If an online lending app is calling your relatives, threatening to post your photo, messaging your employer, or shaming you in group chats, you are dealing with more than an ordinary collection reminder. In the Philippines, lenders may collect legitimate debts, but they cannot use harassment, public humiliation, threats, or abusive use of your personal data. This article explains what is illegal, what evidence to save, where to file complaints, and how to stop online lending app harassment in a practical way.
What Counts as Online Lending App Harassment?
Online lending app harassment usually happens when a lending company, financing company, online lending platform, or collection agent pressures a borrower through intimidation instead of lawful collection.
Common examples include:
- Repeated calls or messages at unreasonable hours
- Threats to post your face, ID, or “wanted” poster online
- Calling your contacts, relatives, officemates, employer, neighbors, or barangay officials
- Telling other people that you are a scammer, criminal, or “takas utang”
- Using obscene, insulting, or degrading language
- Threatening arrest, imprisonment, police action, or barangay action when no proper case exists
- Accessing or using your phone contacts without a lawful basis
- Creating fake social media posts or edited photos to shame you
- Sending messages to your contacts even if they are not guarantors or co-makers
A lender can remind you about payment. A lender can send a formal demand letter. A lender can file a civil collection case if the debt is valid. But a lender cannot destroy your dignity, privacy, reputation, or peace just to force payment.
The Main Rule: You Still Owe Valid Debt, But Harassment Is Illegal
Many borrowers are afraid to complain because they really borrowed money. The law treats these as two separate issues.
If the loan is valid, the lender may still pursue payment through lawful means. But harassment, threats, public shaming, unlawful data processing, and abusive collection practices may expose the lender, its officers, employees, and collection agents to administrative, civil, or criminal liability.
The government’s 2026 advisory on online lending platforms specifically recognizes reports of harassment, intimidation, public shaming, and unlawful use of personal data in collection practices. It also states that contacting people in the borrower’s contact list other than named guarantors is prohibited for debt collection.
Legal Basis: Your Rights Against Online Lending Harassment
SEC Rules on Unfair Debt Collection
The Securities and Exchange Commission (SEC) regulates lending companies and financing companies under Republic Act No. 9474, or the Lending Company Regulation Act of 2007, and Republic Act No. 8556, or the Financing Company Act of 1998. Financing companies that operate without SEC authority, or hold themselves out as financing companies without authority, may be penalized. (Lawphil)
SEC Memorandum Circular No. 18, Series of 2019, prohibits unfair debt collection practices by financing companies, lending companies, and their third-party service providers. The circular recognizes that lenders may use reasonable and legally permissible means to collect, but they must act in good faith and refrain from abusive or unscrupulous conduct. (SEC Appointment System)
Under SEC MC 18, unfair collection practices include:
- Threats of violence or other criminal means to harm a person, reputation, or property
- Threats to take action that cannot legally be taken
- Obscene, insulting, or profane language meant to abuse the borrower
- Publication of the borrower’s name or personal information because of alleged refusal to pay
- Telling other people false information, including false claims that the debt is being disputed
- False representation or deceptive collection methods
- Contact before 6:00 a.m. or after 10:00 p.m., subject to limited exceptions
- Contacting people in the borrower’s contact list other than named guarantors or co-makers
SEC MC 18 also states that the lending or financing company remains ultimately responsible even if it outsourced collection to a third-party service provider.
Data Privacy Act and NPC Rules
Republic Act No. 10173, or the Data Privacy Act of 2012, protects personal information in both government and private systems. The National Privacy Commission (NPC) explains that the law regulates the collection, recording, storage, use, sharing, blocking, erasure, and destruction of personal data. (National Privacy Commission)
For online loans, NPC Circular No. 20-01, as amended by NPC Circular No. 2022-02, is especially important. The amended rules prohibit excessive or disproportionate processing of contact lists, especially when it leads to harassment, debt collection outside named guarantors, or unfair collection practices. Online lending apps must separate character references from guarantors, and a character reference is not automatically a guarantor. (National Privacy Commission)
This means:
- Giving someone’s name as a character reference does not make that person liable for your loan.
- A guarantor must separately consent to be a guarantor.
- A lender cannot freely harvest your contacts and message everyone.
- Access to your camera, gallery, contacts, or location must be necessary, proportionate, and tied to a legitimate purpose.
- Personal data should not be kept forever after denial of an application or full payment.
Financial Consumer Protection Act
Republic Act No. 11765, or the Financial Products and Services Consumer Protection Act, gives financial consumers the right to fair treatment, disclosure and transparency, data privacy, and timely complaint handling. It also expressly prohibits financial service providers from using abusive collection or debt recovery practices. (Supreme Court E-Library)
RA 11765 also makes financial service providers responsible for acts or omissions of their officers, employees, agents, and accredited third-party service providers, including debt collectors. (Supreme Court E-Library)
Criminal Laws That May Apply
Depending on what the collector did, online lending app harassment may also involve criminal law.
Possible offenses include:
| Conduct | Possible legal basis |
|---|---|
| Threatening harm to you, your family, property, or reputation | Grave threats under Article 282 of the Revised Penal Code |
| Forcing you to do something through violence, threats, or intimidation | Grave coercion under Article 286 of the Revised Penal Code |
| Publicly shaming you with false or malicious statements | Libel under Articles 353 and 355 of the Revised Penal Code, or cyberlibel under RA 10175 |
| Using fake identities, fake legal notices, or deceptive online methods | Possible cybercrime, estafa-related, or data privacy violations depending on the facts |
| Posting edited photos, sexualized content, or gender-based harassment | Possible violations of RA 11313, the Safe Spaces Act, when gender-based online sexual harassment is involved |
RA 10175, the Cybercrime Prevention Act of 2012, covers certain offenses committed through computer systems. In Disini v. Secretary of Justice, the Supreme Court discussed online libel under Section 4(c)(4) of RA 10175 as libel committed through a computer system or similar means. (Supreme Court E-Library)
What To Do Immediately When Harassment Starts
1. Stop Arguing by Call; Move to Written Communication
Collectors often use calls because there is no easy record. If they call, keep it brief:
“I am willing to communicate through official written channels. Please send the statement of account, company name, SEC registration details, and authority of the collector.”
Then communicate by email, SMS, app support ticket, or other written channel where you can preserve evidence.
2. Preserve Evidence Before Blocking
Before blocking numbers or deleting the app, save proof.
Collect:
- Screenshots of texts, chats, emails, app notifications, and social media posts
- Screen recordings showing the sender profile, number, date, and time
- Call logs showing frequency and time of calls
- Voice recordings, if available
- Names, mobile numbers, email addresses, social media accounts, and collector aliases
- Screenshots of threats sent to your relatives, employer, friends, or contacts
- Loan agreement, disclosure statement, repayment schedule, receipts, and proof of payments
- App name, developer name, website, Google Play/App Store listing, and screenshots of permissions requested
- SEC registration number, Certificate of Authority number, or any company name shown in the app
Do not edit screenshots except to blur sensitive details when sending copies to someone not involved. Keep the original files.
3. Revoke Unnecessary App Permissions
On your phone, review the app’s permissions. Revoke access to contacts, camera, gallery/photos, location, microphone, and storage if they are no longer necessary.
Also consider:
- Changing passwords for email, e-wallets, and social media
- Enabling two-factor authentication
- Removing unknown devices from your accounts
- Warning close contacts not to respond to collectors
- Reporting fake accounts or defamatory posts to the platform
The 2026 DICT-NPC-SEC advisory reminds borrowers to review app permissions and states that unnecessary permissions and unbridled processing of contact lists are prohibited.
4. Send a Written Demand to Stop Harassment
A short written notice helps show that the lender was informed and still continued. Send it to the app’s support email, official email, in-app customer service, and any published grievance channel.
Include:
- Your name and loan account number, if available
- The dates and examples of harassment
- A demand to stop contacting third parties who are not guarantors
- A demand to stop threats, public shaming, and abusive language
- A request for a complete statement of account
- A request for the name and authority of any collection agency
- A request for deletion or proper limitation of personal data that is not necessary for lawful purposes
Keep proof that you sent it.
Where To File Complaints in the Philippines
The correct office depends on the conduct involved. You may file with more than one office if the facts overlap.
| Problem | Office to approach | What they usually handle |
|---|---|---|
| Abusive debt collection by lending or financing company | SEC iMessage complaint portal | Unfair collection, unregistered lending, unauthorized OLPs, violations by SEC-regulated entities |
| Misuse of contacts, photos, IDs, personal data, app permissions | National Privacy Commission complaint page | Data privacy violations, unlawful processing, excessive contact-list access |
| Threats, extortion, fake posts, cyberlibel, hacking, identity misuse | NBI Cybercrime Division or PNP Anti-Cybercrime Group | Cybercrime investigation and evidence preservation |
| Immediate threats to safety | Local police station or PNP ACG | Blotter, initial police assistance, referral |
| Civil collection case filed against you | First-level court handling the case | Answering the claim and raising defenses |
The SEC iMessage portal allows users to open a ticket and check ticket status. (iMessage) The NPC requires a formal complaint in a specific format, notarization, and submission either in person, by courier, or by scanned email to the NPC. (National Privacy Commission)
The NBI Cybercrime Division’s Citizen’s Charter identifies investigative assistance for victims of computer crimes as an external investigation service open to the general public. It includes filing a complaint, preliminary interview, sworn statements, and submission of supporting documents. (National Bureau of Investigation)
Step-by-Step: How To File an SEC Complaint Against an Online Lending App
Identify the lender. Look for the corporate name, app name, SEC registration number, Certificate of Authority number, address, email, and collection agency name.
Check whether the app is recorded or authorized. SEC Memorandum Circular No. 19, Series of 2019, requires disclosure in advertisements and reporting of online lending platforms. The SEC lists MC 19 under financing and lending company issuances. (SEC Appointment System)
Prepare a clear timeline. List dates, times, phone numbers, names used, and exactly what was said or posted.
Attach evidence. Use screenshots, call logs, recordings, emails, app screenshots, loan documents, and proof of payment.
File through SEC iMessage. Choose the relevant complaint category and upload your evidence. Keep your ticket number.
Follow up using the ticket system. SEC complaints may take time because the agency may need to verify the entity, request comments, or refer the matter to the proper SEC department.
File a separate cybercrime or NPC complaint if needed. SEC action is administrative. It does not automatically replace criminal investigation or data privacy proceedings.
Step-by-Step: How To File an NPC Complaint for Contact-List Misuse
- Download the NPC complaint-affidavit form from the NPC complaint page.
- State the facts clearly. Explain what personal data was processed: contacts, photos, IDs, messages, employer information, or social media details.
- Explain why the processing was unlawful or excessive. For example, the lender contacted people who were not guarantors or used your photo to shame you.
- Attach evidence. Include screenshots from your phone and from contacts who received messages.
- Have the complaint notarized.
- Submit it to the NPC in person, by courier, or by scanned email as allowed by the NPC procedure. (National Privacy Commission)
For OFWs or foreigners abroad, notarization can be more complicated. If the complaint-affidavit will be used in a formal Philippine proceeding, the safer route is usually notarization before a Philippine Embassy or Consulate. If a foreign notarization is used, the receiving office may require authentication or apostille, depending on the document and country.
What Evidence Is Most Persuasive?
Good complaints are specific. Agencies handle many OLA harassment reports, so organized evidence matters.
| Evidence | Why it helps |
|---|---|
| Screenshot showing sender, number, date, and full message | Proves what was said and when |
| Call logs showing repeated calls | Shows pattern and unreasonable frequency |
| Messages sent to contacts | Shows third-party harassment |
| Screenshots of public posts | Supports public shaming or cyberlibel claims |
| Loan agreement and disclosure statement | Shows lender identity and loan terms |
| Proof of payments | Helps dispute inflated balances |
| App permission screenshots | Supports data privacy complaint |
| Demand letter or email asking them to stop | Shows notice and continued violation |
| Government ID of complainant | Usually needed for formal complaints |
| Notarized complaint-affidavit | Needed for many formal proceedings |
Ask relatives or officemates who received messages to send you screenshots and, if they are willing, short written statements. Their evidence can be important because the harassment often happens outside your own phone.
Can an Online Lending App Have You Arrested?
Nonpayment of an ordinary loan is generally a civil matter. The Philippine Constitution prohibits imprisonment for debt. A lender cannot simply order police, barangay officials, or the NBI to arrest you because you missed a payment.
However, do not ignore actual court papers. A lender may file a civil collection case, often under the Rules on Small Claims if the money claim falls within the threshold. The Supreme Court’s Rules on Expedited Procedures in the First Level Courts increased small claims coverage up to ₱1,000,000. (Supreme Court of the Philippines)
If you receive a real court summons, read the documents carefully and respond within the required period. Harassment by the lender may be raised separately, but it does not automatically erase a valid loan.
What If the App Charges Excessive Interest and Fees?
Interest and fees are a separate issue from harassment, but they often appear together.
RA 3765, the Truth in Lending Act, requires disclosure of finance charges and the true cost of credit. Its policy is to protect borrowers from lack of awareness of the true cost of borrowing. (Lawphil)
For small short-term unsecured loans, SEC and BSP rules have imposed interest and fee ceilings. SEC MC No. 3, Series of 2022, implemented ceilings for unsecured general-purpose loans not exceeding ₱10,000 with a tenor of up to four months, including a 6% monthly nominal interest ceiling and a 15% monthly effective interest rate ceiling. (Law and Policy Reform Program)
More recent SEC materials report recalibrated ceilings under SEC MC No. 14, Series of 2025, effective for covered loans entered into, restructured, or renewed beginning 1 April 2026, including a 12% monthly effective interest rate ceiling for covered loans. Because rate rules can change, borrowers should check the latest SEC issuance when disputing current charges. (Philippine Law Firm)
Common Mistakes That Make Complaints Weaker
Deleting the Evidence Too Soon
Many borrowers delete messages because they are painful or embarrassing. Save them first. Agencies need proof.
Paying Random “Collectors” Without Verification
Some scammers pretend to be collectors. Before paying, ask for:
- Official statement of account
- Company name
- Authority of the collector
- Official payment channel
- Receipt under the company name
Posting the Collector’s Personal Details Online
It is understandable to be angry, but posting the collector’s private information can create a separate legal problem. File complaints using proper channels instead.
Ignoring Real Court Notices
A fake threat is different from a real summons. If the document comes from a court and has a docket number, verify it with the court.
Thinking a Character Reference Is Automatically Liable
A character reference is not automatically a guarantor. Under NPC rules, a guarantor must expressly bind himself or herself to answer for the debt if the borrower defaults. (National Privacy Commission)
Special Situations
If They Contacted Your Employer
Save the employer’s screenshot or written account. This may support an SEC complaint for unfair collection and an NPC complaint for unauthorized disclosure or processing of personal data. If false statements were made, it may also support a defamation-related complaint.
If They Posted Your Photo Online
Take screenshots immediately, including the URL, account name, date, comments, and shares. Report the post to the platform, then preserve the evidence for SEC, NPC, NBI, or PNP ACG.
If You Are an OFW or Outside the Philippines
You may still gather evidence and file online complaints with the SEC or NPC if the lender, app, borrower, or harmful conduct is connected to the Philippines. For sworn complaints, check notarization requirements. Philippine consular notarization is usually easier to use in Philippine proceedings than ordinary foreign notarization.
If the Lender Is Unregistered or Uses APK Files
Be extra careful. Unregistered apps and APK files may involve both unauthorized lending and cyber fraud risks. Preserve the app listing, APK source, messages, payment channels, and account names. Report abusive collection to the SEC and cyber-related conduct to NBI or PNP ACG.
Frequently Asked Questions
Can online lending apps contact my contacts in the Philippines?
For debt collection, they may contact only guarantors. The 2026 DICT-NPC-SEC advisory states that contacting persons on the borrower’s contact list other than named guarantors is prohibited.
Is it illegal for a lending app to shame me online?
Yes, it may be an unfair debt collection practice, a data privacy violation, and possibly libel or cyberlibel depending on the content and how it was posted.
Can I file a complaint even if I really owe money?
Yes. A valid debt does not give the lender the right to harass, threaten, shame, or misuse your personal data.
Can a collector call me at midnight?
SEC MC 18 treats contact before 6:00 a.m. or after 10:00 p.m. as an unfair collection practice, subject to limited exceptions stated in the circular.
Can my character reference be forced to pay?
No, not merely because they were listed as a character reference. A guarantor must separately and expressly consent to be responsible for the loan.
Where should I complain first: SEC, NPC, NBI, or PNP?
For abusive collection by a lending or financing company, start with the SEC. For misuse of contacts, photos, IDs, or app permissions, file with the NPC. For threats, fake posts, cyberlibel, hacking, identity misuse, or extortion, go to NBI Cybercrime Division or PNP Anti-Cybercrime Group.
Will filing a complaint erase my loan?
Usually, no. Complaints address harassment, unlawful collection, excessive charges, or privacy violations. If the principal loan is valid, payment issues must still be resolved, but only through lawful means.
What if the app says they will file a barangay case?
Barangay conciliation may apply to some disputes between individuals in the same city or municipality, but many online lending cases involve corporations, cyber conduct, or parties in different places. A barangay threat is often used to scare borrowers. Ask for formal written documents and verify with the barangay if anything was actually filed.
What if they threaten imprisonment?
Mere nonpayment of debt does not justify imprisonment. Threats of arrest for ordinary unpaid loans are commonly abusive and misleading. If there is fraud, falsification, or another criminal allegation, the lender must go through proper legal process.
Should I uninstall the app?
Preserve evidence first. Screenshot the app profile, permissions, loan details, messages, and payment records. Then revoke unnecessary permissions. After saving evidence, uninstalling may help stop further access, but keep copies of everything.
Key Takeaways
- Online lending app harassment in the Philippines can violate SEC rules, the Data Privacy Act, the Financial Products and Services Consumer Protection Act, the Revised Penal Code, and the Cybercrime Prevention Act.
- Lenders may collect valid debts, but they cannot threaten, shame, deceive, or contact non-guarantor contacts for collection.
- A character reference is not automatically liable for your loan.
- Save screenshots, call logs, recordings, app details, loan documents, payment proof, and messages sent to your contacts.
- File with the SEC for unfair collection, the NPC for misuse of personal data, and NBI or PNP ACG for cybercrime or serious threats.
- Do not ignore real court documents, but do not be intimidated by fake arrest threats or fake legal notices.
- The strongest complaints are specific, organized, evidence-based, and supported by a clear timeline.