If you're receiving repeated, unwanted emails from a lending app demanding payment or using pressure tactics, this situation can feel invasive and exhausting, especially when you're already managing financial stress. Philippine law gives you clear rights against abusive collection methods, including those delivered by email. This article explains what counts as harassment, the specific legal protections that apply, and the practical steps you can take right now to document everything, demand that it stops, and report the conduct to the proper government agencies.

What Counts as Email Harassment from a Lending App

Lending apps and their collection agents sometimes cross the line from legitimate reminders into harassment. Common examples include:

Sending multiple emails per day or week even after you have asked them to stop.
Using threatening, insulting, or profane language in the emails.
Making false claims such as threatening arrest, criminal charges like estafa for a civil debt, or “Supreme Court notices” that do not exist.
Misrepresenting their authority (for example, implying they are from a government agency or court).
Repeatedly referencing your personal circumstances in a shaming or coercive way.
Continuing to email after you have sent a clear written request to cease all contact.

These tactics violate rules on fair debt collection and can also amount to unjust vexation or misuse of personal data. Note that simply owing money is a civil matter; it is not a crime, and no one can be jailed solely for non-payment of a loan.

Your Legal Rights Under Philippine Law

Protections Under the Civil Code

The Civil Code provides broad safeguards for your dignity and peace of mind. Article 19 prohibits the abuse of rights. Articles 20 and 21 make a person liable for damages if they willfully cause injury through an act that is contrary to morals, good customs, or public policy. Article 26 specifically requires every person to respect the dignity, personality, privacy, and peace of mind of others. Persistent harassing emails can support a claim for moral and exemplary damages in court.

Criminal Liability Under the Revised Penal Code

Article 287 on unjust vexation covers any act that causes annoyance, irritation, or mental distress without legal justification. Philippine courts have applied this to persistent unwanted communications from debt collectors. If the emails contain serious threats of harm to you or your family, Article 282 on grave threats may also apply. The Cybercrime Prevention Act (RA 10175) can come into play if the conduct involves online libel or other computer-related offenses.

SEC Rules on Lending Companies (RA 9474 and SEC MC No. 18, s. 2019)

The Lending Company Regulation Act of 2007 (RA 9474) requires lending companies to register with the Securities and Exchange Commission (SEC) and operate under fair standards. SEC Memorandum Circular No. 18, Series of 2019 explicitly prohibits unfair debt collection practices by registered lending and financing companies, including online lending platforms. Prohibited conduct includes:

Harassment or intimidation through repeated messages or abusive language.
Threats of arrest or legal action that cannot legally be taken for a civil debt.
Use of obscene, insulting, or profane language.
Disclosure or threat of disclosure of your personal information to third parties.
Deceptive representations about the debt or the collector’s authority.
Contacting or pressuring third parties without proper basis.

These rules apply whether the harassment arrives by call, text, or email. The SEC can investigate, impose fines (up to PHP 1 million per violation), suspend or revoke licenses, and refer serious cases for criminal prosecution.

Data Privacy Act (RA 10173) and the National Privacy Commission

Your email address is personal data. If a lending app obtained or uses it in ways that go beyond what you consented to, or if emails form part of a pattern of unauthorized processing or shaming, this violates the Data Privacy Act. The National Privacy Commission (NPC) investigates such complaints. In the 2025 Supreme Court case Grace M. Trimillos v. FCash Global Lending, Inc. (G.R. No. 271360, August 13, 2025), the Court upheld an NPC ruling against a lending app that accessed a borrower’s contact list and messaged third parties about the loan. The decision awarded damages and supported criminal referral, showing that regulators and courts take data-driven harassment seriously.

Step-by-Step Guide: What to Do If a Lending App Harasses You by Email

Follow these actions in order. Each step builds evidence and strengthens your position.

Preserve all evidence immediately and thoroughly.
Do not delete any emails. Save the original messages (forward them to a secure personal account or export as PDF/EML). Take clear screenshots that show the full header information, sender address, date, time, subject line, and body. Create a simple log noting the date, time, sender, and a short description of the content (especially any threats or abusive language). Keep copies of the loan agreement, any payment records, and screenshots of the app interface if relevant. Strong documentation is the foundation of every successful report or case.
Send a clear written cease-and-desist demand.
Reply to the harassing email (and any official support address listed in the app or on their website) with a concise, firm message. State your full name, any loan reference number, and that you demand they immediately stop all further communications with you by email or any other means. Mention that continued contact will be documented and reported as harassment. Request written confirmation within five to seven days that they will cease contact and, if appropriate, delete or stop processing your personal data. Send the email and keep proof of sending (and any read receipt). For stronger proof, you can also send a physical letter via registered mail with return card. Keep a copy of everything.
Block the sender after documentation.
Once you have sent the demand and saved all prior emails, block the sender’s address(es) in your email client and mark previous messages as spam. Continue to monitor your spam or junk folder in case new harassing emails arrive—these become additional evidence of non-compliance.
Report internally to the company if channels exist.
Use any official customer support, compliance, or data protection officer email or in-app ticket system. Reference your cease-and-desist demand and attach or describe the evidence. Ask for confirmation that all collection activity and data processing will stop. This creates an internal record.
File a complaint with the Securities and Exchange Commission (SEC).
First, check whether the lender is registered by searching the SEC website for lists of recorded lending companies or financing companies. Prepare a clear narrative describing the pattern of emails, attach your evidence bundle (organized PDFs), your demand letter, and proof it was sent. Submit through the SEC’s online complaint system (imessage.sec.gov.ph or the Enforcement and Investor Protection Department section), or email the appropriate department (commonly eipd@sec.gov.ph, epd@sec.gov.ph, or cgfd_enforcement@sec.gov.ph). There is no filing fee for consumer complaints. The SEC can investigate unfair collection practices under MC No. 18 and take administrative action.
File a complaint with the National Privacy Commission (NPC) when data privacy issues are present.
This is especially useful if the app obtained your email or other data improperly, used it excessively, or if the emails are part of broader misuse. Download the complaint form from the NPC website (privacy.gov.ph). Fill it out completely, have it notarized, and attach your evidence. You can submit online through the NPC Complaints Management System, email it to complaints@privacy.gov.ph, or deliver it in person. The NPC can order the company to stop processing your data, delete unauthorized information, award damages in appropriate cases, and refer officers for criminal prosecution under the Data Privacy Act.
Consider filing a criminal complaint for unjust vexation or grave threats.
If the emails contain threats or the harassment is severe and persistent even after your demand, prepare a notarized complaint-affidavit detailing the facts and attach your evidence. File it with your local Philippine National Police station (for a blotter entry) or directly with the Office of the City or Provincial Prosecutor for preliminary investigation. Possible charges include unjust vexation under Article 287 of the Revised Penal Code. In serious cases involving threats or data misuse, the prosecutor may also consider violations under the Data Privacy Act or Cybercrime Prevention Act. Act promptly, as prescription periods for light offenses are short.
Explore civil remedies for damages and to stop the conduct.
You can file a civil complaint in the appropriate trial court (usually the Municipal Trial Court or Regional Trial Court depending on the claim) seeking moral and exemplary damages under the Civil Code provisions mentioned earlier, plus an injunction ordering the company to stop all harassing communications. Evidence of the emotional impact can support the damages claim. Many people combine this with the administrative or criminal routes.
Seek assistance if the situation feels overwhelming.
If you qualify as indigent, the Public Attorney’s Office (PAO) can provide free legal representation. You may also contact the Integrated Bar of the Philippines local chapter for legal aid referrals. For immediate safety threats, go to the nearest police station right away.

Common Challenges and Real-Life Scenarios

Many borrowers discover that the lending app is not properly registered with the SEC. In these cases, still file with the SEC (they can investigate illegal operations), the NPC, and law enforcement. Unregistered operations often strengthen the case for regulatory and criminal action.

Harassment sometimes continues after initial reports. Keep documenting every new email and follow up with the agencies in writing, referencing your original complaint number. Persistent violations can lead to stronger sanctions or court intervention.

If you are living abroad or are a foreigner who used a Philippine lending app, you can still file complaints with the SEC and NPC through their online and email channels. For court cases in the Philippines, you will generally need a Philippine lawyer and a Special Power of Attorney (which may require apostille if executed abroad). Your rights under the Data Privacy Act and fair collection rules remain available.

Disputed or old debts raise separate issues. The prescriptive period for actions based on written contracts is generally ten years under the Civil Code. Harassment claims stand independently of whether the debt is still enforceable.

Documents, Costs, and Typical Timelines

Core evidence for every path: Original or exported emails with headers, screenshots, your communication log, the cease-and-desist demand and proof of sending, any responses received, and copies of your government-issued ID.

SEC complaints: No filing fee. Initial acknowledgment often comes within days. Full investigation and resolution typically take several months, sometimes longer for complex cases. Possible outcomes include orders to cease, fines, license sanctions, or referral for prosecution.

NPC complaints: Notarization usually costs a few hundred pesos. Submit the notarized form with evidence. Investigations follow a similar timeframe. The NPC can order corrective actions, award damages (nominal damages have been granted in data privacy lending cases), and refer for criminal prosecution.

Criminal complaints: Notarization for your affidavit. The prosecutor’s preliminary investigation generally takes 15 to 60 days depending on the case load and complexity. If probable cause is found, an information is filed in court (usually MTC for unjust vexation). Trial length varies.

Civil cases: Filing fees depend on the amount of damages claimed. Small claims procedures may apply in simpler money claims, but harassment claims seeking injunctions often proceed under regular rules. A lawyer can help assess venue and strategy.

Frequently Asked Questions

Is it legal for a lending app to send me repeated collection emails?
Initial reminders may be permissible, but once you clearly demand in writing that they stop, continued emails can violate SEC fair collection rules and constitute unjust vexation under the Revised Penal Code.

What if the emails threaten arrest or say I will be sued in the Supreme Court?
Threats of arrest or criminal action for a civil debt are baseless and prohibited under SEC MC No. 18, s. 2019. False legal threats strengthen both administrative complaints to the SEC and potential criminal charges for unjust vexation or grave threats.

Can I be jailed simply for not paying a lending app loan?
No. Non-payment of a civil debt is not a crime in the Philippines. Only specific acts like estafa (fraud) in obtaining the loan can lead to criminal liability, and those require proof of deceit at the time the loan was taken.

How do I check if the lending app is legitimate?
Visit the SEC website and search the lists of registered lending companies and financing companies. Legitimate operators should be able to provide their Certificate of Authority. Many problematic apps operate without proper registration.

Should I reply to or argue with the sender of the harassing emails?
Send one clear, professional cease-and-desist demand as described above, then stop engaging. Emotional or lengthy replies can complicate matters and are rarely helpful. All further communication should go through formal channels or your lawyer.

What evidence works best when reporting email harassment?
Complete original emails or accurate exports showing headers, dates, times, and full content, plus a chronological log and proof of your written demand to stop. Organized, timestamped evidence carries significant weight with the SEC, NPC, and prosecutors.

How long does it usually take for the SEC or NPC to act on a complaint?
You will typically receive an acknowledgment within days. Investigations and resolutions often take several months. Follow up in writing if you do not hear back within a reasonable time, referencing your complaint number.

I live abroad. Can I still report harassment by a Philippine lending app?
Yes. Both the SEC and NPC accept complaints submitted online or by email. For any court proceedings in the Philippines, you will need a local lawyer and appropriate authorization documents.

If the harassment also involves my contacts or other personal data, which agency should I prioritize?
Start with the NPC for data privacy violations and the SEC for unfair collection practices. You can file with both; the agencies sometimes coordinate. The Supreme Court’s decision in the Trimillos case illustrates how seriously unauthorized use of personal data in lending collection is treated.

Key Takeaways

Philippine law, through the Civil Code, Revised Penal Code, RA 9474, SEC MC No. 18 s. 2019, and the Data Privacy Act, protects you from abusive email collection tactics by lending apps.
The single most important first actions are to preserve every email with full details and send a clear written demand that all contact cease.
Report registered or operating lending companies to the SEC for unfair collection practices and to the NPC when personal data is misused.
Severe or threatening emails can support criminal complaints for unjust vexation or grave threats through the prosecutor’s office.
Strong, organized evidence dramatically improves outcomes across administrative, criminal, and civil remedies.
You can take these steps even if you owe money—the harassment claim stands separately from the underlying debt.
Acting promptly and methodically stops most harassment and holds companies accountable under current Philippine rules and recent court decisions.