Maggie, the salon owner from last week’s case, asked me: “I searched ‘renovation working capital loan’ on my phone yesterday. Five minutes later a money lender WhatsApp’d me — calling me by name. How did they know?”
Great question. Nine out of ten bosses meet this. Almost none know the answer. It’s not a coincidence and it’s not supernatural. It’s a chain called loan leads — and you’re the product.
Your ‘borrowing intent’ is a prized commodity. For a money lender, the most valuable thing isn’t cash, it’s a customer who just searched for a loan and can’t wait or compare. That’s a “fresh lead.” Within minutes, ad platforms log your intent, bundle it with your contact details, and sell it to lenders — a fresh lead can fetch several hundred to over a thousand dollars.
The biggest trap is “estimate” or “zero-inquiry” tools. Free loan calculators that claim no personal data needed are often lead collectors. You type a phone number and amount, and that creates a qualified line. You think you’re a customer; you’re the inventory. Some lenders even share case data among peers — your repayment, your debt, your inquiry count become a shared scoring input.
Even TU can get caught in it. Yes, the consumer credit database is supposed to be strict — each query needs your authorization. But grey-market operators use phishing and fake sites to resell the record of your loan applications and inquiry counts. It’s illegal, but illegal doesn’t mean it doesn’t exist.
Three ways to protect yourself. One: don’t hand your real number to random estimate or comparison sites — use a temporary or company line until you actually decide to borrow. Two: pull your TU consumer credit report once a year and dispute anything you never applied for. Three: know your rights under the Personal Data (Privacy) Ordinance — you can object to direct marketing and demand your data be deleted; report bad actors to the Privacy Commissioner.
Understand this: the moment you search, you’re being assessed. Protect yourself so the market never sees how desperate you actually are.