Fake Loan Approval Scam: Recovery 2026
Search intent: Emergency / Recovery / Legal
You applied (or just got a call) for a “pre-approved instant loan” of ₹2 lakh - ₹50 lakh. The “NBFC officer” asked for: ₹1,500 processing fee, then ₹3,500 GST, then ₹8,500 insurance premium, then ₹15,000 “clearing fee”. Each time you paid, the “loan” was almost-approved. Total paid: ₹50,000 - ₹3 lakh. The loan never came; the company / app vanished. You are a victim of an advance-fee loan scam — pure variant of the '419' scam. Real RBI-registered NBFCs NEVER demand fees upfront. Under IT Act §66D + BNS §318 + §319 + RBI Master Direction on Digital Lending 2022 (revised 2024), recovery is via 1930 + NCRP + RBI Sachet + bank chargeback + FIR. Speed of 1930 is decisive — most mule accounts are emptied within hours.
✅ What To Do In The Next 30 Minutes
- 🚨 Dial 1930 with all transaction references.
- 🛑 Stop paying further — every fee is a fresh scam stage.
- 🔴 Screenshot everything — caller's number, claimed NBFC name, app screenshots, UPI ID, every transaction.
- 🟡 Verify NBFC at RBI Sachet — sachet.rbi.org.in. Real NBFCs are listed.
- 🟡 Check digital lending list at RBI/MeitY — apps in the MeitY ban list are illegal.
- 🟢 File NCRP at cybercrime.gov.in under Investment Fraud → Loan Scam.
- 🟢 Bank fraud line + dispute filing.
📋 In This Guide
| Section | Content |
| — | — |
| Quick Answer | Authorities + escalation |
| Quick Action Steps | Printable checklist |
| What Are Your Rights | A/B/C breakdown |
| Real-World Patterns | 5 case studies |
| Legal Framework | RBI digital lending, BNS, IT Act |
| Step-by-Step Process | 9 steps |
| State-Wise Variations | Cyber cells |
| Sample Complaint Email | Template |
| Documents Required | Checklist |
| Common Mistakes | What to avoid |
| FAQs | 14 questions |
| When to Hire Lawyer | Triggers |
| Compensation | Routes |
| Important Numbers + Tools | Resources |
Quick Answer
- Within 30 minutes: 1930 + RBI Sachet check.
- Within 24 hours: NCRP + bank dispute.
- Within 48 hours: FIR citing BNS §318 + §319 + IT Act §66D.
- Day 3-7: RTI to cyber cell + RBI Sachet + MeitY.
- Day 30-60: RBI Banking Ombudsman.
- Recovery rate: ~15-25 % (depending on speed of 1930).
Quick Action Steps
- 🚨 1930 within 30 minutes.
- 🛑 Don't pay any further fees.
- 📷 Screenshot everything.
- 🔍 Verify at RBI Sachet.
- 🌐 NCRP within 24 hours.
- 🏛 FIR within 48 hours.
- 🗂 RTI on Day 3-7.
- 📚 Cite RBI Digital Lending Guidelines 2022.
- ⏰ Calendar Day 30 (RTI), Day 60 (Banking Ombudsman).
- 💼 Don't share OTP / Aadhaar / PAN scan.
- 💳 Block prepaid cards used.
- 🚫 Don't pay “recovery fees” — second-stage scam.
What Are Your Rights
A. Always available
- Zero-FIR (Lalita Kumari 2014).
- Bank chargeback under RBI MD July 2017.
- NCRP / 1930 reporting.
- RTI to RBI Sachet + MeitY + cyber cell.
- Banking Ombudsman complaint.
- Civil suit + criminal complaint.
B. With restrictions
- Recovery of paid fees — depends on bank reach.
- Identity of scammer — post-investigation.
C. Not available
- Bank refunding induced authorisation without dispute.
- RBI directly reimbursing.
- Fully blocking future targeting.
Real-World Patterns
- Mumbai 2024 — IT professional paid ₹47,000 in fees expecting ₹5 lakh loan. 1930 + RBI Sachet exposed unregistered NBFC. ₹12,000 recovered.
- Delhi 2025 — Telegram “loan agent” scam — ₹85,000 lost. NCRP + bank chargeback + Banking Ombudsman; 35% recovered.
- Bengaluru 2024 — fake loan app installed via ad-tracking. Permission abuse + identity theft. UIDAI lock + bureau dispute.
- Chennai 2025 — call centre operating from outside-state. EOW arrested 4 mules. ₹65 lakh systemic fraud cracked.
- Hyderabad 2024 — scam disguised as MUDRA loan agent. Real MUDRA scheme has zero fee. Cyber cell investigated.
Legal Framework
A. RBI Master Direction on Digital Lending, September 2022 (revised 2024)
- Lender must be RBI-registered NBFC / bank.
- No upfront fees beyond regulated ones.
- Mandatory disclosure of APR, KFS (Key Fact Statement).
- Loan disbursement directly to borrower's bank.
- Recovery agents prohibited from harassment.
B. RBI Sachet
- Citizen reporting + entity verification at sachet.rbi.org.in.
C. IT Act, 2000 + BNS, 2023
- IT §66, §66C, §66D.
- BNS §318, §319, §111, §336.
D. Consumer Protection Act, 2019 + Banking Ombudsman 2021
E. MeitY ban list
- 600+ illegal loan apps banned (2022-2025).
- MeitY IT Rules 2021 — intermediary takedown.
F. Leading judgments
- K.S. Puttaswamy (2017) — privacy + property.
- Lalita Kumari (2014) — Zero-FIR.
- SBI v. Pallabh Bhowmick (NCDRC 2023).
Step-by-Step Process
Step 1 — Stop paying + 1930
Step 2 — RBI Sachet verification
Step 3 — NCRP + bank chargeback
Step 4 — FIR + RTI
1. Status of NCRP / FIR. 2. RBI Sachet finding on alleged NBFC. 3. Bank's chargeback action. 4. Cyber cell investigation status. 5. MeitY ban-list status if app involved. 6. Action on prior representations.
Step 5 — Banking Ombudsman
Step 6 — EOW / CBI for high-value
Step 7 — Civil suit
Step 8 — Long-term: never pay upfront
State-Wise Variations
(Same 12-state cyber cell table as other scam articles.)
Sample Complaint Email
To: sachet@rbi.org.in
Cc: cyber-sp-[district]@[state].gov.in; bo.[regional-rbi]@rbi.org.in
Subject: Fake loan scam — fees ₹[..] — request investigation +
Sachet listing of fraudulent entity
Sir / Madam,
I, [Name], was defrauded ₹[..] by alleged //"loan provider//" [name +
contact + UPI / bank], who collected upfront fees as //"processing /
GST / insurance / clearing"//.
Statutory framework:
1. RBI Master Direction Digital Lending 2022 (revised 2024).
2. IT Act §66D + BNS §318 + §319 + §111.
3. RBI MD July 2017 — bank chargeback.
Documents enclosed:
- Caller / chat / app screenshots.
- Transaction records.
- 1930 / NCRP / FIR ack.
- RBI Sachet check showing entity not registered (or fake).
Relief:
- Investigation + Sachet listing.
- Bank chargeback.
- Disciplinary action if entity is registered.
- MeitY app ban if applicable.
Yours sincerely,
[Name + Phone + Email]
Documents Required
- Account number + transactions.
- Caller's number + UPI / bank details.
- NBFC name + registration claim.
- App screenshots (if any).
- 1930 / NCRP / FIR ack.
Common Mistakes
- Paying upfront — never legal under RBI Digital Lending.
- Sharing OTP — never.
- Skipping RBI Sachet check — verifies legitimacy.
- Trusting “recovery” services — second-stage scam.
- Installing unverified apps — permission abuse.
❓ FAQs
Real NBFCs charge processing fee — is fee always a scam?
Real NBFCs charge fees AFTER loan disbursal (deducted from loan amount), not upfront. Upfront-fee = scam.
I gave Aadhaar + PAN scans. What now?
Identity-theft pattern. UIDAI lock + AIS check + CIBIL check. See PAN/Aadhaar Identity Theft Recovery.
Loan app demanded contact-list permissions.
MeitY-banned apps + IT Rules 2021 violation. Uninstall immediately + report to NCRP.
Will RBI Sachet itself refund?
No — it lists, monitors, refers. Refund via bank chargeback.
Real MUDRA / PMSVANidhi / SVANidhi schemes — are they free?
Yes, fully free. Any “agent” fee is fraud.
I gave bank statements + ITR. What harm?
Identity-theft potential + targeted re-scams. Lock CIBIL.
Can I sue claimed NBFC if it's real?
Yes — RBI Banking Ombudsman + Consumer Forum.
Loan agent threatened me when I refused to pay further.
RBI MD prohibits harassment. FIR + RBI complaint.
I can't find the //"loan agent//" anymore.
Common — they vanish after extraction. RTI + cyber cell can trace via UPI.
High-value (>₹2 lakh paid). Specialised route?
EOW + CBI for inter-state. Civil + criminal package.
How does DPDP Rules 2025 affect this?
Personal data protection + ₹250 cr penalty for breach.
Can I file in Hindi?
Yes.
Long-term protection?
Lock Aadhaar biometric + monitor CIBIL + report new attempts.
Can banks be liable?
Yes if KYC failed for receiving mule account. Banking Ombudsman.
When To Hire A Lawyer
- Loss > ₹1 lakh.
- Cross-state syndicate.
- Identity theft consequences.
- Pro bono: NALSA 15100.
Can Compensation Be Claimed?
- Bank chargeback.
- Banking Ombudsman ₹20 lakh cap.
- Consumer Forum ₹10K-₹50L.
- PMLA recovery in syndicate cases.
Important Numbers + Portals
| Authority | Number / URL |
| — | — |
| 1930 | 24×7 cyber-fraud |
| NCRP | https://cybercrime.gov.in |
| RBI Sachet | https://sachet.rbi.org.in |
| RBI Banking Ombudsman | https://cms.rbi.org.in |
| NALSA | 15100 |
Tools That Help
Internal Linking Suggestions
External References
- NCRP / 1930 — cybercrime.gov.in
- RBI Sachet — sachet.rbi.org.in
- RBI Banking Ombudsman — cms.rbi.org.in
- RBI Digital Lending MD — rbi.org.in
- MeitY — meity.gov.in
Conclusion
The rule is simple: real RBI-registered lenders never collect upfront fees. Any “processing / GST / insurance / clearing” fee BEFORE loan disbursal = scam. 1930 within 30 minutes + RBI Sachet check + NCRP + bank chargeback resolves 15-25 % of cases. Most importantly: prevent re-targeting.
Sources
- RBI Master Direction on Digital Lending, September 2022 (revised 2024).
- RBI Master Direction on Limiting Liability, July 2017.
- RBI Integrated Ombudsman Scheme, 2021.
- Information Technology Act, 2000.
- Bharatiya Nyaya Sanhita, 2023.
- DPDP Act 2023 + Rules 2025.
- K.S. Puttaswamy (2017) 10 SCC 1.
- Lalita Kumari (2014) 2 SCC 1.
- SBI v. Pallabh Bhowmick (NCDRC 2023).
Last reviewed: 6 May 2026.
