Quick answer

An online lender may demand payment through lawful, respectful means. It may not threaten violence, pretend that arrest is automatic, shame you publicly, use obscene or abusive language, disclose your debt to unrelated people, or harvest your contacts to pressure you. Among people in your contact list, collection communications may be directed only to a guarantor who separately consented to that role—not to a character reference, coworker, friend, or relative merely listed in your phone.

If this is happening:

Preserve the messages, call logs, app details, loan documents, payment records, and evidence received by your contacts.
Send the lender a written demand to stop the abusive conduct, restrict communication to you or a valid guarantor, and identify the legal company and collection agency involved.
Revoke unnecessary app permissions after saving your records, secure your accounts, and warn contacts not to pay, disclose information, or share one-time passwords.
Report unfair collection by a lending or financing company through the SEC iMessage portal. Report misuse of personal data to the National Privacy Commission.
Treat a credible threat of physical harm, stalking, extortion, impersonation, or account compromise as urgent and contact law enforcement immediately.

Harassment does not automatically cancel a valid loan. You may still owe the lawful balance, but the lender must pursue it legally.

What collectors may—and may not—do

A lender or authorized collection agency may privately contact you, send a demand, offer a payment arrangement, and pursue a proper civil case. Outsourcing collection does not allow the lender to escape responsibility for its agent’s conduct.

Under SEC Memorandum Circular No. 18, series of 2019, prohibited practices include:

Threatening violence or other criminal means against a person, reputation, or property
Using obscenities, insults, profane language, or language whose natural effect is abuse
Publicly disclosing borrowers’ names or personal information to shame them
Communicating false credit or loan information, including failing to identify a disputed debt as disputed
Using false representations or deceptive methods to collect or obtain information
Contacting a borrower before 6:00 a.m. or after 10:00 p.m., subject to limited exceptions: when the account is more than 60 days past due, the borrower expressly permitted contact at those times, or those are the only reasonable or convenient opportunities for contact

The timing exceptions do not authorize threats, insults, public shaming, deception, or privacy violations.

The Financial Products and Services Consumer Protection Act, or Republic Act No. 11765, also prohibits financial service providers from using abusive collection or debt-recovery practices and requires fair treatment, protection of client data, and a free consumer-assistance mechanism.

Contact-list abuse and public shaming

The NPC’s amended rules for loan-related transactions prohibit unauthorized, excessive, or disproportionate use of personal data. The government’s March 18, 2026 Joint Advisory on Online Lending Platforms specifically confirms that:

An app cannot require unnecessary permissions or process personal data beyond a legitimate, proportionate purpose.
Contact-list access cannot be used for harassment, unfair collection, or collection from people who are not guarantors.
For collection from third parties, the lender may contact only a guarantor.
A character reference is not automatically a guarantor.
A guarantor must separately and expressly consent to assume responsibility for the loan.
A character reference must be told how the lender obtained the person’s details and must be given an option to have those details removed as a character reference.
Camera or gallery access may be used only for a specified legitimate purpose, such as identity verification or know-your-customer checks. A borrower’s photo cannot be repurposed for shaming or harassment.
Once an app permission is no longer needed, the app should prompt the user to turn it off or revoke it.

Consent to ordinary loan processing is not blanket permission to humiliate you, publish your debt, create a “wanted” poster, message your entire phonebook, or threaten people around you.

What to do now

1. Preserve evidence before blocking or uninstalling

Save evidence in its original form as far as possible:

Screenshots showing the complete message, sender’s number or account, date, and time
Copies of texts, emails, chat threads, social-media posts, demand letters, and voice messages sent to you
Call logs and a written note of what was said, when, and by whom
Screenshots or forwarded copies of messages received by relatives, coworkers, employers, and other contacts
The app’s exact name, developer, download page, website, privacy notice, and stated company name
The loan agreement, disclosure statement, payment schedule, account history, receipts, and proof of disbursement
Screenshots of the permissions requested by the app
Names used by collectors, agency names, telephone numbers, email addresses, payment accounts, and links
Any public post containing your name, photo, identification document, address, employer, or alleged debt

Keep an unedited copy and a backup. Ask affected contacts to preserve the original message on their devices.

Do not secretly record private calls without legal advice. The Anti-Wiretapping Act generally prohibits recording a private communication without authorization from all parties. Messages and recordings voluntarily sent to you, such as voice messages, are different from secretly recording a live call.

2. Move communication to a written channel

Send a calm written notice to the lender’s official customer-service or data-protection channel. Include:

Your name and loan or account reference, but no unnecessary identification data
The dates, numbers, accounts, and acts complained of
A demand that threats, public disclosure, abusive language, and third-party contacts stop
A request that collection communications be directed only to you or a valid, consenting guarantor
A request for the lender’s complete legal name, SEC registration details, Certificate of Authority information, business address, and the collector’s authority
A request for an itemized statement showing principal, interest, fees, penalties, payments, and current balance
A request to preserve relevant call records, messages, access logs, and collection instructions
If personal data was misused, a demand to stop unlawful processing and remove unlawfully obtained contact information

Save proof that the notice was delivered. Do not admit an amount you genuinely dispute; state which part is disputed and why. If you recognize the principal obligation, you may say so without accepting unexplained charges.

3. Secure your phone and accounts

After preserving evidence:

Revoke the app’s access to contacts, camera, photos, location, microphone, storage, and other permissions not needed for a legitimate purpose.
Change reused passwords and enable two-factor authentication.
Review linked email, social-media, e-wallet, and banking sessions for unfamiliar access.
Tell contacts not to send money, identification documents, account details, or one-time passwords to anyone claiming to collect for you.
Report impersonating or shaming accounts and posts to the platform, while retaining screenshots and links first.
Do not delete the app or account until you have saved the contract, privacy notice, transaction history, and lender identity.

Revoking permissions does not erase a debt. A lender may also retain data reasonably necessary to administer an existing loan, comply with law, or establish or defend a legal claim. The right to deletion is not absolute.

4. Verify the lender and payment channel

An app’s brand name may differ from the legal company behind it. Use the SEC’s Check with SEC service or ask the SEC to confirm whether the company has authority to operate as a lending or financing company. Corporate registration alone is not the same as authority to conduct lending operations.

Do not send money to a collector’s personal account or a newly supplied account until the lender confirms the channel through an independently verified contact. Obtain a written computation and an official receipt. If a settlement is offered, require written terms stating the amount, deadline, effect of payment, and whether it fully or partially settles the account.

Where to report the conduct

Securities and Exchange Commission

For an online lending platform operated by a lending or financing company, submit a ticket through SEC iMessage and select the service for complaints involving financing and lending companies.

Attach a concise chronology, lender and app details, the loan documents, disputed computation if relevant, your written notice to the lender, proof of delivery, screenshots, call logs, third-party messages, and public-post links. Identify both the lender and collection agency when known.

The SEC may impose administrative sanctions under applicable law and regulations. The possible action depends on the evidence and may include fines or suspension or revocation of authority; filing a complaint does not guarantee a particular result.

National Privacy Commission

Use the NPC route when the app accessed or used contacts, photos, identification details, employer information, or other personal data unlawfully, or disclosed those details to third parties.

Ordinarily, the amended NPC Rules of Procedure require you to:

Inform the lender or other data controller of the privacy violation in writing.
Allow it to act. You may file if it does not take timely or appropriate action, or does not respond within 15 calendar days after receiving your notice.
Complete the current NPC Complaint-Affidavit, have it notarized, and attach the correspondence and evidence.
File it personally, by registered mail or courier, or by authorized email to complaints@privacy.gov.ph, following the NPC’s current instructions and fee schedule.

The NPC may waive the prior-notice requirement for good cause or serious circumstances, including grave and irreparable harm, lack of an adequate remedy, or conduct that is patently illegal. Explain and document why immediate action is necessary rather than assuming the requirement does not apply.

BSP for a BSP-supervised provider

If the creditor is a bank, non-bank electronic-money issuer, money-service business, pawnshop, or another BSP-supervised institution, complain first through the provider’s Financial Consumer Protection Assistance Mechanism. If the response is unsatisfactory or the institution does not act, escalate through the BSP Online Buddy or BSP consumer-assistance channels. The BSP’s current filing guide explains the required first-level complaint and supporting proof.

Law enforcement

Report credible threats, stalking, extortion, impersonation, fraudulent payment demands, account intrusion, or malicious online publication to law enforcement. The 2026 Joint Advisory lists the official reporting channels of the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

The precise criminal offense depends on the words used, surrounding circumstances, intent, and evidence. Threats, coercion, unlawful disclosure, or defamatory online publication may potentially fall under the Revised Penal Code, the Data Privacy Act, or the Cybercrime Prevention Act, but investigators, prosecutors, and courts—not the lender or borrower—determine criminal liability.

If the collector threatens arrest or a criminal case

The Constitution states that no person shall be imprisoned for debt. A collector cannot issue an arrest warrant, manufacture a court summons, or order the police to arrest you merely because a loan payment is late.

This does not give immunity for a separate alleged crime, such as fraud based on independently provable conduct. A lender may file a legitimate complaint if facts support it, but it may not falsely claim that a case, warrant, subpoena, or government order already exists.

If you receive supposed court or prosecutor documents:

Do not rely on the collector’s telephone number or link to verify them.
Contact the named court, prosecutor’s office, or agency through independently obtained official details.
Preserve the envelope, service information, email headers, and attachments.
Do not ignore authentic summonses, subpoenas, or orders. Consult a lawyer promptly because the applicable response period may be short.

Common mistakes to avoid

Deleting messages or uninstalling the app before preserving evidence
Secretly recording calls without considering the Anti-Wiretapping Act
Posting your full loan contract, identification card, home address, or account number publicly
Fighting with collectors in group chats or making threats in return
Paying a personal account without independently verifying that it belongs to the creditor
Treating a character reference as automatically liable for the loan
Assuming harassment makes the debt disappear
Ignoring a real court document because earlier threats were fake
Filing only a general narrative without dates, screenshots, sender details, or proof of the lender’s receipt of your complaint
Borrowing from another unverified app simply to stop the first lender

When help is urgent

Seek immediate police assistance and move to a safe place if a message contains a credible, specific threat involving your location, family, workplace, weapon, planned visit, or physical harm. Do not meet a collector alone.

Prompt legal assistance is also important when:

Your identity documents or intimate images have been posted or threatened with publication
Someone is impersonating you or accessing your financial accounts
Money is demanded in exchange for not harming or exposing you
The lender continues contacting large numbers of people after written notice
You receive authentic court, prosecutor, or police documents
A collector appears at your home or workplace and refuses to leave
The amount claimed is substantial, the computation is unclear, or the lender seeks collateral not covered by your agreement

Frequently asked questions

Can the app message everyone in my contacts?

No. Contact-list processing cannot be excessive or used for harassment. For debt collection from third parties, the current NPC rules permit contact only with a guarantor who separately consented to that role.

Is my character reference responsible for my loan?

Not merely because the person was listed as a reference. A character reference is used for identity or information verification and is not automatically a guarantor. Liability requires a valid legal or contractual basis.

Can the lender post my name or photo as a delinquent borrower?

Public shaming and disclosure of personal information for abusive collection are prohibited. A photo obtained for identity verification cannot be repurposed to embarrass you into paying.

Can collectors call late at night?

SEC rules generally prohibit contact before 6:00 a.m. or after 10:00 p.m. Limited exceptions apply when the account is more than 60 days overdue, you expressly permitted those hours, or they are the only reasonable or convenient times. Threats and abuse remain prohibited in all cases.

Should I block the collector?

Preserve the evidence and send a written notice first. You may then block abusive numbers while keeping one controlled written channel open for legitimate account communications. Blocking a number does not stop a lawful demand or court case.

Does filing a complaint suspend payment?

Not automatically. Continue to assess the lawful amount and keep proof of any payment. If the balance is disputed, ask for an itemized statement and state the dispute in writing. Never pay merely because of a threat.

Can a collection agency contact me?

Yes, if it is properly acting for the lender, but it must follow the same legal limits. Identify the agency in your complaint and ask the lender to confirm its authority in writing.

Can I be jailed for an unpaid online loan?

Not merely for civil debt. The Constitution prohibits imprisonment for debt. Separate criminal allegations require their own facts, lawful proceedings, and proof; a collector’s message is not an arrest warrant or conviction.

Official references

This article provides general Philippine legal information, not legal advice for a particular loan, threat, document, or dispute. The appropriate remedy depends on the lender’s regulatory status, the contract, the exact communications, and the available evidence. Sources and procedures were checked as of July 23, 2026.