Loan App Harassment: Your Legal Options
Contents
Loan app harassment in the Philippines is not something you have to endure, and it is not something the regulator tolerates. The clearest proof: on June 26, 2023, the Securities and Exchange Commission ordered six lending companies to stop operating over "abusive collection or debt recovery practices", and sent the case to the Department of Justice as a criminal complaint. This guide defines what counts as harassment, shows the enforcement record, and lays out the sequence that works: document, control your data, complain to the right agency. Checked September 16, 2026.
What counts as harassment
Three behaviors come up again and again in enforcement and advisory records. Threats and intimidation, including threats to contact your employer or family. Public shaming, such as messages to your contacts or posts naming you a debtor. And pressure outside the contract: payment demands to personal accounts, "new payment lines" by SMS, or fees that were never disclosed.
The pattern appears on both sides of the market. The SEC's June 2023 orders against the Pera4U operator cited abusive collection directly. The May 2026 fake wave around Moca Moca produced complaints of fraud, phishing, abusive collection, and threats. Those came from impostors, which is why verifying who you borrowed from is step zero. Even registered lenders signal the anxiety: Tala's own marketing promises "no harassment, no intimidation, and no contact with your personal contacts", a promise that only makes sense because the industry's baseline problem is real.
The enforcement record
The regulator's response has teeth, and it is worth reading precisely. The June 2023 cease-and-desist orders, En Banc Case 07-23-003, covered six lending companies including U-Peso.ph Lending Corporation, the operator of UPESO, Pera4U, PeraLending, and LoanMoto. The stated ground was abusive collection or debt recovery practices; the SEC paired the orders with a criminal complaint to the DOJ and extended the stop directive to every platform those companies ran. In February 2026, Umeta Credit Lending Corp. drew a CDO of its own, citing unrecorded platforms and violations in debt collection. That was the wave where collection abuse itself triggered the order.
The 2025 and 2026 advisory waves add the mass picture: 22 illegal apps named in early 2026, dozens of clones in March and June, mass revocations in 2025. A collector threatening you may be wearing the name of a lender that no longer exists. Or never did.
First moves: build the file
Everything below depends on evidence, so build it before you need it.
- Save the contract and the disclosure. The loan agreement and the offer screen, screenshot before you accepted, define what you actually owe.
- Log every payment. Receipts for each installment, with dates and channels.
- Capture the abuse. Screenshots of threats, shaming posts, and SMS, with sender numbers and dates visible. If your contacts receive messages, collect those too.
- Keep the channels contractual. Pay only through the routes in your agreement, never to personal accounts, and never to "new payment lines" that arrive by SMS.
Cost discipline is part of the same file. SEC Memorandum Circular No. 14 of 2025, as published by Cashalo, caps late penalties at 5% per month of the overdue amount and total charges at 100% of what you borrowed; Kviku's frontend declares the same 5% monthly late-fee cap under BSP rules. If your arrears are growing faster than that, the growth itself is evidence.
Cut the data supply of the app
Contact-list abuse starts with contact-list access. Three habits shrink the attack surface. Install only from official channels: the official store listing or the lender's own site. Clone apps harvest data under registered brands' names, as the Moca Moca advisory showed. Grant only the permissions the loan needs. A lending app that demands your contact list is collecting pressure material, not verifying identity. And never send your ID photos or selfie to a chat "agent", whatever brand name it uses.
Where to file a complaint
Three agencies, three problem types. Collection abuse by an identified lender goes to the SEC, the agency that stopped Pera4U's operator and Umeta for exactly this conduct. Data misuse (contacts harvested, messages to third parties) goes to the National Privacy Commission. Its registration is declared by lenders, and its role in the Fcash matter shows it acts on lending-data complaints. Our NPC complaint guide walks the filing route. For licensing questions that shape your case: Check With SEC and the 1-4SEC hotline, which confirm whether the entity harassing you is even registered. File with the evidence file attached. Keep copies of everything you submit, and note the dates; agencies act on patterns, and your log is the pattern.
If the lender is unregistered
Harassment from an app with no SEC record changes the advice in one way. You owe verification before you owe anything else. Check the name against the illegal loan apps tracker and the SEC registered lending apps list. Unregistered lenders face cease-and-desist orders as a class (the 22-app list of early 2026, and the August 2025 wave before it). Complaints against them feed exactly those enforcement actions. Debt itself is a parallel question; our what-if-you-can't-repay guide covers it.
Frequently asked questions
How do I stop loan app harassment?
Document everything first: screenshots with dates, sender numbers, and your contact list's copies of any messages. Then pay only through contractual channels and file with the SEC for collection abuse and the NPC for data misuse. The SEC has ordered lenders to stop over this exact conduct.
Can a loan app contact my contacts?
The conduct is exactly what the SEC cites as abusive collection, and it has shut lenders down over it. Data-wise, an app harvesting your contacts without proper basis is a privacy complaint for the NPC. Document the messages and the permission your app demanded.
Can loan apps sue me for not paying?
Legitimate obligations do not vanish, and termination clauses exist. Home Credit's published ladder, for example, adds 40% of principal at 90 days. Nobody can promise a lawsuit or its outcome. What the record shows is the other direction: lenders, not borrowers, have been the DOJ respondents for abusive collection.
What limits apply to late fees?
Lender-published caps state 5% per month on overdue amounts and a 100% total-cost ceiling, under SEC Memorandum Circular No. 14 of 2025 and the BSP rules lenders declare. If your debt grows faster, document it; the growth is evidence.
Who do I report an illegal loan app to?
The SEC, through its advisory and enforcement channels, especially if the app also pressures or threatens you. The NPC covers the data side. Our illegal loan apps tracker lists the named apps and waves.
The bottom line for borrowers
Last word. Harassment is the lender's crime scene, not your shame. The SEC has stopped six companies over abusive collection and referred the case criminally. Caps limit what your arrears can become. And the evidence file you build today is what turns a complaint into an action. Document, restrict your data, file with the right agency. And if the lender turns out to be unregistered, say so in the complaint. Every registered app on this site was screened for exactly these behaviors as of September 16, 2026.
Sources used for this review
- SEC En Banc Case No. 07-23-003 (U-Peso.ph Lending Corporation et al.), orders of June 26, 2023: statements of June 30, 2023, reported July 3, 2023
- SEC CDO against Umeta Credit Lending Corp., February 2026
- SEC Memorandum Circular No. 14 (2025), as published by Cashalo's newsroom; BSP late-fee cap as declared by Kviku's frontend
- Advisory waves 2025-2026, per our illegal loan apps tracker
- NPC role in lending-data complaints, per the Fcash matter cited in our fact records