What is loan app harassment?
Loan app harassment is when an instant-loan app uses threats, abuse, mass-messaging your contacts or morphed photos to force payment. It usually comes from apps operating outside RBI regulation. The harassment is a criminal matter, separate from any money you may owe.
It usually starts small. A loan of a few thousand rupees, approved in minutes, with a repayment date only days away. At install, the app asked for access to your contacts, your gallery and your call logs, and in that moment it seemed like a formality.
Then the tone changes. Calls at all hours. Abusive language. WhatsApp messages sent to your colleagues, your relatives, your old school group, saying you are a fraud. Sometimes a photograph taken from your gallery, crudely edited, sent to people you know.
If this is happening to you, please read the next line carefully. Threats, abuse, blackmail, defamation and morphed or obscene images are crimes in India regardless of whether you owe money. A debt does not give anyone permission to do this. You are not powerless, and you have not lost your right to complain by having borrowed.
The money question and the harassment question are separate. Deal with the harassment as a criminal matter — evidence, helpline, police. Deal with the loan separately, calmly, and on paper.
How these apps are built to trap you
- Very small loans, very short tenures. A few thousand rupees repayable in seven to fifteen days, so a single missed day feels like a crisis.
- Charges that are never fully disclosed. Processing fees deducted upfront, so you receive less than you borrowed, then penalties stacked on top.
- Permissions taken at install. Contacts, photos, call logs and SMS — harvested not to assess your creditworthiness, but to use against you later.
- Rollovers. You are pushed to take a second app's loan to clear the first. Many people end up with a dozen apps within weeks.
- Pressure in place of process. No written statement, no grievance officer, no verifiable company name — only a phone number and a threat.
None of this is a reflection of your character. These apps are designed by people who understand shame very well, and they target ordinary borrowers with an urgent, ordinary need for money.
Is it legal for a loan app to call your contacts?
No. RBI's digital lending rules require lending apps to stay away from your contact list, call logs and media files. Messaging your friends and family to shame you can also amount to harassment, criminal intimidation and defamation under Indian law.
RBI's digital lending framework is explicit on this point: lending apps run by or for regulated lenders must not access your phone's file and media storage, contact list, call logs or telephony functions. One-time access to the camera, microphone or location may be sought with your clear consent for onboarding or KYC — nothing beyond that.
So an app that pulls your contact list and then messages those contacts is doing two wrong things at once. It is breaching the rules that apply to legitimate digital lending, and — more seriously for you — it is committing conduct that Indian criminal law treats as offences in its own right.
What that conduct amounts to
- Criminal intimidation — threatening you or your family with harm, exposure or humiliation to make you pay.
- Extortion and blackmail — demanding money under threat of publishing something about you.
- Defamation — telling your contacts, employer or relatives that you are a thief or a fraud.
- Obscene and morphed images — editing your photograph into a sexual or degrading image, or circulating it, is a serious offence when done electronically.
- Misuse of personal data — harvesting and using your contacts and gallery without a lawful basis.
We have deliberately not put section numbers next to these. The police station or the cybercrime portal will apply the correct provisions. Your job is to describe accurately what was done to you and to hand over the evidence — that is what actually moves a complaint forward.
If your loan is from a bank or a registered NBFC and the problem is recovery agents calling at odd hours or turning up at your home, the rules and remedies are somewhat different. See our guide on loan recovery agent harassment in India.
How do you know if a loan app is legal in India?
A legal app lends for a bank or an RBI-registered NBFC, names that lender upfront, gives you a Key Fact Statement with the all-in cost, and pays money straight into your bank account. Anything else is a warning sign.
You can usually tell within a few minutes. The test is not how professional the app looks — the fake ones look excellent. The test is whether a regulated lender stands behind it and whether the paperwork exists.
| Check | Regulated lending looks like | Warning sign |
|---|---|---|
| Who is the lender? | The app names the bank or RBI-registered NBFC lending the money, with its registered name and address | Only a brand name, no lender named anywhere in the app or website |
| Key Fact Statement | A written statement before you sign, showing the all-in annualised cost, fees, penalties, cooling-off period and grievance officer | No written terms; costs revealed only after disbursal |
| Where the money moves | Disbursal into your bank account and repayment back to the lender's account, with no third-party pool account in between | Money via a wallet or an individual's UPI ID; repayment demanded to a personal account |
| Phone permissions | No access to contacts, gallery, call logs or SMS | App refuses to work unless you grant contacts and photo access |
| Complaint route | A named grievance redressal officer, and escalation to RBI if unresolved | No grievance officer; only a call-centre number and threats |
RBI publishes the list of NBFCs registered with it, and a separate list of entities whose registration has been cancelled, on its website — you can search for the lender's name there. Government agencies have also blocked or taken down a number of illegal lending apps over the past few years, so an app disappearing from the store does not mean your complaint is pointless. If anything, it supports it.
Under RBI's rules for regulated lenders, charges that do not appear in the Key Fact Statement cannot be levied on the borrower at any stage. If you are being asked for penalties and "processing" amounts that were never shown to you in writing, say so in your complaint.
What should you do if a loan app is threatening you?
Save the evidence first: screenshots, call logs, the app name and payment records. Then revoke its contacts and photos permissions, uninstall it, briefly tell close contacts what is happening, and report the threats to 1930 and cybercrime.gov.in.
Work through this in order. The first step matters most, because everything later depends on it.
Many people describe this as the worst weeks of their life — the shame, the sleeplessness, the sense that everyone now thinks the worst of them. It passes, and it passes faster once someone else knows. Please tell one person you trust today, even before you file anything. If you are having thoughts of harming yourself, treat that as the urgent thing: speak to a doctor, a helpline or a family member straight away. This situation is survivable, and it is temporary.
Being threatened by a loan app?
Ask Legal Setu — free, private, no account needed.How do you complain about a loan app?
Report threats to the 1930 cyber helpline and cybercrime.gov.in, file a police complaint, and report the app to Google Play or the App Store. If a bank or registered NBFC is behind it, complain to the lender, then escalate to RBI.
There is no single window for this, because two different systems are involved: the criminal system handles the threats, and the financial regulator handles the lending. Use both where they apply.
For the threats, blackmail and messages to your contacts
- Cyber helpline 1930 — the national number for cybercrime and online financial fraud. Useful immediately, especially if money has been taken from you.
- cybercrime.gov.in — the National Cyber Crime Reporting Portal, run by the Ministry of Home Affairs. File in writing and attach your screenshots. Note the acknowledgement number.
- Local police station or cyber cell — for an FIR. Take printouts, not just a phone full of screenshots.
- The app store — report the listing so the app can be reviewed and removed.
For the lending itself
- The regulated lender — if the app names a bank or RBI-registered NBFC, that entity remains responsible for what its app and its service providers do. Write to its grievance redressal officer first, and keep the reply.
- Reserve Bank of India — where the lender is a regulated entity and your complaint is not resolved to your satisfaction within 30 days, you can escalate through RBI's complaint management portal at cms.rbi.org.in under the Reserve Bank's integrated ombudsman scheme.
- Sachet portal — RBI's public portal for checking lists of registered entities and reporting entities that appear to be operating without authorisation.
Prepare a single one-page account: the app name, the date and amount borrowed, what was actually credited, what you have repaid, when the threats began, what was said, and who was contacted. Attach the same evidence bundle to every complaint. It saves hours and makes each complaint far stronger.
If the threats won't stop, a lawyer can act fast.
₹99* books a verified lawyer, briefed on your case before the call.*₹99 is the platform booking fee. Your advocate’s own fee is quoted and agreed before the call.Do you still have to repay an illegal loan app?
If money actually reached your account, the principal is generally still a debt. But the harassment is illegal regardless, and charges never disclosed in writing can be disputed. Pay only by traceable bank transfer, and take advice before paying inflated demands.
We would rather be honest with you than comforting. If an app actually transferred money to your bank account, that money is generally still owed as a debt, and a lender can pursue it through lawful civil means. Refusing to pay anything because the app behaved criminally is not a safe assumption to build on.
What is genuinely open to challenge is the rest of it:
- Charges never disclosed in writing. For regulated lenders, anything absent from the Key Fact Statement cannot be charged at all. For unregulated operators, there is often no enforceable contract behind the numbers being demanded.
- The gap between "sanctioned" and "credited". Work out what actually reached your account, not the headline loan figure. That is the number to reason from.
- Everything already paid. Total your repayments. Many people discover they have paid several times the amount they received.
- The harassment. Entirely separate. It stays a criminal matter even if you pay in full tomorrow.
Practical guidance: pay only by traceable bank transfer, never by cash or to a personal UPI ID, and ask in writing for a statement of account before paying anything further. If the demand is far above what you received, get advice before paying it. And do not take a fresh loan from another app to clear this one — that is the single decision that turns a bad week into a bad year.
Can you file an FIR against a loan app?
Yes. Threats, extortion, blackmail, defamatory messages sent to your contacts and morphed or obscene images are criminal offences in India. Police can register an FIR on your complaint, and you can also report the same facts online at cybercrime.gov.in.
Yes. An FIR is a record of a cognisable offence being reported, and threats, extortion, defamatory messaging to third parties and circulation of morphed or obscene images are treated as offences under Indian criminal law. You do not need to prove your case at the FIR stage; you need to state the facts clearly.
What to take with you
- A written complaint on plain paper — dates, app name, what was said, who was contacted, in order.
- Printed screenshots of the threats and of any message sent to your contacts, with numbers visible.
- Call logs showing the numbers and frequency of calls.
- Bank statements showing what was credited and what you repaid.
- The app's store listing, developer name and any website details.
- Copies of your ID.
Ask for an acknowledgement of your complaint and, where an FIR is registered, a free copy of it. If the police decline to register one, submit your complaint in writing by post or email to the Superintendent or Commissioner of Police, and keep proof of sending. A complaint already filed on cybercrime.gov.in also strengthens your position at the police station, because it puts the facts on record with a timestamp.
Say so explicitly and immediately — at the police station and on the cybercrime portal. Complaints involving obscene or morphed images are handled through a dedicated route and can be filed with your identity protected. Ask for the content to be taken down as well as for action against the sender.
Official sources
- Reserve Bank of India — official website
- RBI — FAQs on the digital lending guidelines
- RBI — Guidelines on Digital Lending
- RBI — list of NBFCs registered with the Reserve Bank
- Sachet (RBI) — check registered entities and report unauthorised ones
- National Cyber Crime Reporting Portal — cybercrime.gov.in
RBI's complaint management portal is at cms.rbi.org.in. Reach it from the "Lodge a complaint" link on the RBI website above so that you are always on the genuine page.