If a loan app is calling you nonstop, threatening to shame you online, messaging your family or officemates, or saying you will be arrested if you do not pay immediately, you are not helpless. In the Philippines, a lender may collect a legitimate debt, but it must do so lawfully. Harassment, threats, public shaming, misuse of your contacts, and abusive collection tactics can violate SEC rules, data privacy law, cybercrime law, and even the Revised Penal Code. This guide explains what is illegal, what evidence to save, where to complain, and how to protect yourself while still dealing responsibly with any valid loan.

Debt collection is allowed, but harassment is not

A loan app or lending company can remind you of a due date, send a statement of account, demand payment, offer restructuring, or file a proper civil collection case if the debt is unpaid.

What it cannot do is use intimidation, shame, false accusations, or your private data as a weapon.

The key point is this: owing money does not remove your rights. Even if you are delayed in payment, the lender must still respect your privacy, dignity, and safety.

Common illegal or abusive acts include:

Calling you names like “scammer,” “magnanakaw,” or “criminal” in messages to other people
Sending your loan details to your contacts
Posting your photo, ID, address, workplace, or loan balance online
Threatening to report you to your employer unless you pay
Threatening arrest, imprisonment, barangay action, or police action when they have no legal basis
Calling before 6:00 a.m. or after 10:00 p.m. in prohibited situations
Contacting people in your phonebook who are not guarantors or co-makers
Using obscenities, profanity, insults, or threats
Demanding payment through a personal GCash, Maya, or bank account not officially connected to the lender
Accessing your contacts, photos, camera, location, or social media data beyond what is necessary for the loan

Your main legal protections in the Philippines

SEC rules on unfair debt collection

Lending companies and financing companies are regulated by the Securities and Exchange Commission (SEC) under the Lending Company Regulation Act of 2007, Republic Act No. 9474 and the Financing Company Act of 1998, Republic Act No. 8556. RA 9474 gives the SEC authority to regulate lending companies, require reports, exercise visitorial powers, and impose sanctions such as fines, suspension, or revocation of authority. (Supreme Court E-Library)

The most important SEC rule for loan app harassment is SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices by financing companies, lending companies, and their third-party service providers.

Under SEC MC 18-2019, the following are unfair collection practices:

Harassing act	Why it matters
Threatening violence or other criminal means	A lender cannot threaten harm to your person, reputation, or property.
Threatening legal action that cannot legally be taken	False threats of arrest, imprisonment, or police action may be abusive.
Using obscenities, insults, or profane language	Abusive language may become an unfair collection practice and, in serious cases, a criminal issue.
Publishing your name or personal information because you allegedly refuse to pay	Debt-shaming is specifically targeted by SEC rules.
Telling other people about your loan when the information is false, disputed, or should not be disclosed	Your debt information is confidential except in limited situations.
Using false representation or deception	Collectors must not pretend to be police, court staff, barangay officers, or lawyers if they are not.
Contacting you at unreasonable hours	SEC MC 18 defines prohibited contact as before 6:00 a.m. or after 10:00 p.m., subject to the circular’s conditions.
Contacting people in your contact list who are not guarantors or co-makers	Your phone contacts are not automatically responsible for your loan.

SEC MC 18 also requires lenders and their collectors to disclose their full name or true identity and to have a customer service unit or designated personnel to address borrower complaints. The lending or financing company remains responsible even if it outsourced collection to a third-party collector.

Data Privacy Act and loan app access to contacts

The Data Privacy Act of 2012, Republic Act No. 10173 protects personal information. Loan apps must follow the basic data privacy principles of transparency, legitimate purpose, and proportionality. In simple terms, they must tell you what data they collect, collect it for a valid purpose, and collect only what is necessary.

The National Privacy Commission (NPC) has repeatedly acted on complaints involving online lending apps that accessed borrowers’ contact lists and used the information for harassment or public shaming. The NPC has said online lenders are barred from harvesting phone and social media contact lists for harassing borrowers. (National Privacy Commission)

In 2026, the DICT, NPC, and SEC issued a public advisory on online lending platforms reminding the public that unnecessary permissions, excessive processing of contact lists, harassment, public shaming, and contacting persons other than guarantors for collection are prohibited. The advisory also distinguishes character references from guarantors: a reference is for identification or verification, while a guarantor must separately consent to assume responsibility for the loan in case of default.

This is important because many loan apps blur the line. A person listed as a “reference” does not automatically become legally liable for your loan.

Financial consumer protection

The Financial Products and Services Consumer Protection Act, Republic Act No. 11765, protects financial consumers and recognizes rights such as fair treatment, disclosure and transparency, data privacy, and timely handling of complaints. It also expressly prohibits financial service providers from using abusive collection or debt recovery practices. (Supreme Court E-Library)

RA 11765 also makes financial service providers responsible for acts or omissions of their authorized representatives and may make them solidarily liable with accredited third-party service providers involved in marketing or debt collection. This matters when the lender says, “Hindi kami iyon, collection agency iyon.” Under the law and SEC rules, outsourcing collection does not automatically erase the lender’s responsibility. (Supreme Court E-Library)

Truth in Lending Act and excessive charges

The Truth in Lending Act, Republic Act No. 3765, requires creditors to disclose the true cost of credit, including finance charges and the percentage that the finance charge bears to the total amount financed. (Lawphil)

For certain short-term, small-value, high-cost loans offered by lending companies, financing companies, and online lending platforms, BSP Circular No. 1133, Series of 2021 set ceilings on interest, fees, penalties, and total cost for covered loans: loans not exceeding ₱10,000 with a tenor of up to four months. The circular includes a nominal interest ceiling of 6% per month, an effective interest rate ceiling of 15% per month, a cap on late payment penalties of 5% per month on the outstanding scheduled amount due, and a total cost cap of 100% of the total amount borrowed.

This does not mean every loan app dispute is automatically about excessive interest. But if the charges have ballooned far beyond what was disclosed or appear to exceed applicable caps, include that in your complaint.

Revised Penal Code and Cybercrime Law

Some loan app harassment may also become a criminal matter.

Relevant provisions may include:

Conduct	Possible legal basis
Threatening harm to you, your family, reputation, or property	Revised Penal Code, Articles 282 to 285 on threats
Forcing you to do something against your will through violence or intimidation	Revised Penal Code, Article 286 on grave coercions
Repeated vexing, humiliating, or oppressive acts	Revised Penal Code, Article 287 on unjust vexation, depending on facts
Posting false accusations online, such as calling you a criminal or scammer	Revised Penal Code Articles 353 and 355 on libel, and RA 10175 on cyber libel
Insulting you orally in a serious and humiliating way	Revised Penal Code, Article 358 on slander
Using a computer system or online platform to commit covered offenses	Cybercrime Prevention Act of 2012, RA 10175

The Revised Penal Code defines libel as a public and malicious imputation that tends to dishonor, discredit, or cause contempt against a person. Libel by writing or similar means is covered by Article 355, while oral defamation is covered by Article 358. (Lawphil)

For online posts, messages, or digital publications, the Cybercrime Prevention Act may apply. In Disini v. Secretary of Justice, the Supreme Court explained that RA 10175 adopts the Revised Penal Code definition of libel for online libel committed through a computer system. (Supreme Court E-Library)

What to do immediately if a loan app threatens or harasses you

1. Do not panic and do not pay only because of a threat

Collectors often use urgency to force payment:

“Pay within 10 minutes or we will post you.”
“We will call your HR.”
“Police will arrest you today.”
“We will file estafa now.”

Pause first. A legitimate debt should be handled through proper billing, negotiation, settlement, or court process. A threat to shame you is not a lawful collection method.

If there is an actual threat of physical harm, stalking, or someone going to your home or workplace, prioritize safety. Report to the nearest police station, the barangay for incident recording, or the PNP Anti-Cybercrime Group if the threat is online.

2. Preserve evidence before blocking, deleting, or uninstalling

Evidence is often the biggest weakness in loan app harassment complaints. Do not rely on memory.

Save:

Screenshots of threatening messages, including date, time, number, account name, and profile photo
Full message threads, not just selected insults
Call logs showing repeated calls
Voicemail or written call summaries made immediately after the call
Screenshots of Facebook posts, group chats, comments, or messages sent to your contacts
Names and numbers of collectors, if shown
The app name, developer name, website, Play Store or App Store page, and download link
Loan agreement, disclosure statement, repayment schedule, interest, fees, and penalties
Proof of payments already made
Screenshots of app permissions, especially contacts, camera, storage, SMS, location, or social media access
Messages received by your family, officemates, references, or guarantors

For calls, be careful with secret recordings. The Philippines has strict rules under the Anti-Wiretapping Act. Safer evidence includes call logs, written notes, screenshots of call history, and witness statements from people who personally received threats.

3. Secure your phone and accounts

Loan app harassment often becomes worse when the app still has permissions.

Do these practical steps:

Go to your phone settings.
Open the app permissions.
Revoke access to contacts, camera, photos, microphone, SMS, call logs, and location unless still necessary.
Change passwords for your email, social media, e-wallets, and banking apps.
Turn on two-factor authentication.
Warn your contacts not to respond to collectors or give information.
Block numbers only after saving evidence.
Keep the app installed long enough to capture loan details, account number, balance, and payment instructions, if safe to do so.

If the harassment includes identity theft, suspicious bank activity, or unauthorized e-wallet transactions, report that separately to your bank, e-wallet provider, and law enforcement.

4. Send one clear written demand to stop abusive collection

Do not argue emotionally with collectors. Send one short message through SMS, email, in-app chat, or any channel that creates a record.

Example:

I am requesting that you stop all abusive, threatening, and third-party collection communications. Communicate only with me through this number/email regarding any valid loan obligation. Please identify the lending or financing company, the collector’s full name, the account number, the statement of account, and the legal basis for all charges. I do not authorize disclosure of my loan information to my contacts, employer, relatives, or social media. I reserve my right to file complaints with the SEC, NPC, PNP-ACG, NBI, and other proper authorities.

This message does not erase the debt. It simply creates a record that you objected to illegal collection methods.

5. Report unfair debt collection to the SEC

For lending companies, financing companies, and online lending platforms, file a complaint with the SEC through SEC iMessage. The 2026 DICT-NPC-SEC advisory specifically directs complaints on unfair debt collection practices to the SEC Financing and Lending Companies Department through imessage.sec.gov.ph and lists the SEC hotline as 1-4732 or 1-4SEC.

Include:

Your full name and contact details
Name of the loan app and company, if known
App screenshots and website/store links
Loan date, amount received, amount demanded, and due date
Statement of account or screenshots showing interest, penalties, and fees
Threatening messages and call logs
Screenshots of messages sent to your contacts
Names and numbers of collectors
Proof that the collector contacted non-guarantor contacts
Any previous complaint or ticket number

You can still report even if the app appears unregistered. In fact, that is relevant. The SEC can verify whether the company has a Certificate of Authority and whether the online lending platform is recorded.

6. File a privacy complaint with the NPC if your data or contacts were misused

If the loan app accessed your phonebook, messaged your contacts, posted your personal data, exposed your ID, or used your information beyond what was necessary, file with the National Privacy Commission.

The NPC’s formal complaint page states that a complaint must follow a specific format: download the form, print and fill it out, have it notarized, then submit it in person, by courier, or by scanned email to the NPC complaints address shown on the page. (National Privacy Commission)

Typical NPC evidence includes:

The notarized complaint form
Valid government ID
Screenshots of the loan app’s privacy notice, consent screen, and app permissions
Proof that your contacts were accessed or messaged
Screenshots of public shaming or disclosure
Statements from contacts who received messages
Your loan agreement or account screenshots
Proof that you asked the lender to stop using or sharing your data

NPC Circular No. 2023-01 sets a filing fee of ₱500 for complaints, additional fees if claiming damages, and fees for certain applications such as cease-and-desist orders. It also provides exemptions for indigent litigants who submit required documents such as a barangay certificate of indigency and notarized affidavits.

7. Report threats, scams, fraud, or online attacks to cybercrime authorities

If the harassment includes threats, fake public accusations, blackmail, identity theft, fraud, or hacked accounts, consider reporting to cybercrime authorities.

The 2026 DICT-NPC-SEC advisory lists these channels for other forms of harassment, threats, frauds, and scams:

Office	When to report	Contact details listed in the 2026 advisory
DICT Cyber Hotline	Digital threats, scams, online abuse	1326@dict.gov.ph
NBI Cybercrime Division	Cybercrime evidence, online threats, fraud, identity misuse	ccd@nbi.gov.ph; (632) 8523-8231 to 38
PNP Anti-Cybercrime Group	Online harassment, threats, scams, cybercrime reports	acg@pnp.gov.ph; onlinecims.ocs@gmail.com; (632) 8723-0401 local 7491

Bring or submit organized evidence. Cybercrime investigators usually need the original device or at least clear screenshots, URLs, account names, phone numbers, email headers, transaction receipts, and a narrative of what happened.

8. Consider a criminal complaint if the facts are serious

A police or NBI report is not always the same as a criminal case. For a criminal case to move forward, the evidence is usually evaluated and may be referred to the prosecutor’s office for preliminary investigation or inquest, depending on the situation.

A criminal complaint package may include:

Complaint-affidavit explaining the facts in chronological order
Copies of screenshots and electronic evidence
Printed screenshots with URLs, numbers, dates, and times
Affidavits from contacts who received threats or defamatory messages
Police blotter or cybercrime incident report, if any
Valid IDs of complainant and witnesses
Certification or forensic report, if required by investigators
Proof of identity of the sender, if available

Timelines vary widely. Intake can happen the same day, but cybercrime evaluation, subpoena requests, identification of account holders, prosecutor review, and case filing can take weeks or months.

Where to file: quick comparison

Problem	Best first office	What to prepare	Practical timeline
Loan app threatens, insults, or contacts non-guarantor contacts	SEC	Screenshots, call logs, app name, loan details, collector details	Ticket filing can be immediate; action depends on evaluation and agency workload
App accessed or misused your contacts, photos, ID, or personal data	NPC	Notarized complaint, ID, privacy evidence, screenshots, witness statements	Formal complaints often take months, especially if mediation or investigation is needed
Threats, blackmail, cyber libel, identity theft, fraud, fake accounts	PNP-ACG or NBI Cybercrime Division	Device, screenshots, URLs, numbers, transaction records, affidavits	Initial reporting may be quick; investigation and prosecutor action can take longer
Immediate local safety concern	Police station or barangay	ID, screenshots, address details, names/numbers involved	Blotter may be same day; it mainly records the incident
Wrong charges or unclear loan computation	SEC; also raise with lender’s customer service	Disclosure statement, SOA, payment proof, computations	Depends on lender response and agency review
Civil damages for humiliation or privacy invasion	Regular court, depending on amount and cause of action	Evidence of damage, witnesses, medical/psychological records if any	Court cases can take significantly longer

Common mistakes that weaken a complaint

Deleting messages before saving them

Many borrowers block numbers immediately, then later cannot prove what happened. Save first, block later.

Paying to a personal account

If you decide to pay or settle, pay only through official channels. Do not send money to a collector’s personal GCash or bank account unless the lender clearly confirms it in writing as an official payment channel.

Admitting to crimes you did not commit

Collectors may pressure you to say, “Yes, I am a scammer,” or “Yes, I committed fraud.” Do not make emotional admissions. Keep communications factual.

Ignoring a valid debt completely

Harassment is illegal, but a valid loan may still be collectible. Separate the two issues:

Collection abuse should be reported.
Legitimate principal, lawful interest, and lawful charges should be verified and addressed.

Ask for a statement of account and negotiate in writing if you need more time.

Assuming barangay mediation is the main remedy

Barangay conciliation is usually not effective for anonymous online lenders, companies outside your locality, cybercrime issues, or SEC/NPC regulatory violations. A barangay blotter can help document local threats, but it will not replace an SEC, NPC, PNP-ACG, NBI, or prosecutor complaint.

Thinking a “reference” is automatically liable

A reference is not automatically a guarantor. A guarantor must agree to be responsible for the debt. The 2026 DICT-NPC-SEC advisory specifically says OLPs should distinguish character references from guarantors, and that guarantors must give separate consent.

Can you go to jail for not paying a loan app?

Generally, nonpayment of debt alone is not a crime. The Philippine Constitution prohibits imprisonment for debt. A lender’s normal remedy for unpaid debt is collection, demand, credit reporting where lawful, or a civil case.

However, separate criminal issues may arise if there are additional facts, such as:

Use of fake identity documents
Fraud or deceit from the start of the loan
Bouncing checks, if a check was issued and the elements of the law are present
Identity theft
Falsification
Other independent criminal acts

A collector who says “automatic estafa” or “automatic kulong” for simple delay in payment is usually oversimplifying or threatening beyond what the law allows.

What if the lender threatens to call your employer?

A lender may verify employment if you lawfully gave employer details for verification. But threatening to shame you at work, disclose your debt to HR, accuse you of being a criminal, or pressure your employer to discipline you can cross legal lines.

If your employer receives a message:

Ask your employer or officemate to screenshot the message.
Save the sender’s number, name, and account.
Ask the recipient to write a short statement of what they received.
Include it in your SEC and NPC complaints.
If the message contains false accusations, threats, or online publication, consider cybercrime reporting.

What if your contacts are also harassed?

Your contacts may also be data subjects whose personal information was processed. They can save their own screenshots and file or support a privacy complaint if their numbers, names, or messages were misused.

Give them a calm explanation:

I am dealing with a loan app complaint. You are not my guarantor, and you do not have to pay them. Please do not reply or give information. Kindly screenshot any message or call log they send and forward it to me for evidence.

This helps stop panic and prevents collectors from extracting more information.

Special notes for OFWs and foreigners

If you are abroad, you can still preserve screenshots, email agencies, and submit online complaints where available. For formal affidavits or authorizations in the Philippines, practical issues may arise.

Common options include:

Signing a Special Power of Attorney (SPA) authorizing a trusted person in the Philippines to file or follow up
Having documents notarized before a Philippine Embassy or Consulate, where applicable
Using apostilled foreign notarized documents if executed in a country that is part of the Apostille Convention
Sending scanned copies first, then couriering originals if required

The Philippines became a party to the Apostille Convention on 14 May 2019, and DFA apostille guidance is available through the DFA Apostille website. (Apostille PH)

Foreigners in the Philippines can file complaints with Philippine agencies if the harassment, loan transaction, lender, borrower, data processing, or harmful effects are connected to the Philippines. Keep copies of passport pages, visa or residence documents, local address proof, Philippine mobile number records, and payment receipts.

Frequently Asked Questions

Can a loan app message my contacts in the Philippines?

Generally, a loan app should not contact people in your phonebook for collection unless they are proper guarantors or co-makers, and even then the communication must be lawful and not abusive. A character reference is not automatically liable for your loan.

Can a loan app post my face, ID, or loan balance online?

No. Public shaming, disclosure of your personal information, and posting loan details online may violate SEC debt collection rules, the Data Privacy Act, the Civil Code, and possibly cybercrime or defamation laws, depending on the content.

Should I still pay the loan if the app harassed me?

If the loan is valid, you should still verify and address the lawful amount due. But do not pay only because of threats, and do not pay to unofficial personal accounts. Ask for a written statement of account and report the abusive conduct separately.

Where do I complain about online lending app harassment?

For unfair debt collection, file with the SEC through SEC iMessage. For misuse of personal data or contact lists, file with the National Privacy Commission. For threats, scams, fraud, identity theft, or cyber libel, report to PNP-ACG, NBI Cybercrime Division, or the DOJ cybercrime channels.

Can I be arrested because I did not pay a loan app?

Simple nonpayment of debt is generally not a ground for arrest. A lender must use lawful remedies. Criminal liability may arise only if there are separate criminal acts, such as fraud, falsification, identity theft, or other offenses supported by evidence.

What evidence should I save before filing a complaint?

Save screenshots, full message threads, call logs, app details, loan agreement, statement of account, proof of payments, app permissions, and messages sent to your contacts. Ask affected contacts to save their own screenshots and write short statements.

Can I report an unregistered loan app?

Yes. If the app is unregistered, unauthorized, or using a different company name, that is important information for the SEC. Include the app link, developer name, website, payment channels, and screenshots of all collection messages.

Can I block the collectors?

Yes, but save evidence first. If you block too early, you may lose proof of threats, numbers, or identities. After preserving evidence, blocking abusive numbers is reasonable for your safety and peace of mind.

What if the collector says they are from a law office?

Ask for the full name, law office, address, lawyer’s name, IBP roll number if applicable, written authority to collect, and a formal statement of account. A real lawyer or law office should communicate professionally. A “law office” label does not permit threats, shaming, or privacy violations.

What if I am only a reference and not the borrower?

Tell the collector in writing that you are not the borrower, guarantor, or co-maker, and that you do not consent to further collection communications. Save all messages and consider reporting to the NPC if your personal data was used without proper basis.

Key Takeaways

A lender may collect a valid debt, but it cannot threaten, shame, deceive, or harass you.
SEC MC 18-2019 prohibits unfair debt collection practices by lending and financing companies and their collectors.
Loan apps generally cannot use your contact list to pressure you, especially by contacting people who are not guarantors or co-makers.
Misuse of your contacts, ID, photos, workplace details, or loan information may violate the Data Privacy Act.
Online threats, fake accusations, blackmail, and public shaming may also become cybercrime or Revised Penal Code issues.
Save evidence before deleting, blocking, or uninstalling.
File with the SEC for unfair collection, the NPC for privacy violations, and PNP-ACG or NBI Cybercrime Division for threats, fraud, identity theft, or online attacks.
Nonpayment of debt alone generally does not mean jail, but a legitimate loan should still be verified and handled through lawful payment, negotiation, or proper dispute channels.