If an online lending app keeps calling, texting, threatening to expose your debt, contacting your family or workplace, or using your contact list to shame you, you do not have to just endure it. Philippine law allows lenders to collect valid debts, but it does not allow harassment, public shaming, threats, misuse of personal data, or abusive collection tactics. This guide explains what counts as illegal or unfair collection, what evidence to save, where to complain, and what to realistically expect when you report online lending app harassment in the Philippines.

First, Separate the Debt From the Harassment

A common fear is: “May utang ako, so wala na akong karapatan magreklamo.” That is not true.

If you borrowed money under a valid loan agreement, the debt may still be collectible. Under Article 1159 of the Civil Code, obligations from contracts have the force of law between the parties and should be complied with in good faith. But the lender must also act within the law. The 1987 Constitution also says no person shall be imprisoned for debt or non-payment of a poll tax, so a collector’s threat that you will automatically be jailed simply because you cannot pay a loan is misleading. (Lawphil)

A legitimate lender may send reminders, demand letters, account statements, or file a civil collection case. What it cannot do is use humiliation, threats, unauthorized contact-list blasting, fake criminal accusations, or abusive language as a shortcut to force payment.

What Online Lending App Harassment Looks Like

In practice, complaints against online lending apps in the Philippines usually involve one or more of these acts:

Repeated calls or texts late at night or early morning
Threats to post your photo, ID, loan details, or “scammer” label online
Messages sent to your spouse, parents, siblings, friends, employer, co-workers, or neighbors
Calling your workplace to embarrass you
Using profanity, insults, intimidation, or threats of violence
Telling people you committed a crime when the issue is only unpaid debt
Accessing your phone contacts, photos, gallery, SMS, or social media without a lawful and proportionate reason
Threatening legal action they cannot legally take
Pretending to be police, NBI, court staff, barangay officials, or lawyers
Demanding “advance fees” before loan release or threatening you after you refuse to pay such fees

The SEC has specifically identified unfair debt collection practices under SEC Memorandum Circular No. 18, Series of 2019. These include threats of violence or criminal means, obscene or profane language, disclosure or publication of borrower names and personal information, contacting people in the borrower’s contact list who are not guarantors or co-makers, and unreasonable-hour collection contacts. (SEC Appointment System)

Your Key Rights Under Philippine Law

1. Your contacts are not automatically liable for your loan

A character reference is not the same as a guarantor.

A character reference is someone whose details may be used to verify identity or information. A guarantor is someone who expressly agrees to answer for the debt if the borrower defaults. The NPC has emphasized that a character reference should not automatically be treated as a guarantor, and lenders must give character references information about how their details were obtained and the option to have their data removed. (National Privacy Commission)

In the 2026 joint advisory on online lending platforms, the DICT, NPC, and SEC stated that contacting people in the borrower’s contact list other than named guarantors is prohibited for debt collection purposes. It also states that guarantors must give separate consent before being bound to any obligation.

2. The app cannot process excessive personal data

The Data Privacy Act of 2012, or RA 10173, requires personal data processing to follow the principles of transparency, legitimate purpose, and proportionality. Personal information must be adequate and not excessive, collected for specified legitimate purposes, and retained only as long as necessary. (National Privacy Commission)

For loan-related transactions, the NPC has issued special rules because many complaints involve online lending apps accessing phone contacts and using them for harassment. The NPC’s amended rules prohibit unnecessary processing and unnecessary app permissions, and require notices explaining how specific information will be processed. (National Privacy Commission)

3. Lenders cannot use abusive collection or debt recovery practices

RA 11765, or the Financial Products and Services Consumer Protection Act of 2022, applies to financial products and services and gives regulators such as the SEC authority over covered financial service providers. It expressly prohibits financial service providers from using abusive collection or debt recovery practices and requires fair treatment, privacy protection, complaint mechanisms, and responsible disclosure. (Supreme Court E-Library)

4. The lender remains responsible for its collectors

Some apps blame “third-party collectors” and say they are not responsible. SEC MC No. 18 says financing companies and lending companies may outsource collection, but the third-party service provider is treated as their agent, and the ultimate responsibility for collection practices remains with the financing or lending company.

5. Harassment may also become a criminal or civil matter

Depending on the facts, the conduct may fall under the Revised Penal Code provisions on threats, coercions, unjust vexation, or libel, and under RA 10175, or the Cybercrime Prevention Act of 2012, when libel or other punishable acts are committed through a computer system or similar means. (Lawphil)

The Civil Code may also support a civil claim for damages. Article 26 requires every person to respect the dignity, personality, privacy, and peace of mind of others, and recognizes causes of action for acts such as meddling with private life or family relations and vexing or humiliating another. (Lawphil)

What to Do Immediately When an Online Lending App Harasses You

1. Do not delete the app messages yet

Your instinct may be to delete everything because the messages are traumatic. Before deleting, preserve evidence.

Save:

Screenshots of texts, chat messages, in-app notices, and social media posts
Call logs showing dates, times, and numbers
Audio recordings or voicemails, if available
The app name, company name, app icon, website, and app store page
Loan agreement, disclosure statement, payment schedule, and proof of payments
Screenshots of permissions requested by the app
Messages sent to your family, employer, co-workers, or friends
Names or aliases used by collectors
GCash, Maya, bank, or remittance records
Demand letters or emails
Any fake “warrant,” “subpoena,” police threat, or public-shaming template sent to you

For contacts who received messages, ask them to send you screenshots showing the sender, date, time, and full message. If the message was sent to your employer, ask HR or the recipient to preserve the message without replying aggressively.

2. Revoke unnecessary app permissions

On your phone settings, check the app permissions. Revoke access to contacts, camera, photos, microphone, location, and SMS unless truly necessary. The 2026 joint advisory reminds users to review app permissions and says OLPs must not request unnecessary permissions unless needed for specified and legitimate purposes. It also says contact-list access may only be used in limited, proportionate ways, such as allowing selection of references or guarantors, not unbridled processing.

Do not rely only on uninstalling the app. If the app already copied your data, uninstalling may not undo the misuse. Still, revoking permissions and changing passwords can reduce further exposure.

3. Send one clear written objection

A short message is enough. Do not argue for hours.

Example:

I am disputing your collection methods. Stop contacting my relatives, employer, co-workers, friends, and other persons who are not guarantors or co-makers. Stop disclosing my personal information. Any further harassment, threats, public shaming, or unauthorized processing of my personal data will be included in my complaints with the SEC, NPC, PNP/NBI Cybercrime, and other proper authorities.

Send it through the app’s official support email, in-app help center, or known company email if available. Screenshot your message and their response or lack of response.

4. Do not admit false allegations

Avoid saying things like “Yes, I committed fraud” or “Yes, I scammed you” just to calm the collector down. If the issue is inability to pay, keep your language neutral:

“I acknowledge there is an account under my name.”
“I am asking for a proper statement of account.”
“I dispute the unlawful collection methods.”
“Please communicate only through official channels.”

5. Pay only through verified channels

If you decide to pay or settle, verify the legal entity first. Ask for:

Full corporate name
SEC registration number
Certificate of Authority number
Official payment channel
Updated statement of account
Written confirmation that payment will be applied to your specific loan

RA 9474 regulates lending companies, while RA 8556 regulates financing companies. The Truth in Lending Act, RA 3765, also protects borrowers by requiring disclosure of finance charges in credit extensions. (Lawphil)

Be careful with collectors asking you to send payment to a personal e-wallet or individual bank account without an official receipt.

Where to File a Complaint

Situation	Main office to approach	What it can address
Abusive collection by lending or financing company or online lending platform	SEC Financing and Lending Companies Department through SEC iMessage	Unfair debt collection, unregistered or unrecorded OLP concerns, violations by lending/financing companies
Misuse of contacts, photos, IDs, messages, or personal data	National Privacy Commission	Data Privacy Act violations and unlawful/excessive processing
Threats, extortion, fake warrants, cyber harassment, hacking, identity misuse	PNP Anti-Cybercrime Group, NBI Cybercrime Division, DICT Cyber Hotline	Criminal investigation and cyber-related incidents
Public posts calling you a scammer or criminal	PNP/NBI cyber units, prosecutor’s office, and possibly civil court	Cyberlibel, threats, damages, related remedies
Creditor sues you for collection	First-level court, often small claims if within threshold	Civil money claim; present receipts, defenses, settlement proof

The 2026 joint advisory specifically tells the public to report unfair debt collection practices to the SEC FINLEND through the SEC iMessage portal and lists cyber channels for other forms of harassment, threats, frauds, and scams.

How to File With the SEC

File with the SEC when the complaint involves a lending company, financing company, or online lending platform using unfair debt collection practices.

Prepare these details

Your full name and contact details
App name and company name, if known
Screenshots of the app profile or app store listing
Loan date, amount borrowed, amount received, interest, fees, and due date
Evidence of harassment
Names and numbers used by collectors
Screenshots from your contacts who were messaged
Proof that the contacted people were not guarantors or co-makers
Proof of payments, if any
Your written objection to the lender, if sent

Practical filing steps

Go to the SEC iMessage complaint portal.
Choose the category closest to lending/financing or online lending concerns.
Attach screenshots and documents in organized files.
Describe events in chronological order.
Include the exact abusive acts: late-night calls, public shaming, contacting non-guarantors, threats, profanity, false representations, or disclosure of personal information.
Save your ticket number and confirmation email.
Add more evidence if the harassment continues.

SEC MC No. 18 imposes administrative penalties for violations, including fines and, for serious or repeated violations, possible suspension or revocation of authority to operate.

How to File With the National Privacy Commission

File with the NPC when the core issue is personal data misuse, such as contact-list harvesting, sending your loan information to third parties, posting your ID or photo, retaining your data after closure, or using permissions beyond what is necessary.

The NPC’s complaint page says a formal complaint must follow a specific format: download the form, fill it out, have it notarized, then submit it in person, by courier, or by scanned email. (National Privacy Commission)

Include these in an NPC complaint

Your identity and contact information
The lending app or company complained of
A clear narration of what happened
Screenshots showing unauthorized disclosure or contact-list misuse
Proof that the recipient was not a guarantor
Screenshots of app permissions
Privacy notice or consent screen, if available
Your request for relief, such as deletion, cessation of processing, or investigation
Copies of communications with the company

If you are a Filipino overseas or a foreigner abroad dealing with a Philippine online lending app, notarization can be more complicated. Documents signed abroad for use in the Philippines may need Philippine consular notarization or local notarization followed by apostille, depending on the country and document type. Philippine embassy guidance generally recognizes consular notarization for private documents and, where applicable, local notarization followed by apostille by the competent foreign authority. (Philippine Embassy)

When to Go to PNP, NBI, or DICT Cyber Channels

Go beyond SEC/NPC and report to cybercrime authorities when there are signs of a criminal or cyber offense, such as:

Threats to harm you or your family
Extortion
Fake police, court, prosecutor, or barangay documents
Hacking or unauthorized account access
Identity theft
Public posts accusing you of a crime
Edited photos or humiliating posts
Mass messaging to your contact list
Threats to send your information to immigration, employers, or government offices using false claims

For urgent threats, make a police blotter and bring printed screenshots. For cyber complaints, bring both printed copies and digital files, because investigators often need original message links, URLs, sender numbers, and metadata when available.

What If the App Is Not Registered With the SEC?

Still file the complaint.

An unregistered or unrecorded online lending platform may be more difficult to trace, but the evidence can help regulators and cybercrime authorities identify patterns, payment channels, domain names, phone numbers, or responsible persons.

SEC Memorandum Circular No. 19, Series of 2019 deals with disclosure requirements in advertisements of financing and lending companies and the reporting of online lending platforms. (SEC Appointment System)

When the app hides its company name, include:

App name and logo
Developer name in the app store
Package name, if visible
Website or landing page
Phone numbers and email addresses used
Payment accounts
Screenshots of ads
Social media pages
Links to public posts, if any

Common Scenarios

“They messaged my mother, boss, and officemates.”

This is one of the most common online lending app harassment patterns. If those people are not guarantors or co-makers, include that fact in your SEC and NPC complaints. Ask each recipient for screenshots. If your employer received the message, request a copy without escalating the workplace drama further.

“They posted my photo and called me a scammer.”

This may involve unfair debt collection, data privacy violations, and possibly cyberlibel depending on the words used, publication, identifiability, and malice. Preserve the URL, screenshot, date, time, account name, and comments. Do not only screenshot the post; copy the link before it disappears.

“They call me at midnight.”

SEC guidance treats collection contact at unreasonable hours as unfair. A 2025 PIA report quoting SEC counsel explained that calls between 10:01 p.m. and 5:59 a.m. to demand payment may be considered unfair collection. (Philippine Information Agency)

“They said they will send police to arrest me.”

Unpaid debt alone is not a ground for imprisonment. However, do not ignore actual court papers if you receive them. A real collection case comes from a court, has a docket number, and is served through proper procedures. A random text saying “warrant today” is often intimidation, but it should still be preserved as evidence.

“They are offering settlement but still harassing me.”

Ask for a written settlement computation and payment channel. If you pay, keep proof and demand a confirmation that the account is closed or updated. If harassment continues after payment, include the proof of payment and the continued messages in your complaint.

“They sued me in small claims.”

For money claims not exceeding the current small claims threshold, creditors may use the small claims process in first-level courts. The Supreme Court has increased the threshold for small claims cases to ₱1,000,000.00, covering money owed under loans and other credit accommodations. (Supreme Court of the Philippines)

If you receive court papers, read the date carefully. Gather receipts, screenshots of payments, settlement agreements, excessive charge evidence, and proof of identity issues. Small claims cases move faster than ordinary civil cases, and lawyers generally do not appear for parties in the same way they do in regular cases.

Evidence Checklist

Evidence	Why it matters
Screenshots of threats and insults	Shows unfair collection, intimidation, or possible criminal conduct
Messages sent to family, friends, employer, or co-workers	Proves third-party contact and disclosure
Proof recipients were not guarantors	Important for SEC/NPC complaints
App permissions screenshot	Supports excessive data processing claim
Loan agreement and disclosure statement	Shows actual terms, fees, and parties
Payment receipts	Prevents false balance claims
Call logs	Shows frequency and unreasonable-hour calls
Public post links	Important for cyberlibel or public shaming evidence
Written complaint to lender	Shows you objected and asked them to stop
SEC/NPC ticket numbers	Helps follow up and consolidate future evidence

Practical Timelines and Bottlenecks

Process	Practical expectation
SEC online complaint	Ticket confirmation may be quick, but evaluation and enforcement can take weeks or months depending on evidence, volume, and whether the company is identifiable
NPC formal complaint	Takes longer if the complaint is incomplete, not notarized, lacks attachments, or does not first show communications with the respondent
Police blotter	Can often be done the same day, but investigation depends on the evidence and traceability of accounts or numbers
NBI/PNP cyber complaint	May require personal appearance, printed screenshots, device inspection, links, and digital copies
Small claims collection case	Faster than ordinary civil cases; deadlines in court papers should be followed strictly

A common bottleneck is weak evidence. Screenshots without dates, cropped sender details, missing app names, or deleted posts make investigation harder. Organize your evidence before filing.

Frequently Asked Questions

Can an online lending app contact my contacts in the Philippines?

For debt collection, they should not contact people in your contact list unless they are named guarantors or co-makers. A character reference is not automatically liable for your loan.

Can I be jailed for not paying an online loan?

Not for debt alone. The Constitution prohibits imprisonment for debt. But if separate criminal acts are involved, such as fraud, falsification, threats, or cybercrimes, those are different issues and require proper legal proceedings.

Is it illegal for lending apps to access my contacts?

Access is not automatically lawful just because you clicked “allow.” Under data privacy rules, processing must be lawful, necessary, proportionate, and tied to a legitimate purpose. Unbridled contact-list processing, especially if used for harassment or debt collection against non-guarantors, is prohibited.

Where should I complain first: SEC or NPC?

If the main issue is abusive collection by a lending or financing company, start with the SEC. If the main issue is misuse of personal data, contact-list harvesting, posting your ID or photo, or unauthorized disclosure, file with the NPC. Many cases justify filing with both.

What if the app is fake or unregistered?

Report it anyway. File with the SEC and, if there are threats, scams, or cyber harassment, with PNP/NBI cybercrime channels. Include app store links, developer names, payment accounts, phone numbers, and screenshots.

Should I still pay the loan?

If the loan is legitimate, the debt may remain collectible even if the collection method is unlawful. Ask for a proper statement of account, verify the lender, and pay only through official channels. Harassment is not a legal reason to ignore actual court papers or a valid settlement obligation.

Can they post my name as a delinquent borrower?

Publicly posting or disclosing your name, photo, loan details, ID, or personal information to shame you can violate SEC rules and data privacy principles. Save the post link and screenshots immediately.

What if they call my employer?

If your employer is not a guarantor or co-maker, this can be an unfair collection practice and a privacy issue. Ask your employer or HR for screenshots or a written note confirming the call or message, then include it in your SEC and NPC complaints.

Can foreigners file complaints against Philippine online lending apps?

Yes, if the matter involves a Philippine lender, Philippine online lending platform, or processing connected to the Philippines. If you need to submit sworn documents from abroad, check whether consular notarization or apostille is required for the document to be accepted in the Philippines.

Can I sue for damages?

Possibly, especially if the harassment caused reputational harm, privacy invasion, workplace embarrassment, or emotional distress. Civil Code Article 26 may be relevant, and cyberlibel, threats, coercion, or data privacy violations may also create separate remedies depending on the facts and evidence.

Key Takeaways

A lender may collect a valid debt, but it cannot harass, shame, threaten, or misuse your personal data.
Contacting your family, friends, employer, or phone contacts for collection is generally prohibited unless they are guarantors or co-makers.
Save evidence before blocking, uninstalling, or deleting anything.
File unfair debt collection complaints with the SEC and privacy complaints with the NPC.
Report threats, fake warrants, extortion, hacking, identity theft, and public shaming to cybercrime authorities.
Unpaid debt alone does not mean you can be jailed, but real court papers should never be ignored.
Character references are not automatically guarantors.
For borrowers abroad, notarized complaints or affidavits may need consular notarization or apostille depending on where they are executed.