How to Report Online Lending App Harassment in the Philippines

Online lending apps have become common in the Philippines because they offer fast, convenient access to credit. Many borrowers turn to them for emergency expenses, small business needs, medical bills, school fees, or daily living costs. While lending itself is legal when properly registered and compliant with Philippine law, some online lending operators and collection agents engage in abusive, deceptive, humiliating, or threatening practices.

Online lending app harassment may include repeated threatening calls, public shaming, contacting a borrower’s family, employer, or social media contacts, posting defamatory statements, using obscene language, threatening arrest, pretending to be a lawyer or government officer, and accessing or misusing personal data from a borrower’s phone.

In the Philippines, borrowers are not without protection. Several laws, government agencies, and complaint mechanisms may apply depending on the conduct involved. This article explains the legal framework, the rights of borrowers, the agencies that receive complaints, the evidence needed, and the possible remedies against abusive online lending apps and collection agents.

This article is for general legal information in the Philippine context and is not a substitute for advice from a licensed Philippine lawyer.


I. What Is Online Lending App Harassment?

Online lending app harassment refers to abusive, unfair, deceptive, coercive, threatening, or privacy-invasive collection practices committed by an online lending company, its officers, agents, collectors, employees, representatives, or third-party collection agencies.

It may happen through:

  1. Calls;
  2. SMS or text messages;
  3. Chat apps such as Messenger, Viber, WhatsApp, Telegram, or similar platforms;
  4. Email;
  5. Social media posts or comments;
  6. Calls or messages to family members, friends, co-workers, employers, neighbors, or other contacts;
  7. Unauthorized access to a borrower’s phone contacts, gallery, messages, or other personal data;
  8. Public shaming or threats of exposure;
  9. Fake legal notices;
  10. Threats of criminal prosecution, arrest, imprisonment, or barangay/police action.

Not all debt collection is illegal. A lender may lawfully remind a borrower about an unpaid loan, demand payment, impose lawful charges, and pursue proper legal remedies. What the law does not allow is harassment, intimidation, defamation, privacy invasion, unfair collection, or false representation.


II. Common Forms of Online Lending App Harassment

1. Threatening the borrower with arrest or imprisonment

A common tactic is to tell the borrower that failure to pay a loan will result in immediate arrest, imprisonment, police action, or a criminal case.

As a general rule, non-payment of a debt is a civil matter. A person is not imprisoned merely for being unable to pay a loan. The Philippine Constitution prohibits imprisonment for debt. However, separate criminal liability may arise if there is fraud, falsification, identity theft, issuance of bouncing checks, or other criminal acts. The mere inability to pay an online loan is not, by itself, a basis for automatic arrest.

A collector who threatens arrest when there is no lawful basis may be engaging in unfair, deceptive, or abusive collection conduct.

2. Public shaming

Some online lending apps shame borrowers by posting their names, photos, messages, or alleged debts on social media, group chats, community pages, or public platforms. Others send humiliating messages to the borrower’s contacts.

This may give rise to complaints involving data privacy violations, cyber libel, unjust vexation, grave coercion, grave threats, or other offenses depending on the facts.

3. Contacting family, friends, employers, or phone contacts

Many abusive lending apps access the borrower’s contact list and message third parties, saying the borrower is a scammer, criminal, delinquent debtor, or dishonest person. Sometimes they demand that relatives or friends pay the debt.

A lender may have legitimate reasons to contact a reference if the borrower expressly gave that person as a reference. However, mass messaging the borrower’s entire contact list, disclosing the debt to third parties, humiliating the borrower, or pressuring unrelated persons may violate privacy and fair collection rules.

4. Using obscene, insulting, or degrading language

Collectors may use profanity, insults, threats, or humiliating remarks. Examples include calling the borrower a criminal, scammer, thief, prostitute, irresponsible parent, or similar degrading names.

Such acts may support complaints for harassment, unjust vexation, defamation, cyber libel, or administrative sanctions.

5. Misrepresenting themselves as lawyers, police officers, court employees, barangay officials, or government agents

Some collectors falsely claim to be from the police, NBI, court, barangay, law office, or government agency. Some use fake legal letterheads, fake case numbers, or fake warrants.

This is serious. Depending on the circumstances, it may involve usurpation of authority, falsification, estafa, unfair collection practices, or other legal violations.

6. Sending fake subpoenas, warrants, legal notices, or court documents

A subpoena, summons, warrant, or court order must come from a proper authority. A private collector cannot issue a warrant of arrest. A lending company cannot simply declare that a borrower has a criminal case without proper legal proceedings.

Fake legal documents should be preserved as evidence and reported.

7. Excessive calls and messages

Repeated calls at unreasonable hours, continuous harassment, threats, or deliberate disturbance may be abusive. While reminders are allowed, collection must still be done in a lawful and reasonable manner.

8. Unauthorized access to personal data

Some apps ask permission to access contacts, camera, photos, storage, location, SMS, or other personal information. If the app collects, uses, stores, shares, or discloses personal data without valid consent or lawful basis, this may violate the Data Privacy Act of 2012.

Even when the borrower gave some form of consent, the lender cannot use personal data for unlawful, excessive, unfair, or abusive purposes.

9. Disclosure of the borrower’s debt to third parties

A loan is a private matter between lender and borrower. Telling unrelated third parties that a person owes money, threatening them, or pressuring them to pay can be a privacy violation and may also be defamatory depending on the content.

10. Threats of violence or harm

Threats to harm the borrower, family members, reputation, employment, or property may give rise to criminal liability. Serious threats should be reported immediately to law enforcement.


III. Relevant Philippine Laws and Regulations

Several Philippine laws may apply to online lending harassment.

1. Lending Company Regulation Act

The Lending Company Regulation Act governs lending companies in the Philippines. Lending companies must generally be registered and must comply with regulatory requirements. The Securities and Exchange Commission has authority over lending and financing companies.

An online lending app that operates without proper registration, violates disclosure rules, charges unlawful fees, or uses abusive collection practices may be subject to SEC action.

2. Financing Company Act

Some online loan providers operate as financing companies. Financing companies are also regulated by the SEC and must comply with rules on registration, disclosure, fair conduct, and corporate obligations.

3. SEC Rules on Online Lending Platforms and Collection Practices

The Securities and Exchange Commission has issued rules, advisories, and circulars regulating lending and financing companies, including online lending platforms. These rules prohibit unfair debt collection practices and abusive conduct.

Prohibited acts may include:

  1. Using threats, intimidation, abusive language, or violence;
  2. Using obscene or profane language;
  3. Disclosing or threatening to disclose the borrower’s debt to third parties;
  4. Contacting persons in the borrower’s contact list other than those named as guarantors, co-makers, or references;
  5. Misrepresenting that non-payment will result in arrest or imprisonment;
  6. Using false representations or deceptive means to collect debt;
  7. Harassing borrowers through excessive calls or messages;
  8. Shaming borrowers publicly or online;
  9. Using personal data for unauthorized purposes.

The SEC may impose penalties, revoke certificates of authority, suspend operations, or take other regulatory action.

4. Data Privacy Act of 2012

The Data Privacy Act protects personal information and sensitive personal information. Online lending apps often process large amounts of personal data, including names, phone numbers, addresses, employment details, IDs, photos, bank or wallet details, and mobile contacts.

Under the law, personal data processing must generally be:

  1. Transparent;
  2. Legitimate;
  3. Proportionate;
  4. Based on consent or another lawful basis;
  5. Limited to the declared purpose;
  6. Protected by reasonable security measures.

Possible privacy violations include:

  1. Collecting excessive data unrelated to the loan;
  2. Accessing the borrower’s contacts without valid purpose;
  3. Sending messages to third parties about the borrower’s debt;
  4. Posting personal information online;
  5. Using personal data for threats or public shaming;
  6. Sharing borrower information with unauthorized collection agents;
  7. Failing to explain how data will be used;
  8. Retaining personal data longer than necessary;
  9. Failing to protect borrower information from misuse.

Complaints for privacy violations may be filed with the National Privacy Commission.

5. Cybercrime Prevention Act

If harassment happens through online platforms, electronic messages, social media, or digital systems, the Cybercrime Prevention Act may apply.

Possible cybercrime-related issues include:

  1. Cyber libel;
  2. Identity theft;
  3. Illegal access;
  4. Computer-related fraud;
  5. Misuse of personal data through electronic systems.

Cyber libel may arise if defamatory statements are posted or sent online, such as accusing a borrower of being a scammer, criminal, thief, or immoral person, especially when communicated to third parties.

6. Revised Penal Code

Depending on the acts committed, the Revised Penal Code may apply. Possible offenses include:

Grave Threats

This may apply when a collector threatens to commit a wrong against the borrower, the borrower’s family, honor, property, or person.

Light Threats

This may apply to threats of a lesser degree, depending on the content and circumstances.

Grave Coercion

This may apply when a person is compelled to do something against their will through violence, threats, or intimidation.

Unjust Vexation

This may apply to conduct that causes annoyance, irritation, torment, distress, or disturbance without lawful justification.

Libel or Slander

If defamatory statements are made in writing, posted online, or orally communicated to others, liability for libel, cyber libel, or oral defamation may arise.

Alarms and Scandals

In some situations, public disturbance or scandalous conduct may be relevant.

Usurpation of Authority

If a collector falsely represents himself or herself as a police officer, court officer, barangay official, or government authority, this may be considered.

Falsification

Fake warrants, subpoenas, court orders, or official-looking documents may raise issues of falsification depending on the facts.

7. Civil Code

The Civil Code may provide remedies for damages when a borrower suffers injury due to abusive, defamatory, humiliating, or privacy-invasive acts. A victim may claim actual damages, moral damages, exemplary damages, attorney’s fees, and other relief when legally justified.

Civil liability may arise from:

  1. Abuse of rights;
  2. Acts contrary to morals, good customs, or public policy;
  3. Defamation;
  4. Invasion of privacy;
  5. Intentional infliction of harm;
  6. Breach of contractual or legal obligations.

8. Consumer Protection Laws

Borrowers may also be considered financial consumers. Consumer protection principles require transparency, fairness, responsible lending, proper disclosure of fees, and protection from abusive practices.

If an online lending app misleads borrowers about interest rates, service fees, penalties, collection methods, or loan terms, the borrower may have grounds for regulatory complaint.


IV. Government Agencies Where Complaints May Be Filed

The correct agency depends on the nature of the harassment.

1. Securities and Exchange Commission

The SEC is usually the main agency for complaints against lending companies, financing companies, and online lending apps.

File with the SEC when the complaint involves:

  1. Abusive debt collection;
  2. Harassment by lending or financing companies;
  3. Unauthorized online lending operations;
  4. Unregistered lending apps;
  5. Excessive or undisclosed charges;
  6. Misleading loan terms;
  7. Violations of SEC lending rules;
  8. Public shaming or unauthorized contact with third parties by lending companies.

The SEC may investigate whether the lending company or financing company is registered, whether it has authority to operate, and whether it violated collection rules.

2. National Privacy Commission

The National Privacy Commission handles complaints involving misuse of personal data.

File with the NPC when the complaint involves:

  1. Unauthorized access to contacts;
  2. Disclosure of debt to third parties;
  3. Posting personal information online;
  4. Sharing personal data without consent;
  5. Threatening to expose personal data;
  6. Use of photos, IDs, or contact lists for harassment;
  7. Failure to provide a privacy notice;
  8. Unlawful processing of personal information.

The NPC may investigate, require compliance, impose penalties, or recommend prosecution when appropriate.

3. Philippine National Police Anti-Cybercrime Group

The PNP Anti-Cybercrime Group may receive complaints involving online threats, cyber libel, identity theft, hacking, scams, fake accounts, fake posts, or other cybercrime-related acts.

File with PNP-ACG when the harassment involves:

  1. Threats through text, chat, or social media;
  2. Cyber libel;
  3. Fake social media posts;
  4. Use of fake accounts;
  5. Identity theft;
  6. Unauthorized access to accounts or devices;
  7. Online extortion;
  8. Digital blackmail.

4. National Bureau of Investigation Cybercrime Division

The NBI Cybercrime Division may also handle cybercrime complaints. A borrower may approach the NBI when harassment involves online threats, fake accounts, cyber libel, data misuse, identity theft, or coordinated abusive online activity.

5. Department of Justice

The DOJ may be involved in prosecution of criminal complaints, especially cybercrime and other criminal offenses. In many cases, complaints begin with the PNP, NBI, or prosecutor’s office.

6. Office of the City or Provincial Prosecutor

If the acts constitute a criminal offense, a borrower may file a criminal complaint with the prosecutor’s office. The prosecutor evaluates whether there is probable cause to file the case in court.

Examples include:

  1. Grave threats;
  2. Grave coercion;
  3. Cyber libel;
  4. Unjust vexation;
  5. Identity theft;
  6. Falsification;
  7. Usurpation of authority;
  8. Other applicable offenses.

7. Barangay

For some disputes between individuals in the same city or municipality, barangay conciliation may be required before court action. However, complaints involving corporations, cybercrime, serious criminal offenses, parties in different cities, or urgent threats may not be suitable for barangay settlement.

A borrower may still report harassment to the barangay for documentation, assistance, or protection, especially if collectors physically appear at the home or threaten the household.

8. Bangko Sentral ng Pilipinas

If the entity is a bank, electronic money issuer, payment service provider, or financial institution supervised by the BSP, a complaint may be directed to the BSP’s consumer assistance channels.

However, many online lending apps are not BSP-supervised banks. They are usually under SEC if they are lending or financing companies.

9. Department of Trade and Industry

The DTI may handle consumer complaints in certain situations involving unfair, deceptive, or unconscionable practices. However, lending and financing companies are commonly handled by the SEC, while data privacy issues are handled by the NPC.


V. First Step: Identify the Lending App or Company

Before filing a complaint, identify the party responsible. Many borrowers only know the app name, but the actual legal entity may be a corporation with a different name.

Gather the following:

  1. Name of the online lending app;
  2. Name of the company stated in the app, loan agreement, privacy policy, text message, email, or collection notice;
  3. SEC registration number, if available;
  4. Certificate of Authority number, if available;
  5. Office address;
  6. Names and numbers of collectors;
  7. Screenshots of app pages showing company details;
  8. Website, social media page, app store link, or downloadable app link;
  9. Loan agreement or terms and conditions;
  10. Privacy policy;
  11. Receipts of disbursement and payment.

If the app hides its legal identity, that fact should be included in the complaint.


VI. Evidence Needed to Report Online Lending App Harassment

Evidence is crucial. Complaints are stronger when supported by clear, organized, and authenticated records.

1. Screenshots

Take screenshots of:

  1. Threatening messages;
  2. Defamatory posts;
  3. Messages sent to family, friends, employer, or contacts;
  4. Fake legal notices;
  5. Fake warrants or subpoenas;
  6. Calls or chat logs;
  7. App permission requests;
  8. Loan terms and fees;
  9. Privacy policy;
  10. Collection demands;
  11. Social media comments or posts.

Screenshots should show the date, time, sender, number, username, and full message if possible.

2. Screen recordings

Screen recordings may help show:

  1. Continuous harassment;
  2. App permissions;
  3. Messages inside chat platforms;
  4. Social media posts before they are deleted;
  5. Caller IDs and repeated calls;
  6. App interface showing company name and terms.

3. Call logs

Save call logs showing repeated calls, especially if they occur at unreasonable hours or from multiple numbers.

4. Audio recordings

Recording calls may be legally sensitive. In the Philippines, recording a private communication without consent may raise issues under the Anti-Wiretapping Law. A complainant should be careful before recording calls and should seek legal advice when possible.

Instead of unauthorized recording, a borrower may preserve call logs, take notes immediately after calls, and save voicemails if lawfully available.

5. Witness statements

Ask affected third parties to provide written statements if they received messages or calls from the collector. A statement may include:

  1. Name of the person contacted;
  2. Relationship to the borrower;
  3. Date and time of contact;
  4. Number, account, or identity of the collector;
  5. Exact message received;
  6. Screenshots or call logs;
  7. Effect of the message.

6. Loan documents

Keep copies of:

  1. Loan agreement;
  2. Promissory note;
  3. Disclosure statement;
  4. Terms and conditions;
  5. Privacy policy;
  6. Payment schedule;
  7. Interest and fees;
  8. Service charges;
  9. Penalty charges;
  10. Collection notices.

7. Payment proof

Save:

  1. E-wallet receipts;
  2. Bank transfer receipts;
  3. Over-the-counter payment receipts;
  4. Screenshots of payment confirmation;
  5. Emails or SMS confirmations;
  6. Account statements.

8. App store listing and reviews

Take screenshots of the app listing, developer name, contact details, and reviews showing similar harassment complaints.

9. URLs and account links

For social media harassment, preserve:

  1. URLs of posts;
  2. Profile links;
  3. Group links;
  4. Comment links;
  5. Time and date of posting;
  6. Names of accounts involved.

10. Chronology of events

Prepare a timeline. Include:

  1. Date loan was obtained;
  2. Amount borrowed;
  3. Amount received after deductions;
  4. Due date;
  5. Amount demanded;
  6. Date harassment began;
  7. Names or numbers of collectors;
  8. Specific threats or messages;
  9. Third parties contacted;
  10. Reports already made.

VII. How to File a Complaint with the SEC

A complaint to the SEC should focus on the lending or financing company’s abusive collection practices, registration status, authority to operate, and violations of SEC rules.

Information to include

A complaint should state:

  1. Full name and contact details of the complainant;
  2. Name of the lending app;
  3. Name of the company, if known;
  4. SEC registration number or Certificate of Authority, if known;
  5. App link, website, or social media page;
  6. Loan amount and date;
  7. Amount received;
  8. Charges, interest, and penalties;
  9. Due date;
  10. Collection acts complained of;
  11. Names, numbers, or accounts of collectors;
  12. Evidence attached;
  13. Relief requested.

Possible relief from SEC

The complainant may request:

  1. Investigation of the company;
  2. Verification of registration and authority to operate;
  3. Sanctions for abusive collection;
  4. Cease-and-desist action;
  5. Revocation or suspension of authority, when justified;
  6. Other regulatory action.

Important point

The SEC complaint does not automatically erase a valid debt. A borrower may still owe the lawful amount of a legitimate loan. However, the lender’s right to collect does not include the right to harass, threaten, shame, or violate privacy.


VIII. How to File a Complaint with the National Privacy Commission

A complaint with the NPC should focus on misuse of personal data.

When to complain to the NPC

File with the NPC when the lending app:

  1. Accessed contacts without proper basis;
  2. Used contacts to shame or threaten the borrower;
  3. Sent messages to people not involved in the loan;
  4. Posted the borrower’s name, photo, or debt online;
  5. Shared personal data with unauthorized collectors;
  6. Used borrower data for purposes not disclosed in the privacy policy;
  7. Failed to protect personal information;
  8. Refused to respond to privacy-related requests.

Information to include

The complaint should include:

  1. Name of the complainant;
  2. Name of the lending app and company;
  3. Personal data involved;
  4. How the data was collected;
  5. How the data was misused;
  6. Persons who received the data;
  7. Screenshots of messages to third parties;
  8. Screenshots of public posts;
  9. App permissions;
  10. Privacy policy, if available;
  11. Prior request or complaint sent to the company, if any.

Rights under data privacy law

A data subject may have rights such as:

  1. Right to be informed;
  2. Right to access;
  3. Right to object;
  4. Right to erasure or blocking;
  5. Right to damages;
  6. Right to file a complaint;
  7. Right to correct inaccurate data;
  8. Right to data portability, where applicable.

In online lending harassment cases, the most relevant rights are usually the right to be informed, right to object, right to erasure or blocking, and right to file a complaint.


IX. How to Report Cyber Harassment to PNP or NBI

When the harassment involves online threats, fake accounts, cyber libel, identity theft, or extortion, a complaint may be filed with cybercrime authorities.

Prepare the following

  1. Valid government ID;
  2. Written complaint-affidavit or narrative;
  3. Screenshots of messages or posts;
  4. URLs of posts or accounts;
  5. Device used to receive messages;
  6. SIM numbers, usernames, email addresses, or account names;
  7. Names of witnesses;
  8. Loan documents;
  9. Proof that the messages came from or are connected to the lending app or collector.

Cyber libel concern

If the collector posted or sent defamatory statements online, such as calling the borrower a scammer or criminal, cyber libel may be considered. The defamatory statement, the platform used, the recipients, and the identity of the sender are important.

Identity theft concern

If collectors create fake accounts using the borrower’s name, photo, or identity, this may be reported as identity theft or another cybercrime-related offense.

Threats and extortion

If a collector threatens to expose private information, photos, or fabricated accusations unless payment is made, this may involve threats, coercion, extortion, or cybercrime-related conduct.


X. Filing a Criminal Complaint

A borrower may file a criminal complaint if the conduct amounts to a criminal offense.

Possible criminal complaints

Depending on the facts, the complaint may involve:

  1. Grave threats;
  2. Light threats;
  3. Grave coercion;
  4. Unjust vexation;
  5. Oral defamation;
  6. Libel;
  7. Cyber libel;
  8. Identity theft;
  9. Falsification;
  10. Usurpation of authority;
  11. Slander by deed;
  12. Other offenses under special laws.

Complaint-affidavit

A criminal complaint usually requires a complaint-affidavit. It should contain:

  1. Personal details of the complainant;
  2. Names of respondents, if known;
  3. Detailed narration of events;
  4. Specific dates, times, and places;
  5. Exact words used in threats or defamatory messages;
  6. Evidence attached;
  7. Names of witnesses;
  8. Statement that the allegations are true based on personal knowledge or authentic records.

Importance of specificity

Avoid vague allegations like “they harassed me.” Instead, state:

“On March 3, 2026, at around 9:15 a.m., I received a message from mobile number 09xx xxx xxxx stating: ‘Hindi ka makakatakas. Ipapapulis ka namin at ikakalat namin sa opisina mo na scammer ka.’ On the same day, my employer received a message from the same number accusing me of being a scammer. Screenshots are attached as Annexes A and B.”

Specificity helps authorities evaluate the complaint.


XI. Can a Borrower Be Arrested for Not Paying an Online Loan?

Generally, no. A person cannot be imprisoned merely for non-payment of debt. Debt collection is normally a civil matter.

However, borrowers should understand the distinction between:

  1. Non-payment because of inability to pay; and
  2. Fraudulent acts connected to obtaining the loan.

A lender may pursue civil collection for unpaid debt. Criminal issues may arise only if there are separate criminal acts, such as falsification of documents, identity fraud, use of another person’s identity, or other deceitful conduct.

Collectors often exaggerate the threat of criminal prosecution to scare borrowers. A borrower should not ignore legitimate court documents, but should also verify whether a supposed warrant, subpoena, or legal notice is real.


XII. Can the Lending App Contact Your Employer or Family?

A lender may contact a person whom the borrower voluntarily listed as a reference, co-maker, guarantor, or emergency contact, but even then, communication must be lawful, limited, and respectful.

The lender should not:

  1. Disclose excessive information about the debt;
  2. Humiliate the borrower;
  3. Demand payment from someone not legally liable;
  4. Threaten third parties;
  5. Contact all phone contacts;
  6. Send defamatory messages;
  7. Use contacts obtained through phone permissions for public shaming;
  8. Pressure an employer to discipline or terminate the borrower.

Contacting third parties to embarrass or pressure the borrower may be a privacy violation and an abusive collection practice.


XIII. Can the Lending App Access Your Contacts?

An app may request permissions, but data collection must still comply with law. Consent must be meaningful, informed, specific, and not excessive. The lender must explain what data it collects and why.

Accessing contacts for legitimate identity verification is different from using those contacts to shame, threaten, or pressure the borrower. The latter may violate privacy laws and SEC rules.

Borrowers should review app permissions and revoke unnecessary access where possible.


XIV. What to Do Immediately When Harassment Starts

1. Do not panic

Collectors rely on fear. Read the messages carefully and separate legal facts from intimidation.

2. Do not delete evidence

Preserve all messages, call logs, screenshots, emails, receipts, app details, and posts.

3. Do not engage emotionally

Avoid insults, threats, or admissions that can be used against you. Keep replies short and professional.

4. Ask for written validation

You may ask the lender to provide:

  1. Name of the registered company;
  2. SEC registration and authority details;
  3. Complete statement of account;
  4. Breakdown of principal, interest, fees, and penalties;
  5. Payment channels;
  6. Name of the collector or agency.

5. Revoke unnecessary app permissions

Review phone settings and remove access to contacts, photos, location, microphone, camera, and storage if not needed.

6. Inform contacts

If your contacts are being harassed, tell them not to engage and ask them to preserve screenshots.

7. Report the app

File complaints with the appropriate agencies depending on the conduct.

8. Seek legal help for serious threats

If there are threats of violence, extortion, fake warrants, public posts, or employer harassment, consult a lawyer or approach law enforcement.


XV. Sample Complaint Structure

A complaint may be organized as follows:

Complaint for Online Lending Harassment, Abusive Collection Practices, and Data Privacy Violations

1. Parties

State your name, address, contact details, and the name of the lending app/company.

2. Background

Explain when you borrowed, how much, how much you received, and the repayment terms.

3. Collection harassment

Narrate the harassment in chronological order.

4. Data privacy violations

Explain how your contacts or personal data were accessed, used, shared, or exposed.

5. Third-party harassment

Identify relatives, friends, employers, or contacts who received messages.

6. Evidence

List screenshots, call logs, witness statements, loan documents, app details, and payment receipts.

7. Legal grounds

Mention abusive collection practices, data privacy violations, cyber harassment, threats, defamation, or other applicable grounds.

8. Relief requested

Ask the agency to investigate, sanction the company, stop the harassment, require deletion or blocking of unlawfully used data, and refer criminal matters if warranted.


XVI. Sample Narrative for a Complaint

I am filing this complaint against the online lending application known as [Name of App] and its collection agents for harassment, abusive collection practices, and unauthorized use of my personal data.

On [date], I borrowed the amount of ₱[amount] through the said app. I received only ₱[amount received] after deductions. The due date was [date]. Due to financial difficulty, I was unable to pay on the due date.

Beginning [date], I received repeated calls and messages from numbers claiming to represent the lending app. The messages threatened that I would be arrested, publicly exposed, and reported to my employer. Copies of the messages are attached.

The collectors also contacted my family, friends, and co-workers, none of whom were co-makers or guarantors. They disclosed my alleged debt and called me a scammer. Screenshots from my contacts are attached.

I did not authorize the lending app or its agents to disclose my loan information to third parties or to use my contact list for harassment. Their acts caused humiliation, emotional distress, and damage to my reputation.

I respectfully request an investigation and appropriate action against the lending app, its company, officers, and collection agents.


XVII. What Remedies Are Available?

Depending on the facts, a borrower may seek several forms of relief.

1. Administrative sanctions

The SEC or NPC may impose administrative action, such as warnings, orders, fines, suspension, revocation, or compliance directives.

2. Cease-and-desist action

Regulators may order a company to stop illegal or abusive conduct.

3. Data blocking or deletion

The NPC may require action concerning unlawfully processed personal data.

4. Criminal prosecution

If the facts support a criminal offense, the matter may proceed to the prosecutor and eventually to court.

5. Civil damages

The borrower may pursue damages for humiliation, emotional suffering, reputational injury, privacy invasion, or other harm.

6. Correction of account or charges

If charges are unlawful, undisclosed, excessive, or misleading, the borrower may challenge them through proper channels.


XVIII. Borrower Responsibilities

While borrowers have rights, they also have responsibilities.

A borrower should:

  1. Read loan terms before accepting;
  2. Borrow only from registered and legitimate lenders;
  3. Keep records of the loan;
  4. Pay lawful obligations when able;
  5. Communicate in writing when requesting restructuring or clarification;
  6. Avoid providing false information;
  7. Avoid using another person’s identity;
  8. Avoid deleting evidence;
  9. Avoid retaliatory threats or defamatory posts;
  10. Use lawful complaint channels.

Reporting harassment does not automatically cancel a valid loan. The issue of abusive collection is separate from the issue of whether the borrower still owes a lawful debt.


XIX. How to Check Whether an Online Lending App Is Legitimate

A borrower should check:

  1. Whether the company is registered with the SEC;
  2. Whether it has a Certificate of Authority to operate as a lending or financing company;
  3. Whether the app name matches the registered company;
  4. Whether the loan agreement clearly identifies the lender;
  5. Whether interest rates and fees are disclosed;
  6. Whether the privacy policy is clear;
  7. Whether the app asks for excessive permissions;
  8. Whether there are public warnings or complaints about the app;
  9. Whether payment channels are official and traceable;
  10. Whether collectors identify themselves properly.

A legitimate lender should be transparent about its identity, authority, fees, terms, and privacy practices.


XX. Red Flags of Abusive or Illegal Online Lending Apps

Be cautious of apps that:

  1. Do not disclose the company name;
  2. Have no SEC registration or authority details;
  3. Give very short repayment periods with high charges;
  4. Deduct large “service fees” before releasing funds;
  5. Require access to all contacts, photos, storage, or messages;
  6. Threaten to contact all phone contacts;
  7. Use fake legal notices;
  8. Threaten arrest for non-payment;
  9. Refuse to provide a statement of account;
  10. Change payment accounts frequently;
  11. Use abusive language;
  12. Hide behind multiple collector numbers;
  13. Operate under several app names;
  14. Publicly shame borrowers;
  15. Demand payment from relatives or friends who are not liable.

XXI. Handling Fake Legal Threats

Collectors may send messages such as:

  1. “May warrant ka na.”
  2. “Papapuntahan ka namin sa pulis.”
  3. “May subpoena ka na.”
  4. “Ipapakulong ka namin today.”
  5. “Cybercrime case filed.”
  6. “Barangay blotter ka na.”
  7. “We will garnish your salary tomorrow.”
  8. “We will send police to your house.”

A borrower should verify before believing these claims. Real legal processes have formal requirements. A warrant of arrest is issued by a judge, not a collector. A subpoena comes from a prosecutor, court, or authorized body, not from a random mobile number. A civil collection case requires proper filing and service of summons.

Do not ignore actual court papers, but treat informal threats from unknown collectors with caution.


XXII. What Not to Do

A borrower should avoid:

  1. Deleting messages;
  2. Blocking all communication before preserving evidence;
  3. Paying to unknown personal accounts without verification;
  4. Sending more personal IDs to collectors;
  5. Admitting false accusations;
  6. Engaging in heated arguments;
  7. Threatening collectors in return;
  8. Posting defamatory statements online;
  9. Ignoring real legal notices;
  10. Giving access to new apps to pay old loans;
  11. Taking new high-interest loans to pay abusive lenders;
  12. Allowing collectors to enter the home without lawful basis.

XXIII. Special Issue: Loan App Permissions

Online lending apps often request permissions to access contacts, camera, location, SMS, phone state, or files. Some permissions may be excessive for a simple loan.

A borrower should ask:

  1. Why does the app need access to my contacts?
  2. Is access necessary for the loan?
  3. Is the purpose clearly explained?
  4. Can I deny permission?
  5. Will denial affect the loan?
  6. Will my contacts be notified?
  7. Can I withdraw consent?
  8. How long will the data be kept?
  9. Who will receive my data?
  10. Is there a privacy officer or contact person?

Excessive data collection may be challenged under the Data Privacy Act.


XXIV. Employer Harassment

Collectors sometimes contact the borrower’s employer, HR department, supervisor, or co-workers. They may accuse the borrower of being a scammer or demand salary deduction.

This may be unlawful, especially if:

  1. The employer is not a guarantor;
  2. The borrower did not authorize disclosure;
  3. The collector humiliates the borrower;
  4. The collector demands disciplinary action;
  5. The collector sends defamatory statements;
  6. The collector threatens workplace exposure.

A borrower may ask the employer or HR department to preserve messages and confirm in writing what happened.


XXV. Harassment of Family Members

Family members are not automatically liable for the borrower’s debt. A parent, spouse, sibling, child, or relative is generally not required to pay unless that person signed as co-maker, guarantor, surety, or otherwise legally assumed liability.

Collectors who threaten family members, disclose private loan information, or demand payment from them may be engaging in abusive collection practices.


XXVI. Can a Collector Visit the Borrower’s Home?

A lender may attempt lawful collection, but collectors cannot trespass, threaten violence, force entry, seize property without legal process, or cause public scandal. If collectors appear at the home and threaten harm, refuse to leave, shout accusations, or disturb the household, the borrower may seek barangay or police assistance.

A collector cannot confiscate property without lawful authority. Seizure of property generally requires proper legal process unless there is a valid security agreement and lawful enforcement procedure.


XXVII. Dealing with Multiple Online Lending Apps

Some borrowers owe several apps and receive harassment from multiple collectors. In this situation:

  1. Make a list of all apps;
  2. Identify the legal company behind each app;
  3. Separate legitimate debts from unknown or suspicious claims;
  4. Preserve evidence per app;
  5. Avoid paying unknown collectors without verification;
  6. Prioritize basic needs and lawful obligations;
  7. Request statements of account;
  8. Consider debt restructuring where possible;
  9. Report abusive apps individually;
  10. Avoid borrowing from one abusive app to pay another.

When filing complaints, organize evidence by app and by date.


XXVIII. Settlement and Payment Concerns

A borrower may still choose to settle the debt, but should protect himself or herself.

Before paying, ask for:

  1. Official statement of account;
  2. Breakdown of principal, interest, penalties, and fees;
  3. Registered company name;
  4. Official payment channel;
  5. Written settlement agreement, if discounted;
  6. Confirmation that payment fully settles the obligation;
  7. Official receipt or payment acknowledgment;
  8. Confirmation that collection will stop;
  9. Confirmation that third-party collectors will be notified;
  10. Confirmation that personal data will no longer be misused.

Avoid paying to personal accounts unless the company confirms in writing that the account is authorized.


XXIX. Possible Defenses and Issues in Loan Disputes

A borrower may raise issues such as:

  1. Unregistered lender;
  2. Lack of authority to operate;
  3. Unconscionable interest;
  4. Undisclosed charges;
  5. Excessive penalties;
  6. Misleading loan terms;
  7. Amount received was much lower than amount demanded;
  8. No proper disclosure statement;
  9. Privacy violations;
  10. Abusive collection practices.

However, each issue depends on evidence and applicable law. A court or regulator will evaluate the specific facts.


XXX. Practical Checklist for Filing a Complaint

Before filing, prepare:

  1. Valid ID;
  2. Complaint narrative;
  3. App name and company name;
  4. Loan agreement;
  5. Proof of loan release;
  6. Proof of payment, if any;
  7. Screenshots of threats;
  8. Screenshots of messages to third parties;
  9. Call logs;
  10. Social media links;
  11. Names and statements of witnesses;
  12. App permissions screenshots;
  13. Privacy policy screenshots;
  14. SEC registration details, if available;
  15. Contact details of collectors;
  16. Timeline of events;
  17. Relief requested.

XXXI. Sample Evidence Index

A complainant may attach documents as annexes:

  1. Annex A – Screenshot of loan app profile and company name;
  2. Annex B – Loan agreement;
  3. Annex C – Proof of loan disbursement;
  4. Annex D – Statement of account;
  5. Annex E – Threatening SMS dated [date];
  6. Annex F – Messenger conversation with collector;
  7. Annex G – Message sent to borrower’s employer;
  8. Annex H – Message sent to borrower’s relative;
  9. Annex I – Call logs showing repeated calls;
  10. Annex J – Screenshot of public Facebook post;
  11. Annex K – App permissions showing access to contacts;
  12. Annex L – Witness statement of third party contacted;
  13. Annex M – Proof of payment;
  14. Annex N – Fake legal notice or warrant.

XXXII. Sample Demand to Stop Harassment

A borrower may send a written notice to the lender:

I acknowledge receipt of your collection messages regarding the alleged loan account. I request that all collection communications be made only through lawful and professional means.

I do not consent to the disclosure of my personal information or alleged debt to my family, friends, employer, co-workers, or other third parties who are not legally liable for the loan.

Please provide a complete statement of account, the registered name of your company, SEC registration and authority details, and the name of the collection agency handling this account.

Any further threats, public shaming, unauthorized disclosure of personal data, or communication with unrelated third parties will be documented and reported to the proper government agencies.

This kind of message should be polite, factual, and preserved as evidence.


XXXIII. Legal Remedies Against Collection Agents Personally

Collectors may be personally liable if they commit criminal acts, defamation, threats, coercion, identity misuse, or privacy violations. The company may also be liable depending on agency, employment, supervision, or participation.

A complaint may name:

  1. The lending company;
  2. The financing company;
  3. The online lending app operator;
  4. Officers responsible for operations;
  5. Collection agency;
  6. Individual collectors;
  7. Unknown persons using specific numbers or accounts.

When names are unknown, identify them by phone number, username, account link, or other available information.


XXXIV. Role of Lawyers

A lawyer may help:

  1. Assess whether the debt is valid;
  2. Review interest and fees;
  3. Draft complaints;
  4. Prepare affidavits;
  5. File civil or criminal cases;
  6. Respond to demand letters;
  7. Negotiate settlement;
  8. Protect the borrower from abusive collectors;
  9. Coordinate with regulators;
  10. Seek damages where appropriate.

For serious harassment, public shaming, employer involvement, fake legal documents, or threats of violence, legal assistance is strongly advisable.


XXXV. Frequently Asked Questions

1. Is non-payment of an online loan a crime?

Generally, no. Non-payment of debt is usually a civil matter. Criminal liability may arise only if there are separate criminal acts such as fraud, falsification, or identity theft.

2. Can an online lending app post my face or name online?

A lender should not publicly shame you or disclose your personal data for harassment. This may involve privacy violations, defamation, cyber libel, or abusive collection practices.

3. Can they message all my contacts?

Mass messaging your contacts to shame or pressure you may violate data privacy rules and fair collection standards.

4. Can they call my employer?

They should not disclose your debt to your employer or pressure your employer unless there is a lawful basis. Employer harassment should be documented and reported.

5. Can they file a case against me?

A lender may pursue lawful remedies, including civil collection. But collectors cannot lawfully use fake threats, fake warrants, or intimidation.

6. Should I still pay?

If the loan is valid, you may still owe the lawful amount. But harassment is illegal even if the debt is real. Ask for a proper statement of account and pay only through verified channels.

7. What if I already paid but they keep harassing me?

Preserve proof of payment and demand correction of the account. Report continued harassment to the appropriate agency.

8. What if they used my photo or ID?

Report it as a privacy violation and, depending on the use, possible cybercrime or identity-related offense.

9. What if I gave consent when I installed the app?

Consent does not allow unlawful, excessive, unfair, or abusive processing. A lender cannot use personal data for harassment simply because the borrower installed the app.

10. Can I sue for damages?

Possibly, if you suffered legally compensable harm due to defamatory, abusive, privacy-invasive, or unlawful conduct. Consult a lawyer for evaluation.


XXXVI. Conclusion

Online lending app harassment in the Philippines is not merely a personal inconvenience. It may involve violations of lending regulations, data privacy law, cybercrime law, criminal law, consumer protection principles, and civil liability. Borrowers have the right to be treated with dignity, to have their personal data protected, and to be free from threats, public shaming, deception, and intimidation.

The most important steps are to preserve evidence, identify the lender, document the harassment, protect personal data, avoid emotional exchanges, and file complaints with the proper agencies. The SEC is usually the primary agency for abusive lending and collection practices. The National Privacy Commission handles misuse of personal data. The PNP Anti-Cybercrime Group and NBI Cybercrime Division may assist when online threats, cyber libel, identity theft, or digital harassment are involved. Criminal complaints may be filed with the prosecutor when the facts support a specific offense.

A debt may be collected, but it must be collected lawfully. No lender, app operator, or collector has the right to threaten, shame, defame, deceive, or misuse a borrower’s personal information.

Disclaimer: This content is not legal advice and may involve AI assistance. Information may be inaccurate.