Contact-List Access / Debt Shaming
Lending app accessed phone contacts without consent and used them to shame or pressure the borrower — calling family, friends, or employers about the debt.
0
Documented Cases
—
Escalated / Verified
—
With Amount Disputed
Legal Basis in the Philippines
- • RA 10173 (Data Privacy Act) — accessing phone contacts without explicit consent is unlawful processing of personal data
- • SEC Memorandum Circular 18 (2019) — prohibits lending apps from accessing contacts, calling third parties, and using social media humiliation tactics
- • BSP Circular 1048 — prohibited debt collection practices including harassment and contact of third parties
- • NPC Circular 20-01 — consent requirement for processing sensitive personal information
Documented Cases
+ Add YoursNo cases documented yet for this specific issue.
Be the first to put this on record.
File First Case →Did this happen to you?
File your complaint in 5 minutes. We build the formal letter, you sign and send.
By location
See how this issue appears across Filipino regions and cities.
Relevant guides
All guides →Step-by-step, citing SEC MC 18 (2019) and the FinCare e-portal
How to file a SEC complaint against an online lending app
Step-by-step guide to filing a Securities and Exchange Commission complaint against a Philippine online lending app — SEC MC 18 (2019), evidence checklist, and the FinCare portal.
Cease-and-desist letter, evidence pack, and regulator filing
How to respond to illegal debt collection — a step-by-step playbook
How to respond to illegal debt collection in the Philippines — SEC MC 18, BSP Circular 1160, cease-and-desist template, evidence pack, and regulator complaint paths.
RA 10173, NPC Circular 16-01, and the privacy.gov.ph filing form
How to document a data-privacy violation for an NPC complaint
How to document a Philippine data privacy violation for an NPC complaint — RA 10173, NPC Circular 16-01, evidence pack, screenshots, and the filing path.
Frequently asked — Contact-List Access / Debt Shaming
Can a lending app legally access my phone contacts?
No. SEC MC 18 (2019) prohibits SEC-registered lenders from accessing phone contacts; RA 10173 §13 separately bars processing of personal data without explicit consent. The SEC has revoked Certificates of Authority for this conduct.
Where do I report contact-list shaming?
File simultaneously with the SEC EIPD (cgfd@sec.gov.ph) for SEC MC 18 violations and with NPC at privacy.gov.ph for unauthorized data processing under RA 10173. Both filings are free and may be lodged online.
- Source:SEC Memorandum Circular 18, s. 2019
- Source:RA 10173 — Data Privacy Act
- Source:SEC PH — File a Complaint
- Source:NPC complaint portal
Anong evidence ang dapat i-save sa harassment?
Screenshots ng harassing SMS o chat, call recordings, ang permission request screen ng app, at anumang messages na ipinadala sa inyong contacts o pamilya. I-save ang loan disclosure at SEC registration screenshot ng lender.
Can my employer be contacted about my debt?
No. SEC MC 18 prohibits SEC-registered lenders from contacting your employer, family, or any third party other than a designated co-maker, without prior written consent. BSP Circular 1048 imposes the same prohibition on BSP-supervised entities.
- Source:SEC Memorandum Circular 18, s. 2019
- Source:BSP Circular 1048
What penalties can the lender face?
SEC MC 18 §6 imposes fines of ₱25,000–₱1,000,000 per count and possible suspension or revocation of the Certificate of Authority. RA 10173 imposes administrative fines up to ₱5M per offence (NPC Circular 2022-01) and criminal penalties up to 6 years.