If an online lending app still calls, texts, threatens, shames you online, or contacts your relatives, employer, or phonebook contacts after you have fully paid, the problem is no longer just an annoying collection issue. In the Philippines, full payment generally extinguishes the loan obligation, and continued harassment may involve unfair debt collection, misuse of personal data, cybercrime, or a civil wrong. This guide explains what the law says, what evidence to preserve, where to complain, and how to protect yourself when an online lending app continues harassing you after full payment.
Why Harassment After Full Payment Is Legally Serious
A legitimate lender may collect a valid unpaid loan using lawful and reasonable methods. But once you have fully paid, the lender should update its records, stop collection, and stop using your personal data for collection purposes unless there is a lawful reason to retain it.
Under the Civil Code of the Philippines, obligations are extinguished by payment or performance. A debt is considered paid when the thing or service due has been completely delivered or rendered, and payment of money is one form of performance. (Lawphil)
So if you paid the full amount due, including any properly disclosed interest, fees, and penalties, the app should not continue treating you as a delinquent borrower.
In real life, however, online lending app harassment often continues because of:
- Poor or delayed payment reconciliation
- Automated collection systems that do not update after payment
- Third-party collectors using outdated account lists
- Apps that continue using copied contact lists or personal data
- Fake or illegal lending apps using “collection” as intimidation
- Disputes over hidden fees, rollover charges, or penalties
The important point is this: even if there is a genuine dispute about the balance, the lender cannot use harassment, public shaming, threats, or unauthorized use of your contacts to force payment.
Your Rights Under Philippine Law
Your debt should stop being collected once it is fully paid
If your loan has been fully paid, you should be able to ask for:
- An official receipt or proof of payment acknowledgment
- A statement of account showing zero balance
- A certificate or confirmation of full payment
- Correction of your account status in the app’s records
- Cessation of collection calls and messages
- Correction or deletion of inaccurate personal data, where legally proper
If the app claims you still owe money, ask for an itemized statement showing:
| Item | What to check |
|---|---|
| Principal | The original amount borrowed |
| Interest | Whether it was disclosed before you accepted the loan |
| Service fees | Whether these were clearly shown in the loan terms |
| Penalties | Whether the basis, amount, and period are stated |
| Payments credited | Whether all GCash, Maya, bank, or payment-center transactions were applied |
| Remaining balance | Whether the computation is understandable and consistent |
The Truth in Lending Act, Republic Act No. 3765, requires creditors to disclose the true cost of credit, including finance charges and the effective annual rate, before the credit transaction is completed. (Lawphil)
This matters because some borrowers are harassed after full payment due to alleged “fees” or “penalties” that were not clearly disclosed or properly computed.
Debt collectors cannot shame, threaten, or abuse you
The Securities and Exchange Commission regulates lending and financing companies under laws such as the Lending Company Regulation Act of 2007, Republic Act No. 9474, and the Financing Company Act, Republic Act No. 8556. (Lawphil)
SEC Memorandum Circular No. 18, series of 2019, prohibits unfair debt collection practices by lending companies, financing companies, and their third-party collection service providers. The prohibited acts include threats of violence, threats to take actions that cannot legally be taken, insults or obscene language, disclosure or publication of borrowers’ personal information to shame them, false representations, and contacting borrowers at unreasonable times.
The same SEC rules treat contact with people in your phonebook, other than named guarantors or co-makers, as unfair debt collection even if you previously allowed access to your contacts.
That means an app cannot justify harassment by saying, “You gave us permission to access your contacts.”
Your contacts, photos, employer, and family are not collection tools
The National Privacy Commission has specifically dealt with online lending apps that access contact lists, photos, locations, and other phone data, then use that information to shame or pressure borrowers. NPC Circular No. 20-01 covers loan-related personal data processing by lending and financing companies, persons acting as such, and their service providers, even when the company’s authority to operate is disputed.
NPC Circular No. 2022-02 further provides that unnecessary processing of personal data through app permissions is prohibited. App permissions must be suitable, necessary, and not excessive. Once the purpose has been achieved, the app should prompt the user to revoke or turn off permissions.
For debt collection, the NPC rules distinguish a guarantor from a mere character reference. A guarantor is someone who expressly binds themselves to answer for the borrower’s debt if the borrower fails to pay. A character reference is not automatically liable for the loan. For collection purposes, lenders may contact the named guarantor, not everyone in the borrower’s contacts list.
The 2026 joint public advisory of the DICT, NPC, and SEC also warns against harassment, intimidation, public shaming, unlawful processing of personal data, unnecessary app permissions, unauthorized contact-list processing, and contacting persons other than named guarantors.
You may have privacy, civil, and criminal remedies
Depending on what the app or collector did, several legal issues may arise.
Under the Data Privacy Act of 2012, Republic Act No. 10173, personal information must be processed lawfully, fairly, and for legitimate purposes. The law gives data subjects rights such as access, correction, blocking, removal, or destruction of personal data when it is false, unlawfully obtained, unauthorized, or no longer necessary for the purpose for which it was collected. (National Privacy Commission)
Under the Civil Code, every person must act with justice, give everyone their due, and observe honesty and good faith. A person who causes damage contrary to law, morals, good customs, public order, or public policy may be liable. The Civil Code also protects dignity, personality, privacy, and peace of mind, and may allow damages for humiliating or intrusive acts. (Lawphil)
If the harassment includes threats, defamation, fake posts, or online shaming, the Revised Penal Code and Cybercrime Prevention Act may also become relevant. The Revised Penal Code penalizes acts such as grave threats, coercion, unjust vexation, libel, oral defamation, and related offenses, depending on the exact facts. (Supreme Court E-Library) The Cybercrime Prevention Act, Republic Act No. 10175, covers certain offenses committed through computer systems, including smartphones and online platforms, and includes cyberlibel and computer-related identity misuse. (Supreme Court E-Library)
What Counts as Harassment by an Online Lending App?
Not every follow-up message is automatically illegal. For example, a polite message asking you to send proof of payment because their system has not updated may be a legitimate account-reconciliation request.
But the following acts are red flags, especially after full payment:
- Repeated calls or texts demanding payment despite proof of full settlement
- Threats to post your face, ID, address, or family details online
- Messages to your employer saying you are a scammer or criminal
- Calls to relatives, friends, co-workers, or contacts who are not guarantors
- Fake “wanted,” “estafa,” or “police blotter” graphics
- Threats of arrest, imprisonment, barangay action, or employer complaints without lawful basis
- Use of obscene, degrading, or insulting language
- Collection calls before 6:00 a.m. or after 10:00 p.m., subject to the limited exceptions in SEC rules
- Refusal to issue a zero-balance statement despite proof of payment
- Continued use of your photo, ID, contact list, or phone data after the loan is already settled
- Demands for new “extension,” “rollover,” or “processing” fees not clearly disclosed in the loan documents
The more public, repetitive, abusive, or data-driven the harassment is, the more important it becomes to document everything carefully.
What to Do Immediately After Harassment Continues
1. Do not delete the evidence
Your first instinct may be to delete the app, block all numbers, or erase humiliating messages. Pause first.
Preserve:
- Screenshots of all texts, chats, app notifications, and emails
- Full sender details, phone numbers, usernames, and timestamps
- Call logs showing date, time, and number
- Screenshots of posts or messages sent to your contacts
- Payment receipts and transaction reference numbers
- Loan account number, app name, and company name
- App store listing, privacy policy, and website screenshots
- Names of collectors, if they identify themselves
- Statements from relatives, friends, or co-workers who were contacted
Take screenshots that show the date and time where possible. If a relative or employer received the message, ask them to forward or screenshot the full message, including the sender’s number or profile.
Be careful with secret call recordings. Instead of risking a separate legal problem, preserve call logs, write down what was said immediately after the call, and keep any voicemail or written message that was voluntarily sent to you.
2. Organize proof that you fully paid
Prepare a simple payment file. This is useful for the app, SEC, NPC, police, NBI, or a lawyer evaluating the case later.
| Document | Why it matters |
|---|---|
| Loan agreement or app screenshot | Shows the original loan amount, due date, fees, and terms |
| Payment receipt | Shows that you paid |
| Transaction reference number | Lets the lender trace the payment |
| Bank, GCash, Maya, or payment-center proof | Confirms source, date, and amount |
| App payment history | Shows whether the app credited the payment |
| Statement of account | Helps prove whether a balance still exists |
| Messages after payment | Proves continued collection despite settlement |
If you paid through an e-wallet, bank transfer, or payment center, save both the receipt and the transaction history in the app. If the payment was split into several transactions, list them in chronological order.
3. Revoke app permissions and secure your phone
After preserving evidence, reduce the app’s access to your data.
Check your phone settings and revoke permissions for:
- Contacts
- Camera
- Photos or gallery
- Microphone
- Location
- SMS
- Call logs
- Storage or files
- Social media integrations, if any
NPC rules prohibit unnecessary and excessive processing through app permissions. They also require permissions to be suitable, necessary, and not excessive for the declared purpose.
Also consider:
- Changing passwords for email, e-wallets, and social media
- Turning on two-factor authentication
- Checking whether your social media profile is public
- Removing publicly visible employer, family, and address details
- Warning close contacts not to respond to collectors or pay anything
Deleting the app may stop future access, but it may not erase data already copied by the app or its collectors. That is why complaints and written demands still matter.
4. Send a written demand to stop collection and correct records
Send a concise written message through the app’s official email, customer service channel, or in-app support. Keep it factual and calm.
You may use this template:
I fully paid Loan Account/Reference No. ______ on ______ through ______, with transaction reference number ______. Despite full payment, I continue to receive collection calls/messages, and my contacts have also been contacted.
I dispute any further collection. Please immediately:
- Confirm that my account is fully paid and closed;
- Issue a statement of account or certificate showing zero balance;
- Stop all collection activity on this account;
- Stop contacting my relatives, employer, co-workers, friends, and other non-guarantors;
- Correct any inaccurate record showing that I remain unpaid or delinquent; and
- Stop processing, disclose, block, delete, or securely dispose of personal data no longer necessary for a settled loan, subject to applicable law.
I am preserving all messages, call logs, screenshots, and payment records for filing with the SEC, NPC, and appropriate law enforcement agencies.
Do not threaten violence, insult the collector, or post their personal information online. Keep your message clean because it may become part of your evidence.
5. Report unfair debt collection to the SEC
For lending or financing companies and online lending apps, the main regulator for unfair debt collection is the Securities and Exchange Commission.
The 2026 DICT-NPC-SEC advisory directs reports on unfair debt collection practices to the SEC Financing and Lending Companies Division through the SEC iMessage portal and the SEC hotline 1-4732 or 1-4SEC.
Attach:
- Proof of full payment
- Screenshots of harassment
- Call logs
- Messages sent to your contacts
- App name and company name
- Loan account number
- Collector names and phone numbers, if available
- A short timeline of events
Keep the timeline simple:
| Date | What happened | Evidence |
|---|---|---|
| June 1 | Loan released | App screenshot |
| June 15 | Full payment made | GCash receipt |
| June 16 | App still demanded payment | SMS screenshot |
| June 17 | Collector messaged employer | Employer screenshot |
| June 18 | Written demand sent | Email screenshot |
This format helps agencies quickly understand the issue.
6. File a privacy complaint with the National Privacy Commission
File with the NPC when the app or collector misused personal data, such as:
- Accessing or using your contact list for harassment
- Messaging your employer, relatives, or friends
- Using your photo, ID, address, or social media profile to shame you
- Refusing to correct inaccurate payment or delinquency data
- Continuing to process your data after the loan has been settled
- Disclosing your loan to people who have no legal role in it
The NPC can receive complaints, conduct investigations, facilitate settlement, adjudicate privacy complaints, and issue orders such as stopping or banning unlawful processing. (National Privacy Commission)
For a formal NPC complaint, the NPC requires use of its complaint form, which must be printed, filled out, notarized, and submitted in person, by courier, or through the accepted electronic submission process. (National Privacy Commission)
If you are abroad, prepare clear digital copies first. For notarized affidavits or formal documents executed outside the Philippines, ask the receiving agency what form of notarization, consular acknowledgment, or apostille they will accept.
7. Go to PNP ACG, NBI Cybercrime, or DICT Cyber Hotline for threats and online abuse
If the harassment includes threats, blackmail, fake criminal accusations, public posts, identity misuse, or online shaming, report to cybercrime authorities.
The 2026 DICT-NPC-SEC advisory identifies the following reporting channels for online lending app concerns involving cyber or data-related abuse:
| Office | When it may help |
|---|---|
| DICT Cyber Hotline | Cyber-related reporting and referral |
| NBI Cybercrime Division | Cyber harassment, fake posts, identity misuse, threats, coordinated online abuse |
| PNP Anti-Cybercrime Group | Cybercrime complaints, online threats, harassment, and digital evidence preservation |
| SEC FINLEND | Unfair debt collection by lending or financing companies |
| NPC | Misuse of personal data and privacy violations |
The advisory specifically lists the DICT Cyber Hotline, NBI Cybercrime Division, PNP Anti-Cybercrime Group, SEC FINLEND, and NPC as reporting channels for online lending platform abuse.
For police or NBI reporting, bring:
- Valid ID
- Printed screenshots
- Digital copies of evidence
- Proof of full payment
- The phone number, account, email, or profile used by the collector
- A short written narration of what happened
- Screenshots showing URLs or profile links, if online posts were made
If there is an immediate threat to your safety, treat it as urgent and report to the nearest police station as well.
Where to File Depending on What the App Did
| What happened after full payment | Possible office to approach | Main legal issue |
|---|---|---|
| App still demands payment despite receipt | SEC FINLEND | Unfair debt collection, account dispute |
| App claims hidden fees or penalties | SEC FINLEND | Disclosure, unfair or abusive collection, possible Truth in Lending issue |
| Collector contacts your relatives, friends, co-workers, or employer | SEC and NPC | Unfair collection and data privacy violation |
| App uses your photo, ID, or contact list to shame you | NPC, NBI, PNP ACG | Data misuse, cyber harassment, possible criminal offense |
| Collector threatens violence or arrest without basis | PNP, NBI, SEC | Threats, coercion, unfair collection |
| Fake posts call you a scammer or criminal | NBI, PNP ACG, NPC | Cyberlibel, identity misuse, privacy violation |
| App appears unregistered or fake | SEC, PNP, NBI | Unauthorized lending, fraud, cybercrime concerns |
| Employer is contacted and your job is affected | SEC, NPC, possibly civil action | Privacy violation, damages, reputational harm |
You may file with more than one office when the facts overlap. For example, if an app contacts your employer and posts your face online after full payment, that may involve both unfair debt collection and personal data misuse.
Common Real-Life Scenarios
The app says your payment was “not posted”
This is common with e-wallets, payment centers, and weekend or holiday payments.
Do not immediately pay again. First:
- Send the transaction receipt and reference number.
- Ask for manual verification.
- Request a written statement of the alleged remaining balance.
- Ask the payment provider for confirmation that the transaction was successful.
- Preserve all collection messages sent after payment.
If the app continues harassing you despite proof, include both the payment proof and your request for manual verification in your SEC complaint.
The collector says your contacts must pay
Your relatives, friends, officemates, and character references are generally not liable for your loan simply because their names or numbers appear in your phone or application form.
A guarantor is different. A guarantor must expressly agree to answer for the debt if the borrower fails to pay. NPC guidance recognizes this distinction and states that, for debt collection, only the guarantor may be contacted.
If your mother, spouse, employer, or friend did not sign or clearly consent as a guarantor or co-maker, they should not be pressured to pay.
The app threatens to file estafa
Collectors often use the word “estafa” to scare borrowers. Ordinary nonpayment of a loan is usually a civil debt issue, although a criminal case may arise if there are specific facts showing fraud from the beginning.
A collector cannot create a criminal case merely by texting you threats. If they claim a case has been filed, ask for:
- The prosecutor’s office or court where it was filed
- The case number
- The complainant’s name
- A copy of the complaint or subpoena, if one exists
Threatening legal action that cannot legally be taken is one of the acts treated as unfair debt collection under SEC rules.
The app posted your face or ID online
This is serious. Preserve the post immediately.
Take screenshots showing:
- The full post
- The account or page name
- The URL, if available
- Date and time
- Comments or shares, if relevant
- Your photo, ID, address, employer, or family details if shown
Then report to the platform, NPC, and cybercrime authorities. If the post falsely accuses you of a crime or dishonesty, criminal defamation or cyberlibel issues may also arise depending on the content and publication. (Supreme Court E-Library)
Practical Timelines and Bottlenecks
Complaints against online lending apps are often evidence-heavy. The better your documentation, the faster an agency can understand the case.
| Step | Practical timeline | Common bottleneck |
|---|---|---|
| Preserving screenshots and receipts | Same day | Screenshots missing sender details or timestamps |
| Requesting zero-balance confirmation | Same day to several days | App support gives automated replies |
| SEC complaint filing | Same day once documents are ready | Unclear app/company name |
| NPC formal complaint | Longer if notarization is needed | Incomplete complaint form or missing proof of data misuse |
| PNP/NBI cybercrime report | Same day for urgent threats | Need digital evidence and clear narration |
| Civil or criminal case evaluation | Weeks or months | Need affidavits, witnesses, and stronger proof |
A common bottleneck is identifying the real company behind the app. Check:
- App store developer name
- SEC registration details in the app or website
- Privacy policy
- Terms and conditions
- Loan agreement
- Emails from customer support
- Payment recipient name
- Collection agency name
- SMS sender ID or number
If you cannot identify the company, report the app name, developer name, phone numbers, emails, payment channels, and screenshots. Agencies can use these details to trace the responsible entity.
Mistakes to Avoid
Paying again without a written breakdown
Some borrowers pay a second or third time just to stop the harassment. This can make the dispute more confusing.
Before paying any alleged remaining balance, ask for:
- Written statement of account
- Basis for the charge
- Updated computation
- Official payment instructions
- Written confirmation that payment will close the account
If you decide to pay a disputed small balance for practical reasons, clearly mark your message as a disputed payment and keep proof.
Deleting the app before saving evidence
Deleting the app may remove important loan history, chat records, account numbers, and payment status. Save evidence first.
Publicly posting the collector’s personal details
You may feel angry and humiliated, especially if they contacted your family or employer. But posting a collector’s personal information online may create a separate dispute. Preserve evidence and report through proper channels instead.
Assuming consent makes everything legal
Consent is not a magic shield. Under Philippine data privacy rules, consent must be specific, informed, and freely given. Excessive or unnecessary processing may still be unlawful, and contacting non-guarantor contacts for collection is prohibited under current regulatory guidance. (National Privacy Commission)
Ignoring harassment sent to other people
If your employer, relatives, or friends received messages, ask them to preserve evidence. They may also be data subjects or affected parties, especially if their personal numbers, names, or employment details were used without a lawful basis.
Frequently Asked Questions
Can an online lending app still contact me after I fully paid?
It may contact you for legitimate account reconciliation, such as confirming proof of payment, but it should not continue collection harassment after full payment. If the debt is fully paid, ask for a zero-balance statement and demand that collection stop.
Can the lending app contact my contacts after full payment?
For debt collection, the app should not contact people in your phonebook who are not named guarantors or co-makers. Current SEC and NPC guidance treats contact with non-guarantor contacts as an unfair or unlawful practice in the online lending context.
What if I allowed the app to access my contacts?
Allowing app access does not mean the lender can harass your contacts. NPC rules prohibit unnecessary, excessive, and unbridled processing of contact-list data, especially when used for harassment or debt collection outside named guarantors.
What should I do if the app says I still owe penalties?
Ask for an itemized written statement of account. Check whether the penalties were disclosed in the loan terms and whether your payments were properly credited. If the app refuses to explain and continues harassment, report the matter to the SEC and preserve all proof of payment.
Can a lending app have me arrested for an unpaid online loan?
A collector cannot have you arrested simply by sending a threatening text. Real criminal cases go through proper law enforcement, prosecutor, and court processes. If the collector threatens arrest, imprisonment, or police action without lawful basis, preserve the message and include it in your report.
Can I complain even if I am an OFW or living abroad?
Yes. Preserve digital evidence, send written demands by email or official app channels, and file online where the agency allows it. For formal notarized complaints or affidavits executed abroad, confirm with the receiving agency whether it requires consular acknowledgment, apostille, or another accepted form.
Do I need a lawyer to file with the SEC or NPC?
Many initial complaints can be filed by the borrower using agency forms, screenshots, receipts, and a clear timeline. A lawyer becomes more important if you plan to file a civil action for damages, pursue criminal complaints, or respond to a formal case filed against you.
Can my employer fire me because a lending app contacted them?
An employer should be careful about taking action based only on harassment messages from a lending app. If the messages are false, malicious, or unrelated to your work, preserve the evidence. The collector’s act of contacting your employer may itself be relevant to SEC, NPC, or cybercrime complaints.
Can my relatives or friends complain too?
Yes, especially if they received harassing messages, threats, or disclosures of your loan. They should save screenshots and call logs. They are generally not required to pay your loan unless they validly agreed to be a guarantor or co-maker.
Key Takeaways
- Full payment generally extinguishes the loan obligation under the Civil Code.
- After full payment, continued collection harassment may be unfair debt collection, data misuse, cybercrime, or a civil wrong.
- Online lending apps cannot use threats, insults, public shaming, fake criminal accusations, or abusive contact methods to collect.
- Contacting your relatives, employer, friends, or phonebook contacts is especially problematic when they are not named guarantors or co-makers.
- Preserve evidence before deleting the app or blocking numbers.
- Request a zero-balance statement, correction of records, and cessation of collection.
- Report unfair collection to the SEC, privacy violations to the NPC, and threats or online shaming to PNP ACG, NBI Cybercrime, or DICT cyber channels.
- Do not pay again without an itemized written breakdown of the alleged remaining balance.