How to respond to illegal debt collection — a step-by-step playbook

SEC MC 18 (2019) and BSP Circular 1160 (2023) draw a similar line. Forbidden conduct includes: contacting persons other than the borrower or a co-maker; using threats or obscene language; misrepresenting that a person is a lawyer, court officer, or government agent when they are not; communicating outside the hours of 6 AM to 10 PM; publishing the debt to the borrower's social network, employer, or family; and demanding amounts in excess of what the contract allows.

The rules apply equally to in-house collectors and to third-party agencies. The lender remains responsible for the conduct of any agency it hires.

Every collection contact is evidence. Save: the SMS thread on the device with the originating number; call logs with date, time, and duration; voicemail recordings if any; Viber and Messenger threads with the contact's profile and the company name; emails, including headers, by exporting as .eml from your mail client; and screenshots of any social-media post that named you.

If any of your contacts was reached, ask them to send you a forwarded copy of the message and a short signed statement: who they are, their relationship to you, when the message arrived, what it said. A statement does not need to be notarised at this stage; if the case proceeds to formal SEC adjudication or court, you can notarise later.

Send a single, dated letter to the lender's customer service email and to any collection agency that has contacted you. The letter does not waive the underlying debt. Its purposes are: (a) to put the lender on written notice of specific MC-18 or BSP-1160 violations; (b) to preserve the date for tolling and damages calculations; and (c) to convert further violations into knowing violations, which carry higher penalties.

The letter should: identify yourself and the loan account; list each violation with date, time, channel, and quoted content; cite the specific MC-18 paragraph or BSP-1160 section breached; demand that all communications be in writing only, sent to the email address you specify; and reserve all rights including the right to file with regulators and to claim damages.

Choose the regulator by lender type. SEC-registered lenders go to cgfd@sec.gov.ph or the FinCare portal. BSP-supervised banks, EMIs, and pawnshops go to consumeraffairs@bsp.gov.ph or the BSP Online Buddy. If your contact list was used to harass others, also file with the National Privacy Commission at complaints@privacy.gov.ph or via privacy.gov.ph.

Use the same evidence pack for all three filings. Cross-reference: in the SEC complaint, mention the parallel NPC filing; in the NPC complaint, mention the SEC filing. Regulators do not formally coordinate, but cross-references help case officers understand the scope.

Articles 19, 20, and 21 of the Civil Code give a private right of action for damages caused by acts contrary to morals or law. Small-claims procedure under A.M. No. 08-8-7-SC (as amended) covers monetary claims up to ₱400,000 and disallows lawyers in court — both sides represent themselves. Filing fees scale with the claim and indigent litigants may apply for exemption.

A realistic claim for harassment damages aggregates: lost wages from time off work to handle calls; transportation to police stations or regulator offices; medical bills if anxiety treatment was needed; and moral damages for sleepless nights and damaged reputation among contacts who received messages. Document each component with receipts or a written narrative.