If you are being harassed by an online lending app in the Philippines through constant calls and texts, shaming messages sent to your family, friends, or coworkers, threats, or demands for amounts that seem far higher than what you borrowed, you are facing a situation many Filipinos and overseas workers have experienced. These aggressive tactics often involve harvesting your phone contacts and using personal data in ways that violate privacy rules, while pushing high or hidden interest and penalties. This article explains exactly what the law protects you from, why these practices are illegal, and the practical, step-by-step actions you can take right now to stop the harassment, document your case, and address the underlying loan through official channels.

Why These Tactics Are Illegal Under Philippine Law

Online lending apps (often operated by lending companies or financing companies) are primarily regulated by the Securities and Exchange Commission under Republic Act No. 9474, the Lending Company Regulation Act of 2007. They must register with the SEC and follow fair practices. Many apps, however, engage in prohibited collection methods.

The key rules against harassment come from SEC Memorandum Circular No. 18, Series of 2019, which expressly prohibits unfair debt collection practices. These include:

Contacting or disclosing your debt to people who are not your guarantors or co-makers.
Using threats, intimidation, public shaming (including on social media or group chats), obscene language, or repeated calls at unreasonable hours.
Processing personal data in ways that lead to harassment.

A joint advisory issued in March 2026 by the Department of Information and Communications Technology (DICT), National Privacy Commission (NPC), and SEC reinforced these prohibitions. It states that unnecessary or disproportionate access to contact lists, contacting non-guarantors, and any processing that results in harassment or unfair collection are not allowed. Guarantors must give separate, informed consent.

On the privacy side, the Data Privacy Act of 2012 (Republic Act No. 10173) requires that any collection and use of your personal data (name, contacts, photos, location, etc.) must have a legitimate purpose, be proportionate, and rest on valid consent or another legal basis. Harvesting your entire contact list during app signup for “verification” and then using it to pressure repayment through third parties usually violates the principles of purpose limitation, data minimization, and proportionality. The NPC has investigated and sanctioned apps for exactly these practices in the past.

High interest and hidden charges raise separate issues. While there is no strict numerical usury cap for all loans, the Supreme Court has consistently held that stipulated interest rates that are exorbitant or unconscionable can be reduced or nullified. In recent decisions, the Court has struck down or adjusted rates reaching 3% per month (36% per annum) plus penalties and compounding when the total effective burden becomes oppressive and disproportionate to the principal. The Truth in Lending Act (Republic Act No. 3765) requires clear disclosure of the finance charge and effective interest rate before you sign. Many complaints involve apps that bury high effective rates in “service fees,” “processing fees,” or rapidly compounding penalties.

Non-payment of a civil debt is not a crime in the Philippines. Threats of arrest or jail for ordinary loan default are false and can themselves constitute grave threats or unjust vexation under the Revised Penal Code.

Your Rights in This Situation

You have the right to:

Privacy over your personal data and contacts.
Freedom from harassment, threats, shaming, and unreasonable collection pressure.
Clear information about what you actually owe, including how interest and fees are calculated.
Challenge unconscionable interest or undisclosed charges in court.
Seek damages for the distress, anxiety, or other harm caused by illegal collection tactics (under Articles 19, 20, and 21 of the Civil Code on abuse of rights).
Report violations without retaliation—any backlash for filing a legitimate complaint can be reported as an additional violation.

Step-by-Step: What to Do Immediately

Document everything thoroughly. Do not delete any messages, call logs, or app notifications. Take clear screenshots that show the sender’s number or name, date, time, and full content. Ask affected family members or friends to screenshot messages they received and send them to you. Create a simple timeline: when you took the loan, when harassment started, what was said or done, and how it affected you (lost sleep, anxiety, work issues, family tension). Save loan agreement screenshots, payment history, and any app permission settings showing contact access. This evidence is the foundation of every successful complaint.
Review your actual loan documents. Open the app or your email for the original terms, interest rate, fees, repayment schedule, and total amount due. Note every payment you made and any receipts. Calculate what you believe is legitimately owed based on the disclosed terms. Many people discover hidden or disputed charges once they review calmly.
Send a formal written demand to stop the harassment. Email the app’s official customer service and Data Protection Officer (if listed in their privacy policy). State the facts briefly, demand that they immediately cease all contact with third parties, delete any harvested contact data, stop all harassing messages and calls, and provide a clear written accounting of the exact amount owed with supporting computation. Give them a short deadline (5–7 days) to confirm in writing. Send via email with read receipt if possible, and consider registered mail or courier for proof of delivery. Keep copies of everything. This step creates a record and often prompts them to back off.
File a complaint with the Securities and Exchange Commission. Use the SEC i-Message portal at imessage.sec.gov.ph (the primary and fastest channel) or email the appropriate division (Financing and Lending Companies or Enforcement). Explain the unfair collection practices, attach your evidence and timeline, and identify the app/company if known. The SEC can investigate, issue cease-and-desist orders, impose fines, and suspend or revoke authority to operate. This route is especially effective for registered lending or financing companies.
File a complaint with the National Privacy Commission. Download the complaint-affidavit form from privacy.gov.ph. Prepare a clear, chronological narrative of how your personal data was collected and misused (contact harvesting, disclosure to third parties, shaming). Attach all screenshots and evidence. The complaint generally needs to be notarized. Submit by email to complaints@privacy.gov.ph, through the NPC online system if available, or in person/courier to their office at the PICC Complex in Pasay City. The NPC can order the company to stop processing your data, delete it, and impose penalties. Many people file with both SEC and NPC because the same facts often violate both sets of rules.
Report serious criminal conduct separately. If there are threats of physical harm, death, violence, or other criminal acts (or false claims of filing criminal cases against you), go immediately to the Philippine National Police Anti-Cybercrime Group (acg@pnp.gov.ph or (02) 8723-0401 loc. 7491) or the National Bureau of Investigation Cybercrime Division. File a blotter or sworn affidavit. You can also report to the DICT cyber hotline. Pure debt collection pressure is handled by SEC/NPC; actual crimes go to law enforcement.
Consider barangay mediation if appropriate. For ongoing local disputes or to attempt amicable settlement before escalating further, you can bring the matter to your barangay for mediation under the Katarungang Pambarangay system. This is often a required first step before filing certain criminal complaints in court.
Address the debt itself and protect your rights in court if needed. Once harassment stops, you can negotiate a realistic settlement in writing. If the interest or charges appear unconscionable or undisclosed, you may file a civil case (in the appropriate MTC or RTC, or small claims court for qualifying money claims) to seek an accounting, reduction or nullification of excessive interest, and damages for the illegal collection tactics. If you qualify as indigent, the Public Attorney’s Office (PAO) can provide free legal representation. A lawyer is not required for SEC or NPC complaints but is helpful for court cases involving the debt or damages claim.

Common Challenges and Real-Life Scenarios

Many borrowers delete messages out of stress—do not do this; preservation is critical. Others pay under extreme pressure without disputing charges, then later regret it. Some assume that because the app feels “unofficial” or disappears, nothing can be done; regulators still act on complaints about unauthorized operations and can shut platforms down.

Overseas Filipino workers often face extra pressure because harassment reaches family members in the Philippines, causing shame or family conflict. The same complaint channels work for OFWs—you can file online or by email from abroad. If you need someone in the Philippines to follow up in person, execute a Special Power of Attorney (notarized and, if signed outside the Philippines, apostilled).

Unregistered apps are common. Report them anyway to the SEC’s enforcement arm; they handle unauthorized lending activities. Retaliation (more harassment after you complain) is itself a violation—document it and report it as additional evidence.

Frequently Asked Questions

Is it illegal for the app to message or call my family and friends about my debt?
Yes, in almost all cases. Unless those people are named guarantors who gave separate consent, contacting them or disclosing your debt to them violates both data privacy rules and SEC prohibitions on unfair collection.

Can online lending apps legally charge very high interest, like 20% or more per month?
Stipulated rates must be reasonable and properly disclosed. The Supreme Court has ruled that rates reaching 36% per annum or higher, especially when combined with heavy penalties and compounding, are often unconscionable and subject to reduction or nullification. Review the effective interest rate and all fees in your documents.

What is the strongest evidence for a complaint?
Timestamped screenshots of messages sent to you and to third parties, call logs, screenshots of the app requesting or accessing contacts, your loan agreement and payment records, and proof that you asked them to stop (such as your demand letter and any response or lack of response).

How long does it take for the SEC or NPC to act?
You will usually receive acknowledgment quickly. Investigations and orders (including cease-and-desist) can move within weeks in clear cases, though full resolution may take longer. Continue documenting any new incidents and follow up using your case reference number.

Can I go to jail simply for not paying an online loan?
No. Non-payment of a civil debt is not a criminal offense. Threats of arrest or imprisonment for ordinary default are false and can be reported as criminal threats.

Do I need a lawyer to file complaints with the SEC or NPC?
No. These are administrative complaints that individuals can file themselves with supporting evidence. A lawyer becomes useful if you later file a civil case for damages or to challenge the debt terms in court.

What if the lending app is not registered with the SEC?
Report it anyway. The SEC’s enforcement division handles complaints against unauthorized operators and can issue orders to stop operations. You can still pursue privacy complaints with the NPC and criminal reports if threats are involved.

I am an OFW or foreigner—can I still file complaints?
Yes. File online or by email. If you need a representative in the Philippines for any in-person follow-up or court matters, use a properly executed and (if signed abroad) apostilled Special Power of Attorney. Philippine embassies and consulates can provide guidance on notarization or apostille requirements.

Will complaining erase my debt or hurt my credit standing?
Filing regulator complaints addresses the illegal harassment and data misuse; it does not automatically cancel a valid underlying debt. You can still negotiate or legally challenge the amount owed separately. Regulator complaints are handled confidentially in the sense that they focus on compliance, not public credit reporting.

Key Takeaways

Document every message, call, and incident immediately—screenshots with dates and times are your strongest evidence.
Send a formal written demand to stop harassment and provide a clear accounting before or while filing regulator complaints.
File with both the SEC (for unfair collection practices) via imessage.sec.gov.ph and the NPC (for data privacy violations) via complaints@privacy.gov.ph—the two agencies address complementary violations.
Report actual threats of harm or criminal acts directly to the PNP Anti-Cybercrime Group or NBI Cybercrime Division.
High or hidden interest and penalties can be challenged as unconscionable under Supreme Court doctrine; you have the right to a fair accounting.
You do not need a lawyer for SEC or NPC complaints, and free legal assistance is available through the PAO for court matters if you qualify.
Acting promptly and methodically with solid documentation gives you the best chance of stopping the harassment and protecting your rights under current Philippine law.