Quick answer

An online lender may demand payment of a valid debt, but it may not hide or inflate charges, exceed applicable interest caps, threaten you, publicly shame you, misuse your photos or contacts, or disclose your debt to uninvolved people.

If this happens:

Save the loan records and every abusive message before deleting the app or blocking numbers.
Recalculate the amount using the principal actually released, the written disclosure, payments made, and the legal caps that apply to the loan date and terms.
Dispute the charges and harassment in writing with the lender.
Revoke unnecessary app permissions and secure your accounts.
Escalate the complaint to the SEC, NPC, BSP, police, or NBI, depending on the lender and conduct involved.
Continue addressing any legitimate balance. Harassment does not automatically erase the debt, but paying an amount demanded without a breakdown may make recovery harder.

Call the police or seek immediate assistance if there is a credible threat of violence, stalking, extortion, identity theft, or danger to you or your family.

First, preserve the evidence

Do this before uninstalling the app, changing phones, or blocking collectors:

Screenshot the app’s name, developer, download page, privacy notice, permissions, and lender information.
Download or photograph the loan agreement, disclosure statement, repayment schedule, and statement of account.
Record the amount approved, amount actually received, disbursement date, due dates, and every payment.
Preserve receipts, bank or e-wallet records, reference numbers, and confirmation messages.
Screenshot messages showing threats, insults, repeated calls, publication of your information, or contact with relatives, co-workers, employers, and other third parties.
Save the sender’s phone number, username, email address, profile link, date, and time.
Ask people contacted by the collector to preserve the complete message and provide a short signed account of what happened.
Keep call logs and lawful recordings of conversations in which you are a participant. Do not secretly intercept conversations between other people.
Export the files to secure cloud storage or another device. Screenshots left only on the affected phone may be lost.

Keep original, uncropped copies where possible. A chronological incident log will make a complaint easier to understand.

Check who actually made the loan

The app’s brand may differ from the corporation that granted the loan. Look for the legal company name in the agreement, disclosure statement, privacy notice, receipt, or collection message.

A lending company must generally be a corporation with a valid SEC Certificate of Authority to operate as a lending company. Company registration alone is not the same as authority to lend under the Lending Company Regulation Act.

Ask the SEC to confirm the company’s status if it is unclear. The SEC’s current ticketing system includes requests concerning Certificate of Authority status and complaints against financing and lending companies. Use SEC iMessage and select the service for complaints on financing and lending companies.

If the creditor is a bank, digital bank, e-money issuer, or another BSP-supervised institution, use that institution’s complaint mechanism first and then the BSP process described below. Cooperatives generally fall under the Cooperative Development Authority, although cooperative banks are BSP-supervised.

An unlicensed lender’s possible regulatory violation does not, by itself, establish that you may keep money received without consequence. Obtain individual legal advice before stopping all payment solely because the app appears unregistered.

Determine whether the charges exceed the applicable caps

Loans entered into, restructured, or renewed from April 1, 2026

Under SEC Memorandum Circular No. 14, Series of 2025, the following ceilings apply when all these conditions are present:

The creditor is a financing or lending company.
The loan is unsecured.
It is a general-purpose loan.
The principal does not exceed ₱10,000.
The term is no longer than four months.
The loan was entered into, restructured, or renewed on or after April 1, 2026.

For a covered loan:

Nominal interest may not exceed 6% per month, approximately 0.2% per day.
The effective interest rate—including nominal interest and applicable processing, service, verification, disbursement, and similar charges—may not exceed 12% per month, approximately 0.4% per day. Late-payment penalties are excluded from this particular calculation.
Penalties for late payment or nonpayment may not exceed 5% per month of the outstanding scheduled amount due.
The combined interest, fees, charges, and penalties may not exceed 100% of the amount borrowed, regardless of how long the loan remains outstanding. In practical terms, these loan costs cannot exceed the principal; the total principal plus covered costs cannot exceed twice the principal.

Splitting, repackaging, restructuring, disguising charges, changing the stated loan term, or using sham collateral or guaranty arrangements to avoid the caps may itself violate the circular.

Covered loans from March 3, 2022 through March 31, 2026

For loans meeting the same ₱10,000, four-month, unsecured, general-purpose criteria and entered into, restructured, or renewed during this earlier period, the former ceiling was:

6% monthly nominal interest;
15% monthly effective interest;
5% monthly late-payment penalties on the outstanding scheduled amount due; and
a total cost cap equal to 100% of the amount borrowed.

These limits were imposed through BSP Circular No. 1133 and SEC Memorandum Circular No. 3, Series of 2022.

Loans outside those specific caps

The numerical ceilings above do not automatically apply if, for example, the principal exceeds ₱10,000, the term exceeds four months, the loan is secured, or it is not a general-purpose loan. That does not give the lender unlimited freedom.

The lender must still comply with the loan agreement, disclosure laws, fair-market-conduct rules, and the requirement under Republic Act No. 9474 that charges be reasonable. The Truth in Lending Act requires written disclosure of the amount financed, finance charge, and applicable rate before the transaction is completed. Undisclosed, unauthorized, or factually unconscionable charges may be disputed, but the result can depend on the contract, calculations, and circumstances.

How to audit the amount demanded

Prepare a simple ledger containing:

Item	What to enter
Principal stated in the agreement	The face amount of the loan
Amount actually received	Net amount deposited in your bank or e-wallet
Upfront deductions	Processing, service, transfer, verification, or similar fees
Contract interest	Rate, period, and peso amount
Late charges	Rate, dates, and balance on which they were calculated
Payments	Date, amount, channel, and reference number
Current demand	Principal, interest, fees, and penalties shown separately

Then check:

Were fees deducted before you received the money but still treated as part of the cost of borrowing?
Does the demanded balance include fees absent from the signed or accepted disclosure?
Are penalties being charged against the original principal instead of the outstanding scheduled amount due?
Is there interest upon interest or repeated “extension,” “rollover,” or “convenience” fees?
Have payments been omitted or applied differently from the lender’s stated rules?
Does the applicable total-cost cap already limit further charges?

Do not rely only on the app’s large “amount due” figure. Request the calculation in writing.

Send a written dispute and cease-harassment notice

Send the lender—not merely an individual collector—a concise written notice through its official customer-service or complaint channel. Include:

Your name and masked account or loan number;
The transaction date and principal;
The amount you acknowledge receiving and payments already made;
Each charge or collection act disputed;
A request for the agreement, disclosure statement, complete statement of account, and itemized computation;
A request that collection be limited to lawful communications with you or a valid guarantor;
A demand to stop threats, public disclosure, contact-list use, and communication with uninvolved third parties;
A request to identify the corporation, Certificate of Authority, collector, and any collection agency involved; and
A reasonable date for a written response.

Do not send passwords, one-time PINs, card security codes, or additional contact lists. Redact unrelated account information from attachments. Keep proof that the complaint was delivered and any ticket number issued.

If you can pay the undisputed amount, ask for an official payment channel and written confirmation of how it will be applied. Do not transfer money to a collector’s personal account without independently confirming that the lender authorized it.

What collection conduct is prohibited

SEC Memorandum Circular No. 18, Series of 2019 allows lawful collection but prohibits unfair practices by financing and lending companies, their collectors, and third-party service providers. Prohibited conduct includes such acts as:

Threatening violence, criminal acts, or harm to a person, reputation, or property;
Threatening action that cannot legally be taken;
Using insults, obscenities, or profane language;
Using false, deceptive, or misleading representations;
Pretending to be connected with the courts, police, another government agency, or another person without authority;
Disclosing or publishing borrower information to shame the borrower;
Communicating loan information to people who are not legally obligated on the debt, subject to narrow lawful exceptions; and
Contacting a borrower at unreasonable or inconvenient times, subject to the circular’s stated exceptions.

A lender remains responsible for its employees and agents. Under the Financial Products and Services Consumer Protection Act, a financial service provider is responsible for its authorized representatives and may be solidarily liable with an accredited third-party service provider for misconduct in debt collection.

A collector may accurately advise that the lender can pursue lawful civil remedies. A threat of immediate arrest, imprisonment, or police detention merely for failure to pay an ordinary debt is different. The Constitution prohibits imprisonment for debt. This does not immunize separate acts that may constitute crimes, such as fraud or violations involving checks.

Your contacts and photos cannot be weaponized

The Data Privacy Act, NPC Circular No. 2020-01, and its 2022 amendments require loan-related personal data processing to be lawful, transparent, necessary, and proportionate.

In particular:

Unnecessary or excessive app permissions are prohibited.
Uncontrolled or excessive processing of a borrower’s contact list is prohibited.
Processing contacts in a way that leads to harassment or unfair collection is prohibited.
A lender may not contact people in the borrower’s contact list for collection merely because their numbers were stored on the phone.
For debt collection, the lender may contact a person who actually and expressly consented to be a guarantor. A character reference is not automatically a guarantor.
A character reference is for verifying the borrower’s identity and information, not for pressuring that person to pay.
A borrower’s photo must not be used to harass or embarrass the borrower.

The amended rules permit only limited, proportionate contact-list processing for legitimate purposes. They do not authorize mass messaging, debt shaming, or contacting persons other than a valid guarantor to collect the debt.

Secure your phone and accounts

After preserving evidence:

Review and revoke the app’s access to contacts, photos, camera, microphone, location, call logs, calendar, and storage unless still genuinely needed.
Change passwords for your email, e-wallet, banking, and social-media accounts.
Enable multifactor authentication.
Check for unknown devices, forwarding rules, recovery addresses, or linked accounts.
Ask affected contacts not to click collection links, send money, or disclose information.
If the app came from outside an official app store, consider having the phone checked for malicious software.
Uninstall the app after retaining the contract, payment instructions, communications, and other evidence needed to manage the loan.

Revoking a permission or uninstalling an app does not cancel the loan.

Where to complain

Securities and Exchange Commission

Use the SEC for complaints involving lending companies, financing companies, and their online lending platforms, including:

Excessive charges subject to SEC rules;
Undisclosed or misleading loan terms;
Unfair collection;
An app or corporation that may be operating without authority; or
Misconduct by the lender’s collection agency.

File through SEC iMessage, choosing “Complaints on Financing and Lending Companies” under the Financing and Lending Companies Department. Attach the agreement, disclosure statement, computation, payment proof, harassment evidence, and your written complaint to the lender.

National Privacy Commission

Use the NPC when the app accesses, copies, uses, or discloses your personal data unlawfully—for example, mass-contacting your phonebook, posting your photograph, or revealing the debt to co-workers.

Ordinarily, first inform the lender or its data protection officer of the privacy violation in writing and allow it an opportunity to act. The NPC may waive exhaustion requirements for good cause or a serious violation, but do not assume a waiver will be granted.

A formal complaint generally requires a completed and notarized Complaints-Assisted Form or verified complaint, supporting evidence, and any witness affidavits. Follow the current instructions on the NPC complaint page. The NPC presently accepts the scanned complaint through complaints@privacy.gov.ph, as well as filing in person or by courier. Act promptly because procedural and prescriptive rules may affect delayed complaints.

Bangko Sentral ng Pilipinas

If the creditor is a BSP-supervised institution, complain to the institution through its Financial Consumer Protection Assistance Mechanism first. Preserve its reply or complaint reference number.

If unresolved, escalate through the BSP Consumer Assistance Mechanism using BSP Online Buddy or the official Complaint/Inquiry/Request form sent to consumeraffairs@bsp.gov.ph.

Do not send a complaint to the BSP merely because payment passed through an e-wallet. Identify the institution that actually granted the loan.

Police or NBI

Report credible threats, extortion, stalking, identity theft, unauthorized account access, or other possible crimes to the nearest police station or appropriate cybercrime unit. The NBI provides an online complaint page and investigative assistance through its Cybercrime Division.

Electronic threats or other crimes committed through information and communications technology may also implicate the Cybercrime Prevention Act. The exact offense depends on the words used, surrounding acts, identity of the sender, and evidence. A regulatory complaint does not replace urgent reporting when safety is at risk.

Common mistakes to avoid

Deleting messages or uninstalling the app before preserving evidence;
Assuming harassment automatically cancels the principal debt;
Paying through a personal bank or e-wallet account supplied by an unverified collector;
Giving a collector an OTP, PIN, password, card security code, or remote access to your phone;
Posting the collector’s private information publicly in retaliation;
Applying the ₱10,000 interest caps to a loan that does not meet every coverage requirement;
Ignoring a written demand, barangay notice, subpoena, or court document because prior collection was abusive;
Signing a restructuring agreement without checking whether it capitalizes disputed charges;
Accepting a “full settlement” offer without written terms and an official receipt;
Filing only against the app’s brand while omitting the corporation and collection agency shown in the documents; and
Waiting until screenshots, call logs, app listings, or accounts disappear.

When legal help is urgent

Consult a Philippine lawyer or the Public Attorney’s Office promptly when:

You receive a summons, subpoena, court order, or notice of an actual case;
The lender demands a large amount secured by property;
You are being asked to sign a confession of judgment, promissory note, deed, waiver, or restructuring agreement;
The collector has published intimate, defamatory, or identifying material;
Your bank, e-wallet, identity documents, or online accounts were compromised;
A threat appears credible or someone is monitoring your home or workplace;
The lender claims that a relative or reference is a guarantor without a signed guaranty; or
You need damages, an injunction, or another remedy beyond an administrative complaint.

Frequently asked questions

Should I stop paying?

Do not stop solely because the collector acted illegally. Separate the valid principal and lawful charges from the disputed amount, demand an itemized statement, and obtain advice if the correct balance cannot be determined. Pay only through a verified official channel.

Can the app call my employer or relatives?

A lender generally may not disclose your loan to uninvolved relatives, co-workers, employers, or other contacts to pressure or shame you. A valid guarantor may be contacted concerning the obligation. A character reference is not automatically a guarantor and should not be pursued for payment.

Does giving contact permission mean the lender can message everyone?

No. Consent and app permissions do not authorize excessive or unlawful processing. Unbridled contact-list processing, collection outside valid guarantors, harassment, and unfair collection remain prohibited.

Is 12% monthly interest always the maximum?

No. The 12% monthly effective-interest ceiling applies to the specifically covered loans entered into, restructured, or renewed from April 1, 2026. Other loans require a separate analysis of the contract, lender, disclosures, and applicable law.

Can a collector have me arrested for an unpaid app loan?

A person cannot be imprisoned merely for an ordinary debt. A creditor may pursue lawful civil remedies, while genuinely separate criminal conduct may be investigated. Claims of immediate arrest should be verified independently; never pay a collector merely because of a false police or court threat.

Can I block the collector?

You may block abusive numbers after preserving evidence and giving the lender a lawful channel for written communication. Keep monitoring official email, mail, and court notices. Blocking a number does not resolve the account or excuse ignoring legal process.

What should I request after settlement?

Request an official receipt, updated statement showing a zero balance, and written certificate or confirmation of full payment. Also request appropriate closure of the account and handling of personal data in accordance with the lender’s lawful retention obligations.

This article provides general Philippine legal information, not legal advice or a prediction of any case. Results depend on the lender’s regulatory status, the loan documents, transaction date, calculations, and evidence. Official sources and procedures were checked as of July 27, 2026.