All scamsहिन्दी में पढ़ें

Scam explainer

Illegal loan app harassment also called Instant loan app scam, Loan app blackmail, Fake loan app

Unregistered instant-loan apps harvest your contacts and photos, charge hidden fees and then harass or blackmail you and your contacts over repayments.

Published
Conceptual illustration: a phone and threatening loan-app notification imagery. Text: LOAN APP HARASSMENT.

AI-generated illustration by CyberShitty. Not a photograph or a document from the organisations named.

How it works

  1. An app or ad offers an instant small loan with no paperwork.
  2. Installing it grants access to your contacts, photos and messages.
  3. Less money than promised arrives after large 'processing' fees, and repayment is due within days at a very high effective cost.
  4. Recovery agents call and message you and your contacts, sometimes sending morphed obscene images, to force payment, often more than you owe.

Composite example, not a real case

A quick small loan that turned into threats

  1. Anil, 31, a sales executive in Kolkata, needs ₹8,000 before payday. An ad offers an instant loan with no paperwork, and he installs the app.
  2. The app asks for access to his contacts, photos and SMS. He taps allow to get the money quickly.
  3. Only about ₹5,000 reaches his account after 'processing fees', and he is told to repay the full ₹8,000 plus interest within seven days.
  4. When he is a day late, recovery agents start calling. Soon his colleagues receive a morphed photo of him and messages calling him a defaulter.
  5. Anil stops paying the new demands, screenshots every threat, revokes the app's permissions and uninstalls it, warns his contacts, and reports it on cybercrime.gov.in and to the police.

Who gets targeted

People who need a small amount of money quickly and are drawn by 'instant, no paperwork' offers. Once the app has read the borrower's contact list, their family, friends and colleagues are targeted too.

Red flags

  • No named RBI-regulated bank or NBFC behind the loan.
  • The app asks for access to contacts, gallery or SMS.
  • Deductions from the loan amount or repayment periods of a few days.
  • Threats, abuse or messages to people in your contact list.

What to do

  • Check whether the app appears in RBI's Digital Lending Apps directory before borrowing.
  • Do not pay extra amounts under threat; keep screenshots of every threat and message.
  • Report harassment and morphed images on cybercrime.gov.in or call 1930, and approach your local police.
  • Revoke the app's permissions, uninstall it, and warn close contacts not to respond.
  • Complain about unauthorised lenders on RBI's Sachet portal.

How to protect yourself

  • Before you borrow, find the app in RBI's Digital Lending Apps directory and match the lender, developer and store link.
  • Refuse any loan app that asks for your contacts, photo gallery or SMS. Regulated lenders' apps are not allowed to read them.
  • Insist on a Key Fact Statement showing the full yearly cost (APR) before you accept a loan.
  • Make sure the loan comes into your own bank account and that you repay only into the lender's account, never a personal UPI ID.
  • Walk away if the amount you receive is far less than approved, or repayment is due within days.
  • If you cannot find a named bank or NBFC behind the app, do not borrow from it.

Official tools, explained

Step-by-step guideHarassed by a loan app? How to check a lender first, and where to complain in India

The numbers

RBI launched a public directory of Digital Lending Apps from 1 July 2025 so borrowers can check whether an app is linked to a regulated lender, alongside its Digital Lending Directions of May 2025 (PIB).

Questions people ask

Can a loan app legally access my contacts?

Not if it works for an RBI-regulated lender. RBI's Digital Lending Directions say apps must not access your files, media, contact list or call logs. Camera, microphone or location may be used once for KYC, with your consent.

How do I check if a loan app is genuine?

Search for it in RBI's directory of Digital Lending Apps on rbi.org.in. The list is reported by lenders and is not an RBI endorsement, but if an app is not on it, do not borrow.

Should I pay recovery agents who are threatening me?

Do not pay extra 'settlement' money to unknown UPI IDs or accounts. Nothing guarantees that paying ends the demands. Keep screenshots of every threat and report them.

The app sent morphed photos of me to my contacts. What can I do?

Report it on cybercrime.gov.in or call 1930, and go to your local police or cyber cell for an FIR with your screenshots. Ask your contacts not to reply or pay, and report any posted images to the platform.

Can I cancel a digital loan after taking it?

With a regulated lender, yes. RBI's rules give a cooling-off period of at least one day, when you can exit without penalty by repaying the principal and the proportionate APR.

Sources