Digido — Contact-List Access / Debt Shaming
Lending app accessed phone contacts without consent and used them to shame or pressure the borrower — calling family, friends, or employers about the debt.
Digido is an SEC-registered online lender named in documented complaints describing contact-list access used for collection purposes — third parties contacted without their consent because the borrower's app gave Digido phonebook permission at install time. The conduct sits squarely inside SEC Memorandum Circular 18's prohibited-acts list and inside the NPC's repeated rulings that such third-party contact lacks a lawful basis under RA 10173.
What makes the Digido pattern distinct is the documented intersection with high effective-APR complaints — borrowers describe being charged amounts that, once processing fees are included, materially exceed the BSP Circular 1133 framework, and then experiencing contact-list harassment when the resulting balance becomes unmanageable. This page documents Digido's public record, the documented complaint cohort, and the SEC + NPC dual-track filing path for converting contact-list and harassment evidence into a regulator-routed complaint that names Digido as respondent.
Legal basis (Philippines)
See the issue page for the full citation list. Primary statutes implicated by contact-list access / debt shaming include RA 11765 (FCPA, 2022), RA 3765 (Truth in Lending Act), RA 10173 (Data Privacy Act), BSP Circular 1048 / 1133 / 1160, and SEC MC 18 (2019) where applicable.
Public record — Digido × Contact-List Access / Debt Shaming
No documented public-record events for Digido on contact-list access / debt shaming yet — be the first to file.
(1 other public-record entries exist for Digido on unrelated issues — see the company record page.)
File the first complaint →Documented complaints
No complaints documented yet for Digido on this issue.
File the first complaint →Recommended actions
Related questions
How do I file a complaint against an online lending app?
File simultaneously with the SEC Corporate Governance and Finance Department (cgfd@sec.gov.ph) for SEC MC 18 violations and with the National Privacy Commission (privacy.gov.ph) for unauthorized contact-list access under RA 10173. Both agencies can suspend the lender's Certificate of Authority and order data deletion; the SEC has revoked the licenses of multiple OLPs since 2019.
How long does an SEC complaint take?
SEC's Enforcement and Investor Protection Department (EIPD) typically issues show-cause orders within 30–60 days of a complete complaint and decides administrative cases within 6–12 months. Cease-and-desist orders against unregistered or egregiously violating online lending platforms have been issued in as little as 14 days. Timelines lengthen when the respondent contests the SEC's jurisdiction.
What is the SEC MC 18?
SEC Memorandum Circular No. 18, series of 2019, prohibits unfair debt-collection practices by SEC-registered lending and financing companies. It bars contacting the borrower's contacts, employer, or family without consent; using profane language; threatening criminal prosecution without legal basis; and calling between 10 PM and 6 AM. Violations carry administrative fines of ₱25,000–₱1,000,000 per count and possible suspension or revocation of the Certificate of Authority.
Can creditors call my employer in the Philippines?
No, except under narrow conditions. SEC MC 18 (2019) prohibits SEC-registered lenders from contacting your employer, family, or any third party without your prior written consent. BSP Circular 1048 imposes the same prohibition on BSP-supervised institutions. The only permitted contact is with a person you specifically designated as an emergency contact during the loan application.
Related guides — Contact-List Access / Debt Shaming
How to document a data-privacy violation for an NPC complaint
How to document a Philippine data privacy violation for an NPC complaint — RA 10173, NPC Circular 16-01, evidence pack, screenshots, and the filing path.
npc · data-privacy · ra-10173
SEC MC 18 (2019) — File a Complaint Against an Online Lending App
Step-by-step guide to filing a Securities and Exchange Commission complaint against a Philippine online lending app — SEC MC 18 (2019), evidence checklist, and the FinCare portal.
sec · online-lending · harassment
Illegal Debt Collection PH — RA 11765 & SEC MC 18 Response Guide
How to respond to illegal debt collection in the Philippines — SEC MC 18, BSP Circular 1160, cease-and-desist template, evidence pack, and regulator complaint paths.
debt-collection · harassment · cease-and-desist
Did this happen to you?
File a complaint and we will pre-fill your BSP, SEC, DTI, and small-claims letters.
Frequently asked — Digido × Contact-List Access / Debt Shaming
Can a lending app legally access my phone contacts?
No. SEC MC 18 (2019) prohibits SEC-registered lenders from accessing phone contacts; RA 10173 §13 separately bars processing of personal data without explicit consent. The SEC has revoked Certificates of Authority for this conduct.
Where do I report contact-list shaming?
File simultaneously with the SEC EIPD (cgfd@sec.gov.ph) for SEC MC 18 violations and with NPC at privacy.gov.ph for unauthorized data processing under RA 10173. Both filings are free and may be lodged online.
- Source:SEC Memorandum Circular 18, s. 2019
- Source:RA 10173 — Data Privacy Act
- Source:SEC PH — File a Complaint
- Source:NPC complaint portal
Anong evidence ang dapat i-save sa harassment?
Screenshots ng harassing SMS o chat, call recordings, ang permission request screen ng app, at anumang messages na ipinadala sa inyong contacts o pamilya. I-save ang loan disclosure at SEC registration screenshot ng lender.
Can my employer be contacted about my debt?
No. SEC MC 18 prohibits SEC-registered lenders from contacting your employer, family, or any third party other than a designated co-maker, without prior written consent. BSP Circular 1048 imposes the same prohibition on BSP-supervised entities.
- Source:SEC Memorandum Circular 18, s. 2019
- Source:BSP Circular 1048
What penalties can the lender face?
SEC MC 18 §6 imposes fines of ₱25,000–₱1,000,000 per count and possible suspension or revocation of the Certificate of Authority. RA 10173 imposes administrative fines up to ₱5M per offence (NPC Circular 2022-01) and criminal penalties up to 6 years.