⬛ Personal home addresses and card numbers REDACTED in this version  |  CONFIDENTIAL — FOR BSP / SEC REGULATORS AND LEGAL COUNSEL ONLY  |  Case ID 19305061
REPUBLIC OF THE PHILIPPINES
DEPARTMENT OF JUSTICE
OFFICE OF THE CITY PROSECUTOR
QUEZON CITY
I.S. No.: ___________________
For: Unjust Vexation (Art. 287, Rev. Penal Code); Violation of R.A. 10870; Violation of R.A. 10173; Violation of R.A. 11765
RAFAEL ALFONSO TAN POSADAS,
    Complainant,

            -versus-

SECURITY BANK CORPORATION;
RGS RECOVERY MANAGEMENT &
COLLECTIONS SERVICES, INC.;
S.P. MADRID & ASSOCIATES;
EDERLYN VILLANUEVA,
    in her personal capacity as Team Leader,
    RGS Recovery Management & Collections
    Services, Inc.;

BENMOREEN NAZARENO,
    in her personal capacity as Legal Officer,
    S.P. Madrid & Associates; and

JOHN/JANE DOES 1–10,
    Respondents.
Complaint-Affidavit

I, RAFAEL ALFONSO TAN POSADAS, of legal age, Filipino citizen, currently residing at 1240 E. Plaza Blvd. Ste. 604 PMB# 454, National City, California 91950, United States of America, with Philippine address at ████████████████████████████, Paombong, Bulacan 3001, after having been duly sworn to an oath in accordance with law, do hereby depose and state that:

I. PRELIMINARY STATEMENT
1.I am the holder of Security Bank Corporation credit card accounts bearing the last four (4) digits ████ (Platinum) and ████ (Next). I have maintained a continuous payment history with Security Bank for approximately five (5) years.
2.I am presently based in the United States and am unable to physically appear before any Philippine office. I am executing this Complaint-Affidavit before a notary public in the State of California, and it is being apostilled pursuant to the Hague Convention of 5 October 1961, to which the Philippines acceded in 2019, rendering this document fully valid and admissible in Philippine proceedings without further authentication.
3.I am filing this complaint against: (a) Security Bank Corporation, a corporation duly organized under Philippine law with principal offices at Security Bank Centre, 6776 Ayala Avenue, Makati City; (b) RGS Recovery Management & Collections Services, Inc. (hereinafter "RGS Recovery"), a collection agency operating at 3F/4F Anonas LRT City Center, 968 Aurora Blvd., Proj. 4, Quezon City — the place of business being within the jurisdiction of this Honorable Office; (c) S.P. Madrid & Associates (hereinafter "S.P. Madrid"), a collections law firm with offices at 17th Floor, Chatham House Condominium, V.A. Rufino cor. Valero, Brgy. Bel-Air, 1226 City of Makati, NCR; Tel: (02) 8538-6403; Mobile: 0919-059-9967; Email: sblegal@spmadridlaw.com; (d) Ederlyn Villanueva, Team Leader of RGS Recovery, in her personal capacity; (e) Benmoreen Nazareno, Legal Officer of S.P. Madrid & Associates, in her personal capacity; and (f) John/Jane Does 1-10, whose identities have not yet been fully established.
4.The acts complained of constitute: (a) Unjust Vexation under Article 287 of the Revised Penal Code; (b) Violation of Republic Act No. 10870 (Philippine Credit Card Industry Regulation Law), particularly Sections 19 and 21 thereof; (c) Violation of Republic Act No. 10173 (Data Privacy Act of 2012), particularly Sections 25 and 31 thereof; and (d) Violation of Republic Act No. 11765 (Financial Products and Services Consumer Protection Act) and its implementing regulations, including BSP Circular No. 1048 and SEC Memorandum Circular No. 18.
II. PARTIES AND JURISDICTION
5.RGS Recovery Management & Collections Services, Inc. maintains offices at 3F/4F Anonas LRT City Center, 968 Aurora Blvd., Proj. 4, Quezon City. The acts complained of — including the dispatch of 13 documented harassing collection emails and the deployment of an unidentified collection agent — originated from and were authorized by personnel at this Quezon City address. Jurisdiction of this Honorable Office is accordingly proper.
6.Security Bank's engagement of RGS Recovery as its collection agent and its direction of collection activities against the complainant make Security Bank equally amenable to the jurisdiction of this Honorable Office for all acts carried out by its agents within Quezon City.
III. STATEMENT OF FACTS
A. Background — Dispute Filed and Acknowledged
7.On March 6–7, 2026, I formally filed a written dispute and Final Notice directed to Security Bank Corporation and RGS Recovery Management & Collections Services, Inc., documenting ongoing violations of my rights as a credit card debtor under Philippine law and demanding the immediate cessation of unlawful collection activity.
8.On March 25, 2026, Security Bank Corporation formally acknowledged my open dispute via email, assigning Case ID 19305061, and confirming that their team was actively processing the matter. This acknowledgment was received at 11:55 PM Pacific Standard Time on March 25, 2026.
9.Despite this formal acknowledgment, collection activity against me — on the same disputed accounts covered by Case ID 19305061 — was never suspended and continued unabated through and including April 4, 2026, the date of the most recent documented collection email. This willful continuation of collection activity against a debtor with an open, acknowledged dispute constitutes the core of the illegal conduct complained of herein.
B. RGS Recovery — 13 Harassing Collection Emails (March 3–23, 2026)
10.Between March 3 and March 23, 2026, RGS Recovery sent me a total of thirteen (13) collection emails through the address evillanueva@rgsrecovery.net, and subsequently through the personal account of Team Leader Ederlyn Villanueva at evillanueva@rgs.com.ph. Each automated email was signed only by an unidentified "Legal Officer," with no individual name disclosed, no IBP Roll Number, and no physical office address — in direct violation of SEC MC No. 18.
11.The automated collection emails each demanded payment of PHP 35,028.27 and each stated "Pay by 5 PM today" — a demand that had already expired at the time of receipt in the United States given the time zone differential. This is a deceptive misrepresentation under RA 10870, Section 19 and RA 11765.
12.Email #11 in Exhibit A, dated March 12, 2026, constitutes a personal reply from Ederlyn Villanueva acknowledging receipt of my Final Notice — yet automated demands continued on March 14 and March 23, establishing willful harassment after actual knowledge of my formal legal notice.
13.Email #6 in Exhibit A was transmitted at 11:20 PM Pacific Standard Time on March 6, 2026, which falls within the prohibited contact hours under SEC MC No. 18 (after 10:00 PM). This constitutes an additional and independent violation.
C. RGS Recovery — Unauthorized Viber Contact (March 7, 2026)
14.On March 7, 2026, at 5:49 PM Philippine Time, RGS Recovery contacted me through the Viber messaging platform using an account registered under the name "RGS SECURITY BANK." The contact included both an unsolicited text message and a missed call — through a platform to which I never consented.
15.I have never, at any point, consented to the use of Viber or any third-party messaging platform for communications related to my Security Bank credit card accounts. The use of the account name "RGS SECURITY BANK" constitutes deceptive misrepresentation designed to create the false impression of official Security Bank contact, in violation of RA 10870, Section 19. The unauthorized processing of my personal contact information through a non-consented platform violates RA 10173, Sections 25 and 31. This incident is documented in Exhibit C.
D. First Unidentified Collector Visit (On or Before March 16, 2026)
16.Prior to March 16, 2026, an unidentified individual acting as a collection agent arrived at my Philippine residence on a motorcycle. I was not present, as I reside in the United States. This collector did not remove his helmet — deliberately concealing his face. He identified himself only as "Taga-Security Bank," asked for me by name, was informed I was in the United States, and immediately left without providing any identification, employee ID, badge, letter of authority, or any official document.
17.The collector's disclosure of my identity as the debtor on a Security Bank credit card account to my in-laws — third parties with no legal standing in the debt matter — constitutes unauthorized disclosure of confidential financial information in violation of RA 10173, Sections 25 and 31, and the Bank Secrecy Law (RA 1405). A Barangay Blotter was filed on March 16, 2026 at Barangay Sto. Rosario, Paombong, Bulacan, as documented in Exhibit B.
E. Security Bank's Failure to Suspend Collection — The 25-Minute Window (March 25, 2026)
18.On March 25, 2026, at 11:30 PM Pacific Standard Time, S.P. Madrid & Associates, through Benmoreen Nazareno, transmitted a collection demand email pressuring me to make immediate payment of PHP 53,685.29 on the very accounts subject to my open dispute.
19.Twenty-five (25) minutes later, at 11:55 PM Pacific Standard Time on the same evening, Security Bank Corporation transmitted its acknowledgment email for Case ID 19305061, confirming that my dispute was open and being processed.
20.This 25-minute window establishes that Security Bank had actual and constructive knowledge of my open dispute at the precise moment its authorized collection agent was actively pressuring me for payment on the same disputed accounts. Security Bank's failure to instruct S.P. Madrid & Associates to suspend collection activity constitutes a direct violation of its obligations under RA 11765 and demonstrates bad faith conduct under BSP Circular No. 1048. This is documented in Exhibit D.
F. S.P. Madrid & Associates — 18 Harassing Collection Emails (March 25–April 4, 2026)
21.Between March 25 and April 4, 2026, S.P. Madrid & Associates sent me a total of eighteen (18) collection emails through the shared address sblegal@spmadridlaw.com, averaging nearly two (2) emails per day. None of the named officers disclosed any IBP Roll Number in any communication — a clear violation of SEC MC No. 18.
22.Email #1 of the S.P. Madrid log (Exhibit E) was received at 10:30 PM Pacific Standard Time on March 25, 2026 — within the prohibited contact hours under SEC MC No. 18 (after 10:00 PM local time of the debtor). This constitutes an independent violation.
23.S.P. Madrid officers "Joanna" (Email #8, March 28, 2026) and "RJRAZON" (Email #14, March 31, 2026) identified themselves only by incomplete names — one by first name only, the other by initials only — with no surname and no IBP Roll Number disclosed, in violation of SEC MC No. 18.
24.Email #10 (March 30, 2026), from Lenie Aton, constitutes a direct reply to my Addendum of March 26, 2026 — acknowledging receipt of my formal legal notice and continuing to demand payment nonetheless, establishing willful continuation of collection activity after actual knowledge of the dispute.
25.Email #12 (March 30, 2026) from Rona Mae Gubalane claimed that "Atty. Madrid is currently here in our office" and set a 3:00 PM payment deadline with a threat to endorse to the Legal Department — constituting coercive threats of legal action during an open acknowledged dispute.
G. Dual-Agency Violation — RA 10870, Section 21
26.Section 21 of RA 10870 strictly prohibits a credit card issuer from engaging more than one (1) collection agency at a time on a single debtor's account. Security Bank Corporation violated this prohibition by simultaneously engaging both RGS Recovery Management & Collections Services, Inc. and S.P. Madrid & Associates as collection agents on my account.
27.The overlap is conclusively established by the documentary record: Email #13 in the RGS Recovery log (Exhibit A) was sent on March 23, 2026 — while S.P. Madrid's engagement had already commenced, with S.P. Madrid's first contact occurring on March 25–26, 2026. At minimum, a period from March 23–25, 2026 existed during which two collection agencies were simultaneously engaged on my account in direct violation of RA 10870, Section 21.
H. Second Unidentified Collector Visit (March 30, 2026)
28.On March 30, 2026 — five (5) days after Security Bank formally acknowledged my dispute under Case ID 19305061 — a second unidentified individual appeared at my Philippine residence. This visitor identified himself as being from Security Bank Corporation and discussed my unpaid credit card account with my in-laws. He provided no name, badge, employee ID, or letter of authority.
29.This visit was made on a disputed account during an active acknowledged dispute period, in violation of RA 11765 and BSP Circular 1048. The unauthorized disclosure of my financial information to my in-laws again violates RA 10173 and RA 1405. If this visitor was a third-party collection agent, his engagement would constitute a third simultaneous collection agency — a further aggravated violation of RA 10870, Section 21. This incident is documented in Exhibit F.
IV. CAUSES OF ACTION
First Cause of Action: Unjust Vexation — Article 287, Revised Penal Code
30.The acts of all Respondents, individually and collectively, constitute Unjust Vexation under Article 287 of the Revised Penal Code. The 13 automated harassing emails from RGS Recovery, the 18 automated harassing emails from S.P. Madrid & Associates (totaling 31 collection communications in approximately 33 days), two unauthorized home visits, Viber contact through a deceptively named account, late-night contact violating prohibited hours, and willful continuation of all of the foregoing after actual knowledge of the open formal dispute — taken together and each independently — caused the complainant annoyance, irritation, vexation, torment, distress, and indignation without legal justification.
31.The vexation is particularly aggravated by: (a) deliberate concealment of the first collector's identity by keeping his helmet on; (b) the deceptive "RGS SECURITY BANK" Viber account name; (c) continued automated demands after Ederlyn Villanueva personally acknowledged the Final Notice; (d) continued demands after Lenie Aton personally replied to the Addendum; and (e) the second home visit made five days after Security Bank's own systems acknowledged the dispute under Case ID 19305061.
Second Cause of Action: Violation of RA 10870
32.Respondents violated RA 10870, particularly Sections 19 and 21, through: (a) use of deceptive and misleading collection practices, including the already-expired "5 PM today" deadline, the deceptive "RGS SECURITY BANK" Viber account name, and coercive threats during an open dispute; (b) failure of all collection personnel to identify themselves fully, including name, IBP Roll Number, and physical office address; and (c) simultaneous engagement of two collection agencies on the same account, in direct violation of the one-agency rule of Section 21.
Third Cause of Action: Violation of RA 10173
33.Respondents violated RA 10173, Sections 25 and 31, through: (a) unauthorized disclosure of the complainant's confidential financial information to third parties (in-laws) during two unauthorized home visits; (b) unauthorized processing of the complainant's personal contact data through the Viber platform without consent; and (c) use of the complainant's personal data beyond the scope of consented use at account opening.
Fourth Cause of Action: Violation of RA 11765
34.Security Bank Corporation violated RA 11765 and BSP Circular No. 1048 by: (a) failing to instruct its collection agents to suspend collection activity upon opening of a formal dispute under Case ID 19305061; (b) continuing to authorize and direct collection activity — including two physical home visits — after its own systems formally acknowledged the dispute; and (c) engaging collection agents who employed deceptive, coercive, and harassing practices in violation of the consumer protection standards established by RA 11765.
V. PRAYER

WHEREFORE, premises considered, complainant respectfully prays that:

IN WITNESS WHEREOF, I have hereunto affixed my signature this ______ day of ____________ 2026 in National City, California, United States of America.

RAFAEL ALFONSO TAN POSADAS
Affiant / Complainant
1240 E. Plaza Blvd. Ste. 604 PMB# 454
National City, California 91950, USA
ralphposadas29@gmail.com
JURAT

SUBSCRIBED AND SWORN to before me this ______ day of _________________, 2026, in _______________________, California, personally appeared the affiant RAFAEL ALFONSO TAN POSADAS, who is personally known to me or who proved his identity on the basis of satisfactory evidence to be the person whose name is subscribed to the within instrument and acknowledged to me that he executed the same in his authorized capacity, and that by his signature on the instrument the person executed the instrument.

I certify under PENALTY OF PERJURY under the laws of the State of California that the foregoing paragraph is true and correct.

WITNESS my hand and official seal.

NOTARY PUBLIC
Signature:
Name:
Commission No.:
Expiry Date:
County of:
State of: California
[NOTARY SEAL]
APOSTILLE
California Secretary of State
April 8, 2026
(Apostille to be affixed here by the California Secretary of State pursuant to the Hague Convention of October 5, 1961)
APOSTILLE NOTE: This document was notarized before a California notary public and apostilled by the California Secretary of State pursuant to the Hague Convention Abolishing the Requirement of Legalisation for Foreign Public Documents (October 5, 1961). The Philippines acceded to the Convention on May 14, 2019 (effective June 14, 2019). This apostille renders the document fully valid in the Philippines without further authentication by the Department of Foreign Affairs or any Philippine consulate.
DOCUMENTARY EXHIBITS ATTACHED

The following documentary exhibits are attached to and made integral parts of this Complaint-Affidavit:

All email logs in Exhibits A and E were compiled directly from the Gmail inbox of ralphposadas29@gmail.com. Timestamps are sourced from original authenticated email headers and are unaltered.

Respectfully submitted,


RAFAEL ALFONSO TAN POSADAS
Complainant
April 8, 2026
DOCUMENTARY EXHIBITS In Support of Formal Complaint and Final Notice

ComplainantRafael Alfonso Tan Posadas
RespondentsSecurity Bank Corporation; RGS Recovery Management & Collections Services, Inc.; S.P. Madrid & Associates
Reference Case IDSecurity Bank Case ID 19305061
Complainant Emailralphposadas29@gmail.com
Credit CardsLast 4 digits — ████ (Platinum) & ████ (Next)
Philippine Address████████████████████████, Paombong, Bulacan 3001
U.S. Address1240 E. Plaza Blvd. Ste. 604 PMB# 454, National City, CA 91950
Date PreparedApril 5, 2026
TABLE OF EXHIBITS

Note: All email logs were compiled directly from the Gmail inbox of ralphposadas29@gmail.com and represent authenticated, unaltered records of communications received. Timestamps are sourced from original email headers.

EXHIBIT A RGS Recovery Management & Collections Services, Inc. Harassment Log — 13 Documented Collection Emails — March 3–23, 2026 Case of: Rafael Alfonso Tan Posadas v. Security Bank Corporation, et al. Prepared: April 5, 2026  |  Reference: Security Bank Case ID 19305061

Sender email addresses: evillanueva@rgsrecovery.net (automated bulk); evillanueva@rgs.com.ph (Ederlyn Villanueva, Team Leader, personal reply)

Violations documented: RA 10870 §§19, 21; Article 287 Revised Penal Code; SEC MC No. 18; RA 11765; RA 10173

Key pattern: All automated emails signed only by generic "Legal Officer" — no individual name, no IBP Roll Number, no physical office address. Payment account details left blank as "XXXX" in all communications.

#DateTime (PST)SenderAmountSummary / Legal Notes
1Tue, Mar 37:22 PM PSTevillanueva@rgsrecovery.net₱35,028.27⚠ Demands payment by "5 PM today" — deadline already passed at time of receipt (PST). DECEPTIVE MISREPRESENTATION. Account number fields listed as "XXXX."
2Wed, Mar 47:03 PM PSTevillanueva@rgsrecovery.net₱35,028.27Same template. "Pay by 5 PM today." XXXX placeholders.
3Thu, Mar 511:36 PM PSTevillanueva@rgsrecovery.net₱35,028.27Same template. "Pay by 5 PM today." XXXX placeholders.
4Fri, Mar 611:36 PM PSTevillanueva@rgsrecovery.net₱35,028.27Same template. "Pay by 5 PM today." XXXX placeholders.
5Sat, Mar 74:35 PM PSTevillanueva@rgsrecovery.net₱35,028.27Same template. Sent same day as Viber unauthorized contact.
6Sat, Mar 711:20 PM PSTevillanueva@rgsrecovery.net₱35,028.27⚠ PROHIBITED HOURS: 11:20 PM PST — after 10:00 PM. Sent AFTER debtor's formal dispute filed at 5:12 PM PST.
7Mon, Mar 99:57 PM PSTevillanueva@rgsrecovery.net₱35,028.27⚠ Sent after formal dispute filed and transmitted to RGS Recovery.
8Mon, Mar 99:57 PM PSTevillanueva@rgsrecovery.net₱35,028.27First email with added phone numbers 0956-630-3895 / 0956-630-3894. Otherwise identical.
9Tue, Mar 108:42 PM PSTevillanueva@rgsrecovery.net₱35,028.27Same template with expanded contact numbers.
10Wed, Mar 117:57 PM PSTevillanueva@rgsrecovery.net₱35,028.27Same template. Last demand before E. Villanueva's personal reply.
11Thu, Mar 129:08 PM PSTevillanueva@rgs.com.ph (Ederlyn Villanueva, Team Leader)N/A⚠ PERSONAL REPLY from E. Villanueva to debtor's Final Notice. Acknowledges receipt. No substantive response to legal demands. Asks debtor to confirm phone number for callback. Confirms title as Team Leader and office address.
12Sat, Mar 145:04 PM PSTevillanueva@rgsrecovery.net₱35,028.27⚠ Automated demand sent TWO DAYS after E. Villanueva personally acknowledged debtor's Final Notice — confirming WILLFUL CONTINUATION of collection after formal legal notice.
13Mon, Mar 239:21 PM PSTevillanueva@rgsrecovery.net₱35,028.27⚠ DUAL-AGENCY EVIDENCE: Last RGS email sent while S.P. Madrid & Associates was simultaneously operating on same account (first SP Madrid contact: March 25/26, 2026). Establishes overlap in violation of RA 10870 §21.

Total: 13 documented emails spanning 22 days (March 3 – March 23, 2026).

Legal significance: Email #11 confirms RGS received the Final Notice yet continued automated demands through March 23 — establishing willful harassment after formal notice. Email #13 overlaps with SP Madrid's engagement, proving simultaneous dual-agency operation in violation of RA 10870 §21.

Identified Personnel — RGS Recovery
EXHIBIT B Barangay Blotter — First Unidentified Collector Visit Filed March 16, 2026 · Barangay Sto. Rosario, Paombong, Bulacan Prepared: April 5, 2026  |  Reference: Security Bank Case ID 19305061

Violations documented: RA 10173 §§25,31; RA 1405; RA 11765; SEC MC No. 18

Incident DateMarch 5, 2026 · 12:20 PM
Blotter FiledMarch 16, 2026 · 12:12 PM
Filed ByEleuterio Casaljay Pascual · 59 years old · Driver · Sitio Bangkal, Sto. Rosario, Paombong, Bulacan
Collector IdentityUNIDENTIFIED — arrived on motorcycle, did NOT remove helmet, face concealed throughout entire visit
Self-Identification"Taga-Security Bank" only — no name, no badge, no ID, no letter of authority provided
Asked ForRafael Alfonso Posadas
Response GivenRafael is in the USA (Estados Unidos)
Collector's ActionImmediately left without providing any ID or official document
Persons PresentComplainant's in-laws (unauthorized third parties with no legal standing in the debt matter)
Information DisclosedComplainant's identity as Security Bank debtor — disclosed to in-laws without consent

Note: A physical copy of the Barangay Blotter is attached as a sub-attachment to this Exhibit. The photograph below is the original blotter document as filed on March 16, 2026.

Barangay Blotter — Exhibit B

EXHIBIT B — Original Barangay Blotter · Barangay Sto. Rosario, Paombong, Bulacan · Filed March 16, 2026 · 12:12 PM

EXHIBIT C Viber Unauthorized Contact — RGS Recovery Management & Collections Services, Inc. March 7, 2026 · 5:49 PM PHT · Account: "RGS SECURITY BANK" (+639661442767) Prepared: April 5, 2026  |  Reference: Security Bank Case ID 19305061

Violations documented: RA 10173 §§25,31; RA 10870 §19; RA 11765; SEC MC No. 18

Date & TimeMarch 7, 2026 · 5:49 PM PHT (Saturday)
PlatformViber
Account Name"RGS SECURITY BANK" — deceptive; falsely implies official Security Bank identity
Phone Number+639661442767 (not in complainant's contacts; not a consented communication channel)
Contact MadeText message + Missed call at 5:49 PM + Missed call at 5:51 PM
Text Message ContentAdvised account endorsed to RGS Recovery for collections; directed complainant to call 9176515052 / 9616862668 / 9275474270 and look for Ms. Ederlyn Villanueva; reply-to email: evillanueva@rgs.com.ph
Consent GivenNONE — complainant never consented to Viber contact at any point
Responsible PartyRGS Recovery Management & Collections Services, Inc. (under direction of E. Villanueva)

Note: The screenshot below was previously submitted as an email attachment in the complainant's Final Notice of March 19, 2026 and is incorporated herein by reference.

RGS SECURITY BANK Viber Screenshot — Exhibit C

EXHIBIT C — Viber Screenshot · Account: "RGS SECURITY BANK" · March 7, 2026 · 5:49 PM PHT

EXHIBIT D Security Bank Case ID 19305061 — Acknowledgment Email Received: March 25, 2026 at 11:55 PM PST · The 25-Minute Window Prepared: April 5, 2026  |  Reference: Security Bank Case ID 19305061

Violations documented: RA 11765; BSP Circular 1048; Bad Faith Conduct

On March 25, 2026 at 11:55 PM Pacific Standard Time, Security Bank Corporation sent the complainant an email formally acknowledging his open dispute and confirming that their team was actively processing the matter, assigned under Case ID 19305061. This email was received within twenty-five (25) minutes of a collection demand from S.P. Madrid & Associates pressuring immediate payment of PHP 53,685.29 on the same disputed accounts.

The 25-Minute Window — Critical Evidentiary Significance
11:30 PM PST
March 25, 2026
S.P. Madrid & Associates (Benmoreen Nazareno)
⚠ Collection demand received. Pressures immediate payment of PHP 53,685.29 on disputed accounts. Received within SEC MC No. 18 prohibited hours (after 10:00 PM).
11:55 PM PST
March 25, 2026
(25 MINUTES LATER)
Security Bank Corporation
⚠ Security Bank acknowledges open dispute. Case ID 19305061 assigned. Team confirmed processing the matter — on the very same accounts its agent was simultaneously demanding payment for.
What This Establishes

Note: The full text of both Security Bank emails confirming Case ID 19305061 are reproduced below as Sub-Attachments D-1 and D-2, extracted directly from the authenticated Gmail inbox of ralphposadas29@gmail.com.

SUB-ATTACHMENT D-1 — Primary Case Acknowledgment Email
FromCCU - Customer Care Unit <ccucustomercare@securitybank.com.ph>
Toralphposadas29@gmail.com
DateWednesday, March 25, 2026 at 11:37 PM PST (UTC: Wed, 25 Mar 2026 11:37:03 +0000)
SubjectYour Security Bank concern | Reference no. 19305061

Dear Mr. Posadas,

We write in reference to the concern raised through our Contact Center Channel Division on March 12, 2026.

We apologize for the inconvenience you experienced.
Please be advised that we are coordinating your concern with our internal units for appropriate review and action.
We will revert to you once we receive the necessary updates.
We thank you for the opportunity to assist you.

Sincerely,
Sofie Bughao
Customer Care Officer
Customer Care Department
Security Bank Corporation

Legal Significance: This email establishes that Security Bank's own Customer Care Unit had formal, documented knowledge of the complainant's open dispute under Case ID 19305061 at 11:37 PM PST on March 25, 2026 — only 7 minutes after S.P. Madrid's prohibited-hours collection demand at 11:30 PM PST that same evening. Security Bank's systems had already acknowledged and logged the dispute while its authorized agent was simultaneously pressuring payment.

SUB-ATTACHMENT D-2 — Case Status Update Email
FromSecurity Bank <noreply@securitybank.com.ph>
Toralphposadas29@gmail.com
DateThursday, March 26, 2026 at 6:55 AM UTC (March 25, 2026 at 10:55 PM PST)
SubjectStatus Update_Case ID 19305061

Dear Mr./Ms. POSADAS, RAFAEL ALFONSO TAN,

Greetings from Security Bank!

This is to provide you with an update with your request under case ID 19305061. We sincerely apologize for the inconvenience. Processing your request may take longer than usual. Rest assured that our team is working non-stop to make sure your request is completed as soon as possible. Thank you for your understanding.

Sincerely,
Security Bank Corporation

Legal Significance: This second automated email from Security Bank confirms that Case ID 19305061 was formally logged in Security Bank's internal systems and assigned for processing — further establishing that Security Bank had actual institutional knowledge of the complainant's dispute while its collection agents simultaneously continued demanding payment.

EXHIBIT E S.P. Madrid & Associates Harassment Log — 18 Documented Collection Emails — March 25–April 4, 2026 Prepared: April 5, 2026  |  Reference: Security Bank Case ID 19305061

Sender email address: sblegal@spmadridlaw.com (shared address used by all named officers)

Office address: 17th Floor, Chatham House Condominium, V.A. Rufino cor. Valero, Brgy. Bel-Air, 1226 City of Makati, NCR

Phone: Landline: (02) 8538-6403  ·  Mobile: 0919-059-9967

Violations documented: RA 10870 §§19, 21; Article 287 Revised Penal Code; SEC MC No. 18; RA 11765; BSP Circular 1048

Key pattern: Multiple named officers — including officers identified only by incomplete names — sending collection demands from a single shared email address. No IBP Roll Number disclosed for any officer. No physical office address disclosed in any email.

#DateTimeNamed OfficerAmountSummary / Legal Notes
1Thu, Mar 2610:30 PM PST (Mar 25)Benmoreen Nazareno, Legal Officer₱53,685.29⚠ PROHIBITED HOURS: 10:30 PM PST — after 10:00 PM. FIRST SP MADRID CONTACT.
2Thu, Mar 262:16 PM PHTJunior Michael AgramonN/AGeneric endorsement notice. Account endorsed to SP Madrid. No credentials disclosed. Went to Spam.
3Thu, Mar 264:46 PM PHTJunior Michael Agramon₱53,685.29Standard payment reminder template. Went to Spam.
4Fri, Mar 2711:15 AM PHTSP Madrid Collections Dept. (No individual name)₱53,685.29 or ₱17,902.06Declared "Final Notice." Threatened card cancellation. Partial offer "approved until today only." Account "under monitoring."
5Fri, Mar 2712:25 PM PHTBenmoreen Nazareno, Legal Officer₱53,685.29Second contact from Benmoreen Nazareno. Warned of additional penalties.
6Fri, Mar 271:23 PM PHTJunior Michael AgramonN/AGeneric endorsement template — identical to Email #2.
7Sat, Mar 2810:35 AM PHTSP Madrid Collections Dept. (No individual name)N/AClaims account under "final assessment." References a non-existent "agreed payment." Threatens further escalation.
8Sat, Mar 281:05 PM PHT"Joanna" (No surname disclosed)₱53,685.29 or ₱17,126.21⚠ Officer identified only as "Joanna" — no surname, no IBP Roll Number. INCOMPLETE IDENTIFICATION — SEC MC No. 18 violation.
9Sun, Mar 299:35 AM PHTBenmoreen Nazareno, Legal Officer₱53,685.29Third contact from Benmoreen Nazareno. Same urgency re: March 29 due date.
10Mon, Mar 3011:06 AM PHTLenie Aton, Legal Officer₱17,226.21 remaining (Total: ₱864,948.28)⚠ CRITICAL: DIRECT REPLY to debtor's Addendum of March 26. Continues demanding payment AFTER acknowledging the active dispute. Discloses full outstanding balance (₱864,948.28) and partial account number (ending 827236).
11Mon, Mar 301:27 PM PHTSP MADRID bulk sender₱53,685.29Generic boilerplate payment reminder. Same automated template.
12Mon, Mar 303:10 PM PHTRona Mae Gubalane, Legal Officer₱53,685.29⚠ Claims "Atty. Madrid is currently here in our office." Sets 3:00 PM payment deadline. Threatens endorsement to Legal Department where full balance required.
13Tue, Mar 312:09 PM PHTJunior Michael AgramonN/AGeneric endorsement/settlement reminder. Same automated template.
14Tue, Mar 312:55 PM PHT"RJRAZON" (No full name disclosed)₱17,902.06 or ₱53,685.29⚠ Officer identified only as "RJRAZON" — initials only, no IBP Roll Number. INCOMPLETE IDENTIFICATION — SEC MC No. 18 violation. Offers "WAIVER" valid today only.
15Wed, Apr 14:05 PM PHTJunior Michael AgramonN/ASame automated template. Continued post-Addendum.
16Thu, Apr 210:07 AM PHTJunior Michael AgramonN/ASame automated template. Marked Important by Gmail.
17Fri, Apr 310:10 AM PHTJunior Michael AgramonN/ASame automated template.
18Sat, Apr 410:07 AM PHTJunior Michael AgramonN/A⚠ MOST RECENT SP MADRID EMAIL. Sent 9 days after Addendum formally transmitted to SP Madrid.

Total: 18 documented emails spanning 10 days (March 25–April 4, 2026), an average of nearly 2 emails per day.

Named Officers — S.P. Madrid & Associates
NameTitle GivenContact DatesNotes
Benmoreen NazarenoLegal OfficerMar 25/26, 27, 29No IBP Roll No. No physical address disclosed.
Junior Michael Agramon(bulk sender)Mar 26 (×2), 27, 31, Apr 1, 2, 3, 4Automated template emails. No IBP Roll No.
Lenie AtonLegal OfficerMar 30Replied to debtor's Addendum. No IBP Roll No.
Rona Mae GubalaneLegal OfficerMar 30Claimed Atty. Madrid present. No IBP Roll No.
"Joanna" (no surname)Legal OfficerMar 28⚠ INCOMPLETE ID — no surname, no IBP Roll No. SEC MC No. 18 violation.
"RJRAZON" (initials only)Legal OfficerMar 31⚠ INCOMPLETE ID — initials only, no IBP Roll No. SEC MC No. 18 violation.
EXHIBIT F Second Unidentified Collector Visit — Claims to be from Security Bank March 30, 2026 — Relayed by Complainant's In-Laws Prepared: April 5, 2026  |  Reference: Security Bank Case ID 19305061

Violations documented: RA 10173 §§25,31; RA 1405; RA 11765; BSP Circular 1048; RA 10870 §21

Date of VisitMonday, March 30, 2026
LocationComplainant's Philippine residence, Paombong, Bulacan 3001
Visitor IdentityUNIDENTIFIED — identified himself only as being from Security Bank Corporation. No name, badge, employee ID, or authorization shown.
Complainant PresentNO — complainant is currently residing in the United States
WitnessesComplainant's in-laws (present at the residence at time of visit)
Source of InformationRelayed to complainant by his in-laws via communication from the Philippines
Purpose of VisitCollection-related — discussion of complainant's unpaid Security Bank credit card account with in-laws
Active Dispute StatusCase ID 19305061 formally acknowledged by Security Bank on March 25, 2026 — five (5) days BEFORE this visit occurred
Demand Arising from This Incident

The complainant demands that Security Bank Corporation identify this individual within five (5) business days of receipt of the Final Notice, including:

Note: A sworn statement from the complainant's in-laws regarding this visit is to be obtained and attached as a sub-attachment to this Exhibit.

— END OF EXHIBITS —

Rafael Alfonso Tan Posadas  |  ralphposadas29@gmail.com  |  April 5, 2026

EXHIBIT G Ederlyn Villanueva Personal Reply — Acknowledging Final Notice RGS Recovery Management & Collections Services, Inc. Thursday, March 12, 2026 at 5:08 AM UTC (9:08 PM PST, March 11, 2026) Prepared: April 5, 2026  |  Reference: Security Bank Case ID 19305061

Violations documented: RA 10870 §§19, 21; SEC MC No. 18; RA 11765; Article 287 Revised Penal Code

Legal significance: This email is Email #11 in Exhibit A. It constitutes Ederlyn Villanueva's personal, direct acknowledgment of receipt of the complainant's Final Notice — establishing that RGS Recovery had actual, personal knowledge of the formal legal dispute as of March 12, 2026. Despite this acknowledgment, RGS Recovery continued automated collection demands on March 14 (Email #12) and March 23 (Email #13), establishing willful harassment after formal notice.

EMAIL HEADERS
FromEderlyn S. Villanueva, Team Leader <evillanueva@rgs.com.ph>
ToRalph Posadas <ralphposadas29@gmail.com>
DateThursday, March 12, 2026 at 5:08 AM UTC (9:08 PM PST, March 11, 2026)
SubjectRe: FINAL NOTICE: Intent to File Criminal and Administrative Charges for Unfair Debt Collection, Misrepresentation, and Data Privacy Violations
Sender Office3F/4F Anonas LRT City Center, 968 Aurora Blvd. Proj. 4, Quezon City
Sender Mobile+63 936 059 0363
Reply Body (Verbatim)

We acknowledge receipt of your email.

Please be advised that our representative was trying to contact you on your registered contact numbers but to no avail. May we confirm your updated contact number and preferred callback time so we can discuss your concerns on account. Thank you

Ederlyn S. Villanueva
Team Leader
+63 936 059 0363
www.rgs.com.ph
evillanueva@rgsrecovery.com.ph
3F/4F Anonas LRT City Center, 968 Aurora Blvd. Proj. 4, Quezon City

Legal Analysis
1.Acknowledgment Without Substantive Response: Villanueva's reply confirms receipt of the Final Notice but offers no legal response to any documented violations — no commitment to cease collection, no acknowledgment of the dual-agency issue, no IBP Roll Number, no Letter of Authority.
2.Attempt to Shift to Phone: The request for a callback number attempts to move the dispute off the written, documented record and onto an unrecorded verbal channel — depriving the complainant of documentary evidence.
3.Willful Continuation Proven: Despite this personal acknowledgment on March 12, RGS Recovery sent two additional automated collection demands on March 14 (Email #12) and March 23 (Email #13) — proving Villanueva's acknowledgment did not result in any internal instruction to suspend collection.
4.Identity Confirmed: This email independently confirms Villanueva's identity as Team Leader (evillanueva@rgs.com.ph), mobile number (+63 936 059 0363), and the Quezon City office address — all cited in the complaint.

Sub-Attachment G-1: Complainant's Final Notice (March 12, 2026)

The following is the Final Notice to which Villanueva replied, transmitted March 12, 2026 at 11:52 AM PHT, CC'd to the BSP, SEC, and NPC:

FromRalph Posadas <ralphposadas29@gmail.com>
Tocustomercare@securitybank.com; sbccollections@securitybank.com.ph; evillanueva@rgsrecovery.net; evillanueva@rgs.com.ph
CCconsumeraffairs@bsp.gov.ph; imessagemo@sec.gov.ph; complaints@privacy.gov.ph
DateThursday, March 12, 2026 at 11:52 AM PHT
SubjectFINAL NOTICE: Intent to File Criminal and Administrative Charges for Unfair Debt Collection, Misrepresentation, and Data Privacy Violations

ATTENTION:

This is a Formal and Final Notice. Despite my "Dispute and Request for Debt Validation" sent on March 7, 2026, at 5:12 PM (PST), RGS Recovery (specifically through the office of E. Villanueva) has intentionally ignored my legal request and escalated its harassment.

I. STATEMENT OF ACCOUNT HISTORY & LOYALTY
I have been a loyal Security Bank cardholder for over five (5) years. Throughout this tenure, I have maintained a strong payment record. This current dispute is an anomaly in a long-term relationship. Instead of professional coordination, Security Bank and its agent, RGS, have chosen a path of predatory harassment, which I will not tolerate.

II. LEGAL JUSTIFICATION FOR NAMING TOP EXECUTIVES
Security Bank has failed to provide the mandatory 7-day written notice required under RA 10870 prior to endorsing my account to a third-party agency. Under the principle of Solidary Liability, the top leadership is directly accountable for the illegal, unauthorized, and tortious acts of their agents.

III. DOCUMENTED HARASSMENT & PRIVACY VIOLATIONS
RGS Recovery sent identical automated demands signed by a generic "Legal Officer" without IBP Roll Number or physical address. Unauthorized Viber contact under "RGS SECURITY BANK" on March 7, 2026. Home intrusion disclosing financial information to in-laws — severe breach of Bank Secrecy and Data Privacy Act.

IV. FINAL FIVE (5) DAY DEMAND

  1. Full Validation of Debt — certified, itemized Statement of Account (SOA)
  2. Official Letter of Authority — proof of RGS's authorization from Security Bank
  3. Identity Disclosure — full name and IBP Roll Number of the "Legal Officer"
  4. Cease and Desist — immediate termination of all Viber and third-party communications

Failure to comply will result in the immediate filing of a Criminal Complaint for Unjust Vexation with the Office of the City Prosecutor of Quezon City and administrative cases with the BSP, SEC, and NPC.

Sincerely,
RAFAEL ALFONSO POSADAS
ralphposadas29@gmail.com

— END OF EXHIBIT G —
EXHIBIT H RGS Recovery — Automated Collection Email Template (Verbatim) Representative Sample: Email #13 · Monday, March 23, 2026 · 9:21 PM PST This identical template was sent 12 times between March 3–23, 2026

Source: evillanueva@rgsrecovery.net  |  Reference: Security Bank Case ID 19305061

EMAIL HEADERS
Fromevillanueva@rgsrecovery.net (RGS Recovery Management & Collections Services, Inc.)
Toralphposadas29@gmail.com
DateMonday, March 23, 2026 at 13:21 +0800 (9:21 PM PST, March 22, 2026)
SubjectRe: URGENT: Unresolved Security Bank CARD / LOANS Issue
Email Body (Verbatim — Reproduced Exactly as Received)

Security Reminder: Beware of fraudsters pretending to be from Security Bank. We will never ask for your OTP, CVC, and PIN via call, text, or email.

Dear Mr./Ms. POSADAS RAFAEL ALFONSO,

This is gentle reminder that your Security Bank credit card account remains past due.

Please settle your minimum amount due as of today amounting to Php 35,028.27 until 5 pm today.

Just visit any Security Bank branch to make an over the counter (OTC) payment. Provide the following details when paying:

Once settled, please call 0956-630-3895 / 0956-630-3894 / 0917-651-5052 / 0961-686-2668 / 0927-547-4270 / 7719-6410 loc. 553 or email us at evillanueva@rgs.com.ph to update your records.

Kindly disregard this notice if payment has been made.

Sincerely,

Legal Officer

Collections Department | RGS Recovery Management & Collections Services, Inc.

**This Electronic Mail is system generated. Please do not reply. Officer signatures are not necessary unless altered.**

Annotated Legal Violations in This Template
[1]DECEPTIVE EXPIRED DEADLINE: "Settle...until 5 pm today" — received at 9:21 PM PST, hours after the deadline already passed. Physically impossible to comply. Deceptive misrepresentation under RA 10870 Section 19.
[2]BLANK PAYMENT FIELDS: All payment routing shown as "XXXX" — making it literally impossible to pay even if the debtor wanted to.
[3]ANONYMOUS "LEGAL OFFICER": No full name, no IBP Roll Number, no office address. Direct violation of SEC MC No. 18 mandatory identification requirements for collection agents.
[4]DISCLAIMER BLOCKS DISPUTE RIGHTS: "Please do not reply. Officer signatures are not necessary." Designed to prevent written dispute, in violation of RA 11765.
[5]SENT AFTER FORMAL NOTICE: This Email #13 was sent after both the complainant's Final Notice (March 7) and Villanueva's personal acknowledgment (March 12) — establishing willful continuation of harassment.
— END OF EXHIBIT H —
EXHIBIT I S.P. Madrid & Associates — Generic Boilerplate Collection Email (Verbatim) Representative Sample: Email #18 · Saturday, April 4, 2026 · 10:07 AM PHT This same template was sent by Junior Michael Agramon on 8 separate occasions

Source: sblegal@spmadridlaw.com  |  Reference: Security Bank Case ID 19305061

EMAIL HEADERS
FromSP MADRID & ASSOCIATES <sblegal@spmadridlaw.com>
Reply-ToSP MADRID & ASSOCIATES <sblegal@spmadridlaw.com>
Toralphposadas29@gmail.com
DateSaturday, April 4, 2026 at 07:37 +0530 (10:07 AM PHT)
SubjectSECURITY BANK CORPORATION Account - Settlement Reminder | SPMB2 BNAZARENO
Email Body (Verbatim — Reproduced Exactly as Received)

Dear RAFAEL ALFONSO POSADAS,

This is Junior Michael Agramon from SP Madrid and Associates. Please be advised that your overdue account has been officially endorsed to our law firm by Security Bank Corporation.

For any actions or inquiries regarding your Security Bank account, kindly contact us immediately at (02) 8538 6403 / 0919 059 9967, or email us at sblegal@spmadridlaw.com.

Thank you for your prompt attention to this matter.

Regards,

S.P. Madrid & Associates

___________________________________

E-mail: sblegal@spmadridlaw.com

Mobile No.: 0919-059-9967

Landline No.: (02) 85386403

Address: 17th Floor, Chatham House Condominium, V.A. Rufino cor. Valero, Brgy. Bel-Air, 1226 City of Makati, Fourth District, NCR

--Click Here to unsubscribe from this newsletter.

Annotated Legal Violations in This Template
[1]NO IBP ROLL NUMBER: Agramon signs by name only with no IBP Roll Number — despite SP Madrid presenting itself as a law firm with "Legal Officers." Violates SEC MC No. 18 mandatory identification requirements.
[2]NO PROFESSIONAL CREDENTIALS: No bar accreditation, no authority to make legal demands disclosed. The law firm letterhead implies legal authority that is entirely unsubstantiated in the email.
[3]SENT 9 DAYS AFTER ADDENDUM: Email #18 (April 4) was sent 9 days after the Addendum was transmitted to SP Madrid on March 26 — and 10 days after Security Bank acknowledged the open dispute under Case ID 19305061.
[4]IDENTICAL TEMPLATE ×8: This exact template appears as Emails #2, #3, #6, #13, #15, #16, #17, and #18 in Exhibit E — demonstrating systematic automated harassment that entirely ignored the active dispute.
[5]INTERNAL TRACKING CODE IN SUBJECT: "SPMB2 BNAZARENO" is an internal code referencing Benmoreen Nazareno — confirming these are mass-generated automated emails linked to specific officer codes, not individualized legal communications.
— END OF EXHIBIT I —