When an unknown caller already knows your name and address, the first question is usually: “Am I in danger, and what can I legally do?” In the Philippines, the answer depends on what the caller does next. Simply knowing your name and address is not automatically a crime, but using that information to scam, threaten, harass, impersonate, collect a debt unlawfully, or misuse your personal data can trigger several Philippine laws. The safest approach is to avoid confirming more information, preserve evidence, check whether your data may have leaked from a company, app, lender, delivery platform, public record, or social media, and report the incident to the right office based on the facts.

Is It Illegal If Unknown Callers Know Your Name and Address?

Your name, mobile number, and home address are generally considered personal information because they can identify you directly or together with other details. The Data Privacy Act of 2012, or Republic Act No. 10173, defines personal information broadly and covers many types of processing, including collection, storage, use, disclosure, and destruction of personal data. (National Privacy Commission)

However, Philippine law looks at the conduct, not just the fact that someone knows your address.

For example:

Situation	Legal concern
A delivery rider calls to confirm your address for a package you ordered	Usually legitimate processing
A caller says your full name and address, then asks for an OTP or bank details	Possible scam, fraud, or identity theft
A debt collector calls your relatives, officemates, or neighbors about your loan	Possible unfair debt collection and data privacy violation
A caller threatens to go to your house, harm you, shame you, or expose private details	Possible threats, coercion, harassment, or cybercrime
A company you never dealt with repeatedly calls using your personal data	Possible unlawful or unauthorized processing of personal information

The key question is not only “How did they get my address?” but also:

Did they have a lawful reason to use it?
Did you give valid consent?
Are they pretending to be someone else?
Are they trying to get money, passwords, OTPs, IDs, or bank information?
Are they threatening, harassing, or stalking you?
Is a company, lender, app, employer, school, broker, courier, or government office involved?

Your Rights Under Philippine Law

Your right to privacy and peace of mind

The 1987 Constitution protects the privacy of communication and correspondence, except in situations allowed by law, such as a lawful court order. The Civil Code also recognizes privacy-related civil wrongs, including prying into another person’s privacy or disturbing someone’s private life, family relations, or peace of mind. (Lawphil)

This matters because a caller’s conduct may become legally actionable even if no money has been lost yet. For example, repeated calls at night, threats to visit your home, or statements meant to frighten your family may support a complaint depending on the evidence.

Your rights under the Data Privacy Act

The Data Privacy Act is especially important when the unknown caller appears connected to a company, online lending app, marketing agency, delivery platform, condominium office, school, hospital, bank, employer, or government office.

As a data subject, you generally have the right to be informed, access information about the processing of your data, dispute inaccurate data, request correction, and in proper cases request blocking, removal, or destruction of unlawfully processed personal information. You may also seek indemnification for damages caused by inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data. (National Privacy Commission)

You can ask the suspected organization:

What personal data of mine do you have?
Where did you obtain my name, number, and address?
What is your lawful basis for processing it?
Who received or accessed it?
Why am I being contacted?
Who is your Data Protection Officer?
How can I request deletion, blocking, or correction?

The National Privacy Commission can receive complaints and conduct investigations. Its complaint process generally requires a filled-out complaint form, notarization, and submission through the available official channels. (National Privacy Commission)

Cybercrime, identity theft, spoofing, and financial scams

If the caller is using your personal information to deceive you, open accounts, pretend to be you, obtain your banking or e-wallet details, or pressure you into transferring money, the issue may go beyond data privacy.

The Cybercrime Prevention Act of 2012, Republic Act No. 10175, punishes computer-related fraud and computer-related identity theft, including the intentional acquisition, use, misuse, transfer, possession, alteration, or deletion of identifying information without right. (Supreme Court E-Library)

The SIM Registration Act, Republic Act No. 11934, also penalizes spoofing of a registered SIM, which involves misleading or inaccurate information about the source of a call or text with intent to defraud, cause harm, or wrongfully obtain anything of value. (Supreme Court E-Library)

For bank, credit card, and e-wallet scams, Republic Act No. 12010, the Anti-Financial Account Scamming Act, is also relevant because it covers sensitive identifying information such as usernames, passwords, bank account details, credit card information, and e-wallet information. (Lawphil)

Threats, coercion, trespass, and unjust vexation

If the caller says things like “Pupuntahan ka namin sa bahay,” “May mangyayari sa pamilya mo,” “Ipapahiya ka namin,” or “Bayad ka ngayon o may pupunta diyan,” the situation may involve offenses under the Revised Penal Code, depending on the exact words, intent, and surrounding circumstances.

Relevant provisions may include:

Grave threats or light threats
Grave coercions or light coercions
Unjust vexation
Trespass to dwelling, if someone actually enters or attempts to enter your home without permission

The Revised Penal Code provisions on threats, coercions, unjust vexation, and trespass are often considered when the conduct involves intimidation, pressure, or disturbance of personal security. (Lawphil)

Debt collection and online lending app harassment

Many Filipinos experience this issue after using online lending apps, being listed as a contact reference, or having their contact list accessed by an app.

A lender or collection agency cannot freely use a borrower’s phone contacts to shame, pressure, or harass people. The National Privacy Commission has recognized limits on the processing of contact lists in loan-related transactions, including rules against unbridled contact-list processing and contacting persons who are not proper guarantors for collection purposes.

The Securities and Exchange Commission has also treated abusive collection practices seriously, including threats, insults, public shaming, and contacting persons who are not guarantors or co-makers. (Philippine Information Agency)

Gender-based harassment, stalking, and sexualized threats

If the unknown caller uses sexual comments, threatens to expose intimate information, repeatedly contacts you in a way that causes fear, or targets you because of your sex, gender, sexual orientation, gender identity, or expression, the Safe Spaces Act, Republic Act No. 11313, may apply.

The law covers gender-based online sexual harassment, including technology-based threats, cyberstalking, unwanted sexual or sexist remarks, and other similar conduct. The law also identifies the PNP Anti-Cybercrime Group and other authorities as part of the enforcement framework. (Supreme Court E-Library)

What to Do Right Now

1. Do not confirm more personal information

When an unknown caller says your name and address, do not panic and do not “correct” them. Many scammers use partial information to make you reveal the missing pieces.

Avoid confirming:

Your full legal name
Exact address or unit number
Birthday
Civil status
Employer
Relatives’ names
Bank or e-wallet provider
Account numbers
OTPs, passwords, PINs, or recovery codes
Photos of IDs
Passport, ACR I-Card, TIN, SSS, GSIS, PhilHealth, or Pag-IBIG numbers

A safe response is:

“Please identify your full name, company, address, and purpose of calling. Send any official notice through a verifiable channel. I do not give personal information over the phone.”

If the caller refuses to identify themselves or becomes aggressive, end the call.

2. Decide whether there is immediate danger

Treat the matter as urgent if the caller:

Threatens to go to your house
Says they are watching you or your family
Mentions your children, school, workplace, vehicle, or daily routine
Demands money immediately
Claims to be police, immigration, NBI, bank security, or a court officer
Says you will be arrested unless you pay
Uses sexual threats, blackmail, or intimate images
Claims they have access to your accounts

For immediate safety concerns, inform people in your household, building security, subdivision guard, barangay officials, or the nearest police station. A barangay blotter or police blotter can help document the incident even before the caller is identified.

3. Preserve evidence before blocking

Before you block the number, save evidence.

Keep:

Screenshots of call logs showing the number, date, and time
Screenshots of SMS, Viber, WhatsApp, Messenger, Telegram, or email messages
The caller’s exact words, written down immediately after the call
Any company name, employee name, reference number, account number, or payment instruction given
GCash, Maya, bank account, QR code, or crypto wallet details used by the caller
Audio messages or voicemails left by the caller
Names of witnesses who heard the call on speaker
CCTV or guard log entries if someone later visits your address

Be careful with call recording. Republic Act No. 4200, the Anti-Wiretapping Law, generally prohibits secretly recording private communications without the authorization of all parties. Safer evidence includes call logs, screenshots, voicemails voluntarily left by the caller, written notes, and witness statements. (Lawphil)

4. Check where your name and address may have come from

In real life, callers often get personal information from ordinary sources, including:

Online shopping parcels and delivery labels
Public social media posts
Marketplace listings
Condo, subdivision, school, or office directories
Old resumes or job applications
Loan applications
Contact-tracing forms used in the past
Raffle forms, warranty cards, surveys, and mall promos
Data brokers or marketing lists
Compromised online accounts
Lending apps that accessed phone contacts
Public records, business registrations, court records, or property-related documents

This does not mean misuse is acceptable. Even if your address once appeared on a parcel, form, or public-facing page, a person or organization may still violate the law if they use it for a new, unauthorized, deceptive, or harmful purpose.

5. Secure your phone, email, bank, and e-wallet accounts

If the call feels like a scam, assume the caller may try the next step: account takeover.

Do the following immediately:

Change passwords for your email, online banking, and e-wallet accounts.
Turn on two-factor authentication using an authenticator app where possible.
Remove unknown trusted devices from your accounts.
Check recent login activity.
Call your bank or e-wallet provider using the official app, card, or website—not the number given by the caller.
Freeze or lock cards if there are suspicious transactions.
Report unauthorized transactions quickly.

The Bangko Sentral ng Pilipinas reminds consumers not to share passwords, PINs, account details, credit card information, passports, or ID cards. For bank or supervised financial institution complaints, consumers are generally expected to report first through the institution’s own consumer assistance channel before escalating unresolved concerns to the BSP Consumer Assistance Mechanism.

6. Exercise your data privacy rights if a company is involved

If the caller claims to represent a business, lender, collection agency, app, school, employer, clinic, courier, or government office, ask for the organization’s Data Protection Officer or privacy contact.

Send a short written request:

I received calls from your organization or persons claiming to represent your organization. They knew my name and address. Please confirm whether you process my personal information, identify the source of my data, state the purpose and legal basis of processing, identify any recipients or processors, and explain how I may request correction, blocking, deletion, or withdrawal of consent where applicable.

Keep proof that you sent the request. If they ignore you, give vague answers, or continue harassing you, include that in your complaint.

7. Report to the correct office

Different offices handle different parts of the problem. Filing in the wrong office is a common reason complaints move slowly.

Problem	Where to report	What to prepare
Immediate threats, intimidation, stalking, or someone coming to your home	Nearest police station, barangay, PNP Anti-Cybercrime Group if digital/phone-based	ID, call logs, screenshots, chronology, witness names
Data privacy misuse by a company, app, lender, employer, school, or organization	National Privacy Commission	Notarized complaint form, proof of identity, screenshots, messages, privacy requests, suspected organization details
Bank, e-wallet, card, or account scam	Bank/e-wallet first; PNP, NBI Cybercrime Division, or CICC for fraud; BSP if unresolved with a BSP-supervised institution	Transaction records, reference numbers, screenshots, account provider complaint ticket
Online lending harassment or abusive collection	SEC for lending/financing company concerns; NPC for data privacy misuse; police if threats are made	App name, lender name, screenshots, call logs, messages to contacts, loan details
SIM spoofing, scam texts, or anonymous numbers used for fraud	Telco, NTC, PNP/NBI/CICC depending on facts	Number, screenshots, message headers, call logs, payment instructions
Sexualized threats, cyberstalking, or gender-based online harassment	PNP Anti-Cybercrime Group, Women and Children Protection Desk, or appropriate local authorities	Screenshots, exact statements, profile links, numbers, witness names

For criminal scams and cyber incidents, the BSP points consumers toward law enforcement agencies such as the PNP Anti-Cybercrime Group, NBI Cybercrime Division, and Cybercrime Investigation and Coordinating Center. For online lending app issues, the BSP also notes that complaints involving financing or lending companies are best directed to the SEC.

Should You File a Barangay Blotter, Police Report, or NPC Complaint?

Use the nature of the incident to decide.

Barangay blotter

A barangay blotter is useful when:

The caller threatened to come to your home
Your neighbors, landlord, or building security may become involved
You want a local record in case the harassment continues
The caller is known and lives in the same city or nearby area

Barangay conciliation may apply to some disputes between individuals in the same city or municipality, but it has important exceptions, including disputes involving government offices, juridical entities, certain offenses, and parties from different cities or municipalities. (Lawphil)

Even when barangay conciliation does not apply, a blotter can still help document what happened.

Police report

Go to the police when there are:

Threats of harm
Extortion or blackmail
Stalking
Fraud or attempted fraud
Impersonation of police, court, bank, immigration, or government officers
Repeated harassment causing fear for safety
Actual visits to your home or workplace

Bring printed and digital copies of your evidence. Ask for a copy or reference number of the report.

National Privacy Commission complaint

Consider an NPC complaint when:

A company or organization appears to have misused your data
A lender or app contacted your contacts or used your address to harass you
Your personal information was disclosed without authority
You exercised your data privacy rights but received no proper response
You can identify the suspected personal information controller or processor

An NPC complaint is stronger when you can show who likely processed your data, what data was involved, how it was misused, and what harm resulted.

Practical Timelines and Bottlenecks

Action	Typical practical timing	Common bottlenecks
Blocking/reporting a number on your phone	Same day	Spoofed numbers may keep changing
Barangay or police blotter	Same day to a few days	Incomplete screenshots, no written chronology
Bank or e-wallet report	Same day if urgent	Calling the wrong number, missing transaction references
NPC complaint preparation	A few days to weeks	Identifying the correct company or DPO, notarization, incomplete evidence
SEC complaint for online lending harassment	Days to weeks to prepare	App uses different corporate name, missing screenshots from contacts
Criminal cybercrime investigation	Weeks to months or longer	Anonymous numbers, spoofing, foreign-hosted accounts, need for platform/telco cooperation

The most common mistake is waiting too long and losing evidence. Call logs disappear, apps delete messages, links expire, and scammers change numbers. Take screenshots and write a timeline while the details are fresh.

What to Include in Your Incident Timeline

A clear timeline helps barangay officials, police, the NPC, SEC, banks, and lawyers understand the case quickly.

Include:

Date and time of each call or message
Phone number or account name used
Exact words used by the caller, especially threats or demands
Personal information they knew, such as your full name, address, family member, employer, or loan details
What they asked for, such as money, OTP, ID, password, payment, or a meeting
What you replied
Any payment details they sent
Any company, app, or agency name mentioned
Actions taken, such as blocking, bank report, barangay blotter, or complaint email
Effects on you, such as fear, missed work, family disturbance, account loss, or reputational harm

Common Scenarios in the Philippines

“They know my name and address but did not threaten me.”

Document the incident, block the number, and review your recent transactions and online exposure. If it happens only once and there is no demand, threat, or company involvement, it may not be worth a full complaint yet. But if the calls repeat or the caller asks for money, IDs, OTPs, or account access, treat it as a possible scam.

“They said they are from my bank.”

Do not continue the call. Call the bank using the number on your card, official app, or official website. Banks should not ask for your OTP, PIN, or password over the phone.

If money was transferred or your account was accessed, report immediately to the bank or e-wallet provider and ask for a ticket or reference number. Preserve all messages and transaction records.

“They said they are police, NBI, immigration, or court staff.”

Be very careful. Scammers often use fear of arrest, deportation, warrants, or pending cases.

Real legal processes usually involve written documents, official case numbers, identifiable offices, and verifiable channels. Do not pay “settlement,” “clearance,” “warrant cancellation,” or “immigration penalty” money to a personal bank or e-wallet account.

“A debt collector is calling my relatives or officemates.”

Ask for the lender’s registered business name, SEC registration details, account reference, and written validation of the debt. If they contacted people who are not guarantors or co-makers, took information from your phone contacts, used insults or threats, or publicly shamed you, preserve screenshots from everyone contacted.

Report lending or financing company misconduct to the SEC, and report personal data misuse to the NPC. If threats are made, file a police report as well.

“They threatened to come to my house.”

Take this seriously. Inform household members and building or subdivision security. File a barangay or police blotter and show the call logs and messages.

If someone actually appears at your home, do not let them in unless they have lawful authority. Ask for identification, company documents, and written proof of authority. For police searches or arrests, different legal rules apply; do not rely only on what a stranger says at your gate.

“I am a foreigner in the Philippines.”

Foreigners have privacy and safety rights too. Bring your passport, ACR I-Card if applicable, lease contract or hotel details, and screenshots when reporting.

Be careful if a caller mentions immigration status, visa problems, police clearance, or deportation. Verify directly with the relevant government office through official channels. Do not pay a caller using personal bank or e-wallet details.

“I am a Filipino abroad and the caller is harassing my family in the Philippines.”

Your family member in the Philippines can usually file the local blotter or police report if they are the ones receiving threats. If you need to submit a sworn statement from abroad, Philippine embassies and consulates can notarize certain private documents such as affidavits and special powers of attorney. Philippine public documents intended for use abroad are handled through the apostille process, while foreign documents have their own authentication rules depending on where they were issued and where they will be used. (Philippine Embassy)

Evidence Checklist

Evidence	Why it matters
Screenshot of call log	Shows number, date, time, and frequency
Screenshot of messages	Shows exact words, threats, links, and payment demands
Written call summary	Helps when no recording is available
Payment details sent by caller	Helps trace scam accounts
Bank/e-wallet reference numbers	Needed for financial dispute reports
Screenshots from relatives or contacts	Important in lending-app harassment cases
Privacy request to company or DPO	Shows you tried to exercise your rights
Barangay or police blotter	Creates an official record
Affidavit or sworn statement	Useful for formal complaints
Medical or counseling records, if any	May help prove serious emotional harm in severe cases

When a Court Remedy May Be Considered

Most cases start with documentation, blocking, reporting, and agency complaints. But serious privacy and security cases may require court remedies.

One possible remedy in exceptional cases is the writ of habeas data, a special court remedy involving unlawful or threatening acts related to the gathering, collecting, or storing of data when the right to privacy in life, liberty, or security is implicated. The Supreme Court has explained that the writ is tied to informational privacy but requires a sufficient connection between the privacy violation and life, liberty, or security. (Supreme Court E-Library)

This is not the usual first step for ordinary spam calls. It becomes more relevant when there is serious surveillance, stalking, state or private data abuse, credible threats, or a pattern showing danger to personal security.

Frequently Asked Questions

Is it illegal for an unknown caller to know my name and address in the Philippines?

Not automatically. Your name and address may have come from a delivery, public post, old form, loan record, or marketing database. It becomes a legal problem when the information is obtained or used without lawful basis, or when the caller uses it for fraud, harassment, threats, stalking, identity theft, debt shaming, or unauthorized disclosure.

Can I ask the telco to tell me who owns the number?

You can report the number to your telco, but private individuals usually cannot simply demand the subscriber’s identity. Subscriber information may require proper legal or law enforcement process. Give the telco and authorities the call logs, screenshots, and details so they can evaluate the report.

Should I block the caller immediately?

Save evidence first, then block. Take screenshots of the number, call history, messages, links, and payment instructions. If the caller made threats, write down the exact words before you forget. After preserving evidence, blocking is usually sensible.

Can I secretly record the call as evidence?

Be careful. The Anti-Wiretapping Law generally prohibits secretly recording private communications without the authorization of all parties. Safer evidence includes screenshots, call logs, voicemails voluntarily left by the caller, written notes made immediately after the call, and witnesses who heard the conversation. (Lawphil)

What if the caller asks for my OTP or says my bank account will be frozen?

End the call. Do not give OTPs, PINs, passwords, card numbers, or recovery codes. Contact your bank or e-wallet provider only through official channels. If you already gave information or lost money, report immediately and ask the provider to lock the account or investigate the transaction.

What if the caller is a debt collector?

Ask for written proof of the debt, the registered business name of the lender or collection agency, and the legal basis for contacting you. If they threaten you, shame you, contact non-guarantor relatives or officemates, or use data from your contact list, preserve evidence and report to the SEC, NPC, and police if threats are involved.

Can I file a complaint with the National Privacy Commission if I do not know who leaked my data?

You may report misuse of personal information, but an NPC complaint is stronger when you can identify the suspected company, app, organization, or data controller. If you do not know the source yet, gather evidence first and look for clues such as the caller’s script, company name, loan reference, delivery details, or data that only a specific organization would know.

Is a barangay blotter enough?

A barangay blotter is useful for documentation, especially if the caller threatens to visit your home. But it does not replace a police report, NPC complaint, SEC complaint, bank report, or cybercrime report when those are needed. Use the blotter as one part of your evidence trail.

Should I change my phone number?

Changing your number may help if the calls are persistent and your number is widely exposed. But before changing it, secure your accounts, update banks and government records, preserve evidence, and consider whether the caller also knows your address, relatives, workplace, or email. A new number will not solve the problem if the source is a company database, lending app, or compromised account.

Key Takeaways

Knowing your name and address is not automatically illegal, but using that information for scams, threats, harassment, identity theft, or unauthorized processing may violate Philippine law.
Do not confirm more personal information, and never give OTPs, PINs, passwords, IDs, bank details, or e-wallet access to an unknown caller.
Preserve evidence before blocking: call logs, screenshots, exact words, payment details, company names, and witness accounts.
If a company, lender, app, employer, school, courier, or organization may be involved, exercise your rights under the Data Privacy Act and consider a complaint with the National Privacy Commission.
Report threats, fraud, extortion, stalking, and impersonation to law enforcement; report bank or e-wallet incidents to the provider first and escalate when needed.
For online lending harassment, preserve messages from your contacts and consider reports to the SEC, NPC, and police if threats or abusive collection practices occurred.
A barangay or police blotter can help create an official record, especially if the caller threatens to visit your home.
The faster you document the incident, the stronger your position becomes if the calls continue or escalate.