If an online lending app is calling you nonstop, threatening to shame you online, messaging your relatives or co-workers, or posting your name and photo as a “bad payer,” you are not powerless. In the Philippines, lenders may collect valid debts, but they cannot use harassment, public humiliation, threats, false accusations, or misuse of your personal data as collection tactics. This guide explains what counts as online lending app harassment, which Philippine laws protect you, how to preserve evidence, where to file complaints, and how to handle the actual loan without making the situation worse.

What Counts as Online Lending App Harassment?

Online lending app harassment usually happens when a lender, collection agent, or automated collection system pressures a borrower in a way that goes beyond lawful debt collection.

Common examples include:

Calling or texting you repeatedly in a threatening or abusive manner
Calling before 6:00 a.m. or after 10:00 p.m. in prohibited situations
Messaging people in your phone contacts who are not your guarantors or co-makers
Telling your family, employer, clients, or friends that you owe money
Posting your name, face, ID, address, or phone number online
Sending messages such as “scammer,” “magnanakaw,” “estafador,” or “wanted”
Threatening arrest, barangay action, police action, or imprisonment for simple nonpayment
Threatening to visit your home or workplace to embarrass you
Using fake court documents, fake police notices, or fake lawyer letters
Creating group chats to shame you
Using obscene, insulting, or degrading language
Refusing to give a clear breakdown of principal, interest, penalties, and fees

The important distinction is this: a lender may demand payment, but it must do so through lawful, fair, and reasonable means. A debt does not give a lending app the right to destroy your privacy, reputation, employment, or family relationships.

Can Online Lending Apps Collect Debts in the Philippines?

Yes. If you borrowed money, signed up for a loan, received funds, and the loan is valid, the lender may demand payment. It may send reminders, demand letters, account statements, settlement offers, or file a civil case if the debt remains unpaid.

But Philippine law regulates lending companies and financing companies. Under RA 9474, the Lending Company Regulation Act of 2007, a lending company must generally be a corporation and must have authority from the Securities and Exchange Commission before doing lending business. Financing companies are also regulated under RA 8556, the Financing Company Act of 1998.

For online lending platforms, the SEC has also required disclosures and reporting of online lending platforms through rules such as SEC Memorandum Circular No. 19, Series of 2019.

This means you should separate two issues:

Issue	What it means
The debt itself	You may still have to pay a valid loan, including lawful interest and charges.
The collection method	The lender or collector may still be liable if it uses harassment, threats, public shaming, or illegal data processing.

Even if the lender is SEC-registered, it is not allowed to harass you.

Your Legal Rights Against Online Lending App Harassment

1. Debt collection must be fair, lawful, and reasonable

The main SEC rule on abusive collection is SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices by financing companies, lending companies, and their third-party collection service providers.

Under this circular, unfair debt collection practices include:

Using or threatening violence or criminal means to harm a person, reputation, or property
Threatening action that cannot legally be taken
Using obscenities, insults, or profane language amounting to a criminal offense
Publishing or disclosing names and personal information of borrowers who allegedly refuse to pay
Communicating false loan information
Using false representations or deceptive means to collect a debt
Contacting borrowers before 6:00 a.m. or after 10:00 p.m., except in limited situations
Contacting people in the borrower’s contact list other than named guarantors or co-makers

A key point many borrowers miss: even if you allowed the app to access your contacts, SEC rules still treat contacting people in your contact list as unfair if those people are not your guarantors or co-makers.

The SEC circular also states that lenders remain ultimately responsible for collection activities even if they outsource collection to third-party service providers. A lending app cannot simply say, “That was our collection agency, not us.”

2. Your personal data is protected by the Data Privacy Act

The Data Privacy Act of 2012 protects personal information, including your name, address, phone number, ID details, photos, employment information, loan information, and contact list.

Under the law, consent must be freely given, specific, informed, and recorded through written, electronic, or other lawful means. A vague permission request such as “allow access to contacts” does not automatically give a lender unlimited authority to shame you, message everyone you know, publish your photo, or disclose your debt.

Possible data privacy violations may include:

Harvesting your entire contact list without proper basis
Texting your relatives, employer, clients, or friends about your debt
Posting your ID, selfie, address, or phone number online
Sharing your loan details with people who have no legal need to know
Using your photo in “wanted,” “scammer,” or “bad payer” posts
Retaining or using your data beyond what is necessary for the loan

The National Privacy Commission can receive complaints, investigate possible violations, order corrective measures, and, in proper cases, recommend further action.

3. Threats, public shaming, and fake accusations may be criminal

Depending on the exact words and acts used, online lending app harassment may also involve criminal offenses.

Relevant provisions may include:

Grave threats under Article 282 of the Revised Penal Code, if the collector threatens to commit a crime against you, your family, your honor, or your property
Grave coercion under Article 286, if violence or intimidation is used to force you to do something against your will
Unjust vexation under Article 287, for acts that unjustly annoy, irritate, or torment another person
Libel under Article 353, if there is a public and malicious imputation that tends to dishonor or discredit you
Cyber libel under RA 10175, the Cybercrime Prevention Act of 2012, if libel is committed through a computer system, social media, messaging app, website, or similar digital platform
Computer-related identity theft, if someone misuses identifying information belonging to you or another person without right
Other cybercrime-related offenses, depending on the facts

Not every rude message is automatically a criminal case. But threats of harm, fake criminal accusations, forged legal notices, identity misuse, or public shaming posts should be taken seriously and documented properly.

4. You may have a civil claim for damages

The Civil Code of the Philippines also provides general rules against abusive conduct.

Important provisions include:

Article 19: Every person must act with justice, give everyone his due, and observe honesty and good faith.
Article 20: A person who willfully or negligently causes damage to another contrary to law must indemnify the injured person.
Article 21: A person who willfully causes loss or injury in a way contrary to morals, good customs, or public policy must compensate the injured person.
Article 26: The law protects the dignity, personality, privacy, and peace of mind of individuals.

If harassment causes reputational damage, emotional distress, job problems, business loss, or family conflict, a civil claim may be possible if you can prove the unlawful act, damage, and causal connection.

What to Do Immediately If You Are Being Harassed

1. Do not panic, threaten back, or make emotional admissions

Collectors often try to make borrowers respond in anger or fear. Avoid replying with threats, insults, or statements that can be used against you.

Instead:

Keep your replies short and calm.
Ask for a written statement of account.
Ask for the collector’s full name, company, authority to collect, and official contact details.
Do not agree to inflated amounts you do not understand.
Do not send money to personal e-wallets or bank accounts.
Do not give new personal information unless you are sure who you are dealing with.

A simple response is enough:

Please send the complete statement of account, including principal, interest, penalties, fees, payments received, and the legal basis for the charges. Please communicate only through this number/email and stop contacting third parties who are not guarantors or co-makers.

2. Preserve evidence before blocking or deleting anything

Your complaint will be stronger if your evidence is organized. Before deleting the app, changing your number, or blocking collectors, capture proof.

Save the following:

Evidence	Why it matters
Screenshots of texts, chats, emails, and app notifications	Shows the exact words used by the collector
Screen recordings	Useful when messages disappear or the app hides details
Call logs	Shows frequency, timing, and phone numbers used
Voice recordings or voicemail, if available	May show threats or abusive language
Social media posts or group chats	Important for cyber libel, public shaming, or privacy complaints
Messages received by your contacts	Proves third-party contact and disclosure
App name, app store link, screenshots, and developer name	Helps identify the platform
Loan agreement and disclosure statement	Shows terms, rates, fees, and consent clauses
Payment receipts and transaction records	Helps dispute inflated balances
Your written complaint or demand to the lender	Important for SEC and NPC complaints
IDs of collectors, if provided	Helps identify responsible persons

For screenshots, try to include the date, time, phone number, profile name, URL, or group name. Ask affected contacts to send you screenshots from their own phones. If the matter becomes criminal, they may later need to execute affidavits.

3. Verify whether the lender or online lending platform is authorized

Check the lender’s legal identity. Do not rely only on the app name because some apps use trade names that differ from the corporation behind them.

Look for:

Corporate name
SEC Registration Number
Certificate of Authority number
Business address
Official website
App name or online lending platform name
Collection agency name, if any

You can check the official SEC list of recorded online lending platforms and SEC advisories on unrecorded or illegal lending apps.

If the app is unrecorded, unauthorized, or hiding its corporate identity, include that in your complaint.

4. Send a written notice to stop harassment and misuse of data

A written notice helps show that you clearly objected to the harassment and data misuse. It is also important because the National Privacy Commission generally requires proof that you first gave the respondent a chance to address the privacy violation before filing a formal complaint.

Send the notice through channels you can prove:

Official email address
In-app support chat
Website contact form
Registered business email
Messenger or SMS, if that is the only channel available

You may write:

I am formally objecting to your collection practices. Your collectors have contacted people who are not my guarantors or co-makers and have disclosed my alleged loan information to third parties. I demand that you immediately stop contacting my contacts, employer, relatives, friends, and other third parties; stop publishing or threatening to publish my personal information; and limit communications to me through this number/email.

Please also provide a complete written statement of account showing the principal, interest, penalties, fees, payments received, and the legal basis for all charges. I am preserving evidence and will file complaints with the proper government agencies if these practices continue.

For NPC purposes, keep proof that the notice was sent. If there is no response or no timely and appropriate action within 15 calendar days, you may proceed with a formal NPC complaint, unless the situation also requires immediate law enforcement action because of threats, blackmail, identity theft, or public shaming.

5. Revoke app permissions and secure your accounts

After preserving evidence, reduce further exposure:

Revoke the app’s access to contacts, camera, photos, microphone, and location.
Change passwords for email, social media, and e-wallet accounts.
Enable two-factor authentication.
Review privacy settings on Facebook, Instagram, Viber, WhatsApp, Telegram, and other messaging apps.
Warn close contacts that they may receive scam-like or harassing messages.
Report abusive accounts or posts to the platform.
Keep your SIM, e-wallet, and bank accounts secure.

Do not factory reset your phone until you have saved the evidence you need.

Where to File Complaints Against Online Lending App Harassment

Different agencies handle different parts of the problem. In serious cases, you may need to file with more than one office.

Problem	Where to file	What to prepare
Unfair debt collection, abusive collectors, contacting third parties, unregistered or unrecorded online lending app	Securities and Exchange Commission	Screenshots, call logs, app details, corporate name, loan documents, proof of harassment
Misuse of contacts, publication of personal data, disclosure of loan information, unauthorized processing of photos/IDs	National Privacy Commission	Notarized complaint or complaint-assisted form, evidence, proof of written notice to respondent, proof of 15-day waiting period where required
Threats, blackmail, fake posts, cyber libel, identity theft, fake legal documents, hacking, extortion	PNP Anti-Cybercrime Group, NBI Cybercrime Division, or Prosecutor’s Office	Complaint-affidavit, screenshots, URLs, sender details, phone numbers, witness affidavits, IDs
Local in-person harassment by known individuals	Barangay, police station, or prosecutor depending on facts	Blotter, witnesses, photos/videos, IDs, address details
Civil damages for privacy, reputation, emotional distress, or business loss	Proper court	Evidence of unlawful act, damage, and connection between the two

Filing with the SEC

The SEC handles complaints involving lending companies, financing companies, and online lending platforms. You may use the SEC iMessage portal to submit complaints and track a ticket.

Your SEC complaint should include:

Your full name and contact details
Name of the online lending app
Corporate name of the lender, if known
SEC Registration Number or Certificate of Authority, if shown in the app or contract
Loan account number, if any
Date and amount borrowed
Amount claimed by the lender
Detailed description of harassment
Screenshots, call logs, messages, and proof that contacts were messaged
App store link or website link
Names or numbers of collectors, if available

Be specific. Instead of writing only “they harassed me,” write:

On June 3, 2026, at around 7:15 a.m., collector using number 09XX-XXX-XXXX texted my sister, who is not my guarantor or co-maker, and stated that I was a scammer and would be reported to my employer. Screenshots are attached.

The SEC can impose administrative sanctions on covered lending or financing companies. Under SEC Memorandum Circular No. 18, penalties may include fines, suspension of lending or financing activities, or revocation of the company’s Certificate of Authority, depending on the offense and gravity.

Filing with the National Privacy Commission

File with the NPC if the problem involves misuse of personal data, such as:

Contacting your phone contacts
Publishing your name, face, ID, or address
Disclosing your debt to your employer or relatives
Using your personal information beyond what you consented to
Refusing to delete or stop using your data despite your written objection

The NPC provides a complaint filing page and detailed mechanics for complaints.

In practice, prepare:

A filled-out NPC complaint-assisted form or verified complaint
Your valid ID
Screenshots and evidence
Witness affidavits, if other people received messages
Proof that you informed the lender in writing of the privacy violation
Proof that the lender failed to respond or failed to take appropriate action within 15 calendar days, when required
A notarized complaint, if filing a formal complaint
Special Power of Attorney, if someone else will file for you

NPC procedures can be strict. A complaint may be dismissed if it lacks evidence, does not identify the respondent, does not involve a Data Privacy Act issue, or fails to show that you first gave the respondent a chance to address the violation.

Reporting to NBI Cybercrime or PNP Anti-Cybercrime Group

Go to law enforcement if the harassment involves threats, blackmail, cyber libel, fake accounts, identity theft, forged legal notices, hacking, or extortion.

The NBI Cybercrime Division citizen’s charter page describes the filing of complaints for computer-related crimes. You may also report to the PNP Anti-Cybercrime Group or, in proper cases, file directly with the Office of the City or Provincial Prosecutor.

Bring or prepare:

Valid government ID
Printed screenshots
Digital copies of evidence
URLs of posts or profiles
Phone numbers, usernames, email addresses, and account names used
App name and lender details
Loan documents
Names and contact details of witnesses
Complaint-affidavit, if required
Your phone, if investigators need to inspect messages or logs

For cyber libel or online posts, capture the URL, account name, date, time, and full context. A cropped screenshot may not be enough.

How to Handle the Actual Loan While Complaints Are Pending

Filing a complaint does not automatically erase a valid debt. If you borrowed money and the loan is enforceable, you should still handle the account carefully.

Practical steps:

Request a complete statement of account. Ask for principal, interest, processing fees, penalties, payments received, and total balance.
Check if the charges were disclosed. Under RA 3765, the Truth in Lending Act, creditors must disclose the true cost of credit in writing before the transaction is completed.
Dispute unclear or inflated charges in writing. Do not merely argue by phone.
Pay only through official channels. Avoid sending money to a collector’s personal GCash, Maya, or bank account unless the company confirms in writing that it is an authorized payment channel.
Keep receipts. Save confirmation emails, screenshots, transaction references, and updated balances.
Get a settlement confirmation. If you agree to a reduced amount, ask for written confirmation that the payment fully settles the account.
Avoid rollovers that trap you in more fees. Some apps pressure borrowers to reborrow or extend repeatedly. Ask for a clear payoff computation.

If you cannot pay in full, propose a realistic repayment plan in writing. Do not promise an amount or date you know you cannot meet.

Common Real-Life Scenarios

“The app messaged all my contacts. Is that legal?”

Usually, this is a serious red flag. SEC Memorandum Circular No. 18 treats contacting persons in the borrower’s contact list, other than named guarantors or co-makers, as an unfair debt collection practice. It may also raise Data Privacy Act issues if your contacts’ information or your loan details were processed or disclosed without proper legal basis.

Save screenshots from your contacts’ phones and include them in your SEC and NPC complaints.

“They called my employer and said I am a scammer.”

This may involve unfair debt collection, data privacy violations, and possibly defamation depending on what was said, to whom, and whether it was false or malicious. It may also affect your employment, so document the incident carefully.

Ask your HR officer, supervisor, or co-worker who received the message to preserve the number, screenshot, date, and exact wording. A short written statement from them can help later.

“They said I will be arrested tomorrow if I do not pay.”

For a simple unpaid loan, the usual remedy is civil collection, not arrest. The Philippine Constitution protects against imprisonment for debt. However, criminal liability can arise in different situations, such as fraud from the beginning, falsified documents, identity misuse, or bouncing checks, if all legal elements are present.

A collector who falsely threatens immediate arrest to force payment may be engaging in unfair or deceptive collection.

“They threatened to post my photo and ID online.”

Do not ignore this. This may involve data privacy violations, threats, cyber libel if false defamatory statements are posted, and other cybercrime concerns.

Immediately preserve the threat, send a written objection, report the account or page, and consider filing with the NPC and law enforcement.

“A collector wants to visit my house.”

A lawful demand or visit is not automatically illegal. But collectors cannot trespass, threaten you, insult you, shame you in front of neighbors, display posters, or disturb your household.

If someone appears:

Do not let them inside if you feel unsafe.
Ask for ID and written authority to collect.
Do not hand over cash without an official receipt.
Record details of the visit if lawful and safe.
Call barangay officials or police if there are threats, violence, trespass, or disturbance.

“I am an OFW or foreigner outside the Philippines. Can I still complain?”

Yes. Many complaints can begin online or by email, especially SEC and NPC complaints. For sworn affidavits, Special Powers of Attorney, or documents for Philippine proceedings, you may need notarization before a Philippine Embassy or Consulate, or local notarization followed by apostille if applicable.

Philippine posts abroad, such as the Philippine Embassy in Washington, D.C. and Philippine Consulate in Los Angeles, provide consular notarization services for documents used in the Philippines. Requirements vary by location, so check the receiving office and the consular post before sending documents.

Documents to Prepare Before Filing

Prepare a folder, preferably both digital and printed, containing:

Valid government ID
Loan agreement, disclosure statement, screenshots of loan terms
Proof of loan release to your bank or e-wallet
Proof of payments made
Statement of account or demand messages from the lender
Screenshots of harassment messages
Call logs and phone numbers used
Screenshots from relatives, friends, co-workers, or employers who were contacted
Social media links, URLs, account names, and group chat details
Screen recordings, if messages disappear
App store link, app screenshots, developer name, and app permissions
Corporate name and SEC details, if available
Written notice sent to the lender
Proof of delivery or sending of the notice
Complaint-affidavit and witness affidavits, if needed
Special Power of Attorney, if a representative will file for you

For notarized complaints or affidavits, bring a valid ID and sign only before the notary or authorized officer.

Typical Timelines and Practical Bottlenecks

Step	Usual practical timeline	Common bottleneck
Preserving evidence	Same day	Messages disappear or accounts change names
Sending written notice to lender	Same day to 2 days	No clear company email or address
SEC complaint through iMessage	Same day submission possible	Identifying the correct corporate respondent
NPC pre-complaint waiting period	Usually 15 calendar days after written notice, where required	No response from lender or incomplete proof of notice
Formal NPC complaint	Weeks to months depending on evaluation and caseload	Lack of notarized complaint, weak evidence, unidentified respondent
NBI/PNP cybercrime report	Same day reporting possible	Need for complete URLs, screenshots, and device evidence
Prosecutor’s preliminary investigation	Often several weeks to months	Identifying individual offenders and proving criminal elements
Civil damages case	Months to years	Cost, evidence, witnesses, and court congestion

Urgent threats, blackmail, identity theft, or public posts should not wait for administrative timelines. Preserve evidence and report to law enforcement promptly.

Common Mistakes to Avoid

Deleting the app before saving evidence. The app may contain loan terms, IDs, account numbers, and messages.
Paying a collector’s personal account. This can lead to disputes about whether payment was received.
Arguing by phone only. Written records are easier to prove.
Posting the collector’s personal information online. Do not commit your own privacy or cybercrime violation.
Ignoring the actual debt. Harassment complaints and payment obligations are separate issues.
Filing vague complaints. Agencies need dates, screenshots, account names, phone numbers, and clear facts.
Assuming “SEC-registered” means everything is legal. Registration does not authorize harassment.
Assuming app permission means unlimited consent. Data privacy consent must be specific, informed, and lawful.
Using fake IDs or false information when borrowing. This can create separate legal problems for the borrower.
Signing settlement terms you do not understand. Always ask for a written breakdown and final settlement confirmation.

Frequently Asked Questions

Can online lending apps contact my contacts in the Philippines?

They generally should not contact people in your contact list unless those people are named guarantors or co-makers. SEC Memorandum Circular No. 18 treats contacting other people in a borrower’s contact list as an unfair debt collection practice. It may also raise data privacy concerns if your loan information is disclosed.

Can a lending app post my name, photo, or ID online?

No lender should publicly shame you by posting your name, photo, ID, address, phone number, or alleged debt online. This may violate SEC debt collection rules, the Data Privacy Act, and possibly cyber libel or other laws depending on the content.

Can I be jailed for not paying an online loan?

Simple nonpayment of debt is generally a civil matter. The lender’s usual remedy is to demand payment or file a civil collection case. However, criminal issues may arise if there was fraud from the beginning, use of fake identity documents, falsification, bouncing checks, threats, or other separate criminal acts.

What if I clicked “allow contacts” when I installed the app?

Allowing contact access does not automatically mean the lender can message everyone you know or disclose your debt. Consent under the Data Privacy Act must be specific, informed, and lawful. SEC rules also prohibit contacting people in your contact list other than named guarantors or co-makers.

Should I file with the SEC, NPC, PNP, or NBI?

File with the SEC for unfair debt collection or unauthorized lending activity. File with the NPC for misuse of personal data, contact list abuse, or publication of your personal information. Report to PNP Anti-Cybercrime Group or NBI Cybercrime Division if there are threats, blackmail, cyber libel, identity theft, fake legal documents, hacking, or extortion. Some cases may require filings with more than one office.

Should I block the collector?

You may block abusive numbers after preserving evidence. Before blocking, save screenshots, call logs, account names, and messages. Also send a written request asking the lender to communicate only through a specific number or email. Keep at least one channel open if you still need statements, settlement terms, or official communications.

What if the online lending app is SEC-registered?

SEC registration or authority to lend does not allow harassment. A registered lender must still follow SEC rules, the Data Privacy Act, the Truth in Lending Act, and other Philippine laws. In fact, SEC-registered entities can face administrative penalties if they or their collection agents use unfair debt collection practices.

Can I refuse to pay because they harassed me?

Harassment does not automatically cancel a valid loan. You can complain about illegal collection practices while still addressing the legitimate loan balance. Ask for a proper statement of account, dispute unlawful or undisclosed charges, pay only through official channels, and keep receipts.

Can OFWs and foreigners file complaints against Philippine online lending apps?

Yes. SEC and NPC complaints can often be initiated online or by email. If sworn documents are required, an OFW or foreigner abroad may need consular notarization, local notarization with apostille, or a Special Power of Attorney for a representative in the Philippines, depending on the office handling the case.

Key Takeaways

Online lending apps may collect valid debts, but they cannot harass, threaten, shame, or misuse personal data.
SEC Memorandum Circular No. 18 prohibits unfair debt collection practices, including threats, abusive language, public disclosure, and contacting non-guarantor contacts.
The Data Privacy Act protects your contact list, photos, ID, address, phone number, and loan information from unlawful processing or disclosure.
Threats, fake accusations, public shaming, identity misuse, and forged legal notices may involve criminal liability under the Revised Penal Code and Cybercrime Prevention Act.
Preserve evidence before blocking numbers, deleting apps, or changing phones.
File with the SEC for unfair collection or unauthorized lending, with the NPC for privacy violations, and with NBI or PNP cybercrime units for threats or online crimes.
A harassment complaint does not automatically erase a valid debt, so ask for a written statement of account and pay only through official channels.
Written records, clear screenshots, dates, phone numbers, URLs, and witness statements often determine whether your complaint can move forward.