Loan stress is already heavy. It becomes worse when a lender, collector, or loan app agent starts calling your relatives, employer, chama members, customers, or phone contacts about your debt. Many Kenyan borrowers have heard stories of contacts receiving embarrassing messages, threats, or public shame because someone installed a loan app, gave permissions, or fell behind on repayment.
This guide explains practical steps to take if a lender harasses your contacts in Kenya. It is educational information, not legal advice. If threats, blackmail, fraud, violence, or serious reputational harm is involved, consider speaking to a qualified advocate or reporting to the relevant authority.
The most important point is this: do not respond in panic. Collect evidence, secure your phone and data, communicate through official channels, and complain to the right place.
What counts as contact harassment?
Not every reminder is harassment. A lender may contact you about a debt using the details you provided. A lender may also ask for a next of kin, referee, guarantor, or emergency contact, depending on the loan product. The problem starts when contact is excessive, humiliating, misleading, threatening, or unrelated to a lawful purpose.
Examples that should raise concern include:
- Calling your contacts repeatedly to pressure them to pay your loan.
- Sending messages that shame you, insult you, or reveal private loan information.
- Telling your employer or customers that you are a bad debtor.
- Threatening arrest, public exposure, or seizure without a clear lawful process.
- Contacting people who never agreed to be guarantors.
- Using your phone contacts after you did not clearly consent to that use.
- Posting your name, photo, ID details, or debt status in groups or social media.
The harm is not only embarrassment. Your privacy, job, business relationships, family trust, and mental health can be affected. That is why your first task is to move from emotion to documentation.
Step 1: Save evidence immediately
Evidence is stronger when it is specific. Ask your contacts to forward screenshots, call logs, audio notes, SMS messages, WhatsApp messages, and any caller IDs used. Do not edit the screenshots. Save the date, time, number, name displayed, and exact wording.
Create a simple incident record. For example:
- 10 June, 8:42 a.m.: Aunt received SMS from 07XX XXX XXX saying I owe KES 4,800.
- 10 June, 9:15 a.m.: Employer received call from same number asking them to tell me to pay.
- 11 June, 2:30 p.m.: WhatsApp message sent to cousin with my full name and loan amount.
If the lender claims you owe KES 7,200 but your app shows KES 5,950, screenshot both. If the collector uses abusive language, preserve the exact words. If a message includes threats, keep the original.
Do not rely only on memory. A calm timeline makes it easier to complain to the lender, the Central Bank of Kenya (CBK), the Office of the Data Protection Commissioner (ODPC), the police, or another authority if needed.
Step 2: Check whether the lender is licensed or identifiable
Find out who is actually contacting your people. Some borrowers assume a message is from the lender when it may be from an outsourced collector, a scammer, or a different loan app. Check the app name, business name, website, paybill, SMS sender ID, email address, and support number.
CBK announced that the Central Bank of Kenya (Digital Credit Providers) Regulations, 2022 became operational in March 2022 and provide for licensing and oversight of previously unregulated digital credit providers. CBK later announced licensing updates, including an October 2024 update that brought the number of licensed DCPs to 85. Because lists and licensing status can change, check CBK's current digital credit provider information before relying on an old screenshot or forwarded list.
If the lender is licensed by CBK, your complaint route may include the lender's internal complaints channel and CBK. If your complaint is mainly about misuse of personal data, contact scraping, disclosure of your loan to contacts, or failure to respect data rights, ODPC may also be relevant. If the lender is a bank, microfinance bank, SACCO, employer, or informal lender, the right route may differ.
Step 3: Tell the lender to stop contacting third parties
Use the lender's official support channel, not random numbers only. Send a clear message. Keep it short and factual:
"I am the borrower on account [account/reference]. I have evidence that your agents contacted my phone contacts and disclosed my loan information. I do not consent to my loan details being shared with third parties. Please stop contacting my contacts, confirm the outstanding balance in writing, and handle all repayment communication through my registered phone number and email."
Do not insult the agent, even if they insulted you first. You want your message to look reasonable if it is later reviewed. If you can pay part of the debt, mention what you can realistically do. If you cannot pay immediately, ask for an official statement and repayment option.
For example, if you owe KES 6,300 and can pay KES 2,000 on Friday, do not promise KES 6,300 tomorrow just to stop the calls. A broken promise may trigger more pressure. Say: "I can pay KES 2,000 on 26 June and request confirmation of the balance and available extension options."
Step 4: Warn your contacts without spreading panic
Your contacts may be confused or angry. Send a calm note:
"You may receive calls or messages from a lender about my personal loan. Please do not share your personal information, do not send money to anyone, and forward me screenshots or call logs. I am handling the matter through official channels."
This protects them from social engineering. A fake collector might ask your relative to "help clear the loan" through a personal M-Pesa number. A real lender should not need your contacts' ID number, M-Pesa PIN, employer details, or private family information.
If a contact agreed to be a guarantor, the situation is different. A guarantor may have separate obligations depending on the agreement. Even then, communication should still be lawful, accurate, and respectful.
Step 5: Review app permissions and data access
Open your phone settings and check the app permissions. Some loan apps request access to contacts, SMS, call logs, photos, location, or storage. A permission request does not automatically mean the app should use everything in any way it wants. In Kenya, data protection principles generally require lawful, fair, transparent, and purpose-limited processing of personal data.
Practical phone steps:
- Revoke contact access for loan apps that do not need it.
- Remove permissions for SMS, call logs, photos, microphone, and location unless clearly necessary.
- Delete apps you no longer use after saving your loan records.
- Update your phone operating system and app versions.
- Change passwords for email and financial apps if you suspect compromise.
- Avoid installing APK files from WhatsApp, Telegram, or unofficial sites.
Before deleting an app with an active loan, screenshot your balance, due date, repayment instructions, and support details. You do not want to lose proof of what you owe or how to contact the lender.
Step 6: Escalate the complaint
Start with the lender's official complaints process. Ask for a complaint reference number. Give them a reasonable time to respond unless the matter is urgent or threatening.
If the response is poor, escalate based on the issue:
- For a licensed digital credit provider, check CBK's current channels and guidance for complaints against regulated financial institutions or DCPs.
- For misuse of your personal data, contact disclosure, or privacy violations, ODPC has a "File a Complaint" page for data subjects. ODPC states that supporting documents should be annexed where available and that complaints are filed in line with Section 56 of the Data Protection Act.
- For threats, extortion, impersonation, blackmail, or suspected fraud, consider reporting to the police or relevant cybercrime channels.
- For serious legal harm, get advice from an advocate or a recognised consumer rights organisation.
Your complaint should include your name, lender name, account/reference number, phone number used, dates of incidents, evidence, and what you are asking for. You might ask for contact harassment to stop, correction of inaccurate balance information, a written statement of account, deletion or restriction of unlawfully used contact data, or confirmation of the lender's lawful basis for contacting third parties.
What if you actually owe the money?
Owing money does not mean you lose dignity or privacy. You should still repay legitimate debts according to the agreement, but collection should not become abuse.
Separate the two issues:
1. The debt: confirm the amount, due date, fees, and repayment options. 2. The conduct: complain about harassment, threats, or disclosure to contacts.
If you owe KES 9,000 and the lender is demanding KES 14,500, ask for a breakdown showing principal, interest, fees, penalties, and dates. If you can only pay KES 3,000 now, propose that instead of avoiding communication. Silence may make collection more aggressive.
How to reduce the risk next time
Before taking a digital loan, read the privacy notice, permissions, and loan terms. Ask whether contacts will be accessed, why, and how they will be used. Be cautious with any app that requires broad permissions before showing clear terms.
Borrow only what you need. A KES 4,000 emergency should not become a KES 12,000 loan just because the limit is available. Smaller loans are easier to repay and less likely to create pressure.
Quick Cash encourages borrowers to compare costs, read terms, and borrow only where repayment is realistic. If you use Quick Cash, your application is still subject to checks and assessment; no responsible lender should promise approval before reviewing the facts.
Final word
If a lender harasses your contacts, act quickly but calmly. Save evidence, identify the lender, revoke unnecessary permissions, communicate in writing, and escalate to the relevant authority where needed. Your debt situation can be handled without allowing private information to be used as a weapon.
Useful official sources include CBK's page on the Digital Credit Providers Regulations and ODPC's File a Complaint page. Check the latest versions before filing because official forms, lists, and channels can change.