James Wright is the schoolboy attracting unwanted interest from a major bank. James started receiving calls on his mobile phone from Citibank about a year ago.

James who was in class at the time, isn't even a Citibank customer.

“I just kept telling them to leave me alone, they wouldn't listen”, he said.

“He received another call, same thing - they said they were from Citibank and they talked over the top of him. This carried on for several weeks,” said James’ mum, Jan.

Jan called Citibank - to stop the calls.

“I rang them and said look there's been a bit of a mistake here, you're got my son's phone number and he's only 13. They said look we're really, really sorry and said it would never happen again”, Jan said.

But it did. A few weeks ago James started receiving text message and more calls, this time from one of Citibank's agents, a finance company called Peakbound.

“The Privacy Act should be protecting him like it protects everybody else and Citibank shouldn't have given his number, they should be getting rid of his number”, Jan said.

For its part, Citibank says it thought it was "reaching out to one of our customers'' but when it became clear there had been a mistake "we immediately put the boy's name on our do not call list", but not his number.

The bank says its "records have been corrected’ but confirmed James' number had been given to Peakbound, the one and only time it was handed out. “They have no right, no permission to give his number to anybody”, Jan said.

• Westpac under fire
• Chip credit card hackers
• Credit card magic