If an online lending app is threatening you, calling your relatives, messaging your employer, posting your name online, or saying they will make a fake scandal about you, treat it as more than a “collection issue.” In the Philippines, lenders may collect valid debts, but they cannot use harassment, public shaming, threats, abusive language, or misuse of your personal data to force payment. This guide explains what conduct is illegal, what evidence to save, where to report online lending harassment, and how to protect yourself while still dealing responsibly with any legitimate loan.
What Counts as Online Lending App Harassment?
Online lending harassment usually happens when a collector goes beyond lawful reminders and uses fear, embarrassment, or pressure on your family and contacts.
Common examples include:
- Threatening to post your photo, ID, loan details, or “utang” on Facebook, barangay pages, group chats, or workplace channels
- Calling or texting your contacts even if they are not your guarantors or co-makers
- Sending messages like “ipapahiya ka namin,” “papabarangay ka namin,” “may warrant ka na,” or “ipapapulis ka namin” when no legal case exists
- Using profanity, insults, sexual threats, or degrading language
- Calling before 6:00 a.m. or after 10:00 p.m. without a valid exception
- Claiming to be from a court, police office, barangay, law office, or government agency when they are not
- Threatening to create or circulate edited sexual images, AI-generated “scandal” photos, or fake accusations
- Accessing your contact list, photos, gallery, location, or other phone data beyond what is necessary for the loan
The key point is this: owing money does not remove your right to dignity, privacy, fair treatment, and lawful collection. SEC rules allow lending and financing companies to use reasonable and legally permissible collection methods, but they must observe good faith and fair conduct.
Your Main Legal Rights Under Philippine Law
1. SEC Rules Against Unfair Debt Collection
The most direct rule for lending apps is SEC Memorandum Circular No. 18, Series of 2019, which applies to financing companies, lending companies, and their third-party collection service providers.
Under this SEC circular, the following are unfair collection practices:
- Use or threat of violence or other criminal means to harm a person, reputation, or property
- Threats to take action that cannot legally be taken
- Obscenities, insults, or profane language intended to abuse the borrower
- Disclosure or publication of the names and personal information of borrowers who allegedly refuse to pay
- Communicating false loan information, including disputed debt information, to other people
- False representation or deceptive means to collect a debt or obtain borrower information
- Contacting the borrower before 6:00 a.m. or after 10:00 p.m., unless the account is past due for more than 15 days or the borrower gave express consent that those hours are the only reasonable time to contact
- Contacting people in the borrower’s contact list other than those named as guarantors or co-makers
The lender cannot escape responsibility by saying “collection agency lang iyon.” SEC MC No. 18 states that third-party service providers are treated as agents of the lending or financing company, and the ultimate responsibility remains with the company. Violations may lead to fines, suspension of lending or financing activities, or revocation of the Certificate of Authority.
2. Data Privacy Rights Under the Data Privacy Act
Online lending harassment often involves misuse of personal data. This may fall under Republic Act No. 10173, or the Data Privacy Act of 2012, especially when the app accesses or uses your contacts, photos, ID, employment details, address, or social media information for harassment.
In 2026, the DICT, NPC, and SEC issued a public advisory reminding online lending platforms that unnecessary app permissions are prohibited, excessive processing of contact lists is prohibited, and contacting persons in the borrower’s contact list other than guarantors is prohibited. The advisory also states that a guarantor must have separately consented to assume responsibility for the loan.
The National Privacy Commission has previously found that some lending apps used intrusive processing, including access to mobile contact lists and posting personal or sensitive information on social media. The NPC also reported that it had ordered certain online lending apps to stop accessing contact lists and had issued bans against apps involved in debt-shaming. (National Privacy Commission)
3. Financial Consumer Protection Rights
Under Republic Act No. 11765, the Financial Products and Services Consumer Protection Act, financial consumers have rights to fair treatment, disclosure and transparency, protection against fraud and misuse of assets, data privacy, and timely complaint handling. The law covers digital financial products and services and identifies the BSP, SEC, Insurance Commission, and CDA as financial regulators depending on the type of provider. (Supreme Court E-Library)
For ordinary borrowers, this matters because a lending app complaint is not only about “being embarrassed.” It may involve financial consumer abuse, privacy violations, misleading loan terms, and unlawful market conduct.
4. Licensing, Disclosure, and Truth in Lending
A legitimate lending company generally needs authority from the SEC. Republic Act No. 9474, the Lending Company Regulation Act of 2007, regulates lending companies, while Republic Act No. 8556, the Financing Company Act of 1998, regulates financing companies and gives the SEC authority over them. (Lawphil)
Lenders must also be transparent. Republic Act No. 3765, the Truth in Lending Act, requires creditors to provide a clear written statement of credit terms, including finance charges and the simple annual rate, before the credit transaction is completed. (Lawphil)
High interest alone is not automatically the same as harassment. However, Philippine courts may strike down interest rates that are excessive, iniquitous, or unconscionable. The Supreme Court has repeatedly said that even if interest ceilings were suspended, lenders cannot impose rates that are contrary to morals or that effectively enslave borrowers. (Supreme Court E-Library)
5. Possible Criminal and Civil Liability
Depending on the facts, online lending harassment may also involve criminal or civil liability.
Possible legal bases include:
| Conduct | Possible legal basis |
|---|---|
| Death threats or threats of physical harm | Revised Penal Code provisions on threats |
| Forcing payment through intimidation | Grave coercion under Article 286 of the Revised Penal Code |
| Public posts accusing you of being a scammer, criminal, or immoral person | Libel under the Revised Penal Code, or cyberlibel under RA 10175 if committed online |
| Fake edited sexual images or threats to circulate “scandal” material | Safe Spaces Act, Cybercrime Prevention Act, and possibly Anti-Photo and Video Voyeurism Act depending on the facts |
| Public shaming, meddling with private life, alienating friends or family | Civil Code Articles 19, 20, 21, and 26 on abuse of rights, damages, privacy, dignity, and peace of mind |
For cyberlibel, the Supreme Court in Disini v. Secretary of Justice discussed that RA 10175 adopts the Revised Penal Code concept of libel when committed through a computer system or similar means. (Supreme Court E-Library)
What to Do Immediately If a Lending App Is Harassing You
1. Preserve Evidence Before Blocking or Deleting Anything
Before you block numbers or uninstall the app, save proof. Many complaints fail because the borrower only has a story but no usable evidence.
Save:
- Screenshots of texts, chats, emails, app notifications, and social media posts
- Full phone numbers, usernames, profile links, email addresses, and account names
- Call logs showing date, time, and frequency of calls
- Voice recordings or voicemail if legally and safely available
- The loan contract, disclosure statement, repayment schedule, and app screenshots
- Proof of payments, GCash/Maya/bank transfer receipts, and reference numbers
- Screenshots of app permissions, privacy notices, and the app’s store listing
- Messages sent to your relatives, employer, barangay, or social media contacts
Keep original files. Do not crop all screenshots. A good evidence set shows the sender, date, time, complete message, and context.
2. Revoke App Permissions and Secure Your Accounts
Go to your phone settings and remove permissions for contacts, camera, files, photos, microphone, SMS, and location if they are not necessary. Change passwords for your email, social media, e-wallets, and banking apps. Turn on two-factor authentication.
If the harassment has already reached your contacts, send one calm message such as:
“I am dealing with an online lending app complaint. Please ignore any messages about me from unknown numbers. Do not reply or give them information. I am preserving evidence and reporting the matter.”
Do not argue with collectors in long emotional exchanges. Every response may trigger more harassment.
3. Ask for a Proper Statement of Account
Separately from the harassment complaint, ask the lender for a written breakdown:
- Principal amount actually released
- Interest
- Processing fees
- Penalties
- Amounts already paid
- Remaining balance
- Name of the registered lending or financing company
- SEC registration number and Certificate of Authority number
This helps separate three issues: whether the loan exists, whether the charges are valid, and whether the collection method is illegal.
4. File the Right Complaints With the Right Offices
Different agencies handle different parts of the problem.
| Problem | Where to report | What to prepare |
|---|---|---|
| Abusive collection, threats, contacting relatives, public shaming by a lending or financing company | SEC Financing and Lending Companies Department through the SEC iMessage complaint portal | Complaint narrative, screenshots, loan details, app name, company name, phone numbers, proof of payments |
| Misuse of contacts, photos, IDs, private information, app permissions, data sharing | National Privacy Commission | Notarized complaint form, evidence, ID, proof of data misuse, filing fee if applicable |
| Threats, fake scandal, cyber harassment, identity misuse, fake accounts, online posts | PNP Anti-Cybercrime Group or NBI Cybercrime Division | Sworn statement, screenshots, URLs, device evidence, IDs, witnesses |
| Immediate safety risk | Nearest police station or barangay for incident report/blotter, then PNP-ACG or NBI if cyber-related | Evidence, IDs, details of threats, names or numbers involved |
The 2026 DICT-NPC-SEC advisory directs unfair debt collection complaints to the SEC through imessage.sec.gov.ph, and lists cyber-related reporting channels such as DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group. The Credit Information Corporation also advises that harassment by lending and financing companies, online lending apps, and microfinance institutions should be reported to the SEC, while data privacy violations may be brought to the NPC, PNP-ACG, NBI Cybercrime Division, or DOJ Office of Cybercrime. (Credit Information Corporation (CIC))
5. File With the National Privacy Commission if Your Data Was Misused
For an NPC formal complaint, the NPC requires a specific complaint format. The process generally involves downloading the complaint form, printing and filling it out, having it notarized, and submitting it in person, by courier, or by scanned email submission to the NPC. (National Privacy Commission)
As of NPC Circular No. 2023-01, the filing fee for complaints is ₱500, with additional fees for damages claims, applications for cease-and-desist orders, and other requests. Indigent litigants may be exempt if they meet the requirements, including a barangay certificate of indigency and supporting notarized affidavits.
6. Report to Cybercrime Authorities for Threats and Fake Posts
If the collector threatens physical harm, posts your details online, creates fake accounts, edits sexual images, or sends messages to humiliate you, report to cybercrime authorities.
The NBI Cybercrime Division’s citizen charter describes a process where complainants proceed to the Cybercrime Division, undergo an interview and initial investigation, execute sworn statements or submit prepared affidavits, and submit supporting documents and devices relevant to the probe. (National Bureau of Investigation)
The PNP has also directed cybercrime-related complaints to the PNP Anti-Cybercrime Group e-Complaint channel or its official email. (www.foi.gov.ph)
Practical Tips That Often Matter in Real Cases
Do Not Pay a Random Collector Without Verification
Some borrowers panic and send money to a personal GCash number. If you pay, pay only through verified company channels and keep receipts. Ask for confirmation that the payment was credited to your specific loan account.
Do Not Admit False Amounts
Collectors may inflate small loans with daily penalties, rollover fees, or “extension” charges. Ask for a computation. If the app released ₱2,000 but demands ₱15,000 after a short period, the amount should be documented and questioned.
Do Not Ignore Court Papers, But Know the Difference Between Real and Fake Legal Threats
A real court case involves official court documents, docket numbers, and service through proper channels. A text saying “may warrant ka na bukas” or “ipapa-NBI ka namin today” is often intimidation. Debt alone is generally a civil obligation; nonpayment of a loan is not automatically a criminal case.
If You Are an OFW or Foreigner Outside the Philippines
You may still preserve evidence and file online or through a representative when allowed. For notarized Philippine documents executed abroad, Philippine embassies and consulates can notarize affidavits and similar documents for use in the Philippines; some foreign-notarized documents may need apostille authentication depending on where they were executed and what the receiving office requires. (Philippine Embassy)
A practical packet for someone abroad usually includes:
- Passport or government ID
- Screenshots and exported chat records
- Sworn affidavit or complaint-affidavit
- Special Power of Attorney if someone in the Philippines will file or follow up in person
- Proof of loan, payment, and harassment
- Contact details where agencies can reach you
If Your Employer or Relatives Were Contacted
Ask the person contacted to save screenshots and write a short statement saying when they were contacted, by whom, what was said, and how they know you. This is useful because SEC MC No. 18 specifically prohibits contacting persons in the borrower’s contact list other than named guarantors or co-makers.
Documents to Prepare Before Filing a Complaint
| Document or evidence | Why it helps |
|---|---|
| Valid ID | Confirms identity of complainant |
| Loan agreement or app screenshots | Shows the lender, app, amount, and terms |
| Disclosure statement or repayment schedule | Shows whether charges were explained |
| Payment receipts | Shows what has already been paid |
| Screenshots of harassment | Proves threats, insults, public shaming, or contact-list abuse |
| Call logs | Shows frequency and unreasonable timing |
| Screenshots from relatives or employer | Proves third-party harassment |
| App permission screenshots | Supports data privacy complaint |
| Company/app details | Helps SEC identify whether the entity is registered or licensed |
| Sworn statement or affidavit | Often needed for formal agency or criminal complaints |
Frequently Asked Questions
Can an online lending app contact my contacts in the Philippines?
Generally, they should not contact people in your contact list for collection unless those people were named as guarantors or co-makers. The 2026 DICT-NPC-SEC advisory also states that for debt collection, lending and financing companies may only contact the guarantor, and a person must have separately consented to be a guarantor.
Is it legal for a lending app to post my name and photo online?
No, not as a collection tactic. SEC MC No. 18 prohibits disclosure or publication of the names and personal information of borrowers who allegedly refuse to pay, except in limited lawful circumstances. It may also raise data privacy, civil damages, and cybercrime issues depending on the content and platform.
Can I be jailed for not paying an online loan?
Nonpayment of a loan is generally a civil matter. However, separate criminal issues may arise if there is fraud, falsified documents, identity theft, or other criminal acts. Collectors often misuse the fear of jail to pressure borrowers, but a lender cannot simply declare that you have a warrant.
Should I still pay if the lending app harassed me?
Harassment does not automatically erase a valid debt. It does, however, give you grounds to report the collection conduct and question unlawful charges, undisclosed fees, or abusive practices. Ask for a written statement of account and pay only through verified channels.
Where do I report online lending app harassment?
Report unfair debt collection to the SEC, data misuse to the NPC, and cyber threats or fake posts to the PNP Anti-Cybercrime Group or NBI Cybercrime Division. The correct office depends on the conduct: SEC for abusive collection, NPC for personal data misuse, and cybercrime authorities for threats, fake accounts, cyberlibel, or sexual-image harassment.
What if the lending app is not registered with the SEC?
Still report it. An unregistered or unauthorized lender may create additional regulatory issues. Give the SEC all available details: app name, company name, screenshots, payment channels, phone numbers, website, and app store link.
Can I file a complaint even if I deleted the app?
Yes, but it may be harder if you lost the loan details and messages. Try to recover screenshots from cloud backup, email, SMS, phone logs, e-wallet receipts, app store history, and messages received by your contacts.
What if they threaten to create an AI sex scandal?
Preserve the message immediately and report it as a serious cyber harassment issue. Depending on the exact facts, it may involve the Safe Spaces Act, Cybercrime Prevention Act, Data Privacy Act, and possibly the Anti-Photo and Video Voyeurism Act if intimate images are created, copied, distributed, or published. RA 9995 penalizes the non-consensual taking, copying, distribution, publication, or showing of sexual or private images in covered circumstances. (Supreme Court E-Library)
Key Takeaways
- Online lending apps may collect valid debts, but they cannot harass, shame, threaten, deceive, or misuse your personal data.
- SEC MC No. 18 prohibits threats, insults, publication of borrower information, deceptive collection, unreasonable-hour calls, and contacting non-guarantor contacts.
- Contact-list harassment and excessive app permissions may violate the Data Privacy Act and NPC rules on loan-related personal data processing.
- Save evidence before blocking numbers, deleting messages, or uninstalling the app.
- File with the SEC for unfair debt collection, the NPC for data privacy violations, and PNP-ACG or NBI Cybercrime Division for cyber threats, fake posts, fake accounts, or sexual-image harassment.
- A valid debt should be handled separately from the illegal collection conduct: ask for a written statement of account, verify the lender, and keep all payment records.