Receiving threats from an online lending app can be frightening, especially when collectors say they will have you arrested, expose you on social media, contact everyone in your phone, or visit your home. A lender may lawfully demand payment of a legitimate debt, but it cannot use threats, humiliation, deception, excessive contact, or misuse of personal data to force you to pay. Your immediate priorities are to protect your safety, preserve evidence, stop further access to your data, verify the debt, and report the conduct to the correct Philippine authorities.

What to do immediately if the threat appears serious

Treat a message as urgent when it contains a credible threat of violence, identifies your home or workplace, names a family member, shows that someone is physically nearby, or threatens an immediate confrontation.

Move to a safe place. Tell a trusted family member, building administrator, workplace security officer, or barangay official what is happening.
Call 911 or the nearest police station if you believe someone may harm you or another person.
Do not meet the collector alone. A collector has no special authority to enter your home, seize belongings, or compel you to go anywhere.
Preserve the evidence before blocking the sender. Take screenshots, save voice recordings and call logs, and record the exact date and time.
Do not threaten the collector back. Angry replies can complicate the evidence and may create a separate complaint against you.

A police blotter creates an official record, but it does not automatically begin a criminal case. Depending on the facts, the police, National Bureau of Investigation, or prosecutor may require a sworn complaint-affidavit and supporting evidence before investigating or filing charges.

What online lenders are legally allowed to do

A legitimate lending or financing company may:

Send reasonable payment reminders.
Ask you to pay an overdue account.
Provide a statement of account showing the principal, interest, charges, payments, and remaining balance.
Contact a guarantor who expressly agreed to answer for the loan.
Offer restructuring, settlement, or another lawful payment arrangement.
File a civil collection case when legally justified.
Use a properly identified collection agency while remaining responsible for that agency’s conduct.

The existence of a valid debt does not authorize abusive collection. Under SEC Memorandum Circular No. 18, Series of 2019, lending and financing companies are prohibited from using unfair debt collection practices, whether collection is performed directly or through an outsourced agent. (SEC Appointment System)

What an online lending app is not allowed to do

The following conduct may violate SEC rules, privacy law, criminal law, or several laws at the same time:

Conduct	Why it may be unlawful
Threatening to hurt, abduct, shame, or destroy the property of a borrower or family member	May violate SEC collection rules and constitute grave threats or another criminal offense
Saying that the borrower will automatically be arrested for nonpayment	May be deceptive because a person cannot be imprisoned solely for debt
Pretending to be a police officer, court employee, lawyer, or government investigator	May constitute deceptive collection and potentially a criminal offense
Sending profane, obscene, degrading, or repeatedly abusive messages	Prohibited when the language amounts to abuse, harassment, or a criminal act
Posting the borrower’s name, photograph, identification card, loan balance, or accusation of being a “scammer”	May violate privacy rights and, when defamatory information is communicated to another person, may raise cyberlibel issues
Messaging random relatives, friends, coworkers, customers, or employers	Generally prohibited when they are not consenting guarantors
Using a borrower’s contact list for collection campaigns	May violate the Data Privacy Act and NPC rules governing online lending platforms
Threatening legal action that cannot actually be taken	Expressly treated as an unfair collection practice
Hiding the collector’s identity or using a false identity	Collection personnel must truthfully identify themselves
Calling or messaging at unreasonable hours	Restricted under SEC rules, subject to limited exceptions stated in the circular
Continuing to demand a balance already paid without addressing proof of payment	May involve false or deceptive representations

The SEC’s 2019 circular generally regards communication before 6:00 a.m. or after 10:00 p.m. as unreasonable. The circular contains exceptions, including accounts more than 15 days past due and communications made with the borrower’s express consent, but those exceptions do not permit threats, insults, public shaming, or misuse of personal data.

In March 2026, the Department of Information and Communications Technology, National Privacy Commission, and SEC issued a joint advisory on online lending platforms reiterating that harassment, intimidation, public shaming, excessive data processing, and contacting people other than duly identified guarantors are prohibited.

Can an online lending app contact your family, friends, or employer?

Ordinarily, an app cannot use your entire phonebook as a collection list.

Under NPC Circular No. 2020-01, as amended by NPC Circular No. 2022-02, access to contacts must be limited and proportionate. An app may allow a borrower to select a character reference or guarantor, but it cannot indiscriminately harvest and use all stored contacts.

A character reference is not automatically a guarantor. A character reference may be contacted to verify information given by the borrower, but should not be contacted to demand payment.

A guarantor is someone who expressly consented to assume a legal obligation connected with the debt. Merely appearing in the borrower’s contact list, being named as a relative, or answering a verification call does not automatically make someone a guarantor.

Contacting your employer may be particularly problematic when the purpose is to embarrass you, disclose your debt, threaten your employment, or pressure coworkers to collect from you. Save every message received by your employer or coworkers and ask each recipient to keep the original message.

Your rights under Philippine law

Protection against unfair debt collection

SEC Memorandum Circular No. 18 prohibits threats of violence or criminal means, insults and abusive language, false representations, disclosure of borrowers’ personal information, threats of actions that cannot legally be taken, and contact with people other than guarantors or co-makers.

The lender remains responsible even when it claims that an independent collection agency, field collector, or automated messaging provider sent the threats. Outsourcing collection does not allow the lender to avoid regulatory responsibility.

Republic Act No. 11765, the Financial Products and Services Consumer Protection Act of 2022, also prohibits abusive collection or debt recovery practices by covered financial service providers and requires the protection of client information. (Lawphil)

Protection of your personal data

Republic Act No. 10173, the Data Privacy Act of 2012, requires personal information to be processed according to the principles of transparency, legitimate purpose, and proportionality.

This means that even when an app obtained permission to access certain information, it cannot automatically use that information for every purpose. Access that may have been presented as necessary for identity verification cannot be converted into permission to shame you, contact your entire phonebook, or expose your loan details.

Depending on the evidence, unauthorized processing, excessive data collection, malicious disclosure, or unauthorized disclosure may result in administrative or criminal consequences. The NPC has previously pursued online lenders over contact harvesting, third-party messaging, public shaming, and abusive processing of borrower data. (Lawphil)

Protection against threats, coercion, and defamatory posts

The exact criminal offense depends on the words used, the surrounding circumstances, and whether the sender had the apparent ability or intent to carry out the threat.

Possible offenses under the Revised Penal Code include:

Grave threats, when a person threatens another, the person’s honor or property, or the person’s family with an act amounting to a crime.
Grave coercion, when violence, threats, or intimidation are used without legal authority to force someone to do something against their will.
Unjust vexation, which may apply to conduct intended to annoy, distress, irritate, or torment when no more specific offense fully covers the act.

A prosecutor determines the proper charge based on the full evidence. The name given to the complaint by the borrower does not control the final offense. (Lawphil)

When false and damaging accusations are posted online or sent to relatives, coworkers, customers, or other third parties, the conduct may also raise cyberlibel issues under Republic Act No. 10175. A purely private insult sent only to the borrower will not ordinarily satisfy the publication element of libel, but sending the accusation to another person may.

Do not delay preserving evidence or seeking action. In an April 8, 2026 resolution in G.R. No. 258524, the Supreme Court held that cyberlibel prescribes in one year. “Prescription” is the period after which prosecution is generally barred. (Lawphil)

No imprisonment solely for debt

Article III, Section 20 of the 1987 Constitution states that no person shall be imprisoned for debt.

A collector therefore cannot truthfully claim that police officers will arrest you merely because you failed to pay an ordinary online loan. A lender may pursue lawful civil remedies, but it cannot create an arrest warrant through a text message or collection notice.

This protection does not erase liability for a separate criminal act. For example, independently proven fraud or another offense may be prosecuted if all legal elements are present. Nonpayment alone, however, is not enough to put someone in jail. (Lawphil)

Possible civil damages

Articles 19, 20, and 21 of the Civil Code recognize the abuse-of-rights principle: people must act with justice, give everyone their due, and observe honesty and good faith. A person who willfully causes loss or injury contrary to law, morals, good customs, or public policy may be liable for damages.

Article 26 also protects personal dignity, privacy, family relations, and peace of mind. Depending on the proof of harm, severe harassment or public shaming may support a civil claim for damages. (Lawphil)

Step-by-step guide to responding to online lending harassment

1. Preserve complete evidence

Do this before deleting the app, changing phones, blocking every number, or closing social media accounts.

Keep:

Full-screen screenshots showing the number, account name, date, time, and complete message.
A screen recording while you scroll through the entire conversation.
Call logs and voicemail recordings.
Emails with complete headers when available.
Screenshots of social media posts, comments, profile URLs, and account names.
The app’s name, developer, download page, privacy notice, and requested permissions.
Your loan agreement, disclosure statement, payment schedule, and statement of account.
Receipts, bank transfers, e-wallet confirmations, and proof of previous payments.
Messages received by relatives, friends, coworkers, or employers.
Photographs or CCTV footage of any field collector who comes to your home or workplace.

Do not crop or edit the original files. You may make annotated copies for explanation, but keep untouched originals separately. Back them up in at least two places, such as secure cloud storage and a USB drive.

Create a simple chronology:

Date and time	Sender or number	What happened	Recipient or witness	Evidence filename
12 July, 9:20 a.m.	Collection number	Threatened to post ID online	Borrower	Screenshot-01
12 July, 10:05 a.m.	Same number	Sent loan details to employer	HR officer	Screenshot-02
13 July, 7:30 p.m.	Social media account	Posted accusation publicly	Public post	Screen-recording-01

This incident log makes it easier for the SEC, NPC, police, NBI, or prosecutor to understand a large volume of messages.

2. Secure your phone and accounts

After documenting the app’s current permissions:

Revoke access to contacts, SMS, storage, photographs, location, microphone, and camera unless access remains genuinely necessary.
Change passwords for your email, social media, banking, and e-wallet accounts.
Enable two-factor authentication.
Review linked bank accounts, automatic debit arrangements, and e-wallet permissions.
Remove unfamiliar device sessions from important accounts.
Scan the phone using its built-in security tools or a reputable security service.
Uninstall the lending app after preserving the evidence, unless an investigator specifically asks you to retain it temporarily.

Revoking permissions may prevent new access, but it cannot retrieve data that the app already copied. That is why a written privacy demand and an NPC complaint may still be necessary.

3. Verify the lender and the amount claimed

Ask for the following in writing:

The lender’s complete corporate name.
SEC registration and Certificate of Authority details.
The legal name of the online lending platform.
The collection agency’s name and authority to act.
A complete statement of account.
The original principal.
Interest, penalties, service fees, and other charges.
All payments credited.
The exact remaining balance.
The lender’s official payment channels.

Do not send money to a collector’s personal bank or e-wallet account merely because the person threatens immediate consequences. Pay only through a verified channel belonging to the lender or an authorized provider.

Harassment does not automatically cancel a genuine debt. At the same time, paying an unverified amount to an unidentified collector can create additional problems and may not be credited to your account.

4. Send a written notice to stop the abusive conduct

Send the notice to the lender’s official customer service, complaints, or data protection contact. Keep proof of transmission and receipt.

I am requesting that all threats, abusive language, public disclosure, and communications with persons who are not duly consenting guarantors stop immediately.

Please communicate with me only through this written channel and provide a complete statement of account showing the principal, interest, fees, payments, and remaining balance.

I also object to the use or disclosure of my contacts and other personal data for harassment, public shaming, or collection from third parties. Please restrict or delete personal data that is no longer necessary or lawfully processed and confirm the action taken.

I am preserving the messages, call records, third-party communications, and other evidence for submission to the appropriate authorities.

Do not state that the lender may never contact you again when you still want to receive a statement of account or legitimate settlement proposal. Distinguish lawful written collection from threats and harassment.

5. Inform affected contacts

A brief warning can reduce panic and prevent relatives or coworkers from paying a stranger:

An online lending collector may contact you using information taken from my phone or loan application. Please do not send money, provide personal information, or argue with the sender. Save the complete message, take a screenshot showing the number, date, and time, and forward a copy to me.

Ask each recipient to retain the original message. A screenshot forwarded through another app may lose useful metadata, so the original should remain on the recipient’s device.

6. Report the conduct to the appropriate authority

You may file with more than one agency because each agency handles a different legal issue.

Authority	Report this type of conduct	Practical filing route
Securities and Exchange Commission	Unfair collection, unauthorized lending activity, abusive collectors, false representations, contact with third parties	File through the SEC iMessage portal and select the Financing and Lending Companies Department complaint category
National Privacy Commission	Contact harvesting, unauthorized disclosure, public shaming, misuse of IDs or photographs, excessive app permissions	Follow the NPC complaint-filing procedure
PNP Anti-Cybercrime Group	Threats, impersonation, extortion, fraudulent accounts, online publication, coordinated harassment	Email `acg@pnp.gov.ph` or `onlinecims.ocs@gmail.com`; telephone `(02) 8723-0401 local 7491`
NBI Cybercrime Division	Serious threats, cyber-enabled fraud, identity misuse, coordinated or technically complex conduct	Email `ccd@nbi.gov.ph`; telephone `(02) 8523-8231 to 38`
DICT Cyber Hotline	Cyber incident reporting and referral	Email `1326@dict.gov.ph`
Bangko Sentral ng Pilipinas	Complaint involving a BSP-supervised bank, digital bank, electronic money issuer, or similar supervised institution	Complain first through the institution’s consumer assistance mechanism, then elevate through BSP channels if unresolved
Local police or prosecutor	Credible criminal threats, coercion, trespass, impersonation, or other possible crimes	Bring identification, a chronology, original evidence, witness details, and a sworn complaint when required

The SEC’s official iMessage system creates a ticket and allows the complainant to monitor status. Choose the Financing and Lending Companies Department and the complaint category concerning financing or lending companies. (Securities and Exchange Commission)

The BSP’s consumer assistance process is appropriate only when the provider is BSP-supervised. The BSP’s own guidance directs ordinary online lending platform and collection-agency complaints primarily to the SEC.

How to file a privacy complaint with the NPC

A formal NPC complaint requires more than sending screenshots through social media.

Under the NPC’s current rules and complaint form:

Notify the lender or respondent in writing about the privacy violation.
Allow 15 calendar days for a response, unless an exception applies.
Download and complete the current NPC Complaint-Affidavit form.
Describe the acts complained of in chronological order.
Identify the company and responsible persons as fully as possible.
State the relief you are requesting.
Attach the privacy notice, messages, screenshots, loan records, correspondence, witness affidavits, and proof that your notice was received.
Sign the complaint under oath and have it notarized.
Submit it in person, by courier, or through the NPC’s designated complaint email, currently complaints@privacy.gov.ph.

The NPC may excuse the prior-notice requirement where there is grave and irreparable harm, no adequate remedy, or conduct that is patently illegal. Explain the urgency and attach supporting proof rather than simply omitting the requirement. (National Privacy Commission)

The NPC introduced an updated Complaint-Affidavit template effective July 1, 2025. Use the current form instead of an old template found in a blog, Facebook group, or previous complaint guide. Filing fees may apply, although exemptions or waivers may be available in qualifying cases.

For a Filipino citizen residing abroad who has no representative in the Philippines, the NPC rules allow filing subject to authentication requirements. The complaint may need to be notarized through a Philippine embassy or consulate or apostilled in the country of execution. Check the NPC’s current instructions before sending original documents.

Documents that strengthen a complaint

Prepare a clearly labeled digital and printed folder containing:

Government-issued identification.
Loan agreement and disclosure statement.
App screenshots and app-store listing.
Statement of account.
Payment receipts.
Complete threat or harassment messages.
Screen recordings showing the account and conversation.
Call logs and recordings lawfully obtained.
Screenshots received by relatives, coworkers, or employers.
Witness affidavits, when available.
Your incident chronology.
Copy of your written cease-harassment and privacy notice.
Proof that the lender received the notice.
SEC registration details or corporate information.
Collection agency information.
Police blotter, if one was made.
Medical or counseling records when emotional or physical harm is relevant and you are comfortable submitting them.
Proof of lost income, employment consequences, or other financial harm when damages are claimed.

Use exhibit labels such as “Annex A,” “Annex B,” and “Annex C.” Add a one-page index identifying each attachment. This small organizational step can make a complicated complaint easier to evaluate.

Common situations and how to handle them

“Pay today or we will have you arrested”

Save the message. Ask for the sender’s full name, company, authority, and written legal basis. Do not go to a supposed “police meeting” arranged solely through an unknown number.

A real warrant comes from a court through lawful proceedings, not from a collector’s text message. Nonpayment of an ordinary debt by itself is not grounds for imprisonment. Report fake warrants, false police claims, or impersonation to law enforcement and the SEC. (Lawphil)

The app called you a scammer in messages to your contacts

Ask every recipient for:

A full-screen screenshot.
The sender’s number or account URL.
Date and time.
The complete message before and after the accusation.
A short written statement explaining how the recipient received it.

This may support an SEC complaint, an NPC complaint, and—depending on falsity, malice, identification, and publication—a criminal complaint involving cyberlibel or another offense.

A field collector appears at your home

You may speak through a closed gate or in a public area. Ask for identification, company authorization, and a written statement of account.

The collector may request payment but may not enter without permission, threaten occupants, take property without lawful authority, or refuse to leave private premises. Call the police if the person becomes violent, attempts to force entry, or refuses to leave.

The loan was already paid

Send the receipt through the lender’s official channel and request:

Written confirmation that the account is fully paid.
Correction of the account balance.
Withdrawal of the account from collection.
Correction of any false reports or disclosures.
Confirmation that unnecessary personal data has been deleted or restricted.

Do not rely only on a telephone assurance. Keep the written confirmation permanently.

The amount is much higher than what you borrowed

Request an itemized statement showing principal, interest, service charges, penalties, and payments. Compare it with the signed disclosure statement and loan agreement.

Do not acknowledge an unexplained amount merely to stop the messages. You may dispute the computation while offering to address any verified lawful balance.

The app appears unregistered or has disappeared

Preserve its listing, APK information if available, website, payment accounts, privacy notice, messages, and receipts. Report it to the SEC and cybercrime authorities.

The app’s possible illegality does not necessarily mean that every amount actually received becomes free money. It does mean that you should avoid paying unidentified personal accounts and should obtain official guidance before responding to suspicious collection demands.

Practical timelines and common bottlenecks

Regulatory complaints are not instant remedies. An online portal may issue an acknowledgment or ticket quickly, but evaluation, exchanges of written submissions, investigation, and resolution may take months depending on the evidence, caseload, and difficulty identifying the respondent.

Cases often slow down because:

The lender uses several corporate or app names.
Collectors use prepaid or spoofed numbers.
Accounts disappear after sending threats.
The company is operating from outside the Philippines.
Screenshots are cropped and do not identify the sender.
The borrower deleted the app before documenting permissions.
Witnesses are unwilling to execute affidavits.
The complaint does not distinguish legitimate collection from unlawful harassment.
The respondent’s legal address is unknown.
The complainant failed to send the prior privacy notice required for an NPC complaint.

Early evidence preservation is therefore more valuable than arguing repeatedly with collectors.

Frequently Asked Questions

Can an online lending app message everyone in my contacts?

No. An app cannot indiscriminately use your phonebook for collection. Character references may be contacted for verification, not debt collection. Only a person who expressly consented as a guarantor may properly be contacted regarding payment obligations.

Can I be arrested for not paying an online loan?

You cannot be imprisoned solely for debt. A lender may file a civil collection case, but an ordinary unpaid loan does not by itself authorize arrest. A separate criminal case is possible only when facts independently establish all elements of a criminal offense. (Lawphil)

Should I uninstall the lending app immediately?

Preserve evidence first. Screenshot the app, permissions, account details, balance, privacy notice, and messages. Then revoke unnecessary permissions, secure your accounts, and uninstall the app when safe to do so.

Can I block the collector’s number?

Yes, especially when messages are abusive. Save the complete evidence first and give the lender one reliable written channel for legitimate account communications. Collectors may switch numbers, so continue keeping an incident log.

Do I still need to pay if the lender harassed me?

Harassment does not automatically erase a valid loan. Verify the lender, request an itemized statement, dispute unlawful or unexplained charges, and pay only through an authorized channel. The abusive conduct may be reported separately.

Can I file complaints with the SEC, NPC, and police at the same time?

Yes. The SEC addresses lending and collection violations, the NPC handles personal-data violations, and law enforcement investigates possible crimes. In formal submissions, disclose related proceedings when the rules or complaint form require it.

Can my relative file a complaint because the app harassed them?

Possibly. A relative whose own personal data was misused or who personally received threats, insults, or defamatory accusations may have a separate complaint based on the conduct directed at them. Their original messages and testimony should be preserved.

What should I do if I am an OFW or living abroad?

Preserve digital evidence and communicate through written official channels. You may submit complaints from abroad, but sworn documents may require consular notarization or an apostille. A trusted Philippine representative may also assist when properly authorized, depending on the agency and proceeding.

How long will an SEC or NPC complaint take?

There is no single guaranteed period. Simple intake and referral may occur relatively quickly, while contested investigations can take months or longer. Immediate threats should be reported to police or cybercrime authorities without waiting for the administrative complaint to finish.

Can the lender post my ID or photograph online?

Publishing your identification, photograph, loan information, or accusations for public shaming may violate SEC rules and the Data Privacy Act. Preserve the post through screenshots, screen recording, URL capture, and witness copies before requesting removal.

Key Takeaways

A lender may demand lawful payment, but it may not threaten, deceive, publicly shame, or harass you.
Preserve complete evidence before blocking numbers, deleting messages, or uninstalling the app.
Revoke unnecessary app permissions and secure your email, banking, social media, and e-wallet accounts.
Random contacts, character references, relatives, coworkers, and employers should not be used as collection targets.
Request the lender’s legal identity, authority, itemized statement of account, and official payment channel.
Report unfair collection to the SEC, personal-data misuse to the NPC, and credible threats or cybercrime to the police or NBI.
You cannot be imprisoned solely for an ordinary unpaid debt.
Harassment does not automatically cancel a valid loan, but the debt and the collector’s unlawful conduct are separate legal issues.