📱Test our Android app — free beta!Join Beta GroupYou'll receive the install link by email after joining.

Differences

This shows you the differences between two versions of the page.


—cyber:loan-app-harassment [2026/07/10 18:22] (current) – created - external edit 127.0.0.1
Line 1: Line 1:
 +{{htmlmetatags>metatag-keywords=(fake loan app harassment India, illegal loan app report, loan app threats contacts, cybercrime 1930 complaint, RBI Sachet unauthorised lending app, loan app morphed photos, digital lending rules RBI, loan app extortion India, how to stop loan app harassment, RBI digital lending directions 2025)
 +metatag-title=(Fake Loan App Harassment: Stop & Report India 2026 — Legal Rights, Complaint Steps)&metatag-description=(Harassed by a fake loan app? Know your legal rights under RBI digital lending rules, how to report on cybercrime.gov.in and RBI Sachet, block threats, file FIR, and recover money. Updated July 2026.)
 +metatag-og:image=(https://righttoinformation.wiki/og/cyber-loan-app-harassment.webp)
 +metatag-twitter:image=(https://righttoinformation.wiki/og/cyber-loan-app-harassment.webp)}}
 +
 +====== Fake Loan App Harassment: Stop & Report 2026 ======
 +
 +{{https://righttoinformation.wiki/og/cyber-loan-app-harassment.webp?1200x675|Loan App Harassment help desk scene}}
 +
 +**Reviewed on:** 2026-07-10.
 +
 +<WRAP info>**Direct answer.** If a loan app is threatening you, accessing your contacts, or sending morphed images: stop paying any unverified "fees," call 1930 immediately, file on [[https://cybercrime.gov.in|cybercrime.gov.in]], and report the lending entity on [[https://sachet.rbi.org.in|sachet.rbi.org.in]]. RBI rules prohibit apps from accessing your contacts without consent. You have enforceable rights today.</WRAP>
 +
 +<WRAP emround box 80%>
 +**About this article — Expertise, Experience, Authoritativeness, Trust (E-E-A-T)**
 +
 +^ Field | Detail |
 +| **Reviewed by** | Dr. Shrawan Kumar Pathak, [[about:rti-team|RTI Wiki editorial team]] |
 +| **Expertise** | Indian cybercrime law, RBI digital lending regulations, consumer protection under BNS 2024 and IT Act 2000 |
 +| **Sources** | [[https://cybercrime.gov.in|cybercrime.gov.in]], [[https://sachet.rbi.org.in|sachet.rbi.org.in]], [[https://www.rbi.org.in|rbi.org.in]], [[https://i4c.mha.gov.in|i4c.mha.gov.in]], [[https://www.meity.gov.in|meity.gov.in]], [[https://sancharsaathi.gov.in|sancharsaathi.gov.in]], RBI Digital Lending Directions 2025 |
 +| **Last reviewed** | 2026-07-10 |
 +| **Accuracy note** | Cross-checked against [[https://cybercrime.gov.in|National Cyber Crime Reporting Portal]] and [[https://www.rbi.org.in|RBI digital lending guidelines]]. RBI is the authoritative source for NBFC and digital lending regulation — verify any lender independently at rbi.org.in. |
 +</WRAP>
 +
 +{{tag>loan-app-harassment fake-loan-app cybercrime-1930 rbi-sachet digital-lending morphed-photos recovery-agent extortion cyber-fraud unauthorised-nbfc rbi-ombudsman rti-cybercrime loan-app-threats}}
 +
 +===== A Scene Many People Recognise =====
 +
 +It is 6 a.m. when the first message arrives. Not to you. To your boss. Your sister. A neighbour you called twice in your life. The message carries a morphed photograph and a caption that says you are a defaulter, a criminal, a fraud. Within the hour, two dozen people in your contact list have received the same message.
 +
 +You borrowed five thousand rupees ten days ago from an app you downloaded from a link in a WhatsApp group. The app promised instant disbursal, no questions. It delivered. It also, silently, uploaded every name and number in your phone. Now it is using that list as a weapon.
 +
 +This is the standard playbook of an unauthorised loan app. The harassment is not incidental. It is the product. Understanding that changes how you fight back. For a structured guide on how loan apps weaponise your contacts, see [[loan-app-threatening-contacts-india|loan app threatening contacts: what to do]].
 +
 +===== What RBI Rules Actually Prohibit =====
 +
 +The Reserve Bank of India issued the Digital Lending Directions in 2022 (updated in 2025), which bind every Regulated Entity (RE) and Lending Service Provider (LSP) operating in India. These directions are enforceable law, not advisories. You can read the full RBI digital lending guidelines at [[https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12382&Mode=0|RBI Circular on Digital Lending Guidelines]] and the updated directions at [[https://www.rbi.org.in|rbi.org.in]].
 +
 +**What an app is prohibited from doing:**
 +
 +  * Accessing your contacts, call logs, or media files without your explicit consent. Even with consent, the app may use device data only for the stated purpose during onboarding and KYC. It cannot store or share contact data beyond operational need.
 +  * Charging any fee that was not disclosed in the Key Fact Statement (KFS) before you accepted the loan. Learn more about [[key-fact-statement-kfs-loan-india|the Key Fact Statement (KFS) and your loan rights]].
 +  * Disbursing money through any account other than the borrower's own bank account. If the app sent money via a wallet or third-party app and you never saw a proper sanction letter, this is a red flag for an unauthorised operator.
 +  * Using recovery agents who resort to harassment, abuse, or public shaming. Lenders must communicate recovery agent details to borrowers at loan sanction. An agent who never identified themselves lawfully is not operating under any legitimate authorisation. See [[recovery-agent-harassment-complaint-guide-india|the recovery agent harassment complaint guide]] for your rights.
 +
 +**What you are legally entitled to:**
 +
 +  * A Key Fact Statement before signing, which must include the Annual Percentage Rate (APR), all fees, and a cooling-off period.
 +  * A cooling-off period of at least 3 days for loans longer than 7 days, during which you can repay only the principal plus proportionate APR and exit without any penalty.
 +  * A nodal grievance officer at the lender's end, reachable by name and contact. If no grievance officer was ever disclosed to you, the entity is either non-compliant or unauthorised.
 +  * Escalation to the RBI Ombudsman if your complaint is not resolved within 30 days. See [[banking-ombudsman-complaint-guide-india|the banking ombudsman complaint guide]] for step-by-step instructions.
 +
 +If the app did not give you a KFS, disbursed to a wallet rather than a bank account, or cannot name a grievance officer, it is almost certainly not a Regulated Entity under RBI. It may be operating entirely outside the law.
 +
 +===== How to Identify a Fake Loan App Before You Borrow? =====
 +
 +Fake loan apps share common red flags that distinguish them from RBI-authorised digital lenders. Before installing any lending app, check these warning signs:
 +
 +  - **No NBFC partner disclosed**: A legitimate app must name the RBI-registered NBFC or bank that is the actual lender. If the app says "we lend directly" without naming a registered entity, it is likely unauthorised.
 +  - **Excessive permissions on install**: The app demands access to contacts, call logs, gallery, location, and camera before you even apply. RBI rules restrict data access to KYC purposes only — see [[fake-apk-installation-scam-india|fake APK installation scams]] for how malicious apps exploit permissions.
 +  - **Disbursal to wallet or UPI instead of bank account**: RBI mandates direct disbursal to the borrower's bank account. An app sending money to a Paytm wallet or via UPI to a third party is violating core lending rules.
 +  - **No Key Fact Statement**: The KFS is mandatory before loan acceptance. If the app does not show a standardised KFS with APR, tenure, and all charges, do not proceed.
 +  - **Seven-day loan with exorbitant fees**: Legitimate lenders rarely offer sub-7-day loans. If the app offers a 7-day loan with a processing fee of 30-40%, the effective APR is astronomical and the app is designed for harassment-based recovery.
 +  - **No physical address or grievance officer**: RBI requires lending apps to display a registered office address and a named grievance officer. If neither is visible, report the app immediately.
 +  - **Downloaded from a link, not the official store**: Apps shared via WhatsApp links, Telegram channels, or APK download sites bypass Play Store review. These are the most dangerous variants. Read about [[report-fake-mobile-apps-india|how to report fake mobile apps]] and [[fake-app-installed-phone-removal-bank-india|how to remove fake apps from your phone]].
 +
 +To verify whether a lending app is genuinely RBI-registered, use our guide: [[check-loan-app-rbi-registered-2026|how to check if a loan app is RBI registered]] or check the [[rbi-digital-lending-app-directory-verify-loan-app|RBI digital lending app directory]].
 +
 +===== What Types of Harassment Do Loan Apps Use? =====
 +
 +Loan app harassment is not a single tactic. It is a multi-layered strategy designed to maximise fear and social pressure. Understanding which type you are experiencing helps you choose the right complaint channel and legal section.
 +
 +^ Harassment Type ^ What Happens ^ Legal Section Violated ^ Where to Report ^
 +| **Contact list bombardment** | App sends defamatory messages to everyone in your phonebook calling you a "fraud" or "defaulter" | IT Act §43, §66; BNS §351 (criminal intimidation) | cybercrime.gov.in + local police FIR |
 +| **Morphed/obscene photos** | Your photo is edited onto obscene images and circulated to contacts | IT Act §67 (obscene material); BNS §296 (obscene acts) | cybercrime.gov.in (Other Cyber Crime) |
 +| **Threatening calls at odd hours** | Recovery agents call from VoIP numbers at 2-4 a.m. using abusive language | BNS §351 (criminal intimidation), §352 (intentional insult) | Police FIR + [[https://sachet.rbi.org.in|RBI Sachet]] |
 +| **Fake legal notices** | App sends a fake "legal notice" via WhatsApp claiming court action | BNS §336 (forgery), §338 (cheating) | cybercrime.gov.in + [[fake-legal-notice-recovery-agent-india|check if a legal notice is fake]] |
 +| **Public shaming on social media** | App posts defamatory content about you on Facebook, Instagram, or WhatsApp groups | BNS §356 (defamation); IT Act §66D | cybercrime.gov.in + platform report |
 +| **Threats to family members** | Agents threaten your spouse, parents, or children with violence or exposure | BNS §351, §308 (extortion) | Police FIR immediately |
 +| **WhatsApp status abuse** | App puts your photo on WhatsApp status with "FRAUD" or "THIEF" label | BNS §356 (defamation); IT Act §67 | [[https://cybercrime.gov.in|cybercrime.gov.in]] + report to WhatsApp |
 +| **Demand for extortion payments** | After you repay, app demands additional "settlement" or "cancellation" fees | BNS §308 (extortion); IT Act §43 | cybercrime.gov.in + Police FIR |
 +
 +<WRAP tip>**Key takeaway:** Every harassment type above is a criminal offence, not merely a civil dispute. Filing on [[https://cybercrime.gov.in|cybercrime.gov.in]] creates a formal record, and a police FIR enables investigation into the operators behind the app.</WRAP>
 +
 +===== Step 1: Do Not Pay Any More "Settlement Fees" =====
 +
 +Harassment escalates when victims make small payments to make the calls stop. Each payment confirms that the tactic works, and the demand grows. Do not transfer money to an app demanding a "settlement fee," "processing charge," or "legal fee" that was not part of your original loan agreement.
 +
 +If you genuinely borrowed money and owe a lawful amount, that obligation does not disappear. But the obligation is only to the amount stated in the agreement, not to extortion-layer fees invented by an unlicensed operator. Understand the difference between [[penal-charges-vs-penal-interest-rbi-rules-loans|penal charges vs penal interest under RBI rules]] and when you can demand an [[loan-penal-charges-rbi-refund-complaint-india|RBI refund for illegal loan charges]].
 +
 +===== Step 2: Screenshot and Preserve Evidence =====
 +
 +Before you block anything, document everything:
 +
 +  - Screenshot every threatening message, call log entry, and social media post targeting you.
 +  - Record the full name of the app, the version, the Google Play or App Store URL if it is still live, and the screenshots of its permissions screen.
 +  - Note the phone numbers from which calls were made. Many use VoIP numbers that still carry metadata useful for investigation.
 +  - Download a copy of the loan agreement if the app emailed you one. If it never sent a signed agreement, document that absence.
 +  - Save the morphed images or defamatory messages sent to your contacts — these are critical evidence under IT Act Section 67.
 +
 +Evidence gathered before blocking is admissible. Evidence gathered afterwards is harder to reconstruct. If your photos were misused, also read [[photos-misuse-fake-ads-profiles-takedown-india|how to take down misuse of your photos online]] and [[deepfake-blackmail-recovery|deepfake blackmail recovery steps]].
 +
 +===== Step 3: Call 1930 and File on cybercrime.gov.in =====
 +
 +The National Cyber Crime Helpline **1930** is the fastest first response. Call it and report the harassment. The operator will log your complaint and may initiate a hold on further fraudulent transactions if financial fraud is involved alongside the harassment. For a detailed script on what to say when you call, read [[1930-helpline-cyber-fraud-script|the 1930 helpline call script]].
 +
 +After calling, file a written complaint on [[https://cybercrime.gov.in|cybercrime.gov.in]]:
 +
 +  - Select "Financial Fraud" as the complaint category (or "Other Cyber Crime" if the harassment is purely defamation/morphed images without financial fraud).
 +  - Use "Register and Track" so you receive a complaint reference number. This number is essential for follow-up.
 +  - Attach your screenshots, the app name, and the phone numbers used for harassment.
 +
 +Your complaint on cybercrime.gov.in routes to the State Cyber Crime Cell for investigation. You will receive an acknowledgement, and the complaint is trackable. You can check progress via [[check-status:cybercrime-complaint-status|your cybercrime complaint status]] or file an [[rti-for-cybercrime-complaint-status|RTI for cybercrime complaint status]] if the investigation stalls.
 +
 +If you have already lost money to the app, also read the [[cyber/report-cyber-fraud-1930|complete guide to reporting cyber fraud via 1930]] for steps to freeze fraudulent transactions. For broader recovery options, see [[recover-money-upi-fraud-2026|how to recover money after UPI fraud]] and [[rbi-digital-fraud-compensation-25000-2026|RBI's Rs 25,000 digital fraud compensation]].
 +
 +===== Step 4: Report the Lending Entity on RBI Sachet =====
 +
 +For every loan app that is either unauthorised by RBI or violating the Digital Lending Directions, report directly on [[https://sachet.rbi.org.in|sachet.rbi.org.in]]. Sachet is RBI's platform for complaints about entities operating in the financial sector without proper authorisation or in breach of RBI norms.
 +
 +File a complaint on Sachet for:
 +
 +  * An app disbursing loans without being an RBI Regulated Entity or an NBFC licensed under RBI.
 +  * An app accessing your contact list or sending messages to third parties.
 +  * An app charging fees not disclosed in any agreement.
 +  * Recovery agents using threats or public shaming.
 +
 +Keep your Sachet complaint reference number. If RBI takes action against the entity, your complaint becomes part of the regulatory record. If Sachet does not resolve your complaint within 30 days, escalate to the [[complaints:banking-ombudsman|Banking Ombudsman]] or the [[banking-ombudsman-complaint-guide-india|RBI Integrated Ombudsman Scheme]]. For complaints where the RBI Ombudsman has already rejected your case, see [[rbi-ombudsman-complaint-closed-rejected-next-steps-india|what to do when your RBI Ombudsman complaint is rejected]].
 +
 +===== Step 5: Escalate to the State Cyber Cell and File a Police FIR =====
 +
 +Online complaints do not replace a formal First Information Report. Visit your nearest police station or the State Cyber Crime Cell and:
 +
 +  - Present the screenshots and your cybercrime.gov.in reference number.
 +  - Ask for an FIR under the Information Technology Act (especially Section 66C for identity theft and Section 67 for transmitting obscene material if morphed images were used).
 +  - Ask for an FIR under Indian Penal Code / Bharatiya Nyaya Sanhita for criminal intimidation if explicit threats were made.
 +  - If you need to file the complaint entirely online without visiting a police station, read [[cyber-crime-complaint-india|the complete cyber crime complaint guide]] and [[cybercrime-portal-vs-police-station-india|cybercrime portal vs police station — which to choose]].
 +
 +A registered FIR enables the police to request data from the platform or telecom operator under lawful process, which is the primary tool for unmasking anonymous harassment numbers. To download an existing FIR copy, see [[download-fir-copy-online-2026|how to download your FIR copy online]].
 +
 +If the app also tricked you with false promises about loan terms, the digital arrest scam playbook may overlap. Read the guide on [[cyber/digital-arrest-scam|digital arrest scams]] for additional protection steps.
 +
 +===== Step 6: Report to Your Bank if You Shared Banking Credentials =====
 +
 +Some loan apps request access to your banking app, UPI PIN, or OTP as a "verification step." If you shared any such credentials:
 +
 +  * Call your bank's 24x7 helpline immediately and report a suspected compromise.
 +  * Request a temporary block on your account or UPI handle until the risk is assessed.
 +  * File a complaint with the [[complaints:banking-ombudsman|Banking Ombudsman]] if your bank is unresponsive or a fraudulent transaction has occurred and is not being reversed.
 +
 +The RBI Ombudsman can order restitution for fraudulent transactions where the bank failed to act promptly after being notified. If your bank account has been frozen as part of a cyber fraud investigation, read [[bank-freeze-cyber-fraud-india|bank account freeze due to cyber fraud]] and [[freeze-account-after-fraud-bank-process|the bank's process for freezing accounts after fraud]].
 +
 +If your bank refuses to refund under the zero-liability framework, escalate using [[bank-refused-cyber-fraud-refund-zero-liability-india|the bank-refused-refund escalation guide]]. For UPI-specific fraud recovery, see [[upi-fraud-recovery-india|UPI fraud recovery steps]].
 +
 +===== Which Government Agencies Handle Loan App Harassment? =====
 +
 +Loan app harassment falls under the jurisdiction of multiple agencies. Knowing which agency handles what helps you file complaints to the right authority and avoid wasted time.
 +
 +^ Agency ^ Role ^ Where to Complain ^
 +| **National Cyber Crime (I4C/MHA)** | Investigates digital fraud, coordinates with State Cyber Cells, runs 1930 helpline and NCRP | [[https://cybercrime.gov.in|cybercrime.gov.in]] |
 +| **Indian Cyber Crime Coordination Centre (I4C)** | MHA's apex body for cybercrime coordination, threat analysis, and citizen awareness | [[https://i4c.mha.gov.in|i4c.mha.gov.in]] |
 +| **Reserve Bank of India** | Regulates NBFCs and digital lending; takes action against unauthorised entities via Sachet | [[https://sachet.rbi.org.in|sachet.rbi.org.in]] |
 +| **RBI Integrated Ombudsman** | Adjudicates customer disputes against RBI-regulated entities (30-day escalation) | [[https://www.rbi.org.in|rbi.org.in]] → Ombudsman |
 +| **Ministry of Electronics & IT (MeitY)** | Directs app takedowns from Google Play and Apple App Store; digital policy | [[https://www.meity.gov.in|meity.gov.in]] |
 +| **Sanchar Saathi (DoT)** | Reports and blocks fraudulent phone numbers/SIMs used for harassment | [[https://sancharsaathi.gov.in|sancharsaathi.gov.in]] |
 +| **State Cyber Crime Cell** | Investigates FIRs, requests telecom data, conducts raids on illegal operators | Local police station or State Cyber Cell |
 +| **Press Information Bureau (PIB)** | Publishes enforcement actions and public advisories on loan app scams | [[https://pib.gov.in|pib.gov.in]] |
 +
 +<WRAP info>If you received threatening or defamatory messages from loan app operators via email, also read [[email-misuse-loans-apps-deliveries-complaint-india|how to complain about email misuse by loan apps]]. To report the specific phone numbers used by harassment agents, see [[report-scam-call-number-2026|how to report scam calls and numbers]].</WRAP>
 +
 +===== How to Check if an App is Authorised =====
 +
 +Before borrowing from any digital lending app, verify:
 +
 +  - The app must name an RBI-Regulated Entity (bank or NBFC) that is the actual lender. Check that the NBFC is registered on the RBI website at [[https://www.rbi.org.in|rbi.org.in]] under "List of NBFCs." Our guide [[check-loan-app-rbi-registered-2026|how to check if a loan app is RBI registered]] walks through this step by step.
 +  - The app must provide a physical address and a grievance officer's name and contact in-app or in the agreement.
 +  - The loan must be disbursed to your bank account, not a wallet, not cash.
 +  - The app must provide a signed loan agreement and KFS before disbursing. See [[key-fact-statement-kfs-loan-india|everything you need to know about the Key Fact Statement]].
 +
 +If any of these are missing, do not proceed. Report the app on [[https://sachet.rbi.org.in|sachet.rbi.org.in]] even if you have not borrowed from it yet. Reporting prevents others from being trapped. You can also check the [[rbi-digital-lending-app-directory-verify-loan-app|RBI digital lending app directory]] for authorised apps.
 +
 +===== What Legal Sections Apply to Loan App Harassment? =====
 +
 +Loan app harassment triggers multiple criminal provisions under both the Bharatiya Nyaya Sanhita (BNS) 2024 and the Information Technology Act 2000. Knowing these sections helps you insist on specific charges when filing your FIR.
 +
 +^ Statute ^ Section ^ Offence ^ Penalty ^
 +| **BNS 2024** | §318 | Cheating (false promises about loan terms) | Up to 7 years imprisonment + fine |
 +| **BNS 2024** | §308 | Extortion (demanding additional "settlement fees") | Up to 7 years imprisonment + fine |
 +| **BNS 2024** | §351 | Criminal intimidation (threats to you or family) | Up to 7 years imprisonment + fine |
 +| **BNS 2024** | §356 | Defamation (sending defamatory messages to contacts) | Up to 2 years imprisonment + fine or community service |
 +| **BNS 2024** | §296 | Obscene acts/songs (circulating morphed obscene images) | Up to 3 months imprisonment or fine |
 +| **IT Act 2000** | §43 | Unauthorised access to computer/data (accessing contacts without consent) | Damages up to Rs 1 crore |
 +| **IT Act 2000** | §66 | Computer-related offences (dishonestly accessing data) | Up to 3 years imprisonment + fine |
 +| **IT Act 2000** | §66C | Identity theft (misusing borrower's personal data) | Up to 3 years imprisonment + Rs 1 lakh fine |
 +| **IT Act 2000** | §66D | Cheating by personation (impersonating borrower online) | Up to 3 years imprisonment + fine |
 +| **IT Act 2000** | §67 | Transmitting obscene material (morphed images sent to contacts) | Up to 3 years + fine (first conviction) |
 +| **DPDP Act 2023** | §27 | Unauthorised processing of personal data (contacts, photos) | Up to Rs 250 crore penalty |
 +
 +<WRAP alert>When filing your FIR, cite all applicable sections from the table above. Police officers may not automatically include IT Act sections alongside BNS sections — insist on a comprehensive FIR to ensure the strongest possible case against the operators.</WRAP>
 +
 +===== Can I Recover Money Paid to a Fake Loan App? =====
 +
 +Yes, recovery is possible especially if you act quickly. The key principle is the **golden hour** — the first 30-60 minutes after a fraudulent transaction where banks can freeze the destination account before funds are withdrawn.
 +
 +**Recovery timeline for money paid to fake loan apps:**
 +
 +^ Time since payment ^ Approximate recovery rate ^ Action still available ^
 +| **Within 30 minutes** | 60-70% | Call 1930 immediately; bank can freeze destination account |
 +| **30 minutes – 2 hours** | 40-50% | File on cybercrime.gov.in + call bank + 1930 simultaneously |
 +| **2 hours – 24 hours** | 20-30% | Bank complaint + cybercrime.gov.in + FIR; bank may reverse if account still frozen |
 +| **After 24 hours** | <10% | FIR investigation; recovery through police asset tracing or court order |
 +
 +Read the complete guides: [[golden-hour-zero-liability-cyber-fraud-rbi-india|the golden hour zero-liability framework]] and [[recover-money-upi-fraud-2026|how to recover money after UPI fraud]]. If the payment was made via UPI to a wrong account or fraudulent merchant, see [[recover-money-wrong-bank-account-india|recovering money from a wrong bank account]].
 +
 +If your complaint was closed without refund, escalate using [[practical-guides/upi-fraud-complaint-closed-without-refund-escalation|UPI fraud complaint closed without refund — escalation steps]].
 +
 +===== How to Protect Your Contacts and Photos from Misuse? =====
 +
 +Preventing loan apps from weaponising your personal data is better than recovering after the fact. Take these protective measures:
 +
 +  - **Never grant contact access to any lending app.** RBI rules already prohibit this — if an app refuses to proceed without contact access, it is a red flag. Read [[fake-apk-installation-scam-india|how fake APKs exploit app permissions]].
 +  - **Revoke permissions after install.** Go to Settings → Apps → [Loan App] → Permissions and disable Contacts, Call Logs, Camera, and Storage.
 +  - **Use Android's "Nearby Share off" and "Install unknown apps blocked"** settings to prevent APK sideloading from WhatsApp or Telegram links.
 +  - **Report your phone number to Sanchar Saathi** if SIM misuse is suspected: [[https://sancharsaathi.gov.in|sancharsaathi.gov.in]] lets you check SIMs linked to your Aadhaar and block unauthorised connections.
 +  - **If morphed photos are circulating**, file a takedown request. See [[photos-misuse-fake-ads-profiles-takedown-india|how to remove misused photos from online platforms]] and [[deepfake-blackmail-recovery|deepfake blackmail recovery]].
 +  - **Pre-notify close contacts** that they may receive defamatory messages and should ignore/report them. This reduces the social damage the app relies on.
 +  - **If the harassment extends to cyberstalking**, read [[stalking-cyberstalking-bns-section-78|stalking and cyberstalking under BNS Section 78]] and [[cyberbullying-complaint-guide-india|the cyberbullying complaint guide]].
 +
 +===== Step 7: Report to Google Play, App Store, and MeitY =====
 +
 +You can get a fake loan app removed from the Play Store or App Store, cutting off its victim pipeline:
 +
 +  - **Google Play**: Open the app's Play Store page → tap "Flag as inappropriate" → select "Harmful or dangerous" or "Impersonation."
 +  - **Apple App Store**: Use the "Report a Problem" feature on the app's page.
 +  - **MeitY takedown**: The Ministry of Electronics and Information Technology has the power to direct Google and Apple to take down apps that violate Indian law. Your cybercrime.gov.in complaint triggers this channel. Report at [[https://www.meity.gov.in|meity.gov.in]].
 +  - **Sanchar Saathi**: Report the phone numbers used by the app's recovery agents at [[https://sancharsaathi.gov.in|sancharsaathi.gov.in]] for blocking.
 +
 +When enough users report an app, the platform removes it. Your report protects future victims.
 +
 +===== What if the App Claims It Is Registered with RBI? =====
 +
 +Verify independently. Search the NBFC list on [[https://www.rbi.org.in|rbi.org.in]] using the entity name. Authorised digital lenders are also required to display their RE partner's name and CIN in their app and in the loan agreement. A claim of RBI registration without a verifiable NBFC name is a fabrication. Report via Sachet.
 +
 +Also check our guides: [[check-loan-app-rbi-registered-2026|how to verify if a loan app is RBI registered]] and the [[rbi-digital-lending-app-directory-verify-loan-app|RBI digital lending app directory]]. If the app claimed NBFC backing that turns out to be false, this is an additional cheating charge under BNS §318.
 +
 +===== Loan App Harassment vs Other Cyber Scams: How Does It Compare? =====
 +
 +Loan app harassment is one of several cyber fraud variants that use psychological pressure to extract money. Understanding the differences helps you identify the exact threat and find the right recovery guide.
 +
 +^ Scam Type ^ Primary Medium ^ Typical Amount ^ Common Target ^ First Action ^
 +| **Loan App Harassment** | Loan app + WhatsApp/SMS to contacts | Rs 2,000–Rs 50,000 | Anyone needing quick cash | Call 1930 + file on cybercrime.gov.in |
 +| [[digital-arrest-scam-india|Digital Arrest Scam]] | WhatsApp/Skype video call posing as police/CBI | Rs 50,000–Rs 10,00,000 | Professionals, seniors | Hang up; verify with local police |
 +| [[dating-app-blackmail-scam-30-min-india|Dating App Blackmail]] | Dating app + screen recording | Rs 5,000–Rs 2,00,000 | Men on dating apps | Do not pay; call 1930 |
 +| [[sextortion-scam-recovery-india|Sextortion Scam]] | Social media + morphed video | Rs 10,000–Rs 5,00,000 | Men with social media presence | Call 1930; do not pay |
 +| [[matrimonial-blackmail-scam-india|Matrimonial Blackmail]] | Matrimony site + personal photos | Rs 20,000–Rs 5,00,000 | People on matrimony platforms | File cybercrime complaint |
 +| [[deepfake-blackmail-recovery|Deepfake Blackmail]] | AI-generated morphed images/video | Rs 50,000–Rs 10,00,000 | Public figures, professionals | Report on cybercrime.gov.in |
 +| [[fake-lottery-scam-india|Fake Lottery Scam]] | SMS/WhatsApp + phishing link | Rs 500–Rs 50,000 processing fee | General public | Do not pay; report on 1930 |
 +| [[fake-customer-care-number-scam-india|Fake Customer Care Scam]] | Google search + UPI payment | Variable | Anyone searching for helpline numbers | Never share OTP; report |
 +| [[electricity-bill-scam-whatsapp-sms|Electricity Bill Scam]] | WhatsApp/SMS + disconnection threat | Rs 1,000–Rs 10,000 | Households | Verify on official portal |
 +
 +<WRAP tip>**The common thread:** Every scam above relies on fear, urgency, and social pressure. The universal first response is: **stop, don't pay, call 1930, and file on cybercrime.gov.in.** The sooner you act, the higher your recovery rate.</WRAP>
 +
 +===== Frequently Asked Questions =====
 +
 +==== Can a loan app legally access my phone contacts? ====
 +
 +No. Under RBI's Digital Lending Directions, a lending app cannot access your contact list, call logs, or media without your explicit consent. Even where you did grant consent during installation, the app can only use device data for the stated purpose such as KYC onboarding. Using your contact list to send harassment messages to third parties is both a breach of RBI rules and potentially an offence under the Information Technology Act and the DPDP Act 2023.
 +
 +==== I already paid extra money to stop the calls. Can I recover it? ====
 +
 +Payments made under coercion or fraud are recoverable in law, but recovery depends on tracing the operator. File a complaint with 1930 and on cybercrime.gov.in with full transaction details. The bank may be able to initiate a dispute or freeze if the payment was made recently to an identifiable account. The RBI Ombudsman can also be approached via [[complaints:banking-ombudsman|Banking Ombudsman]] if your bank does not cooperate with a reversal request. See [[rbi-digital-fraud-compensation-25000-2026|RBI's Rs 25,000 digital fraud compensation]] and [[golden-hour-zero-liability-cyber-fraud-rbi-india|the golden hour zero-liability framework]] for your rights.
 +
 +==== The app says it will take "legal action" if I do not pay. Is this real? ====
 +
 +Threats of legal action from an unauthorised lender carry no legal force. A genuine creditor files a civil suit or approaches a tribunal. They do not threaten borrowers on WhatsApp at 2 a.m. using borrowed photographs. If the entity is not a licensed NBFC or bank partner, it cannot initiate court proceedings in its own name as a lender. Report the threat as criminal intimidation in your FIR. To verify if a legal notice is genuine, see [[fake-legal-notice-recovery-agent-india|how to check if a legal notice from a recovery agent is fake]].
 +
 +==== My employer or family members received messages. What can they do? ====
 +
 +They can file their own complaint on cybercrime.gov.in for receiving unsolicited, defamatory, or threatening messages. Their complaints strengthen the aggregate case against the operator. If morphed images were sent, Section 67 of the Information Technology Act makes the transmission itself an offence regardless of whether the target has an existing loan relationship with the app. For defamation-specific action, read [[defamation-legal-notice-case-process-india|the defamation legal notice and case process]].
 +
 +==== Can I get the app removed from the Play Store or App Store? ====
 +
 +Yes. Report the app on Google Play or Apple App Store using the "Flag as inappropriate" or "Report app" function. Also report the app URL to the Ministry of Electronics and Information Technology through the Cybercrime portal. MEITY has the power to direct Google and Apple to take down apps that violate Indian law. Your cybercrime.gov.in complaint triggers this channel.
 +
 +==== What if the app claims it is registered with RBI? ====
 +
 +Verify independently. Search the NBFC list on [[https://www.rbi.org.in|rbi.org.in]] using the entity name. Authorised digital lenders are also required to display their RE partner's name and CIN in their app and in the loan agreement. A claim of RBI registration without a verifiable NBFC name is a fabrication. Report via Sachet.
 +
 +==== Will filing a complaint stop the harassment immediately? ====
 +
 +Not always instantly. The police or Cyber Cell investigation takes time. However, several things happen quickly: 1930 may be able to coordinate a hold on transactions; the lender's harassment is itself evidence in a criminal complaint which increases risk for them; and RBI action on Sachet can trigger suspension of the entity's operations. Block the numbers, restrict social media sharing, and notify your contacts not to respond to messages from the app.
 +
 +==== How long does the RBI take to act on a Sachet complaint? ====
 +
 +RBI typically acknowledges Sachet complaints within 7 working days and aims to resolve them within 30 days. If the entity is found to be unauthorised, RBI can issue a cease-and-desist order and direct the platform to remove the app. If your Sachet complaint is not resolved within 30 days, escalate to the RBI Integrated Ombudsman via [[banking-ombudsman-complaint-guide-india|the banking ombudsman complaint guide]].
 +
 +==== Can I file a consumer court case against a loan app? ====
 +
 +Yes. If the app charged hidden fees, misrepresented loan terms, or engaged in unfair trade practices, you can file a consumer complaint under the Consumer Protection Act 2019. The District Commission handles claims up to Rs 50 lakh. Read [[consumer-court-how-to-file-india|how to file a consumer court case]] and file online via [[edaakhil-online-consumer-commission-filing-india|e-Daakhil online consumer commission filing]].
 +
 +==== Can I file RTI against the Cyber Cell for inaction on my complaint? ====
 +
 +Yes. If your cybercrime.gov.in complaint has been pending for more than 3 months without update, you can file an RTI application asking for the investigation status. See [[rti-for-cybercrime-complaint-status|the RTI guide for cybercrime complaint status]] and use our [[check-status:cybercrime-complaint-status|cybercrime complaint status checker]].
 +
 +==== What should I do if my bank account was frozen after a loan app complaint? ====
 +
 +If your bank account was frozen as part of a cyber fraud investigation triggered by a loan app complaint, this is a temporary measure while the bank verifies the transactions. Read [[bank-freeze-cyber-fraud-india|what to do when your bank account is frozen due to cyber fraud]] and [[freeze-account-after-fraud-bank-process|the bank's freeze process explained]]. If the freeze is not lifted within a reasonable time, file a complaint with the Banking Ombudsman.
 +
 +==== Are education loan harassment and personal loan app harassment the same? ====
 +
 +No. Education loan harassment typically involves banks or NBFCs that are RBI-regulated but use aggressive recovery tactics against students or parents. Personal loan app harassment involves unauthorised apps that may not be RBI-regulated at all. The complaint channels differ. For education loan harassment, see [[education-loan-harassment-recovery-india|education loan harassment recovery]] and [[education-loan-nbfc-rights-grievance-rbi-ombudsman-india|NBFC education loan rights]]. For recovery agent harassment from a legitimate bank, read [[recovery-agent-harassment-complaint-guide-india|the recovery agent harassment guide]].
 +
 +===== File an RTI =====
 +
 +**File an RTI to:** //the State Cyber Cell and RBI (Sachet portal) for the lending entity//
 +
 +Ask:
 +  * What is the current status of my cybercrime complaint bearing reference number [number] filed on [date] against loan app [name]?
 +  * Is the entity named [name] registered as an NBFC or partner of any RBI Regulated Entity for digital lending as of [date]?
 +  * How many complaints have been received against the digital lending app [name] or its associated NBFC on the Sachet portal in the last 12 months?
 +  * What action has been taken by the State Cyber Crime Cell against loan apps operating without RBI authorisation in [state] in the current financial year?
 +  * What is the timeline prescribed for investigating and resolving a harassment complaint filed against an unregistered digital lending entity?
 +  * How many unauthorised digital lending apps have been identified and blocked by the I4C in the current financial year?
 +
 +→ **[[https://righttoinformation.wiki/tools/ai-rti-draft-app.html|Use our free AI RTI Drafter]]** to generate a complete Section 6(1) application.
 +
 +Also consider escalating your grievance via [[complaints:cpgrams-complaint|CPGRAMS]] to the Ministry of Home Affairs (for cybercrime response) or the Ministry of Finance (for RBI enforcement).
 +
 +===== Sources =====
 +
 +  * [[https://cybercrime.gov.in|National Cyber Crime Reporting Portal]] - cybercrime.gov.in (Helpline 1930 confirmed on portal; complaint categories: Financial Fraud, Other Cyber Crime; updated 10/07/2026)
 +  * [[https://i4c.mha.gov.in|Indian Cyber Crime Coordination Centre (I4C)]] - i4c.mha.gov.in (MHA apex body for cybercrime coordination; confirmed live 10/07/2026)
 +  * [[https://sachet.rbi.org.in|RBI Sachet Portal]] - sachet.rbi.org.in (File a Complaint and Track Complaint functions confirmed live; covers RBI-regulated entities including NBFCs)
 +  * [[https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12382&Mode=0|RBI Circular on Digital Lending Guidelines]] - RBI/2022-23/111, dated 02 September 2022 (Key Fact Statement, cooling-off period, contact access prohibition, fund disbursal rules, grievance officer requirement, 30-day escalation window; note: subsequently superseded by RBI Digital Lending Directions, May 2025)
 +  * [[https://www.rbi.org.in|Reserve Bank of India]] - rbi.org.in (NBFC list for verification of authorised digital lenders)
 +  * [[https://www.meity.gov.in|Ministry of Electronics and Information Technology]] - meity.gov.in (App takedown authority; digital policy and intermediary compliance)
 +  * [[https://sancharsaathi.gov.in|Sanchar Saathi (DoT)]] - sancharsaathi.gov.in (Report and block fraudulent phone numbers/SIMs; check SIMs linked to your Aadhaar)
 +  * [[https://pib.gov.in|Press Information Bureau]] - pib.gov.in (Enforcement action data and public advisories on loan app scams)
 +
 +//By Dr. Shrawan Kumar Pathak//