If you already paid your online loan in full but the app, collector, or “legal department” still keeps calling, texting, threatening to post you online, or contacting your relatives and workmates, treat the problem as two separate issues: first, prove that the loan is fully paid or properly disputed; second, document and report the harassment. In the Philippines, a lending company may collect a legitimate unpaid debt, but it cannot use threats, public shaming, abusive language, false claims, or your contact list as collection weapons. Those acts can trigger action by the SEC, the National Privacy Commission, and, in serious cases, law enforcement.

Why harassment can still happen after full payment

A fully paid online loan can still lead to harassment because of poor recordkeeping, delayed posting of payment, third-party collection agencies using outdated account lists, unauthorized “extension fees,” or outright abusive collection tactics.

Common real-life causes include:

The app did not properly match your GCash, Maya, bank, or payment-center reference number to your loan account.
The collector is working from an old spreadsheet and was not updated that the account was already paid.
The app claims there are “late fees,” “processing fees,” or “rollover fees” that were not clearly explained.
The loan was sold or assigned to a third-party collector that continues to demand payment.
The online lending platform is unrecorded, unregistered, or operating through shifting app names.
The borrower paid through an unofficial channel or personal account and now needs to prove where the money went.
The collector is deliberately pressuring the borrower to pay again just to stop the embarrassment.

The important point is this: even if there were a genuine dispute over a remaining balance, the collector still cannot shame you, threaten violence, reveal your debt to random contacts, or misrepresent legal consequences.

Your key rights under Philippine law

The SEC bans unfair debt collection by lending and financing companies

The Securities and Exchange Commission regulates lending companies under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, and financing companies under Republic Act No. 8556, or the Financing Company Act of 1998. SEC Memorandum Circular No. 18, series of 2019 applies to financing companies, lending companies, and third-party service providers hired by them for collection. It expressly recognizes that collectors may use only reasonable and legally permissible collection methods, and they must act in good faith and with reasonable conduct.

Under SEC Memorandum Circular No. 18, the following are unfair collection practices:

Threatening or using violence or other criminal means to harm a person, reputation, or property.
Threatening to take action that cannot legally be taken.
Using obscenities, insults, or profane language that tends to abuse the borrower or amounts to a criminal offense.
Publishing or disclosing the names and personal information of borrowers who allegedly refuse to pay, except in limited lawful situations.
Telling other people about loan information that is false, or failing to say that the debt is disputed when that is known.
Using false representations or deceptive means to collect a debt or obtain borrower information.
Contacting the borrower at unreasonable or inconvenient times, subject to the specific rules in the circular.
Contacting people in the borrower’s contact list other than those named as guarantors or co-makers.

This matters especially when the loan is already paid. If the collector knows or should know that the debt is paid or disputed, continuing to tell third parties that you are a delinquent borrower may create a stronger case for unfair collection, privacy violation, and possible civil or criminal liability.

Contacting your phone contacts is not normal collection

Many online lending harassment cases involve collectors messaging the borrower’s relatives, co-workers, Facebook friends, or phone contacts. In 2026, the DICT, National Privacy Commission, and SEC issued a public advisory on online lending platforms reminding the public that unnecessary app permissions, excessive access to contact lists, and contacting persons other than guarantors for debt collection are prohibited. The advisory states that online lending platforms may only contact the guarantor for collection purposes, and that access to contacts must be limited to legitimate, proportionate purposes such as selecting references or guarantors.

A “character reference” is not automatically a guarantor. A guarantor is someone who separately and expressly agreed to answer for the loan if the borrower defaults. If your app simply asked you to select names from your contacts, that does not mean those people became liable for your debt.

Data privacy law protects your personal information

Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information processed by private companies, including online lending platforms. For loan apps, the usual privacy problems include excessive access to contacts, use of borrower photos, disclosure of loan information to third parties, public shaming, and continued processing of personal data even after the loan purpose has already ended. (Lawphil)

A lending app may process personal data needed for identity verification, fraud prevention, loan assessment, collection through lawful means, and legal claims. But it should not use your contact list as a pressure tool, expose your debt to people who are not liable, or retain and reuse your data longer than necessary.

The Truth in Lending Act supports your right to a clear breakdown

Republic Act No. 3765, or the Truth in Lending Act, requires disclosure of finance charges and the true cost of credit. This is important when an app says you are “not fully paid” because of unclear charges, penalties, service fees, or “extension” charges that were not properly disclosed. (Lawphil)

A borrower facing post-payment collection should ask for a written statement of account showing:

principal amount released;
finance charges and interest;
penalties or late charges;
all payments received;
payment reference numbers;
remaining balance, if any;
basis for any remaining charge.

If they cannot give a clear breakdown and instead rely on threats or public humiliation, that weakens their position.

Harassment may also become a criminal or civil issue

Depending on the messages, posts, and calls, the conduct may involve provisions of the Revised Penal Code, Republic Act No. 10175 or the Cybercrime Prevention Act of 2012, and the Civil Code.

Possible legal issues include:

Conduct	Possible legal angle
“We will hurt you,” “we will go to your house,” or threats to harm family	Grave threats or other threats under the Revised Penal Code, depending on wording and circumstances
Forcing payment through intimidation or illegal pressure	Possible coercion or unjust vexation
Posting that you are a scammer, criminal, or debtor on Facebook or group chats	Libel, cyber libel, oral defamation, or civil damages, depending on the medium and facts
Sending abusive, obscene, repeated messages	Unjust vexation or other applicable offenses
Publicly exposing your loan, ID, photos, or contact details	Data Privacy Act issue, Civil Code privacy issue, and possibly cybercrime-related complaint
Disturbing your private life and peace of mind	Civil Code Article 26 on dignity, privacy, and peace of mind

Civil Code Article 26 states that every person must respect the dignity, personality, privacy, and peace of mind of others, and that certain acts may give rise to damages, prevention, and other relief even if they do not constitute a criminal offense. (Lawphil)

What to do immediately if the loan is fully paid but harassment continues

1. Preserve evidence before confronting the collector

Do not rely on memory. These cases often depend on screenshots, payment records, phone logs, and proof that your contacts were messaged.

Save the following:

loan agreement, disclosure statement, or screenshots of the loan terms;
app screenshots showing loan ID, amount, due date, and account status;
payment receipts from GCash, Maya, bank transfer, 7-Eleven, Cebuana, M Lhuillier, or payment gateway;
transaction reference numbers;
emails or in-app confirmations;
screenshots of abusive texts, Viber, Messenger, WhatsApp, Telegram, SMS, or email messages;
call logs showing repeated calls and the time of calls;
screen recordings of voice messages or threats;
screenshots of posts, comments, tags, or group chats;
messages sent to your relatives, employer, co-workers, or friends;
names, phone numbers, usernames, and email addresses of collectors;
the app name, company name, website, and app store link.

For screenshots, capture the full screen showing date, time, sender, and platform. Avoid cropping out phone numbers or usernames. If a relative or co-worker received the message, ask them to forward the original message and take their own screenshot.

2. Make a clean payment timeline

Create a simple timeline. This helps agencies quickly understand that the harassment continued after payment.

Example:

Date	Event	Proof
May 3	Loan released	App screenshot, loan agreement
May 10	Paid ₱5,000 through GCash	GCash receipt, reference number
May 10	App still showed unpaid	Screenshot
May 11	Collector texted threats	SMS screenshot
May 12	Collector messaged borrower’s sister	Messenger screenshot from sister
May 13	Borrower emailed proof of payment	Sent email screenshot
May 14	Harassment continued	Call log and messages

This timeline is more effective than a long emotional narrative. Keep it factual.

3. Send a written dispute and demand for correction

Send the lender a short written notice through official channels: in-app support, official email, website contact form, or registered mail if you can identify the office address.

Use calm, precise wording:

I am disputing further collection because this loan was fully paid on [date] through [payment channel], reference number [number]. Attached are proof of payment and screenshots. Please update my account to fully paid, stop all collection activity, instruct your third-party collectors to stop contacting me and my contacts, and issue a written statement of account or clearance within a reasonable period.

Do not insult the collector. Do not threaten them back. Do not make new admissions such as “I will pay again later” unless you truly agree there is a remaining balance.

4. Do not pay a second time just to stop the embarrassment

Many borrowers pay again because collectors threaten to contact the employer or family. Before paying anything more, require:

written statement of account;
legal name of the lending or financing company;
official payment channel;
explanation of each charge;
confirmation that payment will close the account;
receipt under the company’s name, not a personal wallet or personal bank account.

A demand to send money to a personal GCash or personal bank account is a red flag. If you pay through an unofficial channel, you may have difficulty proving that the company actually received it.

5. Revoke unnecessary app permissions

On your phone, check the app’s permissions. Revoke access to contacts, photos, files, microphone, camera, and location unless still strictly necessary. The 2026 public advisory reminds borrowers to review app permissions and notes that unnecessary permissions and unbridled contact-list processing are prohibited.

For Android and iPhone users, this is usually under:

Settings
Apps
choose the lending app
Permissions
remove access that is no longer needed

Deleting the app may stop some access, but preserve evidence first. Take screenshots before uninstalling.

6. Warn your contacts without spreading the issue further

If collectors are messaging your contacts, send a brief neutral notice:

Someone claiming to collect for an online loan may contact you. The account is disputed and has been paid. Please do not engage, do not send money, and please forward any message or screenshot to me for documentation.

Do not accuse named individuals of crimes in public posts unless the facts are verified. Keep your own statements factual to avoid creating a separate defamation issue.

Where to file complaints in the Philippines

SEC: for unfair debt collection by lending or financing companies

File with the SEC when the harassment is connected to a lending company, financing company, or online lending platform. The SEC’s iMessage portal accepts complaints and tickets, and the 2026 public advisory specifically lists SEC FINLEND and the iMessage portal for unfair debt collection practices. (Securities and Exchange Commission)

Include:

your full name and contact details;
app name and company name;
SEC registration number or certificate of authority, if known;
loan ID or account number;
amount borrowed and amount paid;
payment receipts;
statement that the account is fully paid or disputed;
screenshots of harassment;
phone numbers and names used by collectors;
names of contacts who were messaged;
requested action, such as stopping collection, correcting the account, and investigating unfair collection practices.

Possible SEC consequences for violations of SEC MC No. 18 include fines. The circular lists penalties starting at ₱25,000 for a lending company’s first offense and ₱50,000 for a financing company’s first offense; later offenses may lead to higher fines, suspension, or revocation of authority, depending on the facts and gravity.

National Privacy Commission: for misuse of personal data

File with the National Privacy Commission if the app accessed your contact list, disclosed your debt, posted your personal information, used your ID or photos improperly, or continued using your data after the loan was paid.

The NPC requires a formal complaint in a specific format. Its filing page states that the complaint form should be downloaded, printed and filled out, notarized, then submitted to the NPC in person, by courier, or by scanned email. (National Privacy Commission)

Prepare:

notarized complaint form;
government ID;
proof of loan and payment;
screenshots showing unauthorized contact-list use or disclosure;
messages sent to third parties;
app privacy notice or consent screen, if available;
explanation of how the data use was excessive, unauthorized, or harmful.

If you are abroad, you may need a notarized affidavit or complaint executed before a Philippine consulate, or a locally notarized document with apostille, depending on the receiving office’s requirements and the country where you are located.

PNP Anti-Cybercrime Group or NBI Cybercrime Division: for threats, extortion, fake posts, and cyber harassment

Report to law enforcement if there are threats of violence, extortion, identity misuse, fake social media posts, cyber libel, hacking, or coordinated online harassment. The 2026 advisory lists the NBI Cybercrime Division and PNP Anti-Cybercrime Group as reporting channels for harassment, threats, frauds, and scams linked to online lending platforms.

For serious threats, go to the nearest police station immediately and request that the incident be blottered. For online evidence, avoid deleting the messages. Investigators may need to see the original device, account, URLs, phone numbers, and timestamps.

Court action: for damages, injunction, or defense against a collection case

A borrower may consider a civil action if the harassment caused serious damage, loss of employment, reputational harm, medical distress, or public humiliation. Civil Code Articles 19, 20, 21, and 26 are commonly relevant in abusive conduct and privacy-related claims.

If the lender files a collection case despite full payment, do not ignore the summons. In a small claims or civil collection case, your proof of payment, payment timeline, screenshots, and written dispute become your main defense. Court notices are formal documents from the court, not threats sent by random collectors through text.

Documents to prepare

Purpose	Documents
Prove full payment	Official receipts, payment gateway screenshots, bank or e-wallet transaction history, reference numbers, confirmation email
Prove loan identity	Loan agreement, app screenshots, loan ID, borrower profile, disclosure statement
Prove harassment	SMS, chat screenshots, call logs, recordings where lawful, social media posts, messages sent to contacts
Prove third-party disclosure	Screenshots from relatives, co-workers, employer, group chats, affidavits if needed
File with SEC	Complaint narrative, payment proof, harassment evidence, company/app details
File with NPC	Notarized complaint form, ID, privacy-related evidence, screenshots of contact-list misuse
File with PNP/NBI	Original device, screenshots, URLs, phone numbers, account names, threat messages, payment demands
File or defend in court	All of the above, plus organized timeline and copies for the court and opposing party

Practical timelines and bottlenecks

Step	Typical timing	Common bottleneck
Internal dispute with app	A few days to several weeks	No real customer service, bot replies, collectors not updated
SEC complaint	Acknowledgment may be faster through online ticketing; investigation can take longer	Incomplete company name, weak screenshots, no payment proof
NPC complaint	Depends on completeness and notarization	Missing notarized form or unclear privacy violation
Police/NBI cybercrime report	Initial report may be made quickly; investigation varies	Need original links, account identifiers, and preserved digital evidence
Court case for damages or collection defense	Months or longer	Filing fees, service of summons, need for formal evidence

Common mistakes that make the case harder

Deleting the app before saving proof

Borrowers often uninstall the app out of panic. Before deleting it, save your loan details, account status, payment screen, customer service thread, and privacy permissions.

Paying through unofficial channels

If a collector says “send it to my personal GCash so I can close your account,” be careful. Payment should go to the lender’s official channel. If the lender later denies receipt, the burden becomes harder.

Posting angry accusations online

It is understandable to feel humiliated, but public accusations can create a separate defamation issue. Keep public statements factual or avoid posting while the complaint is pending.

Ignoring formal court papers

A collector’s threat is different from a court summons. But if you receive real court documents, respond within the period stated. Attach proof that the loan was paid.

Filing only one complaint when several rights were violated

A single incident may involve several offices:

SEC for unfair debt collection;
NPC for misuse of personal data;
PNP/NBI for threats, extortion, or cybercrime;
court for damages or defense against collection.

You do not have to choose only one if the facts support several remedies.

Special notes for OFWs and foreigners

Filipinos abroad and foreigners dealing with Philippine online lenders often face extra difficulty because collectors exploit distance and fear. The evidence process is still similar: preserve proof, send a written dispute, and file with the proper Philippine agency.

For documents executed abroad, check whether the receiving agency requires:

notarization before a Philippine Embassy or Consulate;
local notarization plus apostille;
scanned submission first, with hard copies later;
special authorization if someone in the Philippines will file for you.

Foreigners should also keep copies of passport pages, local contact details used in the loan, Philippine phone number or e-wallet account records, and any written agreement showing the governing terms of the loan. If the online lending app is Philippine-based or operated by a Philippine lending or financing company, Philippine regulators may still be relevant even if the borrower is outside the Philippines.

Frequently Asked Questions

Can an online loan collector still contact me after I fully paid?

They may send reasonable account confirmation or correction messages, but they should not continue collection demands as if the loan were unpaid. If they claim there is still a balance, ask for a written statement of account and proof of the remaining charge. Harassment, threats, shaming, and contact-list messaging remain prohibited.

What if the app says I still owe late fees?

Ask for a complete written breakdown. Check whether the fees were disclosed before you accepted the loan. If the charges are unclear or were never properly disclosed, raise that in your SEC complaint and attach the Truth in Lending issue to your payment dispute.

Is it legal for collectors to message my contacts?

Generally, no, if those people are merely from your phone contact list and are not guarantors or co-makers. The 2026 DICT-NPC-SEC advisory specifically states that contacting persons in the borrower’s contact list other than guarantors is prohibited for debt collection.

Can they post my face, ID, or name on Facebook?

Public shaming can trigger SEC, NPC, civil, and possibly criminal issues. Save the URL, screenshot the post, identify the account, and report it promptly. If the post contains false statements that damage your reputation, cyber libel or civil damages may become relevant depending on the facts.

Should I file first with the SEC or the NPC?

File with the SEC if the main issue is unfair collection by a lending or financing company. File with the NPC if the main issue is misuse or disclosure of personal data, such as contact-list harassment, posting personal information, or excessive app permissions. Many online lending harassment cases justify filing with both.

What if the online lending app is not registered?

Still document everything and file a report. An unregistered or unrecorded app may raise additional regulatory concerns. The 2026 public advisory applies reminders to entities offering or facilitating loans through online lending platforms, whether recorded or unrecorded.

Can collectors threaten me with imprisonment for unpaid debt?

Mere nonpayment of a loan is generally a civil matter. However, separate acts such as fraud, falsification, or bouncing checks may create different legal issues depending on the facts. A collector should not falsely threaten imprisonment just to force payment, especially when the account is fully paid or legitimately disputed.

What if my employer was contacted?

Save the message received by your employer and document who received it, when it was received, and what was said. This can support an SEC complaint for unfair collection and an NPC complaint for unauthorized disclosure of personal data. If your employment was affected, keep HR communications and written proof of the damage.

Can I get damages for harassment after paying the loan?

Possibly, if you can prove wrongful conduct and actual injury, such as reputational harm, emotional distress, job consequences, or public humiliation. Civil Code Article 26 protects dignity, privacy, and peace of mind, and other Civil Code provisions may apply depending on the facts. (Lawphil)

Does deleting the app stop the harassment?

It may stop some app access, but it does not erase data already copied by the lender or collector. Save evidence first, revoke permissions, then consider uninstalling. Also file complaints if your data was already misused.

Key Takeaways

A fully paid online loan should not continue to be collected as unpaid.
Even if a balance is disputed, collectors cannot use threats, insults, public shaming, false claims, or contact-list harassment.
SEC Memorandum Circular No. 18 protects borrowers from unfair debt collection by lending and financing companies and their third-party collectors.
The Data Privacy Act protects borrowers from excessive, unauthorized, or harmful use of personal data.
Save proof before deleting the app or blocking numbers.
Ask for a written statement of account and account correction.
File with the SEC for unfair collection, the NPC for privacy violations, and PNP/NBI for threats, extortion, cyber harassment, or fake posts.
Do not pay again through unofficial channels just to stop harassment.
If court papers arrive, respond and present proof of full payment.