Online lending app harassment can feel urgent, embarrassing, and frightening, especially when collectors threaten to message your contacts, post your photo, call your employer, or claim you will be arrested. In the Philippines, a lender may legally collect a valid debt, but it cannot use threats, public shaming, contact-list harassment, fake legal notices, or abusive messages to force payment. This guide explains what counts as illegal online lending harassment, what Philippine laws protect you, how to preserve evidence, and where to file complaints with the SEC, National Privacy Commission, PNP/NBI cybercrime units, or the proper court.
What Counts as Online Lending App Harassment in the Philippines?
Online lending app harassment usually happens when a lending company, financing company, collection agency, or app-based collector uses abusive digital tactics to pressure a borrower.
Common examples include:
| Harassing act | Why it may be illegal |
|---|---|
| Threatening to post your face, ID, or “wanted” poster online | May violate SEC debt collection rules, Data Privacy Act, Civil Code privacy rights, and possibly cyber libel |
| Messaging your phone contacts about your loan | Generally prohibited unless the person is a valid guarantor or authorized contact |
| Calling your employer, barangay, family, or friends to shame you | May be unfair collection, unauthorized disclosure, or harassment |
| Saying “may warrant ka,” “ipapakulong ka,” or “pupuntahan ka ng pulis” for nonpayment | Misleading and potentially a threat or coercive tactic |
| Using insults, profanity, sexual remarks, or degrading language | Specifically prohibited under SEC rules |
| Calling repeatedly very early or very late | May be an unfair collection practice depending on the time and circumstances |
| Creating group chats to shame you | May involve unauthorized disclosure, cyber harassment, or cyber libel |
| Using your photos or contact list after you gave app permissions | Consent to use an app is not consent to harass, shame, or misuse your data |
A legitimate collection message should identify the lender or collector, state the debt clearly, and give a lawful way to pay or dispute the account. It should not threaten, insult, deceive, or expose your private information.
Your Rights Under Philippine Law
Lending companies are regulated by the SEC
Most online lending apps are operated by lending companies or financing companies. Lending companies are regulated under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, which places lending companies under SEC supervision and allows the SEC to impose administrative sanctions, including suspension, revocation of authority, and fines. (Supreme Court E-Library)
Online lending harassment is also covered by SEC Memorandum Circular No. 18, Series of 2019, officially titled Prohibition on Unfair Debt Collection Practices of Financing Companies and Lending Companies. The circular applies not only to lending and financing companies, but also to third-party service providers hired by them, such as collection agencies. (SEC Appointment System)
Under SEC MC No. 18, collection must be done in good faith and with reasonable conduct. The following are unfair collection practices:
- Use or threat of violence or other criminal means to harm a person, reputation, or property
- Threats to take action that cannot legally be taken
- Obscene, insulting, or profane language
- Disclosure or publication of the names and personal information of borrowers who allegedly refuse to pay
- Communicating false loan information to other persons, including failure to say that a debt is disputed
- False representation or deceptive means to collect a debt
- Contact at unreasonable or inconvenient times, defined as before 6:00 a.m. or after 10:00 p.m., subject to limited exceptions
- Contacting people in the borrower’s contact list other than those named as guarantors or co-makers
The SEC circular also states that lenders must keep borrower data confidential except in limited situations, and that outsourcing collection does not remove the lender’s responsibility. In short: “collection agency lang po kami” is not a valid excuse if the collection method violates SEC rules.
Your contacts, photos, and personal data are protected
The Data Privacy Act of 2012, Republic Act No. 10173, protects personal information and requires processing to follow the principles of transparency, legitimate purpose, and proportionality. Personal data must be collected for a specific and legitimate purpose, processed fairly and lawfully, and must not be excessive for that purpose. (National Privacy Commission)
This is important for online lending apps because many harassment cases involve access to phone contacts, photos, IDs, employment information, and social media details.
The National Privacy Commission’s rules on loan-related transactions are especially direct. NPC Circular No. 2022-02 says online loan apps must not require unnecessary permissions involving personal or sensitive personal information. It also says that access to cameras, galleries, or photos must be limited to legitimate purposes such as KYC or payment verification, and that a borrower’s photo must not be used to harass or embarrass the borrower for collection.
The same NPC circular defines “contact list” broadly to include phone contacts, email lists, or social media contacts. It prohibits “unbridled processing” of contact lists, including processing that leads to harassment, debt collection outside the guarantors provided by the borrower, or unfair collection practices.
A character reference is also not automatically a guarantor. A guarantor is someone who separately and expressly binds himself or herself to pay if the borrower fails to pay. For debt collection, lenders may only contact the guarantor; contacting people in the borrower’s contact list other than named guarantors is prohibited.
Threats, public shaming, and fake accusations may become criminal
Depending on the facts, harassment may involve crimes under the Revised Penal Code and Republic Act No. 10175, the Cybercrime Prevention Act of 2012.
Possible criminal issues include:
- Grave threats under Article 282 of the Revised Penal Code, when someone threatens harm to your person, honor, property, or family and the threatened wrong amounts to a crime
- Light threats or unjust vexation, depending on the severity and wording of the messages
- Grave coercion, if the collector uses unlawful intimidation to force you to do something against your will
- Libel or cyber libel, if the collector publicly posts false or defamatory statements that dishonor or discredit you
- Unauthorized disclosure or unauthorized processing under the Data Privacy Act, if your data is exposed or used without lawful basis (Lawphil)
Cyber libel under RA 10175 applies when libel under the Revised Penal Code is committed through a computer system or similar means. The Supreme Court has explained that Section 4(c)(4) of RA 10175 implements the Revised Penal Code provisions on libel when committed through a computer system. (Supreme Court E-Library)
You cannot be jailed just because you owe a debt
Article III, Section 20 of the 1987 Philippine Constitution says: “No person shall be imprisoned for debt or non-payment of a poll tax.” (Lawphil)
This does not mean debts disappear. A lender may still file a civil collection case, and a borrower may still have to pay a valid loan. But a collector’s statement that you will be arrested or jailed simply because you failed to pay an ordinary loan is usually intimidation, not an accurate statement of law.
Be careful, however, with separate criminal issues. For example, fraud, falsified documents, identity theft, or bounced checks may create different legal problems. But nonpayment of an ordinary app loan by itself is not a reason for imprisonment.
What to Do Immediately When an Online Lending App Harasses You
1. Preserve evidence before blocking or deleting anything
Do not rely on memory. Agencies and courts need evidence.
Save:
- Screenshots of SMS, Viber, Messenger, WhatsApp, Telegram, email, or app messages
- The sender’s phone number, profile name, account link, and display photo
- Date and time visible on the screen
- Call logs showing repeated calls
- Screen recordings of group chats, posts, or comment threads
- The app name, app store page, developer name, website, privacy policy, and loan agreement
- Proof of payment, receipts, GCash/Maya/bank transfer slips, and statements of account
- Names and numbers of people contacted by the collector
- Screenshots from your contacts who received messages about you
For Facebook posts, group chats, or public shaming, capture the URL, profile link, date, comments, and reactions. If the post is later deleted, your evidence may still show what happened.
2. Turn off unnecessary app permissions
Go to your phone settings and revoke permissions for:
- Contacts
- Camera
- Photos or gallery
- Microphone
- Location
- SMS or call logs, if present
Uninstalling the app may stop future access, but it may not erase data already copied. Still, revoking permissions is useful to prevent further collection of information.
3. Identify the real company behind the app
Many borrowers only know the app name, but the complaint should identify the company if possible.
Look for:
- Corporate name of the lending or financing company
- SEC registration number
- Certificate of Authority number
- App name and developer name
- Collection agency name, if disclosed
- Office address, email, phone number, and website
You can use the SEC’s online channels, including the SEC iMessage Portal, to report complaints or ask about a lending or financing company. The SEC iMessage portal allows users to open a new ticket and check ticket status. (Securities and Exchange Commission)
4. Send one clear written objection
Send a short message through the app, email, or official channel. Keep it factual and calm.
Example:
I am disputing your collection methods. Stop contacting my family, employer, friends, and phone contacts. I did not authorize the disclosure of my loan information to them. Please communicate only with me through this number/email. Please send my statement of account, the name of your company, your SEC registration details, and the name and authority of your collection agent.
Do not threaten back. Do not use insults. Your message may become part of the case record.
5. Do not pay to a suspicious personal account
If you intend to settle, ask for:
- Official statement of account
- Breakdown of principal, interest, penalties, and fees
- Correct corporate payment channel
- Written confirmation that the amount is full or partial settlement
- Official receipt or electronic acknowledgment
Avoid paying random personal GCash or Maya accounts unless the lender clearly confirms in writing that the account is an authorized payment channel.
Where to File a Complaint for Online Lending Harassment
| Situation | Office to approach | What to ask for |
|---|---|---|
| Abusive collection by a lending or financing company | SEC Financing and Lending Companies Department / SEC iMessage | Investigation for unfair debt collection practices |
| Contact-list harassment, misuse of photos, unauthorized disclosure | National Privacy Commission | Data privacy complaint, order to stop unlawful processing, possible penalties |
| Threats, extortion, cyber libel, identity theft, fake posts | PNP Anti-Cybercrime Group, NBI Cybercrime Division, DOJ Office of Cybercrime | Criminal investigation and cybercrime assistance |
| Immediate safety concern or local collector visiting your home | Local police station or barangay blotter | Incident report and protection record |
| Actual civil collection case filed by lender | Proper court, usually first-level court for small claims or collection | File response and present proof of payments, harassment evidence, and defenses |
The National Privacy Commission states that a formal complaint must follow a specific format: download the form, print and fill it out, have it notarized, then submit it in person, by courier, or by scanned email to the NPC complaints address. (National Privacy Commission)
For cybercrime-related incidents, official government channels include the NBI Cybercrime Division and the DOJ Office of Cybercrime. The NBI Citizen’s Charter describes investigative assistance for victims of computer crimes, including filling out a complaint form and submitting it to the proper personnel. (National Bureau of Investigation) The DOJ Office of Cybercrime was created under RA 10175 and acts on cybercrime-related matters. (Department of Justice)
How to File an SEC Complaint Against an Online Lending App
An SEC complaint is usually the most direct route when the harasser is a lending company, financing company, or its collector.
Prepare:
- Your full name and contact details
- App name and company name, if known
- Loan account number, if available
- Date you borrowed and amount received
- Amount demanded by the collector
- Copies of messages, call logs, screenshots, and public posts
- Names and numbers of people contacted
- Proof that the collector used threats, insults, false statements, or contacted non-guarantors
- Proof of payments, if any
- A short timeline of events
In the complaint, use clear labels:
- “Violation of SEC Memorandum Circular No. 18, Series of 2019”
- “Contacting persons in my contact list who are not guarantors”
- “Disclosure of loan information to third persons”
- “Use of threats, insults, false representation, and deceptive collection methods”
SEC complaints may take time because the agency may need to verify the company, require comment, evaluate evidence, and determine sanctions. A complete complaint with organized screenshots is easier to act on than a long emotional narrative without attachments.
How to File a Data Privacy Complaint with the NPC
File with the National Privacy Commission when the issue involves misuse of personal data, such as:
- Accessing your contacts without proper purpose
- Messaging people in your contact list
- Posting your ID, photo, face, or personal details
- Telling others about your loan
- Using your information for harassment
- Refusing to delete or stop processing unlawfully obtained data
A strong NPC complaint should include:
- The app permissions requested
- Screenshots showing the app accessed or used contact details
- Messages sent to your contacts
- Public posts or group chats exposing your loan
- Your objection or request to stop processing
- The company’s response, if any
- The harm caused, such as embarrassment, anxiety, employer involvement, or family conflict
The NPC has previously acted against online lending apps for data privacy violations, including debt-shaming and access to mobile contact lists. In one NPC report, the Commission noted that it had issued a ban on data processing against online lending apps for data privacy violations including debt-shaming, and later ordered online lending applications to stop accessing borrowers’ contact lists. (National Privacy Commission)
When to Go to the NBI, PNP, or DOJ Cybercrime Office
Go to cybercrime authorities when the behavior is more than regulatory misconduct.
Examples:
- “Ipapapatay ka namin” or threats of physical harm
- “Ipapakulong ka namin bukas” with fake warrant or fake police identity
- Edited photos, fake wanted posters, or sexualized images
- Public Facebook posts calling you a scammer, thief, or criminal
- Group chats created to shame you
- Use of your identity to contact others
- Extortion, such as demanding extra money to stop public posting
- Harassment of a minor, elderly family member, employer, or school
Bring printed and digital copies. If using a USB drive, keep your own backup. Prepare a simple chronology: date, time, sender, exact message, platform, and impact.
A police blotter alone usually does not punish the harasser, but it creates an official record. For serious threats, a blotter can support a later criminal complaint or request for cybercrime assistance.
If You Still Owe the Loan, Handle the Debt Separately
Harassment does not automatically cancel a legitimate debt. Separate the two issues:
- Collection abuse — report to SEC, NPC, and cybercrime authorities when appropriate.
- Loan obligation — verify the amount, request a statement of account, pay only through authorized channels, and keep receipts.
Ask for a full breakdown:
- Principal actually received
- Interest
- Processing fees
- Penalty charges
- Previous payments
- Remaining balance
The Truth in Lending Act, Republic Act No. 3765, protects borrowers by requiring disclosure of finance charges and the true cost of credit. Its policy is to protect citizens from lack of awareness of the true cost of credit through full disclosure. (Lawphil)
If the lender files a small claims or collection case, do not ignore summons. Court deadlines are strict. In small claims, the defendant is generally required to file a verified response within a non-extendible period from receipt of summons, with supporting documents attached. (Supreme Court of the Philippines)
Common Scenarios and What They Usually Mean
“They messaged all my contacts. I never made them guarantors.”
This is one of the strongest complaint scenarios. Under NPC Circular No. 2022-02, contacting persons in the borrower’s contact list other than named guarantors is prohibited. A character reference is not automatically a guarantor.
File with both:
- SEC, for unfair collection practices
- NPC, for unlawful or excessive processing and disclosure of personal data
“They said they will file a case and send police to my house.”
A lender may file a lawful civil case. But police do not arrest people simply for unpaid ordinary debts. If the collector falsely claims a warrant exists, pretends to be law enforcement, or threatens arrest to force immediate payment, include that in your SEC and cybercrime complaint.
“They posted my face and called me a scammer.”
This may involve SEC violations, data privacy violations, Civil Code damages, and possible cyber libel. Save the post immediately, including profile links, comments, and timestamps. Ask affected friends to send screenshots from their own accounts because public visibility may matter.
“The app is not registered with the SEC.”
Unregistered or unrecorded lending apps are a serious red flag. Report the app to the SEC and include the app store link, developer name, website, contact details, screenshots of loan offers, and payment channels.
Do not assume that an app is legitimate just because it is available on Google Play, the App Store, Facebook, or TikTok. App availability is not the same as SEC authority to operate as a lending or financing company.
“I am an OFW or living abroad but the app is harassing my family in the Philippines.”
You can still prepare a complaint if the harassment affects people in the Philippines, involves a Philippine lending app, uses Philippine numbers, or concerns personal data of Philippine citizens or residents. The Data Privacy Act may apply to entities with links to the Philippines or processing involving Philippine citizens or residents. (National Privacy Commission)
If an affidavit or authorization is executed abroad for use in the Philippines, check whether it must be notarized before a Philippine Embassy or Consulate, or apostilled in the country where it was executed. The DFA Apostille system is generally for Philippine public documents to be used abroad, while foreign documents for use in the Philippines follow the authentication rules of the issuing country and Philippine receiving office. (Apostille Services)
“They keep calling my employer.”
A lender may verify employment during loan processing if lawful and proportionate. But using your employer to shame you, disclose your debt, threaten job consequences, or pressure payment is different. Document every call or message and ask your HR officer or supervisor to send you a screenshot or written note of what was said.
Documents and Evidence Checklist
| Document or evidence | Why it matters |
|---|---|
| Government ID | Establishes identity of complainant |
| Loan agreement or app screenshots | Shows the app, loan terms, amount, and lender |
| Statement of account | Shows amount demanded and possible overcharging |
| Proof of disbursement | Shows how much you actually received |
| Proof of payment | Counters false claims of nonpayment |
| Harassing messages | Main evidence of threats, insults, or false statements |
| Call logs | Shows repeated or inconvenient calls |
| Screenshots from contacts | Proves third-party disclosure or contact-list harassment |
| App permissions screenshots | Supports data privacy complaint |
| App store listing and developer page | Helps identify the operator |
| Police/barangay blotter, if any | Creates an official incident record |
| Notarized complaint-affidavit | Often required for formal complaints |
Practical Timelines and Bottlenecks
| Step | Usual practical timeline | Common bottleneck |
|---|---|---|
| Gathering screenshots and documents | Same day to 3 days | Deleted posts, missing timestamps, incomplete app details |
| SEC ticket or complaint filing | Same day once documents are ready | Identifying the company behind the app |
| NPC formal complaint | Several days to prepare because notarization is required | Complaint form, notarization, and organized annexes |
| Cybercrime complaint | Same day for urgent threats; longer for full investigation | Need for original links, sender details, and technical tracing |
| Agency investigation | Weeks to months | Volume of complaints, unregistered operators, fake numbers |
| Civil collection case | Depends on court docket and procedure | Ignored summons, missing proof of payments |
The most common mistake is waiting until the posts are deleted or the phone is replaced. Preserve evidence first, then block, revoke permissions, and report.
Frequently Asked Questions
Can an online lending app message my contacts in the Philippines?
Generally, no, not for debt collection. Under NPC Circular No. 2022-02, lenders may only contact guarantors for debt collection, and contacting people in the borrower’s contact list other than named guarantors is prohibited. Character references are not automatically guarantors.
Can I be jailed for not paying an online loan?
Not for nonpayment of an ordinary civil debt alone. The Constitution prohibits imprisonment for debt. However, separate criminal acts such as fraud, falsification, identity theft, or issuing bad checks may create different legal issues. (Lawphil)
Is it illegal for collectors to call me before 6 a.m. or after 10 p.m.?
SEC MC No. 18 treats contact before 6:00 a.m. or after 10:00 p.m. as contact at unreasonable or inconvenient times, subject to limited exceptions stated in the circular. Save call logs and screenshots showing the time.
What should I do if they threaten to post my photo?
Take screenshots immediately, revoke app access to photos and camera, and file with the SEC and NPC. If they actually post the photo with insults, accusations, or edited content, preserve the public post and consider a cybercrime complaint.
Should I delete the lending app?
First save the app name, loan details, screenshots, privacy policy, and messages. Then revoke permissions and uninstall if needed. Deleting the app without preserving evidence may make your complaint harder to prove.
Can I file both SEC and NPC complaints?
Yes. SEC complaints focus on unfair collection practices by lending or financing companies. NPC complaints focus on misuse of personal data, contact lists, photos, IDs, and unauthorized disclosure. Many online lending harassment cases involve both.
What if the collector says they are only a third-party agency?
The lender may still be responsible. SEC MC No. 18 covers third-party service providers, and the lender remains responsible for outsourced collection practices.
Can foreigners file complaints against Philippine online lending apps?
Yes, when there is a Philippine connection, such as a Philippine lender, Philippine phone number, Philippine-based harassment, or processing involving Philippine residents or citizens. Foreign complainants should keep identity documents, proof of the transaction, and properly authenticated affidavits if documents are executed abroad.
Does harassment erase my loan?
No. Harassment may give you grounds to complain, seek sanctions, or claim damages, but a valid loan remains a separate obligation. Request a statement of account, verify the charges, and pay only through authorized channels if you decide to settle.
What if I already paid but they still harass me?
Send proof of payment and demand an updated statement of account. If they continue, include the receipts and continuing harassment in your SEC and NPC complaints. Continued collection after payment may also support claims of deceptive or unfair collection.
Key Takeaways
- Online lending apps may collect valid debts, but they cannot threaten, shame, deceive, or expose your private information.
- SEC MC No. 18 prohibits abusive collection practices, including threats, insults, false statements, public disclosure, and contacting non-guarantors.
- The Data Privacy Act and NPC Circular No. 2022-02 protect borrowers from excessive app permissions, contact-list harassment, and misuse of photos or personal data.
- You cannot be jailed simply for nonpayment of an ordinary debt.
- Preserve screenshots, call logs, app details, payment records, and messages to your contacts before blocking or deleting anything.
- File with the SEC for unfair collection, the NPC for data privacy violations, and cybercrime authorities for threats, extortion, fake posts, identity misuse, or cyber libel.
- Handle the harassment complaint and the loan balance separately: report abuse, but still verify any legitimate debt through a proper statement of account.