If constant calls, threatening text messages, or even messages to your family and contacts from an online lending app are making it hard to sleep or focus on work, you are not alone — and you have real legal protections under Philippine law. Many borrowers face aggressive collection tactics that cross into harassment, public shaming, or misuse of personal data. This article explains exactly what counts as illegal behavior, the specific laws and regulations that apply, and the practical steps you can take right now to stop the abuse while handling any legitimate debt responsibly.

What Counts as Illegal Harassment by Online Lending Apps

Online lending apps (often called OLAs) and their collectors frequently use tactics that go far beyond polite reminders. Common examples include repeated calls or texts at unreasonable hours, profane or insulting language, threats of arrest or legal action that cannot legally be taken for a simple civil debt, and — most damaging — contacting people in your phone’s contact list or posting details about your debt on social media to shame you.

These practices are not just rude; many violate specific rules designed to protect borrowers. Legitimate collection is allowed, but it must stay within the bounds of good faith and the law. When collectors cross the line into humiliation, intimidation, or unauthorized use of your personal information, they expose themselves and the company to administrative sanctions, civil liability for damages, and in serious cases, criminal prosecution.

Your Legal Rights and Protections

The primary regulation directly addressing this problem is SEC Memorandum Circular No. 18, Series of 2019 (Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies). Issued by the Securities and Exchange Commission, which oversees lending companies under Republic Act No. 9474 (the Lending Company Regulation Act of 2007), this circular explicitly prohibits a range of abusive tactics.

Prohibited acts include:

Using or threatening violence or other criminal means against a borrower’s person, reputation, or property
Threatening any action that cannot legally be taken (such as arrest for non-payment of a civil loan)
Using insults, obscenities, or profane language that abuses the borrower
Publicly disclosing or publishing a borrower’s name or personal information to shame them (with very limited exceptions, mainly for named guarantors or co-makers in the loan agreement)
Contacting persons in the borrower’s contact list other than properly named guarantors or co-makers — this is considered unfair even in many cases where broad consent was given during app installation
Communicating false information about the debt or the consequences of non-payment

The circular applies to registered lending and financing companies as well as any third-party collectors or service providers they use. Companies must still observe good faith and reasonable conduct when collecting.

Equally important is Republic Act No. 10173, the Data Privacy Act of 2012. Most online lending apps require broad permissions to access your contacts, photos, and location during installation. Using that data to contact third parties or publicly shame you violates core principles of the law: purpose limitation (data collected for credit assessment cannot be repurposed for harassment), proportionality, and lawful processing. The National Privacy Commission (NPC) has investigated and acted against numerous apps for these exact violations. The Supreme Court has upheld NPC findings in cases such as those involving FCash Global Lending Inc., confirming that accessing and misusing contact lists to message third parties about a borrower’s debt constitutes a data privacy violation that can lead to orders for damages and recommendations for criminal prosecution.

Additional protections come from the Civil Code (Articles 19, 20, and 21) on abuse of rights and acts contrary to morals, good customs, or public policy, which can support claims for damages. If the conduct rises to criminal level — such as grave threats under the Revised Penal Code — separate criminal complaints are possible. Note that there is currently no standalone “Fair Debt Collection Practices Act” equivalent to some other countries, but the SEC circular and Data Privacy Act together provide strong, enforceable safeguards.

Step-by-Step: What to Do If You Are Being Harassed

Follow these actions in order. Many borrowers find that combining documentation, a formal demand, and regulatory complaints produces the fastest results.

Stay calm and document everything thoroughly. Create a dedicated folder (physical and digital) with timestamps. Screenshot every text, email, social media post, or call log, including the sender’s number or username and the full message. For phone calls, consider announcing at the start that you are recording for your records (this improves admissibility and transparency). Note dates, times, names of collectors if given, and any impact on you or your family. Keep copies of the original loan agreement, any payment receipts, and communications about the debt.
Address the underlying debt separately and responsibly. Harassment does not erase a valid obligation. Review your loan documents to confirm the principal, interest, and fees. If the terms appear excessive or poorly disclosed, note this for later (courts have authority to reduce unconscionable interest). Consider contacting the company through proper channels — in writing only — to request a clear statement of account and discuss legitimate repayment options or restructuring. This shows good faith and can limit further collection pressure.
Send a formal cease-and-desist communication. Email the app’s official support address (and any listed collection email) and follow up with a notarized letter sent via registered mail or courier with return receipt. Clearly state your account details, demand that they immediately stop all contact with third parties, cease abusive language or threats, and provide a full accounting. Specify your preferred method and times for any legitimate future communication about the debt. Keep copies and proof of sending. This creates a strong paper trail.
Verify the company’s status. Search the SEC website or contact them to check if the lending company has a valid Certificate of Authority. Unregistered or revoked entities face additional violations.
File complaints with the appropriate regulators.
- National Privacy Commission (NPC) for data privacy violations (contact list access, shaming, unauthorized disclosure). File through their official channels on privacy.gov.ph or designated complaint forms. Strong evidence of third-party contact or public shaming is particularly effective here.
- Securities and Exchange Commission (SEC) for violations of MC No. 18, s. 2019. Use the SEC’s online complaint mechanisms or submit to the appropriate department (Financing and Lending Companies or Enforcement). Many filers use email with a specific subject format and attach a notarized complaint-affidavit plus evidence. The SEC has revoked authorities and imposed fines in multiple cases involving abusive collection.
- Philippine National Police (PNP) — Anti-Cybercrime Group or your local station — if there are credible threats of violence, extortion-like behavior, or other criminal acts. Bring your documentation. These complaints are generally free or low-cost to file and can result in orders to stop processing your data, delete improperly obtained information, pay administrative fines, or face license revocation.
Seek legal assistance if needed. The Public Attorney’s Office (PAO) provides free legal aid to qualified indigent clients. Local chapters of the Integrated Bar of the Philippines (IBP) also offer legal aid desks. A lawyer can help draft stronger demand letters, represent you in negotiations, or file a civil case for damages if regulatory action is insufficient.
Protect yourself going forward. Revoke app permissions on your phone, consider changing contact details or using privacy settings, and monitor your credit reports or accounts. If the harassment continues after formal complaints and orders, follow up with the agencies and consider court action.

Common Pitfalls and Real-Life Scenarios

Many borrowers make the mistake of completely ignoring the debt while fighting harassment — this can lead to accrued interest, higher collection costs, or a court case where you have fewer defenses. Others engage emotionally in calls or texts, which collectors sometimes use against them. Some assume that because the app is “just an app,” it is unregulated — in reality, registered companies are subject to SEC oversight, and even unregistered ones violate multiple laws.

Foreigners or overseas Filipino workers face extra challenges: time zone differences in calls, difficulty appearing in person, and sometimes apps assuming they can pressure relatives in the Philippines more easily. The same rights apply, and complaints can usually be filed remotely with scanned evidence. Apostille is rarely needed for initial administrative complaints.

Another frequent scenario involves third-party collectors hired by the app. These entities are also covered by the SEC circular, so complaints should name both the app/operator and the collector when possible.

Where and How to File Complaints

National Privacy Commission (NPC): Best for contact-list misuse and public shaming. Check privacy.gov.ph for current complaint procedures and forms. Provide screenshots showing third-party messages and app permission requests.

Securities and Exchange Commission (SEC): Primary for unfair collection practices under MC No. 18. Visit sec.gov.ph for lending company complaint instructions, use online portals where available, or email the relevant department with complete documentation. Subject lines often follow formats like “NAME_COMPANY_HARASSMENT”.

PNP Anti-Cybercrime Group: For criminal threats. File at a local station or through cybercrime channels with evidence of threats.

No filing fees are typically required for these administrative complaints, though notarization of affidavits may involve minimal cost. Expect acknowledgment within days and investigation timelines ranging from weeks (for urgent cease orders) to several months for full resolution, depending on evidence strength and agency workload.

Frequently Asked Questions

Can online lending apps legally contact my family and friends about my debt?
Generally no, if they are simply pulling names from your phone’s contact list without those individuals being named guarantors or co-makers in your loan agreement. This practice violates both SEC MC No. 18, s. 2019 and the Data Privacy Act. Named guarantors or co-makers may be contacted within limits, but broad “debt shaming” of unrelated contacts is prohibited.

Is it illegal for them to threaten arrest or jail time for an unpaid loan?
Yes, for a pure civil debt. Threatening criminal action that cannot legally be taken is explicitly prohibited under SEC rules. Arrest or criminal liability typically requires something more, such as estafa (fraud in obtaining the loan) or violation of the Bouncing Checks Law (BP 22) for dishonored checks. Mere non-payment of a loan does not lead to jail.

Do I still have to pay the loan even if the app is harassing me?
Yes, if the debt is valid and you received the funds. Harassment gives you strong remedies to stop the illegal tactics and potentially claim damages, but it does not cancel the underlying obligation. Addressing the debt legitimately while pursuing regulatory complaints is usually the most effective strategy.

What if the lending app is not registered with the SEC?
Report it anyway. Operating without authority is itself a violation, and the company and its operators remain subject to the Data Privacy Act, the Revised Penal Code (for threats or other crimes), and civil liability. The SEC’s Enforcement and Investor Protection Department handles complaints against unregistered entities.

Can I record phone calls from debt collectors as evidence?
Yes, and it is often helpful. For best results, announce at the beginning of the call that you are recording for your records. Written evidence such as text messages and emails is even stronger and avoids any debate over recording rules.

How long does it take for the SEC or NPC to act?
Urgent cases involving ongoing severe harassment can result in quick interim orders to stop certain conduct. Full investigations and resolutions typically take several weeks to months. Strong documentation and clear evidence of prohibited practices speed up the process.

Can I sue the lending company or collectors in court for damages?
Yes. You can file a civil case for damages based on abuse of rights (Civil Code) or quasi-delict, or pursue claims alongside or after regulatory complaints. In data privacy cases, the Supreme Court has upheld liability for damages in appropriate circumstances. Consult PAO or a lawyer for your specific situation.

I’m a foreigner or living abroad — can I still report this?
Absolutely. The same laws protect everyone dealing with Philippine lending companies. File complaints online or by email with scanned evidence and notarized documents where required. You may appoint a representative in the Philippines or work through counsel. Time zone and distance issues do not remove your rights.

Key Takeaways

Harassment by online lending apps is illegal when it involves threats, public shaming, profane language, or unauthorized use of your contact list under SEC MC No. 18, s. 2019 and the Data Privacy Act.
Document everything — screenshots, logs, and recordings create the evidence needed for effective complaints and potential court cases.
You can (and should) pursue regulatory complaints with the NPC for privacy violations and the SEC for unfair collection practices while separately addressing any valid debt through proper channels.
Threats of arrest for ordinary unpaid loans are false and themselves prohibited; legitimate collection cannot involve humiliation or third-party shaming.
Regulatory complaints are accessible and often free or low-cost; strong evidence leads to orders stopping the abuse, fines, and in serious cases, license revocation or criminal referrals.
Ignoring a valid debt while fighting harassment can backfire — combine protective steps with responsible communication about repayment when possible.
Legal aid is available through PAO or IBP if you need help drafting letters or navigating the process.
These protections apply equally to Filipinos in the Philippines and abroad, as well as foreigners dealing with Philippine lending platforms.

Taking systematic action protects your dignity and peace of mind while holding companies accountable. Many borrowers have successfully stopped abusive collection and resolved their situations by following these steps. Start with documentation and a formal demand today — the law is on your side when you use it properly.