If an online lending app is threatening you, messaging your relatives, posting your photo, calling your employer, or using your contact list to shame you into paying, you are not powerless. In the Philippines, a lender may collect a valid debt, but it cannot use harassment, intimidation, public shaming, false threats, or unlawful use of personal data. This article explains what online lending app harassment is, what Philippine laws protect you, how to preserve evidence, where to file complaints, and what to do if you still owe the loan.
What Counts as Online Lending App Harassment in the Philippines?
Online lending app harassment usually happens when a lending company, financing company, loan app, collector, or third-party collection agency uses abusive tactics to pressure a borrower.
Common examples include:
- Threatening to post your face, ID, loan details, or “scammer” accusations online
- Messaging your phone contacts, relatives, co-workers, employer, clients, or neighbors
- Calling repeatedly at unreasonable hours
- Using insults, profanity, sexual remarks, or degrading language
- Pretending to be from the police, NBI, court, barangay, or prosecutor’s office
- Threatening arrest, cybercrime charges, or a “warrant” for nonpayment of a loan
- Telling your contacts that you are a fraudster, criminal, or estafador without a case or judgment
- Accessing your contact list, photo gallery, camera, location, social media, or messages beyond what is necessary for the loan
- Refusing to give the company’s real corporate name, SEC registration number, Certificate of Authority number, or statement of account
In March 2026, the DICT, National Privacy Commission (NPC), and Securities and Exchange Commission (SEC) issued a public advisory specifically addressing reports of online lending platforms engaging in harassment, intimidation, public shaming, and unlawful use of personal data. The advisory also clarified that unnecessary app permissions, excessive contact-list processing, debt collection through non-guarantor contacts, and practices leading to threats or harassment are prohibited.
The Important Distinction: Owing Money vs. Being Harassed
Two things can be true at the same time:
- You may still owe a valid loan.
- The lender may still be violating the law by harassing you.
Harassment does not automatically erase a legitimate debt. But a debt does not give a lender the right to destroy your reputation, threaten your safety, misuse your personal data, or pressure innocent third parties.
Philippine law treats debt collection as a regulated activity. The proper remedy for unpaid debt is lawful collection, negotiation, restructuring, or a court case when appropriate—not public shaming or threats.
Also, nonpayment of debt alone is not a crime. Article III, Section 20 of the 1987 Constitution states that no person shall be imprisoned for debt or non-payment of a poll tax. (Supreme Court E-Library) Criminal liability may arise only when there are separate criminal acts, such as fraud, falsification, threats, identity theft, cyberlibel, or use of stolen information.
Your Legal Rights Against Online Lending App Harassment
You have the right to fair and lawful collection
The main SEC rule on this issue is SEC Memorandum Circular No. 18, Series of 2019, which prohibits unfair debt collection practices by financing companies, lending companies, and their third-party service providers.
Under this SEC rule, the following acts are treated as unfair collection practices:
- Use or threat of violence or other criminal means to harm a person, reputation, or property
- Threats to take action that cannot legally be taken
- Use of obscenities, insults, or profane language that abuses the borrower or amounts to a criminal act
- Disclosure or publication of names and personal information of borrowers who allegedly refuse to pay
- Communicating, or threatening to communicate, false loan information to another person, including failure to say that the debt is disputed
- False representation or deceptive means to collect a debt or obtain borrower information
- Contacting the borrower before 6:00 a.m. or after 10:00 p.m., except in limited situations stated in the circular
- Contacting people in the borrower’s contact list other than those named as guarantors or co-makers
The SEC circular also requires lending and financing companies to keep borrower information confidential, subject only to limited lawful exceptions, and makes the lending or financing company ultimately responsible even if it outsources collection to a third-party service provider.
Violations may lead to SEC penalties, including fines, possible suspension of lending or financing activities, or revocation of authority depending on the number and gravity of offenses.
You have the right to data privacy
Online lending harassment often involves privacy violations. Many complaints involve apps that access a borrower’s contacts, photos, ID, workplace information, or social media details, then use that information to shame or pressure the borrower.
The Data Privacy Act of 2012, or Republic Act No. 10173, protects personal information and sensitive personal information. It gives data subjects rights such as the right to be informed, the right to access personal data, the right to correct inaccurate data, the right to block or remove unlawfully obtained or unauthorized data, and the right to be indemnified for damages caused by unauthorized use of personal information. (National Privacy Commission)
The NPC has specifically addressed online lending. NPC Circular No. 20-01, as amended by NPC Circular No. 2022-02, applies to personal data processing for loan-related transactions by lending and financing companies and even by persons acting as such, whether or not they have SEC authority. It restricts unnecessary app permissions, requires proper notices and consent, and prohibits unbridled processing of contact lists. (National Privacy Commission)
The 2026 DICT-NPC-SEC advisory is even more direct: online lending platforms may not contact people in the borrower’s contact list for debt collection unless they are guarantors. Character references and guarantors must be treated separately, and a guarantor must have separately consented to be responsible for the loan if the borrower defaults.
Your contacts are not automatically liable for your loan
A common tactic is to message a borrower’s mother, spouse, child, employer, client, or friend and say, “Tell this person to pay,” or “You are listed as a reference, so you must pay.”
That is usually wrong.
A character reference is not the same as a guarantor. A character reference may be contacted for identification or verification within lawful limits. A guarantor is someone who separately agrees to answer for the debt if the borrower fails to pay.
Under the 2026 government advisory, online lending platforms must have separate interfaces for character references and guarantors. For debt collection, lenders may only contact the guarantor, and the guarantor must have given consent to be a guarantor.
You have the right to know who the lender really is
Under Republic Act No. 9474, the Lending Company Regulation Act of 2007, a lending company must be organized as a corporation and must have authority to operate from the SEC before conducting lending business. (Supreme Court E-Library)
Lending companies must also comply with the Truth in Lending Act, or Republic Act No. 3765, which requires disclosure of finance charges and the true cost of credit. (Lawphil) Under SEC rules, lending and financing companies operating online must disclose key identifying information such as their corporate name, SEC registration number, and Certificate of Authority number in advertisements and online lending platforms.
This matters because some abusive apps hide behind brand names. The app name may be different from the registered company name. When complaining, try to identify:
- App name
- Developer name in the app store
- Website or download link
- Corporate name shown in the loan agreement
- SEC registration number
- Certificate of Authority number
- Collection agency name, if any
- Payment account names and numbers
You can check official SEC channels such as Check with SEC and the SEC’s lists of recorded or unrecorded online lending platforms when available through the SEC website.
You may have civil and criminal remedies
Depending on the facts, harassment may involve several laws.
Under the Civil Code, Articles 19, 20, and 21 require people to act with justice, honesty, good faith, and to compensate others for unlawful or abusive conduct. Article 26 protects dignity, personality, privacy, and peace of mind, and recognizes a cause of action for damages when a person’s private life, family relations, or personal condition is wrongfully disturbed or humiliated. (Lawphil)
Under the Revised Penal Code, threats, coercion, unjust vexation, libel, slander, and similar offenses may become relevant depending on what the collector did. For example, Article 282 covers grave threats, Article 286 covers grave coercions, Article 287 includes unjust vexations, and Articles 353 to 355 define and punish libel by writings or similar means. (Supreme Court E-Library)
If defamatory statements are posted online, cyberlibel under the Cybercrime Prevention Act may be considered. In Disini v. Secretary of Justice, the Supreme Court upheld cyberlibel as constitutional as applied to the original author of the defamatory online post, while limiting overbroad application to mere recipients or reactors. (Supreme Court E-Library)
What To Do Immediately If an Online Lending App Is Harassing You
1. Preserve evidence before blocking, deleting, or uninstalling
Your strongest protection is good evidence. Before deleting the app or blocking numbers, collect proof.
Save:
- Screenshots of text messages, chats, calls, and app notifications
- Full sender details, phone numbers, email addresses, usernames, and profile links
- Screenshots showing the date and time
- Screen recordings showing the thread from top to bottom
- Call logs showing frequency and time of calls
- Voicemails or recorded threats, if available
- Messages sent to your contacts, employer, relatives, or friends
- Statements or screenshots from the people they contacted
- Loan agreement, disclosure statement, payment schedule, and statement of account
- Proof of payments, GCash/Maya/bank receipts, reference numbers, and account names
- App store listing, developer name, app permissions, privacy notice, and terms and conditions
- Any threats using police, court, barangay, NBI, or prosecutor language
Do not rely only on cropped screenshots. Whenever possible, keep the full conversation and the original device where the messages were received.
2. Make a simple incident timeline
Prepare a short timeline that an investigator can understand quickly.
Use this format:
| Date and time | What happened | Evidence |
|---|---|---|
| June 10, 9:15 p.m. | Collector texted threat to post my ID | Screenshot 1 |
| June 11, 8:05 a.m. | Collector messaged my sister | Screenshot from sister |
| June 11, 2:30 p.m. | Collector called my employer | Employer statement/call log |
| June 12, 11:45 p.m. | Collector sent profanity and arrest threat | Screenshot 5 |
This is often more useful than a long emotional narrative. Agencies handle many complaints; organized evidence helps them see the pattern.
3. Send one firm written response
If it is safe to respond, send a short message. Do not insult the collector back.
Example:
I am requesting that all collection communications be directed only to me through lawful channels. Do not contact my relatives, employer, co-workers, friends, or other persons who are not guarantors. Please provide the registered corporate name of the lender, SEC registration number, Certificate of Authority number, official statement of account, and the name and authority of any collection agency handling this account. I dispute any unlawful collection practice, public shaming, threats, and unauthorized use of my personal data.
This helps show that you asserted your rights and asked for lawful communication.
4. Revoke unnecessary app permissions
On your phone, review the app’s permissions. Remove access to contacts, camera, photos, microphone, location, and storage if they are no longer necessary.
If the app requires access to contacts to function, take screenshots of the permission request and include them in your complaint. The 2026 government advisory states that unnecessary app permissions and unbridled contact-list processing are prohibited, and that permissions should be turned off or revoked once the legitimate purpose has been achieved.
5. Warn your contacts calmly
If the app has started messaging your contacts, send a simple notice:
I am dealing with an abusive online lending collector. Please do not respond, send money, or give personal information. Please screenshot any message or call details and send them to me for reporting.
This prevents panic and helps you gather evidence.
6. Do not pay to a suspicious personal account
If you decide to pay, pay only through a verified official channel. Be careful if the collector demands payment to a personal GCash, Maya, or bank account that does not match the lender’s corporate name.
Ask first for:
- Official statement of account
- Principal balance
- Interest and fees
- Due date computation
- Official payment channel
- Written confirmation that payment will be credited
- Official receipt or electronic acknowledgment
If the charges look inflated, undisclosed, or inconsistent with the disclosure statement, include that issue in your SEC complaint.
Where To File a Complaint
Different agencies handle different parts of the problem. In many cases, you may need to file with more than one office.
| Problem | Main office to approach | What to prepare |
|---|---|---|
| Unfair debt collection, abusive collectors, unauthorized lending app, missing SEC details | SEC Financing and Lending Companies Department through SEC iMessage | Narrative, screenshots, app name, company name, SEC/CA details if known, loan documents, payment proof |
| Unauthorized contact-list access, public shaming using personal data, misuse of ID/photos/contacts | National Privacy Commission through the NPC formal complaint process | Notarized complaint form, evidence, ID, screenshots, list of affected contacts |
| Threats, fraud, cyber harassment, fake police/court threats, identity theft, cyberlibel | PNP Anti-Cybercrime Group or NBI Cybercrime Division | Evidence, device, screenshots, URLs, phone numbers, account names, affidavits |
| Immediate threats to physical safety | Local police station or PNP | Blotter, screenshots, threat messages, identity of suspect if known |
| Debt collection lawsuit | First-level court or small claims court, depending on amount and procedure | Summons, complaint, loan documents, proof of payments, defenses |
The 2026 DICT-NPC-SEC advisory identifies the SEC as the office for unfair debt collection practices involving financing and lending companies, and also lists cybercrime reporting channels such as the DICT Cyber Hotline, NBI Cybercrime Division, and PNP Anti-Cybercrime Group.
Filing with the SEC
For SEC complaints, use the SEC iMessage portal. The SEC describes iMessage as its web-based ticketing platform for public inquiries, complaints, incidents, and requests, allowing users to submit and track tickets. (imessage.sec.gov.ph)
Attach organized evidence. The complaint should identify the lender, the app, the collector, and the specific acts that violate SEC rules.
A practical SEC complaint outline:
- Your full name and contact details
- App name and lender name
- Loan date, amount received, amount demanded, and payments made
- Summary of harassment
- Specific unlawful acts, such as contact-list messaging, threats, profanity, public shaming, false representation, or calls at unreasonable hours
- Evidence list
- Relief requested, such as investigation, order to stop harassment, correction of account, sanction, or referral to the proper unit
Filing with the National Privacy Commission
The NPC requires a formal complaint in a specific format. Its complaint page instructs complainants to download the form, print and fill it out, have it notarized, and submit it in person, by courier, or by scanned email. (National Privacy Commission)
This is especially important when the app:
- Accessed your contact list without proper basis
- Messaged people who were not guarantors
- Used your ID photo, selfie, or personal data to shame you
- Disclosed your loan details to third parties
- Retained or used your personal data after the loan purpose ended
- Failed to explain how your data would be processed
- Refused to delete or correct unlawfully processed information
For borrowers abroad, notarization can be the bottleneck. If a sworn complaint or affidavit is executed outside the Philippines, it may need notarization through a Philippine Embassy or Consulate, or local notarization with apostille depending on the country and receiving office requirements. The DFA’s Apostille office provides guidance on authentication and apostille requirements for documents used across borders. (Apostille Philippines)
Filing with PNP or NBI Cybercrime Units
Go to cybercrime authorities when the conduct includes:
- Threats of physical harm
- Extortion
- Identity theft
- Fake court, police, NBI, or prosecutor documents
- Online posting of defamatory accusations
- Use of your photos or IDs to shame you
- Hacking or unauthorized access
- Scams involving fake loan processing fees
Bring the phone if possible. Do not just print screenshots; investigators may need to see the original messages, links, accounts, and metadata.
What If the Lending App Threatens Arrest, a Warrant, or “Cybercrime”?
Collectors often use legal-sounding threats because they scare borrowers. Here is what those threats usually mean.
| Collector threat | Legal reality |
|---|---|
| “May warrant ka na bukas.” | A warrant of arrest is issued by a judge in a criminal case, not by a collector. Nonpayment of debt alone does not create a warrant. |
| “Ipapa-blotter ka namin sa barangay.” | A barangay blotter is only a record. It is not a judgment and does not prove a crime. |
| “NBI case ka na.” | A real NBI or police complaint requires an actual process. Ask for official documents and verify directly with the agency. |
| “Cybercrime ang hindi pagbabayad.” | Nonpayment of a loan is generally civil. Cybercrime may be relevant only if there are separate cyber offenses, such as identity theft, online fraud, illegal access, or cyberlibel. |
| “Ipapahiya ka namin sa Facebook.” | Public shaming may violate SEC rules, data privacy law, civil law, and possibly criminal laws on defamation or cyberlibel. |
| “Tatawagan namin lahat ng contacts mo.” | Contacting non-guarantor contacts for collection is prohibited under current regulatory guidance. |
If you receive an actual court summons, do not ignore it. A lender may file a civil collection case. For small monetary claims, the Supreme Court’s Rules on Expedited Procedures cover small claims where the claim does not exceed ₱1,000,000, exclusive of interest and costs. (Supreme Court of the Philippines)
If You Still Owe the Loan: How To Handle It Safely
Being harassed does not mean you should ignore a legitimate obligation. But you should protect yourself from inflated, hidden, or unlawful charges.
Ask for:
- Copy of the loan agreement
- Truth in Lending disclosure statement
- Statement of account
- Breakdown of principal, interest, penalties, service fees, processing fees, and collection fees
- Payment history
- Official payment channels
- Written settlement offer if they propose a discount
- Confirmation that all harassment and third-party contact will stop
If you can pay, use traceable payment methods. Keep receipts. Do not rely on verbal promises from collectors.
If you cannot pay in full, propose a realistic payment schedule in writing. Avoid agreeing to a new loan from the same app just to pay the old one unless you fully understand the new charges. Many borrowers fall into a cycle of borrowing from one app to pay another, causing fees and harassment to multiply.
Common Real-Life Scenarios
The app messaged all my contacts
This is one of the clearest red flags. Preserve screenshots from each contact. Ask them to send the full message, number, date, and time. File with the SEC for unfair collection and with the NPC for unauthorized or excessive processing of personal data.
The collector called my employer
A lender may verify employment or income during a loan application if done lawfully and proportionately. But telling your employer about your debt, calling you a scammer, threatening workplace embarrassment, or pressuring your employer to force payment may cross legal lines. Include employer screenshots, call logs, or written statements in your complaint.
The app posted my photo online and called me a scammer
This may involve unfair collection, data privacy violations, civil damages, and possibly cyberlibel or other criminal offenses depending on the content and author of the post. Save the URL, screenshot the post, capture comments, and record the account name. If the post is later deleted, your preserved evidence may be crucial.
I am an OFW or foreigner outside the Philippines
You can still prepare evidence and file online complaints when the agency allows it. The practical issues are notarization, affidavits, and identity verification. For formal sworn documents, check whether the receiving office requires consular notarization or apostille. Keep Philippine phone numbers, emails, payment receipts, and app records active long enough to preserve proof.
The lender is not on the SEC list
Report it. Under RA 9474, lending companies need SEC authority to operate. A company may have SEC incorporation but still lack the required Certificate of Authority as a lending or financing company. Corporate registration alone is not enough for lending operations.
My family wants to pay just to stop the harassment
This is understandable, but pay carefully. Ask for a written settlement amount, official payment channel, and confirmation that the account will be closed. If payment is made to a random personal wallet, the lender may later deny receiving it or continue collection.
Documents and Evidence Checklist
Prepare a folder with:
| Document or evidence | Why it matters |
|---|---|
| Government ID | Confirms identity of complainant |
| Loan agreement or app screenshots | Shows loan terms and lender identity |
| Disclosure statement | Shows whether finance charges were properly disclosed |
| Statement of account | Helps dispute inflated charges |
| Payment receipts | Proves amounts already paid |
| Screenshots of harassment | Proves unlawful collection acts |
| Call logs | Shows frequency and timing of calls |
| Screenshots from contacts | Proves third-party harassment |
| App permission screenshots | Supports data privacy complaint |
| App store link and developer name | Helps identify the operator |
| Company name, SEC registration, CA number | Helps SEC verify authority |
| Chronology of events | Helps agencies review the complaint efficiently |
| Notarized affidavit or complaint form | Often needed for formal proceedings |
Frequently Asked Questions
Can an online lending app message my contacts in the Philippines?
For debt collection, current regulatory guidance says lenders may only contact a guarantor, not random people in your contact list. A character reference is not automatically a guarantor. Contacting relatives, friends, co-workers, or employers to shame or pressure you may violate SEC rules and data privacy regulations.
Can lending apps access my contact list?
They cannot demand unnecessary or excessive permissions. Unbridled processing of contact lists is prohibited. Access may be allowed only for specified, legitimate, and proportionate purposes, such as letting you choose references or guarantors, and it should not be used to harass you or your contacts.
Can I go to jail for not paying an online loan?
Not for debt alone. The Philippine Constitution prohibits imprisonment for debt. However, separate criminal acts—such as fraud, falsification, identity theft, threats, or cyber offenses—are different from mere inability to pay. (Supreme Court E-Library)
Is public shaming by online lending apps illegal?
It can be. Publicly posting your name, face, ID, loan details, or accusations to pressure payment may violate SEC rules on unfair collection, the Data Privacy Act, Civil Code privacy and dignity protections, and possibly laws on libel or cyberlibel depending on the facts.
Where should I file a complaint against an online lending app?
File with the SEC for unfair debt collection or unauthorized lending activity. File with the NPC for misuse of personal data, contact-list harvesting, or public shaming involving personal information. Go to PNP Anti-Cybercrime Group or NBI Cybercrime Division for threats, scams, identity theft, fake legal documents, or cyber-related crimes.
What if the app is not SEC-registered?
Report it to the SEC. A lending company must have authority to operate from the SEC before conducting lending business. If the operator is not authorized, that may lead to SEC enforcement, penalties, or referral to other agencies. (Supreme Court E-Library)
Should I still pay if the online lender harassed me?
If the debt is valid, you may still owe the legitimate principal and lawful charges. But you can dispute harassment, unlawful fees, undisclosed charges, and misuse of personal data. Pay only through verified official channels and keep proof.
Can I sue the lending app for damages?
Possibly. The Civil Code allows damages for unlawful, bad-faith, or privacy-invasive acts, and the Data Privacy Act recognizes indemnity for damages caused by unauthorized use of personal information. The best remedy depends on the evidence, identity of the operator, amount of damage, and whether an administrative, civil, or criminal route is more practical. (Lawphil)
What if collectors use different numbers every day?
Save each number and message. Pattern matters. Include all numbers, call logs, screenshots, and timestamps in your complaint. If the messages contain threats, fraud, or impersonation of authorities, cybercrime units may be able to investigate the accounts, SIMs, or digital payment channels.
Can a lending app contact my employer?
A lender should not use your employer to shame, threaten, or pressure you into paying. If your employer was contacted, preserve the call log, message, or written statement from HR, your supervisor, or the person who received the call. This may support an SEC and NPC complaint.
Key Takeaways
- Online lending apps may collect valid debts, but they cannot harass, threaten, shame, deceive, or misuse personal data.
- Contacting your relatives, employer, friends, or phone contacts for debt collection is generally prohibited unless the person is a proper guarantor.
- Nonpayment of debt alone is not a crime and does not justify threats of arrest or fake warrants.
- Preserve evidence before blocking, deleting, or uninstalling the app.
- File with the SEC for unfair collection or unauthorized lending, with the NPC for data privacy violations, and with PNP/NBI cybercrime units for threats, scams, or online crimes.
- Harassment does not automatically cancel a valid loan, but it may give you grounds to dispute charges, demand lawful collection, and seek administrative, civil, or criminal remedies.