If an online lending app is threatening you, messaging your relatives, calling your employer, posting your photo, or saying you will be arrested if you do not pay, the first thing to know is this: unpaid debt does not give a lender the right to harass, shame, threaten, or misuse your personal data. In the Philippines, online lending apps may collect legitimate debts, but they must follow the law. This guide explains what counts as illegal or unfair collection, what evidence to save, where to report the app, and how to deal with the debt without making your situation worse.

What Counts as Online Lending App Harassment in the Philippines?

Online lending app harassment usually happens when a lender, collection agent, or app-based collector pressures a borrower through fear, embarrassment, or misuse of personal data.

Common examples include:

Calling or texting you repeatedly at unreasonable hours
Threatening to post your face, ID, or loan details online
Sending messages to your contacts, relatives, employer, barangay officials, or work group chats
Telling people you are a scammer, criminal, or “wanted”
Creating fake social media posts or group chats to shame you
Using insults, profanity, or degrading language
Threatening arrest, imprisonment, police action, deportation, or barangay blotter when they have no legal basis
Claiming they will garnish salary, seize property, or freeze accounts without a court order
Accessing your phone contacts, gallery, camera, SMS, or other app permissions beyond what is necessary
Continuing abusive collection even after you dispute the amount

The Philippine government has specifically recognized complaints involving online lending platforms engaging in harassment, intimidation, public shaming, and unlawful use of personal data in collection practices. The DICT, National Privacy Commission, and SEC have also emphasized that excessive access to contact lists, processing that leads to harassment, and contacting people other than named guarantors are prohibited.

Can You Be Jailed for Not Paying an Online Loan?

For an ordinary unpaid loan, no. The Philippine Constitution states that no person shall be imprisoned for debt. (Supreme Court E-Library)

This is very important because many abusive collectors use fear-based scripts such as:

“May warrant ka na.”
“Ipapakulong ka namin.”
“Cybercrime ito.”
“Pupuntahan ka ng pulis.”
“Ipapablotter ka namin sa barangay.”
“We will file a criminal case today.”

A lender may file a civil collection case if it believes you owe money. In small claims or ordinary civil cases, the issue is usually payment of money, not imprisonment. However, separate criminal issues may arise if there is actual fraud, identity theft, falsified documents, or other criminal acts. Non-payment alone is different from fraud.

The Main Laws and Rules That Protect You

SEC Memorandum Circular No. 18, Series of 2019

The Securities and Exchange Commission regulates lending companies and financing companies. Under SEC Memorandum Circular No. 18, Series of 2019, lending and financing companies are prohibited from using unfair debt collection practices.

The circular prohibits collection practices involving:

Violence or threats of violence
Criminal means to harm a person, reputation, or property
Threats to take action that cannot legally be taken
Obscenities, insults, or profane language whose natural consequence is abuse or offense
Disclosure or publication of borrowers’ names and personal information, except in limited lawful situations
False or misleading representations in collecting debt
Contacting borrowers at unreasonable or inconvenient times, generally before 6:00 a.m. or after 10:00 p.m., unless legally justified under the circular
Contacting people in the borrower’s contact list other than guarantors or co-makers

The circular also makes the lending or financing company responsible for third-party collection agents it uses. This means a company usually cannot simply say, “That was only our collector,” if the collector was acting for them.

Data Privacy Act of 2012

Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information in both government and private-sector systems. It is especially relevant when an online lending app uses your contact list, photos, IDs, phone number, workplace, or social media information for harassment or public shaming. (Supreme Court E-Library)

The National Privacy Commission has repeatedly warned online lenders against harvesting phone contacts and using personal data for debt shaming. It has also identified dangerous app permissions such as access to mobile contact lists. (National Privacy Commission)

2026 DICT-NPC-SEC Advisory on Online Lending Platforms

In 2026, the DICT, NPC, and SEC issued a public advisory reminding online lending platforms that unnecessary app permissions, excessive contact-list access, harassment-related processing, and collection outside named guarantors are prohibited.

The advisory also clarified an important distinction:

Person listed in the app	What it means	Can they be contacted for collection?
Character reference	Used only for identification or verification	Generally no
Guarantor	Person who expressly consented to assume responsibility for the loan if you default	Yes, if validly named and consented
Random phone contact	Someone found in your phone contacts	No
Employer, co-worker, relative, classmate, neighbor	Not automatically liable for your loan	No, unless they validly agreed as guarantor/co-maker

A person does not become a guarantor just because their name or number appeared in your phone or because the app forced you to list references. The advisory says a guarantor must have expressly consented to assume responsibility for the loan.

Financial Products and Services Consumer Protection Act

Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, strengthens consumer protection for financial products and services, including credit and digital financial services. It recognizes rights such as fair treatment, transparency, data privacy, and timely complaint handling. (Supreme Court E-Library)

Under this law, financial service providers are prohibited from abusive collection or debt recovery practices. They must also respect client privacy, protect client data, maintain a consumer assistance mechanism, and remain responsible for acts of their agents and accredited third-party service providers, including debt collectors. (Supreme Court E-Library)

Civil Code, Revised Penal Code, and Cybercrime Law

Depending on the facts, harassment may also raise civil or criminal issues.

Under the Civil Code, Articles 19, 20, and 21 require people to act with justice, give everyone their due, observe honesty and good faith, and compensate others for damage caused contrary to law, morals, good customs, or public policy. Article 26 also protects a person’s dignity, personality, privacy, and peace of mind from acts such as prying into private life or humiliating someone because of personal circumstances. (Lawphil)

If threats, coercion, public shaming, fake posts, or defamatory statements are made through electronic means, the Revised Penal Code and Republic Act No. 10175, the Cybercrime Prevention Act of 2012, may also become relevant. Cybercrime law covers certain computer-related offenses and may apply when crimes under the Revised Penal Code or special laws are committed through information and communications technology. (Supreme Court E-Library)

What to Do Immediately If an Online Lending App Harasses You

1. Preserve evidence before deleting anything

Do not rely only on memory. Agencies will usually need proof.

Save:

Evidence	What to capture
Text messages and chats	Full sender number/name, date, time, and complete message
Call logs	Caller ID, time, frequency, and screenshots
Voice calls	Notes of what was said; recordings only if lawfully obtained and safely preserved
Social media posts	Screenshots showing URL, account name, date, caption, comments
Group chats	Full thread showing who was added and what was said
Messages to your contacts	Ask contacts to send screenshots from their own phones
App details	App name, developer name, package name, Play Store/App Store page, website
Loan documents	Promissory note, disclosure statement, repayment schedule, screenshots of principal, interest, penalties
Payments	Receipts, GCash/Maya/bank transfer proof, account names, reference numbers
Company details	SEC registration number, certificate, business name, collection agency name, emails, hotline numbers

A practical tip: create a folder named by date, for example OLA Evidence - July 2026, and save files in chronological order. If you later file with the SEC, NPC, PNP-ACG, NBI, or prosecutor’s office, organized evidence makes your complaint easier to evaluate.

2. Revoke unnecessary app permissions

After saving evidence, review the app permissions on your phone.

Check whether the app has access to:

Contacts
Camera
Photos or gallery
Microphone
SMS
Location
Call logs
Storage

The 2026 DICT-NPC-SEC advisory says online lending platforms should not require unnecessary permissions, and contact-list access must not be unbridled or disproportionate. Camera or gallery access may be allowed only for legitimate identity verification or KYC purposes and should be turned off once fulfilled.

On most phones, you can go to:

Android: Settings → Apps → App name → Permissions
iPhone: Settings → Privacy & Security → choose permission type → disable app access

Do not delete the app until you have captured the loan details, account number, statement of account, chat history, and app screenshots.

3. Tell your contacts not to engage

If collectors are messaging your relatives, friends, employer, or co-workers, send them a calm message:

“I am dealing with an online lending app issue. Please do not reply, pay, or give any personal information. Kindly screenshot any message you receive, including the sender number and date/time, and send it to me for documentation.”

This helps in two ways. First, it stops collectors from getting more information. Second, it gives you independent evidence from third parties who were contacted.

4. Send a written complaint to the lending app or company

Before filing with the NPC for a privacy violation, you generally need to show that you informed the respondent in writing and gave them an opportunity to address the issue. NPC rules require proof that the respondent failed to take timely or appropriate action, or gave no response within 15 calendar days from receipt of your written notice. (National Privacy Commission)

Your message should be short, factual, and firm. Include:

Your full name and loan account number, if any
The app name and company name, if known
A clear statement that you dispute the harassment or privacy violation
Specific incidents, dates, numbers, or screenshots
A request to stop contacting non-guarantor third parties
A request to identify the collector or collection agency
A request for a full statement of account
A request to stop using or delete unlawfully processed personal data
A deadline for response

Avoid insults or threats. Assume your message may become part of the complaint record.

5. File a complaint with the SEC for unfair debt collection

If the lender is a lending company, financing company, or online lending platform operating in connection with one, the SEC is usually the main agency for unfair debt collection.

You can report through the SEC’s iMessage complaint platform, which allows the public to submit complaints, open a ticket, and check ticket status. (Securities and Exchange Commission)

Include:

Your name and contact details
Name of the online lending app
Company name, if known
SEC registration number, if available
Screenshots of harassment
Screenshots showing messages to contacts
Call logs
Loan agreement or app screenshots
Payment receipts
Names or numbers of collectors
Brief timeline of events

The 2026 DICT-NPC-SEC advisory specifically identifies unfair debt collection reports as matters that may be sent to the SEC Financing and Lending Companies Division through the SEC complaint platform and the SEC hotline.

6. File a complaint with the National Privacy Commission for misuse of personal data

File with the NPC if the issue involves privacy or personal data, such as:

Accessing your contact list without lawful basis
Messaging your contacts
Using your photo, ID, or personal details to shame you
Posting your loan details online
Sharing your information with unauthorized persons
Refusing to correct, delete, or stop improper processing of your data

NPC complaints must usually be filed using a filled-out and notarized complaint-assisted form or verified complaint, with copies of evidence and witness affidavits. The NPC allows filing personally, by registered mail, courier, or authorized email submission. (National Privacy Commission)

The most common bottlenecks in NPC complaints are:

No proof that you first notified the company in writing
No screenshots or weak evidence
No way to identify the app, company, collector, or respondent
Unnotarized complaint when notarization is required
Missing witness affidavits from contacts who received messages
Submitting only emotional narration without dates, names, numbers, or attachments

7. Report threats, scams, fake accounts, or blackmail to cybercrime authorities

If the app or collector threatens violence, creates fake posts, impersonates you, uses your photos, blackmails you, or appears to be part of a scam, you may also report to cybercrime authorities.

The 2026 advisory lists these official reporting channels for harassment, threats, fraud, and scams involving online lending platforms:

Concern	Office
Cyber harassment, threats, fake accounts, fraud, scams	DICT Cyber Hotline
Cybercrime complaint or investigation	NBI Cybercrime Division
Police cybercrime report	PNP Anti-Cybercrime Group

The same advisory provides official contact channels for the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.

For serious threats, do not wait for the administrative complaint to finish before seeking help from law enforcement.

8. Use BSP channels only if the lender is BSP-supervised

Not all lending apps are under the Bangko Sentral ng Pilipinas. BSP channels are usually relevant if the issue involves a bank, credit card issuer, e-wallet, electronic money issuer, remittance company, or another BSP-supervised financial institution.

If your concern involves a BSP-supervised financial institution and its own consumer assistance mechanism did not resolve the issue, the BSP states that consumers may file through BSP Online Buddy or submit a Consumer Information Report by email. (Bureau of Soils and Water Management)

For ordinary lending companies, financing companies, and online lending apps, the SEC is usually the more direct regulator. The Credit Information Corporation’s consumer guidance also routes online lending app harassment complaints to the SEC, while data privacy violations go to the NPC and cybercrime concerns may go to PNP-ACG, NBI, or DOJ cybercrime channels. (Credit Information Corporation (CIC))

Where to Report Online Lending App Harassment

Problem	Best office to approach	Practical notes
Harassment, threats, abusive collection, contact-list messaging	SEC	Best for unfair debt collection by lending or financing companies
Misuse of contacts, photos, IDs, personal data, public shaming	NPC	Best for Data Privacy Act and loan-related data processing complaints
Fake posts, blackmail, threats, impersonation, cyber harassment	PNP-ACG or NBI Cybercrime Division	Best when criminal investigation may be needed
Bank, credit card, e-wallet, or BSP-supervised institution issue	BSP	Usually after first reporting to the financial institution’s consumer assistance unit
Actual physical threat or visit to your home/workplace	Local police station or PNP-ACG, depending on facts	Bring printed screenshots and IDs
Civil damages or criminal complaint	Prosecutor’s office or court process	Usually needs affidavits and more formal evidence

Should You Still Pay the Loan?

Harassment does not automatically erase a valid debt. It also does not mean every amount claimed by the app is correct.

Handle the debt separately from the harassment.

Ask for:

Principal amount released to you
Date of release
Interest rate
Processing fees
Penalties
Total amount paid so far
Current balance
Official payment channels
Company name and registration details
Written settlement offer, if any

Republic Act No. 3765, the Truth in Lending Act, requires creditors to give borrowers clear written information before the transaction, including the amount financed, finance charges, and simple annual rate. (Lawphil)

Avoid these mistakes:

Paying a random personal GCash or bank account without written confirmation
Paying only because of threats to contact your employer
Accepting a “settlement” without screenshot or written proof
Borrowing from another abusive lending app to pay the first one
Ignoring an actual court notice because you assume it is another fake threat

If you receive an official court paper, summons, subpoena, prosecutor’s notice, or police notice, read it carefully. Fake threats are common, but real legal notices should never be ignored.

What If the Online Lending App Is Not Registered?

You can still report it.

Unregistered, fake, or foreign-operated lending apps can be harder to trace, but evidence still matters. Capture:

App store listing
Developer name
Website
Privacy policy
Email address
Payment accounts
Phone numbers
Collector names
Bank, GCash, Maya, or remittance account details
Social media pages
Screenshots of ads

Even if the app is not properly registered, the SEC, NPC, DICT, PNP-ACG, and NBI may still use your report to identify patterns, warn the public, investigate related entities, or coordinate enforcement.

Special Notes for OFWs, Filipinos Abroad, and Foreigners in the Philippines

Online lending app harassment often affects OFWs and foreigners because collectors may contact family members, employers, landlords, or local references in the Philippines.

If you are abroad:

Keep screenshots showing your current country and time zone if calls are made at abusive hours.
Ask relatives or contacts in the Philippines to preserve screenshots from their own phones.
If someone in the Philippines will file or follow up for you, they may need a Special Power of Attorney.
If documents are signed abroad, Philippine agencies or courts may require consular notarization or an apostille, depending on the country and document use.
For NPC complaints filed by a representative, the NPC requires authority through a special power of attorney. (National Privacy Commission)

If you are a foreigner dealing with a Philippine lending app, your nationality does not give the lender permission to harass you. Philippine regulators focus on the conduct of the lending or financing company, the online lending platform, the processing of personal data, and the acts committed in or connected with the Philippines.

Common Mistakes That Make Complaints Weaker

Deleting the app too early

Many borrowers delete the app out of fear. This may remove loan details, chat history, and account information. Save evidence first.

Posting everything publicly

It is understandable to feel angry, but public posting can expose your own personal data and may trigger counter-accusations. For reports, send evidence directly to the proper agency instead of uploading everything on social media.

Paying without written proof

Some abusive collectors demand payment through personal accounts. Always ask for written confirmation that the account is an official payment channel and save the receipt.

Filing only with the barangay

A barangay blotter may document an incident, especially if a collector physically visits or threatens you. But online lending harassment, privacy violations, and cyber harassment often need SEC, NPC, PNP-ACG, NBI, or prosecutor action.

Ignoring the debt completely

Even if the collection method is illegal, the lender may still try to collect a valid debt through lawful means. Request a statement of account, dispute wrong charges in writing, and keep records of any settlement.

Not giving the company written notice before an NPC complaint

For privacy complaints, the NPC generally requires proof that you informed the respondent in writing and gave it an opportunity to address the violation, unless the applicable rules or circumstances allow a different process. Lack of this proof may cause dismissal. (National Privacy Commission)

Sample Evidence Timeline Format

Use a simple timeline like this when preparing your complaint:

Date and time	What happened	Evidence attached
July 3, 2026, 7:15 a.m.	Collector texted borrower and threatened to message employer	Screenshot A
July 3, 2026, 8:02 a.m.	Collector messaged borrower’s sister and called borrower a scammer	Screenshot B from sister
July 3, 2026, 9:30 a.m.	Borrower sent written complaint to app support email	Screenshot C
July 4, 2026, 11:10 p.m.	Collector called borrower repeatedly after 10 p.m.	Call log D
July 5, 2026	Fake Facebook post using borrower’s photo appeared	Screenshot E with URL

A timeline helps the agency see the pattern: who did what, when it happened, what law or rule may have been violated, and what evidence supports it.

Frequently Asked Questions

Can an online lending app message my contacts in the Philippines?

Generally, no, not for debt collection. Government guidance states that online lending platforms, lending companies, financing companies, or persons acting as such may only contact the guarantor for debt collection. Contacting people in your phone contact list other than named guarantors is prohibited.

What if I allowed the app to access my contacts?

Giving app permission does not automatically make all processing lawful. Consent may be invalid if obtained through deceptive design, excessive permissions, or unclear terms. The 2026 advisory says deceptive design patterns may undermine privacy rights and may invalidate consent.

Can they call my employer?

A lender should not contact your employer to shame, threaten, or pressure you, especially if your employer is not a guarantor or co-maker. If they disclose your debt or personal data to your workplace, save screenshots and report the privacy and collection issue to the proper agency.

Can they post my face or ID online?

Posting your face, ID, loan details, or private information to shame you may violate SEC debt collection rules, data privacy rules, civil law protections on dignity and privacy, and possibly cybercrime or criminal laws depending on the content and method used. Preserve the URL, screenshots, account name, and date before the post is deleted.

Where do I report online lending app harassment?

For unfair debt collection, report to the SEC. For misuse of personal data, report to the NPC. For threats, fake accounts, blackmail, scams, or cyber harassment, report to PNP-ACG or NBI Cybercrime Division. If the financial institution is BSP-supervised, use the BSP consumer assistance process after first raising the complaint with the institution.

Do I need a lawyer to file with the SEC or NPC?

Not always. Many borrowers file administrative complaints themselves. What matters most is organized evidence, clear facts, correct agency routing, and compliance with filing requirements. For NPC complaints, notarization, written notice to the respondent, and supporting evidence are especially important. (National Privacy Commission)

Can the lending app still collect if I report them?

Yes, if the debt is valid, the lender may still use lawful collection methods. Reporting harassment does not automatically cancel the loan. However, the lender must stop abusive, unfair, misleading, or privacy-violating conduct.

What if the collector says they are from a law office?

Ask for the full name of the law office, lawyer, address, official email, authority to collect, and statement of account. Real legal representatives should be able to identify themselves properly. Threats of arrest, public shaming, or messaging random contacts do not become lawful just because the message mentions a law office.

Can I sue for damages?

Depending on the facts, yes. Civil Code provisions on abuse of rights, acts contrary to law or morals, and protection of dignity, privacy, and peace of mind may support a civil claim. Serious threats, coercion, defamatory posts, identity misuse, or cyber harassment may also support criminal or cybercrime complaints depending on evidence and prosecutor evaluation. (Lawphil)

What if I already paid but they still harass me?

Save proof of payment and demand an updated statement of account. If they continue to harass you, report the conduct. Payment does not excuse unlawful use of your personal data, threats, public shaming, or contact-list harassment.

Key Takeaways

Unpaid debt does not give an online lending app the right to threaten, shame, or harass you.
You cannot be imprisoned for ordinary non-payment of debt in the Philippines.
SEC rules prohibit unfair debt collection practices by lending and financing companies.
The NPC and 2026 DICT-NPC-SEC advisory prohibit excessive contact-list access and contacting people other than valid guarantors for debt collection.
Save evidence before deleting the app, changing phones, or blocking all numbers.
Report unfair collection to the SEC, privacy violations to the NPC, and threats or cyber harassment to PNP-ACG or NBI.
Handle the debt separately: ask for a written statement of account, verify payment channels, and keep receipts.
The strongest complaints are factual, chronological, well-documented, and filed with the correct agency.