Loan App Harassment in India: 11 Immediate Steps to Stop Threats and Recover Your Money (2026 Guide)

You took a small ₹2,000–₹50,000 loan from an instant loan app. Now agents are calling your contacts, threatening your family, morphing your photos and demanding 5x the amount. You are not alone — over 600 illegal loan apps were banned by MeitY between 2022 and 2025 and the Reserve Bank of India's Digital Lending Guidelines, 2022 (updated 2024) make most of these app practices criminal. This is exactly what to do, in order, starting in the next 60 minutes.

• First action — within 60 minutes: stop paying. Save every screenshot (chats, threats, morphed images). Block UPI auto-debit at your bank.
• Within 24 hours: file at https://cybercrime.gov.in (NCRP) under Loan App Fraud. Dial 1930 for active financial loss.
• Within 48 hours: file an FIR at the cyber police station — citing IT Act §66C / §66D / §67, BNS §351 (criminal intimidation), §75 (sexual harassment via cyber means), and §318 (cheating).
• Within 7 days: complain to RBI Sachet at https://sachet.rbi.org.in (free, online).
• Free legal aid: NALSA helpline 15100 + your District Legal Services Authority (DLSA).
• Recovery rate: 70%+ harassment stops within 7 days of FIR + RBI complaint. Money recovery: 30-50% if reported within 24 hours.
• You do NOT have to repay: an unauthorised app loan that violates RBI Digital Lending Guidelines is recoverable as illegal — banks, courts and CIBIL must reverse it.

1. Stop paying. Every rupee you send confirms compliance and worsens harassment.
2. Take screenshots of every call log, message, threat, morphed image, group chat. Save to cloud + a separate device.
3. Block UPI auto-debit / e-mandate — call your bank, ask to revoke the e-mandate registered against the loan app's VPA.
4. Revoke app permissions — uninstall the app, then in phone Settings → Apps → the app → Permissions → revoke contacts/storage/SMS/camera. Run Google Play Protect scan.
5. Switch off “Install unknown apps” for any browser / file manager that allowed the APK.
6. Dial 1930 if money was deducted in the last 7 days. Get a complaint number on the spot.
7. File at cybercrime.gov.in — choose Financial fraud → Loan app fraud — within 24 hours of harassment.
8. File FIR at the nearest cyber police station within 48 hours. Carry: ID proof, bank statement, screenshots.
9. File at RBI Sachet (https://sachet.rbi.org.in) → Unregulated Lending Entity.
10. Report Play Store / App Store listing: Play → app page → ⓘ → Flag as inappropriate → Harmful or unsafe.
11. Notify your contacts — send a one-line WhatsApp blast: “I'm being harassed by a loan app fraud. If you receive any abusive call about me, ignore it. FIR filed.”

Loan app harassment is the systematic intimidation by unauthorised digital lenders — most of them not registered with the RBI as NBFCs or as Digital Lending Apps (LSPs) of an NBFC — using illegal practices the RBI's Digital Lending Guidelines, 2022 specifically prohibit:

• Contact-list harvesting without consent (banned outright).
• Calling your contacts to publicly shame you (criminal intimidation under BNS §351).
• Morphing your photos with sexual / abusive content (sexual harassment under BNS §75 + IT Act §67).
• Threatening fake legal notices, fake court summons, fake police FIRs.
• Demanding 200-500% of the principal through “processing fees, GST, late fees, recovery fees” — most illegal.
• Auto-deducting via UPI e-mandate without explicit per-transaction consent.

The same app may operate under 5–10 names. The same fraudulent group rotates through Play Store using shell company names, fake GSTIN, fake “RBI partnership” claims.

• ₹2,000 disbursed → ₹8,500 demanded in 7 days. Then 4–8 calls per hour. Photos morphed.
• Fake “company HR” call to your office — claims you are absconding from a loan.
• Telegram group of 50+ family/colleagues created with your photo + “fugitive” caption.
• Multiple apps from the same backend — you pay App A, App B starts harassment from “another lender”.
• Death-by-suicide cases: NCRB reported 100+ suicides between 2022 and 2024 directly linked to loan-app extortion. Andhra Pradesh, Telangana, Maharashtra and Tamil Nadu lead the count.

• Loans must be disbursed directly into the borrower's bank account by a regulated entity (RE) — Bank, NBFC or co-operative bank.
• Recovery agents cannot harass borrower's contacts.
• Pass-through accounts are banned — money cannot flow through a third party.
• APR (effective interest rate) must be disclosed up-front. Hidden charges are violations.
• Cooling-off period of 1 day (loans up to ₹1 lakh) — borrower can cancel without penalty.
• Default register check before disbursement.

Source: RBI/2022-23/106 dated 02 Sep 2022 + RBI Master Direction on Digital Lending, 2024.

• §318 (Cheating) — fake interest, hidden charges → up to 7 years jail.
• §308 (Extortion) — demand under threat → up to 7 years.
• §351 (Criminal intimidation) — threat calls, public shaming → up to 2 years.
• §356 (Defamation) — morphed images, false WhatsApp groups.
• §75 (Sexual harassment) — sexually coloured threats / morphed nudes → 3 years.

• §66C — identity theft → 3 years + ₹1 lakh.
• §66D — cheating by impersonation through computer → 3 years + ₹1 lakh.
• §66E — privacy violation (photo morphing without consent) → 3 years + ₹2 lakh.
• §67 — obscene material publication → 3 years + ₹5 lakh.
• §67A — sexually explicit material → 5 years + ₹10 lakh.

• Fraudulent service → District Commission complaint (under ₹50 lakh) + e-Daakhil filing free.
• Unfair Trade Practice under §2(47) — covers misrepresentation of charges.

• Contact harvesting without consent is a personal data violation — penalty up to ₹250 crore on the data fiduciary.
• Complaint at Data Protection Board of India (when fully notified) or DPO of the lending entity.

• Over 600 loan apps banned between Feb 2023 and Mar 2025 under §69A IT Act.
• Latest list: Press Information Bureau + MeitY portal.

1. Switch the phone to airplane mode for 30 minutes. The harassment stops temporarily — gives you space.
2. Open a notes app. List: app name(s), download source (Play / APK), date borrowed, principal, repaid so far, today's demand, agent numbers.
3. Take a clean screenshot of every demand SMS, every call log, every threat. Use a screenshot organiser → folder named “loan-app-evidence-[date]”.

1. Block UPI auto-debit / e-mandate: Open BHIM / GPay / PhonePe → Mandates (or Auto-pay) → cancel any registered mandate. Call your bank's helpline → ask for a written confirmation that all e-mandates against [app name] are revoked.
2. Block the agent number — both at phone level (Settings → Phone → Block) and via TRAI DND/DnD 2.0 at https://www.tafcop.dgtelecom.gov.in.
3. Do NOT repay even if they say “we will stop calling after this last instalment”.

1. NCRP (cybercrime.gov.in) — register a Loan App Fraud complaint. Use Report & Track. Save the Acknowledgement Number.
2. 1930 helpline — for active money loss in last 7 days.
3. Local cyber police station FIR under IT Act §66C/§66D/§67 + BNS §318/§351/§75.
4. RBI Sachet — file at https://sachet.rbi.org.in. Choose Unregulated Lending Entity. RBI will issue a written advisory to the bank that lent.

Send a single, factual WhatsApp / Telegram broadcast to your contacts:

“I have been targeted by an illegal loan app. Their agents may call you with false information and morphed images. Please ignore. I have filed an FIR + RBI Sachet complaint. — [Your name]”

This disarms shame attacks before they land.

1. Consumer complaint at e-Daakhil (https://edaakhil.nic.in) — claim refund of all illegal charges + compensation for harassment.
2. CIBIL dispute: if the loan was reported to credit bureaus, dispute it at https://www.cibil.com → Online Dispute. Cite RBI Digital Lending Guidelines violation.

File RTIs to track enforcement of YOUR complaint:

• To RBI — Status of action taken on Sachet complaint number [X] dated [Y] against [App name]; copy of advisory sent to the lending bank.
• To MeitY — Whether [app name + package] is on the §69A take-down list; if not, action plan and date.
• To local police — Status of FIR [number] dated [Y]; investigating officer; date of next investigation step.

Use the RTI Drafter — describes your case → produces the right RTI in 60 seconds.

1. Paying “just one more time” to make it stop. It never stops. Each payment confirms vulnerability.
2. Shouting / threatening on call. Your shouting can be used against you. Stay polite, document.
3. Deleting the app immediately. First, screenshot the full agreement, then revoke permissions, then uninstall.
4. Telling agents you “filed FIR”. They escalate before the FIR is registered. Tell them only after you have the FIR copy.
5. Trusting “recovery agents” on Telegram. They are second-stage scammers — never legitimate.
6. Ignoring CIBIL hit. Dispute fast — illegal loans must be reversed.
7. Using the same UPI / phone number to take a fresh loan. Your phone is on a fraud network — change SIM if persistent harassment.
8. Skipping RBI Sachet. It is the fastest route to bank-level intervention.

You must repay the principal if it was credited to your bank. You do not owe illegal interest, processing fees, or “recovery fees” that violate RBI Digital Lending Guidelines. After RBI Sachet adjudication, an order can be passed for full reversal including the principal in cases of unauthorised lending.

Open https://www.rbi.org.in → Sitemap → NBFCs Registered — search by app name + corporate name. Or use https://sachet.rbi.org.in → Check entity. If absent, the app is unregulated. Report it.

They cannot legally — IT Act §66E + §67 + BNS §75 + §356 make this a serious crime. They can technically broadcast to your contact list because the app harvested it. The remedy: file FIR fast (the criminal exposure stops most agents) + send the disarming WhatsApp to your contacts.

If reported, yes — but you can dispute and reverse it. File CIBIL dispute citing the RBI Sachet complaint number + FIR. CIBIL is required to investigate within 30 days under CIC Regulations.

Yes — over 100 documented cases since 2022. If you feel suicidal: dial iCall 91-9152987821 or Vandrevala 1860-2662-345 (24×7, free). You are a crime victim, not a debtor.

No. The harassment is the crime, not the loan. Show your employer the FIR + RBI Sachet complaint. If pressured, file with your State Labour Commissioner + Industrial Disputes Act, 1947.

Doesn't matter. The directors of the listed shell company are personally liable under Companies Act §166 + §447. Police can trace via the bank account that received your repayments. NCRP is the route — they coordinate with banks to freeze.

Under §175 BNSS, 2023, police must register an FIR for a cognisable offence. If they refuse, file a §175(3) BNSS complaint to the Magistrate. Online FIR (e-FIR) is available in 10+ states. Use the RTI to escalate if police delay beyond 7 days.

RBI cannot file FIR — that's police. RBI regulates lenders. Sachet complaint forces RBI to issue an advisory to the bank that disbursed to the app, which triggers internal investigation + reporting under Suspicious Transaction Report (STR) mechanism + Enforcement Directorate referral if PMLA-relevant.

Yes — through Consumer Court (District Commission) under Consumer Protection Act §2(47) as Unfair Trade Practice. Typical compensation: ₹25,000–₹2,00,000 depending on duration + visibility of harassment. Filing is free at e-Daakhil.

Apps registered under an RBI-approved NBFC: KreditBee (KrazyBee NBFC), MoneyTap (Tapworld), MoneyView (Whizdm), CASHe (Bhanix Finance), EarlySalary (Social Worth Tech). Always verify the Lender disclosure on the app's loan agreement page — it must name a regulated entity.

Report the group within WhatsApp (Settings → Report). File at NCRP → Profile / impersonation / harassment. WhatsApp is bound under DPDP §8 to remove non-consensual content within 24 hours of a verified complaint.

Yes — Indian Evidence Act §65B allows electronic records as evidence with a §65B(4) certificate by the device owner. Keep recordings on a single dedicated device, not edited.

• Cyber Crime Complaint in India — full process
• UPI Fraud Recovery — Dial 1930 + RBI 3-day rule
• Credit Card Charges — every fee explained, RBI rules
• Loan Settlement (OTS) — RBI process + CIBIL cleanup
• RTI Drafter — file an RTI to RBI / MeitY / Police
• Digital Arrest Scam — 7-minute rescue plan
• Consumer Court — file online via e-Daakhil
• Income Tax notices — when loan-app TDS hits

• RBI Digital Lending Guidelines, 2022 — https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12382
• RBI Sachet (unregulated lender complaint) — https://sachet.rbi.org.in
• National Cyber Crime Reporting Portal (NCRP) — https://cybercrime.gov.in
• MeitY ban list (PIB releases) — https://pib.gov.in
• e-Daakhil (consumer complaint) — https://edaakhil.nic.in
• CIBIL dispute portal — https://www.cibil.com/dispute
• NALSA helpline — 15100 (free legal aid).

Loan-app harassment is a crime, not a debt. The 11-step plan above stops harassment within 7 days for 70%+ of victims and recovers money for 30-50% who report within 24 hours. You are protected by RBI Digital Lending Guidelines, BNS, IT Act, DPDP Act and Consumer Protection Act simultaneously — the law is on your side. Stop paying. Document. Report. Repeat to one person who'll stand with you.

If you need to file an RTI to chase the RBI Sachet response, MeitY take-down decision, or police FIR investigation, the RTI Drafter does the drafting for you in 60 seconds.

• Reserve Bank of India — Master Direction on Digital Lending, 2024.
• Ministry of Electronics and IT (MeitY) — Section 69A take-down orders, 2023-2025.
• National Crime Records Bureau (NCRB) — Cyber crime / loan-app suicide statistics, 2022-2024.
• Bharatiya Nyaya Sanhita, 2023 — sections 75, 308, 318, 351, 356.
• Information Technology Act, 2000 — sections 66C, 66D, 66E, 67, 67A, 69A.
• Consumer Protection Act, 2019.
• Digital Personal Data Protection Act, 2023.

Last reviewed: 5 May 2026 — RTI Wiki editorial team.