What to Do When a Loan App Messages Your Contacts
Contents
A loan app accessed your contacts and is now messaging them about your debt. This is contact-list harassment, and it is one of the exact abusive-collection behaviors the SEC cites in its enforcement orders. The Pera4U operator was shut down over it. Here is the sequence: secure your data, document the abuse, and complain to the agencies that act on it. Checked September 16, 2026.
Secure your data now
Three moves before anything else. Strip the app's permissions: revoke contacts access in your phone settings. Change your phone's privacy settings to restrict other apps from reading contacts. And warn your contacts: a short message saying "I'm being harassed by a loan app; please ignore messages about me" stops the social damage and starts their evidence trail too.
Document everything before you act
Every message your contacts received: screenshot with dates and sender numbers. Every call to your contacts: log the time and number. Every threat: save it. The Pera4U enforcement showed the SEC acts on this pattern; your evidence file is what turns a complaint into an action. The file also protects you: if the lender disputes your account later, the log proves the harassment pattern.
Complain to the right agencies
The SEC owns the lending side. Abusive collection is a stated ground for CDOs and license revocation. Route: the SEC's enforcement channels, with the evidence file attached.
The NPC owns the data side. Contact-list harvesting without consent violates data privacy rules. Route: the NPC's complaint portal, describing what data was collected and how it was misused. Criminal threats go to the PNP.
Full routes in our where to complain guide.
Frequently asked questions
Can a loan app legally message my contacts?
No. Contact-list messaging without the contacts' consent violates data privacy rules, and using it as a collection tactic is the abusive-collection ground the SEC enforces. Even registered lenders do not have this right.
What do I do if my contacts are being harassed?
Tell them to document everything they receive. Their screenshots join your evidence file. Then complain to the SEC and the NPC; the pattern across multiple victims strengthens the case.
How did the app get my contacts?
You granted contacts permission at install, or the app accessed them through your phone's address book without clear disclosure. Strip the permission now, and check whether the app copied the data before you revoked access.
The bottom line for borrowers
Contact-list harassment is a crime pattern. The SEC has shut lenders down for it. Secure your data, build the evidence, and file with the SEC and the NPC.
The harassment guide covers the full sequence. The reporting guide maps the agencies. Verified September 16, 2026.
Sources used for this review
- SEC enforcement record: Pera4U CDO (June 2023, abusive collection ground); Umeta CDO (February 2026, collection violations)
- NPC mandate and registration declarations: per lender disclosures in our review series
- Tala's own marketing: "no contact with personal contacts" — the industry knows this is a borrower priority