Peru’s Indecopi Fines BCP Over Abusive Debt Collection
Consumer Protection
Key Facts
—The fine. Indecopi fined BCP S/20,790 (about US$6,150) for a consumer-protection breach.
—The violation. The bank sent debt notices to an address the client had not authorised, exposing arrears to third parties.
—The ruling body. The Arequipa Regional Commission confirmed the sanction in a final administrative instance.
—Corrective orders. BCP must stop using the unauthorised address and update its systems with valid contact details.
—Legal path forward. The bank can still challenge the decision through a judicial review in court.
Peru’s consumer watchdog Indecopi has sanctioned Banco de Crédito del Perú with an Indecopi BCP sanction of S/20,790 for sending sensitive debt information to an unauthorised address, a ruling that underscores the real financial and reputational risks of mishandling client data in Latin America’s tightly regulated banking markets.
What the Indecopi BCP Sanction Is Really About
The case began when a client discovered that BCP, Peru’s largest bank and part of the powerful Credicorp group, had been directing communications about overdue mortgage and vehicle loans to an address the client had never authorised. The letters landed where flatmates, relatives, or even a new tenant could see them, effectively broadcasting the client’s private arrears to third parties.
Indecopi’s Arequipa regional office found this was a clear breach of article 62 of Peru’s Consumer Protection and Defence Code. That article flatly prohibits businesses from informing third parties about a consumer’s debts without explicit consent, a protection many expats and foreign investors may not realise exists until they need it.
The Numbers Behind the Fine
The penalty was set at 3.78 UIT, Peru’s standard tax unit for fines and fees. With the 2026 UIT fixed at S/5,500, the total came to S/20,790, which converts to roughly US$6,150 at current exchange rates.
For a bank of BCP’s size, the sum is pocket change. The real cost lies in the public registry entry and the signal it sends to regulators, competitors, and a growing class of financially literate consumers who track these rulings closely.
How the Arequipa Commission Reached Its Decision
The case moved through a fast-track procedure known as a “procedimiento sumarísimo,” designed for straightforward consumer complaints where the facts are not in deep dispute. The Arequipa Regional Commission confirmed the sanction in a second and final administrative instance, meaning BCP exhausted its appeals within Indecopi itself.
It is important to note this was not a ruling from the Lima-based central tribunal. The regional office handled the entire process, a reminder that Peru’s consumer-protection machinery reaches well beyond the capital and can bite even the country’s largest financial institutions.
What This Means for BCP and Credicorp
BCP is the flagship of Credicorp, one of Latin America’s most closely watched financial holding companies and a staple in many emerging-market portfolios. A single consumer fine does not move the needle on earnings, but a pattern of data-handling lapses would invite sharper scrutiny from the Superintendency of Banking and Insurance.
The bank must now update its internal systems to ensure the client’s valid contact details are used and stop sending any correspondence to the unauthorised address. For investors, the takeaway is that even Peru’s top-tier banks face operational risk from something as mundane as an outdated address field in a collections database.
The Broader Read-Through for Investors and Expats
Peru has built one of Latin America’s more assertive consumer-protection frameworks, and Indecopi is not shy about using it. For foreign professionals and expats who bank locally, this case is a practical reminder to keep authorised contact details current and to know that Peruvian law shields them from having their debts aired in front of landlords or housemates.
From a market perspective, the ruling reinforces that compliance costs in Peru’s financial sector are real and rising. Banks must invest in data hygiene and collections protocols, or they risk a slow drip of fines and registry entries that can colour their reputation with regulators and the public.
Is the Case Truly Over? Not Quite
Administrative finality does not mean the book is closed. BCP retains the right to file a contentious-administrative claim, essentially a judicial review that asks a court to overturn Indecopi’s decision.
Whether the bank will spend legal resources fighting a modest fine is an open question. Often, institutions weigh the cost of litigation against the value of keeping a clean regulatory record, and the calculation does not always favour a court battle.
What to Watch Next
The immediate watchpoint is whether BCP initiates judicial review, which would signal how seriously the bank takes the precedent. A court challenge could drag on for months and keep the case in the headlines.
Longer term, market observers should track whether Indecopi’s regional offices become more active in sanctioning financial institutions. A cluster of similar rulings would suggest a coordinated regulatory push, not just a one-off consumer victory, and that would matter for anyone with capital in Peru’s banking sector.
More: Latin America news in English, every day from The Rio Times.
Frequently Asked Questions
What exactly did BCP do wrong in this case?
BCP sent debt-collection notices about a client’s mortgage and vehicle loans to an address the client had not authorised. This exposed the client’s private arrears to third parties, which violates article 62 of Peru’s Consumer Protection and Defence Code. The law prohibits businesses from informing anyone else about a consumer’s debts without explicit consent.
Can BCP appeal the Indecopi sanction further?
Yes. Although the Arequipa Regional Commission’s ruling is final in administrative terms, BCP can still challenge it through a contentious-administrative claim in Peru’s judicial system. This would ask a court to review and potentially overturn Indecopi’s decision, so the case is not necessarily closed.
Does this fine affect Credicorp’s overall business?
The fine of roughly US$6,150 is immaterial to a group of Credicorp’s size. The larger significance is reputational and regulatory: a public entry in Indecopi’s Register of Infractions and Sanctions can draw additional scrutiny, and repeated data-handling lapses could eventually attract attention from Peru’s banking superintendent.
This article was produced by The Rio Times’ automated newsroom system. How we use AI · Report an error
LatAm Markets: Live Signals → — real-time movers, turnover leaders and FX across Latin America.
Read More from The Rio Times