If an online lending app is calling your contacts, posting your face or name in group chats, threatening to shame you at work, using obscene language, or collecting late at night, you are not powerless. In the Philippines, debt may be collected only through lawful and reasonable means. A lender may demand payment of a valid loan, but it cannot use harassment, public shaming, threats, false accusations, or unauthorized use of your personal data to pressure you. This guide explains the legal actions you can take against harassing online lending apps, where to file complaints, what evidence to prepare, and what remedies are realistically available.

What Counts as Online Lending App Harassment?

Online lending app harassment usually happens when a lender, collector, or third-party collection agent goes beyond lawful debt collection and starts using pressure tactics that attack your privacy, reputation, peace of mind, or safety.

Common examples include:

Calling or texting your relatives, friends, employer, co-workers, neighbors, or phone contacts about your loan
Creating group chats to shame you or accuse you of being a scammer
Posting your photo, ID, address, or loan details online
Threatening arrest, imprisonment, barangay blotter, deportation, or public humiliation without legal basis
Sending obscene, insulting, or degrading messages
Calling before 6:00 a.m. or after 10:00 p.m. when not allowed
Using fake police, court, lawyer, or government notices
Accessing your contacts, gallery, camera, social media, SMS, or location without a lawful and proportionate purpose
Harassing a person who never borrowed money but was listed as a contact or character reference

The important point is this: owing money does not mean you lose your legal rights. A lender may collect what is legally due, but it must still follow Philippine laws on lending, privacy, consumer protection, cybercrime, and civil liability.

Your Main Legal Remedies in the Philippines

You may have several remedies at the same time. The right option depends on what the lending app did.

Situation	Best first legal action	Government office or legal route
Threats, insults, calls to contacts, public shaming, abusive collection	Administrative complaint	Securities and Exchange Commission (SEC)
Unauthorized access to contacts, photos, IDs, phone data, or social media	Data privacy complaint	National Privacy Commission (NPC)
Fake posts, cyberlibel, identity misuse, threats, blackmail, obscene messages	Criminal complaint	PNP Anti-Cybercrime Group, NBI Cybercrime Division, prosecutor’s office
Emotional distress, reputational harm, loss of work, privacy invasion	Civil action for damages or injunction	Regular courts
Unregistered or illegal online lending app	Regulatory complaint	SEC, and possibly law enforcement
Harassment of non-borrowers or contacts	NPC complaint, SEC complaint, possible criminal complaint	NPC, SEC, PNP/NBI

These remedies are not mutually exclusive. For example, if a collector accessed your contact list and posted defamatory accusations in a group chat, you may file both an NPC complaint for data privacy violations and a criminal complaint for possible cyberlibel or grave threats, while also reporting the lender to the SEC.

Legal Basis: Why Online Lending App Harassment Is Illegal

SEC rules on unfair debt collection

The SEC regulates lending companies and financing companies under laws such as Republic Act No. 9474, or the Lending Company Regulation Act of 2007. A lending company must be a corporation and must have authority from the SEC before operating as a lending company. (Lawphil)

The most important rule for harassment cases is SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices by financing companies, lending companies, and their third-party service providers. It specifically covers harassment complaints against collectors and recognizes that the SEC had been receiving complaints about abusive, unethical, and unfair collection methods.

Under SEC MC No. 18, prohibited practices include:

Use or threat of violence or criminal means to harm a person, reputation, or property
Threats to take action that cannot legally be taken
Obscenities, insults, or profane language that amount to abuse
Disclosure or publication of names and personal information of borrowers who allegedly refuse to pay
Communicating false loan information to third persons
False representation or deceptive means to collect a debt
Contacting borrowers before 6:00 a.m. or after 10:00 p.m., subject to limited exceptions
Contacting persons in the borrower’s contact list other than those named as guarantors or co-makers

The same circular makes clear that the lending or financing company remains responsible even if it hires a third-party collection agency. The collector cannot be used as a shield. SEC MC No. 18 states that the third-party service provider is treated as an agent of the financing or lending company, and ultimate responsibility remains with the company.

Penalties may include administrative fines, suspension, or revocation of the company’s authority to operate, depending on the violation and the company’s history.

Data Privacy Act and NPC rules

The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information in government and private-sector information systems. The law recognizes privacy as a fundamental human right and regulates the collection, use, storage, disclosure, and other processing of personal data. (National Privacy Commission)

For online lending apps, the NPC has issued special guidance. NPC Circular No. 20-01, as amended, applies to personal data processing for loan-related transactions by lending companies, financing companies, and other persons acting as such, whether or not they have SEC authority. It treats these entities as personal information controllers, meaning they are responsible for lawful, fair, transparent, and proportionate processing of borrowers’ data. (National Privacy Commission)

The NPC has repeatedly acted against abusive lending apps. It has found that online lending apps may violate privacy rights when they use intrusive permissions, access contact lists, post personal data on social media, or threaten borrowers and their contacts. (National Privacy Commission)

The NPC has also ordered takedowns of online lending apps for excessive harvesting of personal and sensitive information and for using data in ways that could harass or shame borrowers. In one takedown order, the NPC said certain apps accessed information such as contacts and social media data that were excessive and could be weaponized to harass and shame borrowers before people in their contact lists. (National Privacy Commission)

Financial consumer protection law

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, protects consumers of financial products and services, including credit products and digital financial services. It recognizes the rights of financial consumers to fair treatment, disclosure and transparency, protection against fraud and misuse, data privacy, and timely complaint handling. (Supreme Court E-Library)

The same law gives financial regulators, including the SEC, enforcement powers over financial service providers under their jurisdiction. These powers include rulemaking, market conduct surveillance, examination, enforcement actions, fines, suspension, penalties, and consumer redress mechanisms such as mediation, conciliation, or other modes of dispute resolution. (Supreme Court E-Library)

This matters because online lending app harassment is not only a “personal dispute.” It can also be a financial consumer protection issue.

Cybercrime and criminal law

If the harassment happens through text, chat, email, social media, group chats, fake posts, or online threats, criminal laws may apply.

Possible offenses include:

Cyberlibel under Section 4(c)(4) of Republic Act No. 10175, in relation to Articles 353 and 355 of the Revised Penal Code, if the collector publicly and maliciously imputes a crime, vice, defect, or circumstance that dishonors or discredits you
Grave threats under Article 282 of the Revised Penal Code, if there are serious threats to commit a wrong
Grave coercions under Article 286, if threats, violence, or intimidation are used to compel you to do something against your will
Unjust vexation, often prosecuted under Article 287, when the conduct causes annoyance, irritation, torment, distress, or disturbance without lawful justification
Identity-related offenses, depending on whether the collector used your identity, photos, documents, or account details in a fraudulent or deceptive way

The Cybercrime Prevention Act, RA 10175, covers offenses committed through computer systems and includes cyberlibel. (Lawphil) The Supreme Court discussed the constitutionality of cyberlibel in Disini v. Secretary of Justice, where the Court reviewed the Cybercrime Prevention Act and addressed the relationship between online libel and the Revised Penal Code. (Lawphil)

Civil Code remedies for damages

Even if the conduct does not result in a criminal conviction, you may still have a civil remedy.

The Civil Code provides important protections:

Article 19: Every person must act with justice, give everyone his due, and observe honesty and good faith.
Article 20: A person who, contrary to law, willfully or negligently causes damage to another must indemnify that person.
Article 21: A person who willfully causes loss or injury in a manner contrary to morals, good customs, or public policy must compensate the injured person. (Lawphil)
Article 26: Every person must respect the dignity, personality, privacy, and peace of mind of others; acts that meddle with private life, humiliate a person, or disturb privacy may produce a cause of action for damages and other relief. (AMSLAW)

These provisions are often relevant when lending app harassment causes reputational damage, anxiety, humiliation before co-workers, or conflict within the family.

Step-by-Step: What to Do When an Online Lending App Harasses You

1. Preserve evidence before blocking or deleting anything

Before blocking the collector, save proof. Evidence is often the difference between a dismissed complaint and a serious investigation.

Collect the following:

Screenshots of all messages, including the sender’s number, profile name, date, and time
Screen recordings showing the full chat thread
Call logs showing repeated calls and times
Voice recordings, if available and lawfully obtained
Group chat screenshots showing who was added and what was posted
Screenshots of social media posts, comments, tags, or defamatory uploads
App name, logo, website, Play Store/App Store page, and developer name
Loan agreement, disclosure statement, payment schedule, receipts, and proof of payments
Screenshots of permissions requested by the app
Names and numbers of collectors
Statements from relatives, co-workers, or contacts who received messages

Do not edit screenshots. Keep originals. If possible, export chats or back them up. For cybercrime complaints, investigators may ask to inspect the phone where the messages were received.

2. Identify the actual lending company behind the app

Many apps use trade names different from the registered corporate name. Check:

App name used in the store
Developer name
Privacy policy
Loan agreement
Disclosure statement
Text messages or email notices
GCash, bank, or payment channel account names
SEC registration number and Certificate of Authority number, if displayed

Under SEC rules on online lending platforms, lending and financing companies are required to disclose their corporate names, SEC registration numbers, and Certificate of Authority numbers in advertisements and online lending platforms. (Philippine News Agency)

If the app does not display these details, that is a red flag. It may be unregistered, operating through an unreported platform, or hiding the real operator.

3. Send a written demand to stop unlawful collection practices

A short written demand can help document that the lender was notified and continued anyway.

Your message may state:

You acknowledge any legitimate obligation, if applicable, but object to unlawful collection practices.
They must stop contacting third persons who are not guarantors or co-makers.
They must stop disclosing your personal information and loan details.
They must communicate only through lawful channels.
They must provide a statement of account, computation of principal, interest, penalties, fees, and payments already made.
They must identify the registered company, SEC registration number, Certificate of Authority number, and authorized collection agency.

Keep the tone calm. Do not threaten or insult back. Your messages may later be read by investigators, mediators, prosecutors, or judges.

4. File a complaint with the SEC

File with the SEC when the issue involves:

Harassing collection practices
Unfair debt collection
Threats or insults by collectors
Calls to your contacts
Failure to disclose the company’s identity, SEC registration, or authority
Unregistered online lending platform
Excessive or unclear fees, charges, or interest disclosures

The SEC’s iMessage portal accepts complaints and allows users to open and track tickets. (Securities and Exchange Commission) You may also use SEC complaint channels specifically for lending and financing company complaints when available.

Prepare:

Complaint letter or complaint form
Valid government ID
Loan documents and disclosure statement
Screenshots and call logs
Proof of payments
Names, numbers, and profiles of collectors
App name, corporate name, and SEC registration details, if known
Clear timeline of events

A practical format for your complaint:

Your full name, address, contact number, and email
Name of the lending app and, if known, the registered company
Date you downloaded the app and applied for the loan
Amount borrowed, amount received, fees deducted, due date, and amount demanded
Specific harassing acts, with dates and screenshots
Names of people contacted by the collector
Laws or rules violated, especially SEC MC No. 18, Series of 2019
Relief requested, such as investigation, sanctions, order to stop harassment, correction of account, or verification of authority to operate

5. File a complaint with the National Privacy Commission

File with the NPC when the app or collector misused personal data, such as:

Accessing your contact list without a lawful and proportionate purpose
Contacting your phone contacts who were not guarantors
Posting your ID, face, address, or loan information
Sharing your data with collectors without proper notice
Using your contact list for debt shaming
Processing excessive phone permissions
Refusing to delete, correct, or stop unlawful use of data

The NPC states that a formal complaint must be filed in a specific format. Its current process requires downloading the complaint form, printing and filling it out, having it notarized, and submitting it in person, by courier, or by scanned email to the NPC complaints address. (National Privacy Commission)

For an NPC complaint, prepare:

Notarized complaint-affidavit or NPC complaint form
Valid ID
Screenshots of the harassment or unauthorized data use
Proof that third persons were contacted
Screenshots of app permissions
Copy of the privacy notice or loan agreement, if available
Evidence that the data was used for debt collection or shaming
Names and contact details of witnesses, if any

The NPC expressly recognizes the right to file a complaint when personal information has been misused, maliciously disclosed, improperly disposed of, or when data privacy rights are violated. (National Privacy Commission)

6. Report criminal acts to PNP ACG, NBI Cybercrime Division, or the prosecutor

Go to law enforcement when the conduct includes:

Threats of physical harm
Blackmail or extortion
Fake obscene posts
Identity misuse
Public defamatory posts
Repeated intimidating calls or messages
Fraudulent claims of being police, court staff, lawyers, or government agents
Hacking, unauthorized access, or account takeover

The NBI Cybercrime Division receives complaints or requests for investigation from the public. Its Citizen’s Charter describes the process as proceeding to the Cybercrime Division to file a complaint, undergoing preliminary interview, executing sworn statements, and submitting supporting documents. (National Bureau of Investigation)

For criminal complaints, prepare:

Complaint-affidavit
Valid ID
Screenshots, screen recordings, and URLs
Device used to receive the messages, if available
Names and contact details of witnesses
Certification or proof of ownership of accounts, if relevant
Printed copies of messages and posts
Evidence of the loan relationship, if any

A police or NBI report is often only the start. For prosecution, the case usually proceeds to a prosecutor for preliminary investigation, where the respondent may be required to submit a counter-affidavit.

7. Consider a civil action for damages or injunction

A civil case may be appropriate when you suffered serious harm, such as:

Loss of employment or business
Public humiliation
Anxiety, sleeplessness, or emotional distress
Damage to reputation
Family conflict caused by unlawful disclosures
Continuing harassment despite complaints

Possible relief may include:

Moral damages
Actual damages, if you can prove financial loss
Exemplary damages, in serious cases
Attorney’s fees, when allowed
Injunction, if necessary to stop continuing unlawful acts

Civil cases take longer and require stronger preparation. Courts usually expect specific proof of damage, not just general statements. Keep medical records, employer notices, witness statements, screenshots, and proof of lost income if you plan to claim damages.

Documents You Should Prepare

Document or evidence	Why it matters
Valid ID	Needed for SEC, NPC, police, NBI, affidavits, and notarization
Complaint-affidavit	Main sworn statement of facts
Screenshots and screen recordings	Shows harassment, threats, publication, dates, and sender details
Call logs	Shows frequency and timing of collection calls
Loan agreement and disclosure statement	Shows the loan terms and the lender’s identity
Proof of payment	Helps dispute inflated balances
App permissions screenshots	Useful for NPC complaints
Witness statements	Useful when contacts, employers, or relatives were harassed
Links or URLs of posts	Important for cybercrime and takedown-related evidence
Barangay or police blotter, if any	Helps document immediate threats or disturbance

For affidavits signed in the Philippines, notarization is usually required. Bring a valid government ID. If you are abroad, you may need to execute the affidavit before a Philippine Embassy or Consulate, or have a foreign notarization properly authenticated or apostilled, depending on where the document will be used.

Practical Timelines and What to Expect

Action	Usual timeline in practice	Common bottlenecks
Gathering screenshots and documents	1–3 days	Deleted messages, blocked accounts, incomplete sender details
SEC complaint filing	Same day once complete	Identifying the real company behind the app
NPC complaint preparation	Several days to 2 weeks	Notarization, formatting, incomplete evidence
Police/NBI cybercrime report	Same day for intake; investigation varies	Need for device inspection, account tracing, platform data
Prosecutor preliminary investigation	Several months or longer	Respondent cannot be located, incomplete affidavits
Civil action for damages	Months to years	Court congestion, proving actual harm

Online lending cases often involve anonymous collectors, prepaid SIMs, fake profiles, and changing app names. This is why identifying the corporate operator, payment channels, app developer, and privacy policy is important.

Common Mistakes That Hurt Online Lending Harassment Complaints

Deleting messages too early

Many borrowers delete messages because they feel ashamed or anxious. Unfortunately, deleted evidence can weaken your complaint. Save everything first.

Filing only a general complaint without a timeline

A complaint saying “they harassed me many times” is weaker than a timeline showing:

March 1, 8:15 p.m. — collector texted my sister
March 2, 6:30 a.m. — collector called my employer
March 2, 11:45 p.m. — collector threatened to post my ID
March 3, 9:00 a.m. — collector posted in a group chat

Specific dates make the complaint easier to investigate.

Assuming “registered with SEC” means the app can harass you

A registered lending company can still violate SEC rules, NPC rules, consumer protection laws, or criminal laws. Registration is not a license to shame borrowers.

Ignoring the debt completely

Harassment does not automatically cancel a valid loan. You can object to unlawful collection while still asking for a correct statement of account and disputing excessive or unlawful charges.

Paying collectors through personal accounts without proof

Pay only through verified channels and keep receipts. If the collector gives a personal wallet or bank account, ask for written confirmation that it is an official payment channel of the registered lender.

Engaging in insult-for-insult exchanges

Do not threaten the collector back. Keep your replies short, factual, and evidence-friendly.

Special Situations

What if I never borrowed from the app but they keep contacting me?

You may still complain. If you are merely a contact, character reference, friend, co-worker, or relative, the app generally has no right to shame, threaten, or pressure you to pay another person’s debt. You can file an NPC complaint if your personal data was misused and a SEC complaint if the lender used unfair collection practices.

What if I gave app permissions when I downloaded it?

Consent is not unlimited. Under data privacy principles, processing must still be transparent, lawful, legitimate, and proportionate. The NPC has treated excessive harvesting of contacts and social media data as a serious privacy risk in online lending cases. (National Privacy Commission)

What if the lending app is not registered?

Report it to the SEC. Operating a lending business without proper authority is a regulatory issue. Also keep evidence of advertisements, app pages, payment channels, and the people behind the collection attempts.

What if the collector says I will be arrested for non-payment?

Ordinary non-payment of a loan is generally a civil matter. A borrower may face legal consequences if there is fraud, bouncing checks, falsified documents, or other criminal conduct, but a collector cannot simply threaten arrest to scare you into payment. False threats of criminal action may themselves support a complaint.

What if I am a foreigner in the Philippines?

Foreigners who borrow from Philippine online lending apps have the same basic rights against harassment, threats, unlawful disclosure, and data misuse. Keep your passport, ACR I-Card if applicable, visa details, loan records, and screenshots. If the collector threatens deportation, ask for the legal basis. A private lending app cannot deport you.

What if I am a Filipino abroad?

You may still prepare a complaint if the app, lender, borrower, harassment, or affected contacts are connected to the Philippines. The main practical issue is documentation. Affidavits executed abroad may need consular acknowledgment or apostille/authentication, depending on the office receiving them. Check the current filing instructions of the SEC, NPC, NBI, or prosecutor handling the matter.

Frequently Asked Questions

Can I sue an online lending app for harassment in the Philippines?

Yes, depending on the facts. You may file an SEC complaint for unfair collection practices, an NPC complaint for data privacy violations, a criminal complaint for threats or cyberlibel, and a civil case for damages if you suffered harm.

Is it illegal for an online lending app to contact my phone contacts?

It can be illegal or unlawful, especially if the contacts are not guarantors or co-makers and the purpose is to shame, pressure, or harass you. SEC MC No. 18 treats contacting persons in the borrower’s contact list other than guarantors or co-makers as an unfair collection practice.

Can a lending app post my picture or ID online because I did not pay?

No. Publicly posting your photo, ID, loan details, or personal information to shame you may violate SEC rules, the Data Privacy Act, and possibly criminal laws such as cyberlibel, depending on the content.

Where do I report online lending app harassment?

For abusive collection, report to the SEC. For misuse of contacts, photos, IDs, or personal data, report to the NPC. For threats, fake posts, identity misuse, blackmail, or cyberlibel, report to the PNP Anti-Cybercrime Group, NBI Cybercrime Division, or the prosecutor’s office.

Can I file both SEC and NPC complaints?

Yes. SEC complaints address lending and collection misconduct. NPC complaints address personal data misuse. Many online lending harassment cases involve both.

Will filing a complaint erase my loan?

Usually, no. A valid loan remains a valid obligation unless there are legal grounds to dispute it. However, complaints can address harassment, unlawful charges, lack of disclosure, privacy violations, or illegal lending operations.

Can collectors call me late at night?

SEC MC No. 18 treats contact before 6:00 a.m. or after 10:00 p.m. as an unfair collection practice, subject to limited exceptions.

What evidence is strongest in lending app harassment cases?

The strongest evidence usually includes screenshots with dates and numbers, full chat threads, screen recordings, call logs, proof that third persons were contacted, the loan agreement, payment receipts, and app permission screenshots.

Can I complain even if the collector used a fake name or dummy account?

Yes. Report the available details: phone numbers, usernames, screenshots, links, payment accounts, app details, and corporate information. Law enforcement or regulators may have tools to trace operators, but the more information you provide, the better.

Can my employer be contacted about my loan?

A collector generally should not disclose your loan information to your employer to shame or pressure you, unless there is a lawful and legitimate basis. If the employer is not a guarantor, co-maker, or legally relevant party, this may support complaints before the SEC and NPC.

Key Takeaways

A valid debt does not give an online lending app the right to harass, shame, threaten, or misuse your personal data.
SEC MC No. 18, Series of 2019 prohibits unfair debt collection practices, including threats, insults, public disclosure, false information, unreasonable contact hours, and contacting non-guarantor phone contacts.
The Data Privacy Act and NPC rules protect borrowers and contacts from excessive, unauthorized, or disproportionate data processing.
File with the SEC for abusive collection, with the NPC for privacy violations, and with PNP/NBI/prosecutors for cybercrime or criminal threats.
Preserve evidence before blocking, deleting, paying, or negotiating.
Harassment does not automatically cancel a valid loan, but it may create separate administrative, criminal, and civil liability for the lender or collector.