In Short
- SEC rules (Memorandum Circular No. 18, Series of 2019) ban threats, cursing, shaming, lies and contacting people in your phone contacts, except the guarantors you named (people who agreed to pay if you do not).
- The NPC's rules for lenders say your contact list and photos may not be used to collect or to harass you.
- Complain about lending and financing companies (including most lending apps) to the SEC. Complain about banks to the Bangko Sentral ng Pilipinas (BSP).
- You still owe what you really borrowed. But no one can be jailed just for not paying a debt.
What Lending and Financing Companies May Not Do
SEC Memorandum Circular No. 18, Series of 2019 (SEC MC 18-2019) lists unfair collection practices that lending and financing companies, and the outside collectors they hire, may not use:
- using or threatening violence or other crimes against you, your good name or your property;
- threatening to do something the law does not allow them to do;
- using dirty words, insults or cursing;
- disclosing or publishing the names and personal information of borrowers who have not paid, except as the circular allows (for example, to credit bureaus);
- spreading false information about your loan, including not saying that you dispute the debt;
- using lies or tricks, such as pretending to be a lawyer, a court, the police or a government office;
- contacting you at unreasonable hours, which the circular sets as before 6:00 a.m. or after 10:00 p.m., unless the account is more than 15 days overdue or you agreed to those hours; and
- contacting people in your contact list other than the guarantors or co-makers (people who signed the loan with you) you named, even if you "allowed" access to your contacts.
The SEC can fine the company, stop its lending for a time, or cancel its license to lend (Certificate of Authority). Other laws may also apply, such as the Financial Products and Services Consumer Protection Act, Republic Act No. 11765 (RA 11765).
Your Phone Data: The NPC's Rules for Lenders
Under the Data Privacy Act, Republic Act No. 10173 (RA 10173), and the NPC's circular on loan-related transactions (NPC Circular No. 20-01, as amended by NPC Circular No. 2022-02):
- A lending app may not ask for permissions it does not need.
- Using your contact list to collect from anyone other than the guarantor you chose, or to harass you or your contacts, is not allowed.
- Your photos may be taken for identity checks and fraud prevention, but may never be used to harass or embarrass you.
- A character reference you named (someone who can vouch for you) is not your guarantor and should not be asked to pay.
If an app messaged your contacts, posted your photo, or called you a scammer in group chats, that can be a data privacy violation as well as an SEC violation. See data privacy complaints.
What to Do When It Starts
- Keep evidence. Screenshot every message and post, with the number or account, date and time. Ask friends and family who were contacted to screenshot what they received. Save call logs.
- Find out who the lender is. Get the company's registered name, not just the app's name. The SEC publishes lists of lending and financing companies registered with it and their registered online lending platforms, and lists of apps it has ordered to stop.
- Write to the lender. Say that the collector is violating SEC MC 18-2019 and the NPC's rules, demand that it stop contacting third parties, and, if you dispute the amount, say so. See the letter to a lending company. Keep proof that you sent it.
- Ask for your statement of account (the record of what you owe). Check the amount, the interest and the charges against the Loan Agreement. See loans and Promissory Notes.
- Complain to the government offices in charge (next section). You can complain to more than one.
Where to Complain
| Who Is Collecting | Where to Complain |
|---|---|
| A lending company, financing company or online lending app | SEC, Corporate Governance and Finance Department, through the complaint channels on the SEC website |
| Misuse of your contacts, photos or personal data by any lender | National Privacy Commission. Write to the company's Data Protection Officer first. See data privacy complaints. |
| A bank, credit card company or other business the BSP oversees, or its collection agency | The bank's own complaints desk first, then the BSP's consumer assistance channels |
| Threats of harm, online shaming posts, fake legal notices | The PNP Anti-Cybercrime Group or the NBI Cybercrime Division. See online scams. |
For an SEC complaint, prepare: your name and contact details, the company's name and the app's name, the loan details, a short account of what happened, and your screenshots. Attach your letter to the lender if you sent one.
What a Collector Is Allowed to Do
A lender may remind you of the debt, send you Demand Letters (formal letters asking you to pay), report to credit bureaus as the law allows, and sue you in court to collect. Most small debts go through small claims, where the court can order you to pay but does not send anyone to jail.
The Constitution says no person shall be imprisoned for debt. A collector who says you will be arrested for not paying a loan is making a false threat. The exception is a different situation: issuing a check that bounces can be a crime. See bouncing checks.
Harassment does not erase the debt. If you can, offer a realistic payment plan in writing and keep a record of every payment.
For Your Complaint
Your ticks stay on this device only.
Common Questions
Can a Lending App Text My Contacts?
No. SEC MC 18-2019 bans contacting people in your contact list other than the guarantors or co-makers you named, even if you gave the app access to your contacts. The NPC's rules also forbid using your contact list to collect or harass.
Can I Go to Jail for Not Paying an Online Loan?
No one can be jailed simply for not paying a debt. The Constitution forbids it. The lender can sue to collect. Fraud and bouncing checks are separate matters.
Where Do I Report a Lending App That Harasses Me?
To the SEC, which regulates lending and financing companies, and to the National Privacy Commission if the app misused your contacts or photos. Threats and online shaming can also be reported to the PNP Anti-Cybercrime Group or the NBI.
What Times Can Collectors Call Me?
Under SEC MC 18-2019, contact before 6:00 a.m. or after 10:00 p.m. is unreasonable, unless the account is more than 15 days overdue or you agreed to those times.
The App Is Not Registered With the SEC. Do I Still Have to Pay?
That is a question about your specific case. Report the app to the SEC, keep your records, and get legal advice. The Public Attorney's Office gives free help to people who qualify.
Not legal advice. This is general information. For advice on your own situation, consult a lawyer. If you cannot afford one, the Public Attorney's Office (PAO) or an IBP legal aid office may help for free.
Government fees, rules and requirements change, so always check with the office concerned before you go. Last reviewed October 8, 2026.