If a loan app is threatening to call your friends, family members, employer or other people in your phone contacts, do not panic and do not immediately take another loan just to stop the calls.
There are important consumer-protection and data-protection rules in Nigeria that apply to financial institutions and digital lenders.
However, there is also an important distinction:
Owing money does not automatically give a lender unlimited permission to use your personal information or contact third parties however it wants.
At the same time, a complaint about harassment or privacy does not automatically cancel a legitimate debt.
If you are dealing with loan app harassment in Nigeria, the best approach is to preserve your evidence, understand what the rules actually say, secure your personal information and use the appropriate complaint channels.
Can a Loan App Call Your Contacts About Your Debt?
The answer depends on who is being contacted, why they are being contacted, what information is disclosed and what regulatory framework applies to the lender.
For financial institutions regulated by the Central Bank of Nigeria, the CBN Consumer Protection Regulations contain specific restrictions on contacting a borrower’s friends, employer, relatives or neighbours.
Under section 5.5.7, regulated institutions must not contact those third parties for information beyond employment status, telephone number or address unless the person guaranteed the loan or consented to being contacted.
They also cannot require those third parties to pay the borrower’s debt unless they are guarantors.
This means a lender cannot simply treat everyone in your phonebook as responsible for your debt.
And if no one else guaranteed your loan, the lender should not simply transfer your repayment obligation to that person.
What Nigerian Law Says About Loan App Contact Harassment
There are several legal and regulatory frameworks that can become relevant, depending on the lender and the conduct involved.
1. Nigeria Data Protection Act 2023
The Nigeria Data Protection Act (NDPA) 2023 regulates the processing of personal data in Nigeria and established the Nigeria Data Protection Commission (NDPC).
The Act provides several lawful bases for processing personal information, including consent, contractual necessity, legal obligations and legitimate interests.
However, legitimate-interest processing is not unlimited.
Section 25(2) states that legitimate interests are not legitimate where they override the fundamental rights, freedoms and interests of the data subject or where the person would not reasonably expect their information to be processed in the manner proposed.
This is important when dealing with phone contacts.
Simply having access to someone’s phone number does not mean that every possible use of that number is automatically lawful.
2. CBN Consumer Protection Regulations
For institutions regulated by the CBN, section 5.5.7 of the Consumer Protection Regulations places specific limits on debt-recovery contact.
The regulation states that such institutions should not:
- Contact a borrower’s friends, employer, relatives or neighbours for information beyond employment status, telephone number or address, except where the person guaranteed the loan or consented to being contacted.
- Require those people to pay the borrower’s debt unless they are guarantors.
- Make telephone or personal contact with a customer for debt recovery between 9:00 PM and 8:00 AM without the customer’s prior consent.
So if a regulated lender is contacting your family or employer and disclosing your debt details, do not assume that the lender can do whatever it wants simply because you borrowed money.
3. FCCPC and Digital Lending Rules
The FCCPC’s Digital, Electronic, Online, or Non-Traditional Consumer Lending Regulations 2025 (DEON Regulations) provide a regulatory framework for consumer lending services that fall within their scope.
The regulations were made on July 21, 2025 and came into effect upon publication in the Federal Gazette.
They address areas including consumer lending, lender/service-provider responsibilities and regulatory oversight.
Because digital lending regulation can change, borrowers should check the latest FCCPC information before relying on an old social-media post or article.
What a Loan App Cannot Do Simply Because You Owe Money
Having a legitimate debt does not mean a lender has unlimited rights over your personal information.
For example, you should be cautious if a lender threatens to:
- Publicly expose your debt
- Send your debt details to unrelated people
- Shame you in WhatsApp groups
- Contact people in your phonebook simply to embarrass you
- Demand payment from someone who never guaranteed your loan
- Use misleading or threatening messages to pressure third parties
- Continue inappropriate contact outside permitted recovery hours
The exact legal position depends on the lender, its regulatory status and what actually happened.
That is why evidence matters.
What to Do If a Loan App Is Threatening Your Contacts
Do not delete the messages.
Do not immediately start arguing with the person calling you.
And do not take another expensive loan simply because you are frightened.
Follow these steps instead.
Step 1: Save Every Piece of Evidence
Take screenshots of:
- SMS messages
- WhatsApp messages
- Emails
- Call logs
- Phone numbers
- The loan app
- Your loan agreement
- Repayment demands
- Threatening messages
- Messages sent to your friends or family
- Any messages containing your personal information
Keep the date and time visible where possible.
If someone in your contacts receives a message from the lender, ask them to screenshot it and send it to you.
Do not ask them to delete it.
That evidence may become important if you make a formal complaint.
Step 2: Do Not Give the Harasser More Information
If someone calls and demands your:
- OTP
- ATM PIN
- Internet banking password
- Card PIN
- BVN verification code
- Banking login details
do not provide them simply because they claim to be working for a loan company.
Your debt does not give a caller permission to obtain your banking security credentials.
The CBN itself warns customers to protect sensitive account information such as PINs, passwords and codes.
Step 3: Review the Loan App’s Permissions
If the app is still installed on your phone, check what permissions it currently has.
Depending on your device, go to something similar to:
Settings → Apps → [Loan App] → Permissions
Review access to:
- Contacts
- Phone
- SMS
- Photos
- Files
- Location
- Camera
- Microphone
Do not assume that every permission is necessary simply because an application requests it.
If you are no longer using the application, consider removing unnecessary permissions and uninstalling it after preserving the evidence you need.
Important: Removing permissions does not erase information the company may already have collected.
Step 4: Tell Your Contacts What Is Happening
You do not have to explain your entire financial situation.
A simple message can be enough:
“A digital lending company may contact you regarding a financial matter involving me. Please don’t send them money or personal information. If they contact you, screenshot the message and send it to me.”
This takes some of the power out of the threat.
The lender is relying on you being afraid that your contacts will receive a message.
If your contacts already understand what is happening, the threat becomes much less effective.
Step 5: Contact the Lender Through an Official Channel
If you genuinely owe the money, do not ignore the underlying debt.
Use the lender’s official customer-service channel and ask for:
- Your outstanding balance
- A breakdown of the amount owed
- The repayment terms
- A repayment arrangement if you cannot pay
- Written confirmation of any agreement
Keep your communication professional.
You can acknowledge the debt while separately objecting to inappropriate contact or data use.
These are two different issues.
Step 6: Make a Formal Complaint Where Appropriate
The correct complaint channel depends on who regulates the lender and what happened.
FCCPC
The FCCPC handles consumer-protection matters within its mandate, including digital-lending regulatory issues.
NDPC
If you believe your personal data has been improperly processed, disclosed or otherwise mishandled, the Nigeria Data Protection Commission (NDPC) is the specialist authority for data-protection matters. The NDPC’s mandate includes protecting data-subject rights and providing mechanisms for recourse and remedies.
CBN
If the lender is a financial institution within the CBN’s regulatory purview, the CBN provides a consumer-complaints process.
The CBN says customers should generally complain to the financial institution first. If the institution does not resolve the complaint within the applicable period, the matter can then be escalated to the CBN Consumer Protection Department.
Do not send your PIN or password when making a complaint.
What If the Loan App Says "You Agreed to This"?
This is one of the biggest misunderstandings surrounding loan app harassment.
You may have clicked:
“I Agree.”
That does not mean every possible use of your information automatically becomes lawful.
The NDPA recognises consent as one lawful basis for processing, but it also recognises other lawful bases, and it places limits on processing based on legitimate interests. Section 25(2) specifically says legitimate interests are not valid where they override the data subject’s fundamental rights, freedoms and interests or where the processing falls outside reasonable expectations.
So the correct question is not simply:
“Did I click Accept?”
The better questions are:
What information was collected?
Why was it collected?
How is it being used?
Who is receiving it?
Was that use lawful and reasonably expected?
Those questions matter when assessing a privacy complaint.
Does a Privacy Violation Cancel My Loan?
Not automatically.
This is extremely important.
If you borrowed money legitimately, a dispute over how the lender handled your personal information does not automatically erase the debt.
You can have two separate issues at the same time:
Issue 1: The debt
You borrowed money and may still owe it.
Issue 2: The collection method
The lender’s conduct while trying to recover that money may raise a separate consumer-protection or data-protection issue.
Do not confuse the two.
If you owe money, deal with the debt.
If your privacy rights are being violated, document the conduct and complain through the appropriate channel.
Can a Loan App Contact My Employer?
For CBN-regulated institutions, section 5.5.7 specifically limits what information may be obtained from a borrower’s employer, relatives, friends or neighbours.
The rule allows contact for information such as employment status, telephone number or address, except where the person guaranteed the loan or consented to being contacted. It also prevents the lender from requiring that third party to pay the debt unless they are a guarantor.
That is very different from calling an employer to announce:
“Your employee owes us money.”
If something like this happens, preserve the evidence.
What About Calling at Night?
For institutions covered by the CBN Consumer Protection Regulations, section 5.5.7(c) says they should not make telephone or personal contact with customers for debt recovery between 9:00 PM and 8:00 AM without the customer’s prior consent.
If you receive repeated recovery calls during those hours, save the call records and screenshots.
The exact regulatory position can depend on the type of lender, so identify the lender before deciding which complaint route applies.
Should You Borrow From Another App to Stop the Harassment?
Be very careful.
This is one of the worst reactions to loan app harassment.
You receive threatening messages.
You panic.
You download another app.
You borrow ₦50,000.
You pay the first lender.
Then the second lender wants its money.
So you borrow from a third lender.
The cycle becomes:
Loan A → Loan B → Loan C → Loan D
You have not solved the financial problem.
You have only moved the repayment deadline.
If you are already struggling with several loan apps, stop and calculate your total debt before taking another loan.
How to Protect Yourself From Loan App Harassment in the Future
1. Who operates it?
Find the legal company behind the application.
2. Is the lender properly authorised?
Check the applicable regulatory register.
3. What will you repay?
Do not look only at the amount offered.
4. What data does it collect?
Read the privacy information.
5. What permissions does it request?
Be cautious about unnecessary access to your phone.
6. What happens if you miss payment?
Read the recovery provisions before accepting the money.
7. How can you complain?
A legitimate financial service should provide a clear complaints mechanism.
Don't Delete the Evidence
This deserves its own section because people often make this mistake.
When you are angry or embarrassed, you may want to delete everything.
Don’t.
The messages showing:
- Who contacted you
- What they said
- When they said it
- Who they threatened to contact
- What personal information they disclosed
may be far more useful than your memory of the incident.
Create a folder on your phone or computer and keep the evidence together.
If possible, back it up somewhere safe.
Frequently Asked Questions
Can a loan app legally call my contacts in Nigeria?
The answer depends on the lender and the purpose of the contact. For CBN-regulated institutions, section 5.5.7 restricts contact with a borrower’s friends, relatives, employer and neighbours to specified information unless the person guaranteed the loan or consented to contact.
Can a loan app tell my family that I owe money?
A lender’s ability to contact third parties is not unlimited. Disclosure of debt information may raise consumer-protection and data-protection concerns depending on the circumstances, so preserve evidence and seek advice from the appropriate regulator.
I clicked “I Agree.” Can the loan app still violate my privacy?
Clicking an agreement does not automatically make every subsequent processing activity lawful. The NDPA recognises several lawful bases for processing and places limits on legitimate-interest processing where it overrides fundamental rights, freedoms and interests or falls outside reasonable expectations.
Can a loan app call my employer?
For CBN-regulated institutions, section 5.5.7 limits contact with employers and other third parties to specified information unless the person guaranteed the loan or consented to contact.
What should I do if a loan app threatens to expose me?
Save screenshots, call logs and messages. Do not send sensitive banking credentials. Review the app’s permissions, contact the lender through an official channel and consider making a complaint to the FCCPC, NDPC or CBN depending on the lender and nature of the complaint.
Does loan app harassment mean I don’t have to repay?
No. A complaint about harassment or improper data processing does not automatically cancel a legitimate debt. Treat the debt and the alleged misconduct as separate issues.
Can I complain to the CBN about every loan app?
Not necessarily. The CBN’s complaints process covers financial institutions within its regulatory purview. The CBN specifically identifies banks, Microfinance Banks and other regulated financial institutions within that process.
Final Takeaway
If a loan app is threatening to call your contacts in Nigeria, don’t let fear make your next financial decision for you.
You have two things to deal with:
The debt; and the way the lender is trying to recover it.
If you owe money, work on a realistic repayment arrangement.
If a lender is misusing your personal information or engaging in inappropriate recovery practices, preserve the evidence and use the appropriate regulatory complaint channel.
The smartest response is not to panic.
Document. Protect your information. Verify the lender. Communicate through official channels. And know your rights.
Disclaimer: WealthVisaHub is an independent educational website. This article provides general information about digital lending, consumer protection and data privacy in Nigeria.
It is not legal or financial advice and does not create a lawyer-client relationship. Regulations and enforcement practices can change.
If you are facing a serious debt, privacy dispute or legal threat, consider obtaining advice from a qualified professional and verify current information directly with the relevant Nigerian regulator.
