LabanPH
Online Lending (Multiple Apps)Contact-List Access / Debt Shaming

Online Lending (Multiple Apps) — Contact-List Access / Debt Shaming

Lending app accessed phone contacts without consent and used them to shame or pressure the borrower — calling family, friends, or employers about the debt.

The "online lending (multiple apps)" category captures the SEC-registered lending platforms that share the same contact-list-harassment fact pattern — contact-permission grab at install, third-party contact during collection, and harassment language that triggers SEC Memorandum Circular 18 and RA 10173 concurrently. The SEC publishes a running advisory list of unregistered and revoked online lending platforms; the NPC publishes a parallel list of cease-and-desist orders for unauthorized contact-list processing.

If your specific app is not yet individually tracked on LabanPH, this page is the right place to file: complaints that name the app are routed into the cohort that pressures both the SEC EIPD and the NPC to expand enforcement. The dual-track filing path (SEC for the lending-conduct violation, NPC for the data-privacy violation) is identical regardless of which app is the respondent — what differs is the evidence package, which this page describes step by step.

Legal basis (Philippines)

See the issue page for the full citation list. Primary statutes implicated by contact-list access / debt shaming include RA 11765 (FCPA, 2022), RA 3765 (Truth in Lending Act), RA 10173 (Data Privacy Act), BSP Circular 1048 / 1133 / 1160, and SEC MC 18 (2019) where applicable.

Public record — Online Lending (Multiple Apps) × Contact-List Access / Debt Shaming

No documented public-record events for Online Lending (Multiple Apps) on contact-list access / debt shaming yet — be the first to file.

(6 other public-record entries exist for Online Lending (Multiple Apps) on unrelated issues — see the company record page.)

File the first complaint →

Documented complaints

No complaints documented yet for Online Lending (Multiple Apps) on this issue.

File the first complaint →

Recommended actions

  1. 1.Build the harassment-evidence checklist
  2. 2.Generate the SEC MC-18 complaint letter
  3. 3.File the parallel NPC data-privacy complaint
  4. 4.Read the SEC MC-18 cease-and-desist guide

Related questions

How do I file a complaint against an online lending app?

File simultaneously with the SEC Corporate Governance and Finance Department (cgfd@sec.gov.ph) for SEC MC 18 violations and with the National Privacy Commission (privacy.gov.ph) for unauthorized contact-list access under RA 10173. Both agencies can suspend the lender's Certificate of Authority and order data deletion; the SEC has revoked the licenses of multiple OLPs since 2019.

How long does an SEC complaint take?

SEC's Enforcement and Investor Protection Department (EIPD) typically issues show-cause orders within 30–60 days of a complete complaint and decides administrative cases within 6–12 months. Cease-and-desist orders against unregistered or egregiously violating online lending platforms have been issued in as little as 14 days. Timelines lengthen when the respondent contests the SEC's jurisdiction.

What is the SEC MC 18?

SEC Memorandum Circular No. 18, series of 2019, prohibits unfair debt-collection practices by SEC-registered lending and financing companies. It bars contacting the borrower's contacts, employer, or family without consent; using profane language; threatening criminal prosecution without legal basis; and calling between 10 PM and 6 AM. Violations carry administrative fines of ₱25,000–₱1,000,000 per count and possible suspension or revocation of the Certificate of Authority.

Can creditors call my employer in the Philippines?

No, except under narrow conditions. SEC MC 18 (2019) prohibits SEC-registered lenders from contacting your employer, family, or any third party without your prior written consent. BSP Circular 1048 imposes the same prohibition on BSP-supervised institutions. The only permitted contact is with a person you specifically designated as an emergency contact during the loan application.

Related guides — Contact-List Access / Debt Shaming

How to document a data-privacy violation for an NPC complaint

How to document a Philippine data privacy violation for an NPC complaint — RA 10173, NPC Circular 16-01, evidence pack, screenshots, and the filing path.

npc · data-privacy · ra-10173

SEC MC 18 (2019) — File a Complaint Against an Online Lending App

Step-by-step guide to filing a Securities and Exchange Commission complaint against a Philippine online lending app — SEC MC 18 (2019), evidence checklist, and the FinCare portal.

sec · online-lending · harassment

Illegal Debt Collection PH — RA 11765 & SEC MC 18 Response Guide

How to respond to illegal debt collection in the Philippines — SEC MC 18, BSP Circular 1160, cease-and-desist template, evidence pack, and regulator complaint paths.

debt-collection · harassment · cease-and-desist

Did this happen to you?

File a complaint and we will pre-fill your BSP, SEC, DTI, and small-claims letters.

File a Complaint →Build a Letter →

Frequently asked — Online Lending (Multiple Apps) × Contact-List Access / Debt Shaming

Can a lending app legally access my phone contacts?

No. SEC MC 18 (2019) prohibits SEC-registered lenders from accessing phone contacts; RA 10173 §13 separately bars processing of personal data without explicit consent. The SEC has revoked Certificates of Authority for this conduct.

Where do I report contact-list shaming?

File simultaneously with the SEC EIPD (cgfd@sec.gov.ph) for SEC MC 18 violations and with NPC at privacy.gov.ph for unauthorized data processing under RA 10173. Both filings are free and may be lodged online.

Anong evidence ang dapat i-save sa harassment?

Screenshots ng harassing SMS o chat, call recordings, ang permission request screen ng app, at anumang messages na ipinadala sa inyong contacts o pamilya. I-save ang loan disclosure at SEC registration screenshot ng lender.

Can my employer be contacted about my debt?

No. SEC MC 18 prohibits SEC-registered lenders from contacting your employer, family, or any third party other than a designated co-maker, without prior written consent. BSP Circular 1048 imposes the same prohibition on BSP-supervised entities.

What penalties can the lender face?

SEC MC 18 §6 imposes fines of ₱25,000–₱1,000,000 per count and possible suspension or revocation of the Certificate of Authority. RA 10173 imposes administrative fines up to ₱5M per offence (NPC Circular 2022-01) and criminal penalties up to 6 years.

Is online lending legal in the Philippines?

Yes, when conducted by SEC-registered financing or lending companies under RA 9474 and RA 8556 with a Certificate of Authority. SEC MC 19 (2019) requires every online lending platform to be disclosed in the company's SEC filings.

What is the maximum interest rate for online loans?

BSP Circular 1133 (2021), extended by Circular 1165 (2023), caps consumer-loan effective interest at 6% per month nominal (24% per annum) and total cost at 15% per month for short-term, low-value loans.

Can a lending app legally access my contacts?

No. SEC MC 18 (2019) prohibits SEC-registered lenders from accessing phone contacts; RA 10173 separately bars processing of personal data without explicit consent. Both administrative and criminal sanctions apply.

How do I check if a lending app is SEC-registered?

Search the SEC's published list of lending and financing companies at sec.gov.ph and the SEC Express System. SEC also publishes its cease-and-desist orders against unregistered or violating apps.

💬