowing

After taking a loan:

Save the loan agreement.
Save the disclosure statement.
Track due dates.
Pay only through official channels.
Keep receipts.
Ask for updated statement after payment.
Request certificate of full payment if available.
Avoid rollover traps.
Revoke unnecessary app permissions after verification.
Report unlawful collection immediately.

LI. When the Complaint Is Strong

An online lending complaint is usually stronger when:

The loan was disbursed without clear final consent.
The lender cannot provide a loan agreement.
The amount received differs greatly from the amount charged.
Fees were hidden or unclear.
The borrower disputed immediately.
Collectors contacted third parties.
Collectors used threats or fake legal claims.
Personal data was publicly posted.
The lender appears unregistered.
Identity theft is supported by evidence.
The lender refuses to provide documentation.

LII. When the Complaint Is Weak

A complaint may be weaker when:

The borrower clearly accepted the terms.
The lender has clear electronic records.
The borrower received and used the funds.
The charges were clearly disclosed before acceptance.
The borrower simply regrets borrowing.
There is no proof of harassment.
The borrower deleted key evidence.
The borrower made false statements.
The dispute was raised only after default.

Even in a weak debt dispute, illegal collection may still be a separate valid complaint.

LIII. Distinguishing Debt Dispute from Collection Abuse

A borrower may lose the argument that the loan was unauthorized but still win the argument that collection was abusive.

Likewise, a borrower may successfully dispute harassment but still owe the principal.

These are separate questions:

Was there a valid loan?
How much is legally owed?
Were charges properly disclosed?
Did the lender collect lawfully?
Was personal data lawfully processed?
Were third parties improperly contacted?
Did the borrower suffer damages?

A good complaint addresses each issue separately.

LIV. Sample Evidence Index

A complainant may label evidence this way:

Annex A: Screenshot of app profile and loan account
Annex B: Bank/e-wallet transaction showing disbursement
Annex C: Screenshot of demanded amount
Annex D: Screenshot of unclear or missing disclosure
Annex E: Email disputing the loan
Annex F: Collection threats
Annex G: Messages sent to contacts
Annex H: App permission screenshots
Annex I: Proof of payment under protest
Annex J: Police report or identity theft report
Annex K: Company registration screenshot or lack of registration evidence
Annex L: Social media posts or defamatory content

Organized evidence makes the complaint easier to evaluate.

LV. Conclusion

Unauthorized loan disbursement and online lending complaints in the Philippines sit at the intersection of contract law, consumer protection, lending regulation, data privacy, cybercrime, and fair debt collection.

The essential principle is that a loan should be based on informed and voluntary consent. A lender should not release funds through deceptive app design, hidden terms, automatic renewal, identity misuse, or unclear acceptance. If a loan is disputed as unauthorized, the lender should be able to prove the borrower’s identity, consent, disclosure, disbursement, and computation.

At the same time, a borrower who receives money should not treat it as free. The safer course is to dispute promptly, preserve evidence, request documents, and, where appropriate, return only the amount actually received while contesting unauthorized interest, fees, and penalties.

Even when a debt is valid, collection must remain lawful. Harassment, threats, public shaming, fake legal notices, contact-list blasting, employer intimidation, and misuse of personal data are not legitimate collection methods. Borrowers, alleged borrowers, and even third-party contacts may have remedies before regulators, law enforcement, and courts.

In the Philippine setting, the strongest protection is documentation: screenshots, transaction records, app disclosures, messages, call logs, proof of third-party harassment, and a clear timeline. Online lending is legal when properly regulated and fairly conducted. But unauthorized disbursement, abusive collection, and privacy violations convert what should be a credit transaction into a serious legal dispute.