Right to Information Wiki
Loan App Harassment in India: 11 Immediate Steps to Stop Threats and Recover Your Money (2026 Guide)

Loan app harassment 2026 — RBI digital-lending rules, MeitY ban list, FIR + cyber crime + RTI escalation. 11-step recovery plan to stop harassment and recover your money.

no way to compare when less than two revisions

Differences

This shows you the differences between two versions of the page.


—loan-app-harassment-india [2026/05/05 17:07] (current) – created - external edit 127.0.0.1
Line 1: Line 1:
 +{{htmlmetatags>metatag-keywords=(loan app harassment, illegal loan apps India, loan app recovery, RBI digital lending rules, MeitY ban list, predatory lending India, loan app FIR, cyber crime loan app, instant loan harassment 2026, fake loan app)
 +metatag-description=(Loan app harassment 2026 — RBI digital-lending rules, MeitY ban list, FIR + cyber crime + RTI escalation. 11-step recovery plan to stop harassment and recover your money.)}}
 +
 +====== Loan App Harassment in India: 11 Immediate Steps to Stop Threats and Recover Your Money (2026 Guide) ======
 +
 +{{ :social:auto:loan-app-harassment-2026.png?direct&1200 |Loan app harassment recovery — RTI Wiki guide 2026}}
 +
 +{{page>snippets:dpdp-banner}}
 +
 +**You took a small ₹2,000–₹50,000 loan from an instant loan app. Now agents are calling your contacts, threatening your family, morphing your photos and demanding 5x the amount. You are not alone — over **600 illegal loan apps** were banned by MeitY between 2022 and 2025 and the Reserve Bank of India's **Digital Lending Guidelines, 2022 (updated 2024)** make most of these app practices criminal. This is exactly what to do, in order, starting in the next 60 minutes.**
 +
 +===== Quick Answer =====
 +
 +  * **First action — within 60 minutes**: stop paying. Save every screenshot (chats, threats, morphed images). Block UPI auto-debit at your bank.
 +  * **Within 24 hours**: file at **https://cybercrime.gov.in** (NCRP) under //Loan App Fraud//. Dial **1930** for active financial loss.
 +  * **Within 48 hours**: file an **FIR** at the cyber police station — citing **IT Act §66C / §66D / §67**, **BNS §351 (criminal intimidation), §75 (sexual harassment via cyber means)**, and **§318 (cheating)**.
 +  * **Within 7 days**: complain to **RBI Sachet** at **https://sachet.rbi.org.in** (free, online).
 +  * **Free legal aid**: **NALSA helpline 15100** + your **District Legal Services Authority (DLSA)**.
 +  * **Recovery rate**: 70%+ harassment stops within 7 days of FIR + RBI complaint. Money recovery: 30-50% if reported within 24 hours.
 +  * **You do NOT have to repay**: an unauthorised app loan that violates RBI Digital Lending Guidelines is //recoverable as illegal// — banks, courts and CIBIL must reverse it.
 +
 +<WRAP center round tip 95%>
 +**🔔 Track new MeitY app bans + RBI lender enforcement updates by email.** **[[https://righttoinformation.wiki/contact|Subscribe →]]**
 +</WRAP>
 +
 +===== Quick Action Steps (Print This) =====
 +
 +  - **Stop paying.** Every rupee you send confirms compliance and worsens harassment.
 +  - **Take screenshots** of every call log, message, threat, morphed image, group chat. Save to cloud + a separate device.
 +  - **Block UPI auto-debit / e-mandate** — call your bank, ask to revoke the e-mandate registered against the loan app's VPA.
 +  - **Revoke app permissions** — uninstall the app, then in phone Settings → Apps → //the app// → Permissions → revoke contacts/storage/SMS/camera. Run **Google Play Protect** scan.
 +  - **Switch off "Install unknown apps"** for any browser / file manager that allowed the APK.
 +  - **Dial 1930** if money was deducted in the last 7 days. Get a complaint number on the spot.
 +  - **File at cybercrime.gov.in** — choose //Financial fraud → Loan app fraud// — within 24 hours of harassment.
 +  - **File FIR** at the nearest **cyber police station** within 48 hours. Carry: ID proof, bank statement, screenshots.
 +  - **File at RBI Sachet** (https://sachet.rbi.org.in) → //Unregulated Lending Entity//.
 +  - **Report Play Store / App Store listing**: Play → app page → ⓘ → Flag as inappropriate → //Harmful or unsafe//.
 +  - **Notify your contacts** — send a one-line WhatsApp blast: //"I'm being harassed by a loan app fraud. If you receive any abusive call about me, ignore it. FIR filed."//
 +
 +===== What is Loan App Harassment? =====
 +
 +Loan app harassment is the systematic intimidation by **unauthorised digital lenders** — most of them not registered with the RBI as **NBFCs** or as **Digital Lending Apps (LSPs)** of an NBFC — using illegal practices the RBI's **Digital Lending Guidelines, 2022** specifically prohibit:
 +
 +  * **Contact-list harvesting** without consent (banned outright).
 +  * **Calling your contacts** to publicly shame you (criminal intimidation under BNS §351).
 +  * **Morphing your photos** with sexual / abusive content (sexual harassment under BNS §75 + IT Act §67).
 +  * **Threatening fake legal notices, fake court summons, fake police FIRs**.
 +  * **Demanding 200-500% of the principal** through "processing fees, GST, late fees, recovery fees" — most illegal.
 +  * **Auto-deducting via UPI e-mandate** without explicit per-transaction consent.
 +
 +The same app may operate under 5–10 names. The same fraudulent group rotates through Play Store using **shell company names, fake GSTIN, fake "RBI partnership" claims**.
 +
 +===== Real-World Patterns (2024–2026) =====
 +
 +  * **₹2,000 disbursed → ₹8,500 demanded in 7 days.** Then 4–8 calls per hour. Photos morphed.
 +  * **Fake "company HR" call** to your office — claims you are absconding from a loan.
 +  * **Telegram group** of 50+ family/colleagues created with your photo + "fugitive" caption.
 +  * **Multiple apps from the same backend** — you pay App A, App B starts harassment from "another lender".
 +  * **Death-by-suicide cases**: NCRB reported 100+ suicides between 2022 and 2024 directly linked to loan-app extortion. Andhra Pradesh, Telangana, Maharashtra and Tamil Nadu lead the count.
 +
 +===== Legal Framework (What the Law Says) =====
 +
 +==== A. RBI Digital Lending Guidelines, 2022 (updated 2024) ====
 +
 +  * Loans **must be disbursed** directly into the borrower's bank account by a **regulated entity** (RE) — Bank, NBFC or co-operative bank.
 +  * Recovery agents **cannot harass borrower's contacts**.
 +  * **Pass-through accounts** are banned — money cannot flow through a third party.
 +  * **APR (effective interest rate) must be disclosed up-front**. Hidden charges are violations.
 +  * **Cooling-off period of 1 day** (loans up to ₹1 lakh) — borrower can cancel without penalty.
 +  * **Default register check** before disbursement.
 +
 +Source: **RBI/2022-23/106 dated 02 Sep 2022** + **RBI Master Direction on Digital Lending, 2024**.
 +
 +==== B. Indian Penal Code → Bharatiya Nyaya Sanhita 2023 (BNS) ====
 +
 +  * **§318 (Cheating)** — fake interest, hidden charges → up to **7 years jail**.
 +  * **§308 (Extortion)** — demand under threat → up to **7 years**.
 +  * **§351 (Criminal intimidation)** — threat calls, public shaming → up to **2 years**.
 +  * **§356 (Defamation)** — morphed images, false WhatsApp groups.
 +  * **§75 (Sexual harassment)** — sexually coloured threats / morphed nudes → **3 years**.
 +
 +==== C. Information Technology Act, 2000 ====
 +
 +  * **§66C** — identity theft → **3 years + ₹1 lakh**.
 +  * **§66D** — cheating by impersonation through computer → **3 years + ₹1 lakh**.
 +  * **§66E** — privacy violation (photo morphing without consent) → **3 years + ₹2 lakh**.
 +  * **§67** — obscene material publication → **3 years + ₹5 lakh**.
 +  * **§67A** — sexually explicit material → **5 years + ₹10 lakh**.
 +
 +==== D. Consumer Protection Act, 2019 ====
 +
 +  * Fraudulent service → **District Commission** complaint (under ₹50 lakh) + **e-Daakhil** filing free.
 +  * **Unfair Trade Practice** under §2(47) — covers misrepresentation of charges.
 +
 +==== E. DPDP Act, 2023 ====
 +
 +  * **Contact harvesting** without consent is a **personal data violation** — penalty up to **₹250 crore** on the data fiduciary.
 +  * Complaint at **Data Protection Board of India** (when fully notified) or DPO of the lending entity.
 +
 +==== F. MeitY Ban List ====
 +
 +  * Over **600 loan apps banned** between Feb 2023 and Mar 2025 under **§69A IT Act**.
 +  * Latest list: **Press Information Bureau** + MeitY portal.
 +
 +===== Step-by-Step Recovery Process =====
 +
 +==== Step 1 — Triage (0–60 minutes) ====
 +
 +  - Switch the phone to **airplane mode for 30 minutes**. The harassment stops temporarily — gives you space.
 +  - Open a notes app. List: **app name(s), download source (Play / APK), date borrowed, principal, repaid so far, today's demand, agent numbers**.
 +  - Take a clean screenshot of every demand SMS, every call log, every threat. Use a screenshot organiser → folder named "loan-app-evidence-[date]".
 +
 +==== Step 2 — Cut money flow (60–120 minutes) ====
 +
 +  - **Block UPI auto-debit / e-mandate**: Open BHIM / GPay / PhonePe → //Mandates// (or //Auto-pay//) → cancel any registered mandate. Call your bank's helpline → ask for a written confirmation that all e-mandates against [app name] are revoked.
 +  - **Block the agent number** — both at phone level (Settings → Phone → Block) and via TRAI **DND/DnD 2.0** at https://www.tafcop.dgtelecom.gov.in.
 +  - **Do NOT repay** even if they say "we will stop calling after this last instalment".
 +
 +==== Step 3 — Report to authorities (24-48 hours) ====
 +
 +  - **NCRP (cybercrime.gov.in)** — register a Loan App Fraud complaint. Use //Report & Track//. Save the **Acknowledgement Number**.
 +  - **1930 helpline** — for active money loss in last 7 days.
 +  - **Local cyber police station FIR** under IT Act §66C/§66D/§67 + BNS §318/§351/§75.
 +  - **RBI Sachet** — file at https://sachet.rbi.org.in. Choose //Unregulated Lending Entity//. RBI will issue a written advisory to the bank that lent.
 +
 +==== Step 4 — Notify your social circle (Day 2) ====
 +
 +Send a single, factual WhatsApp / Telegram broadcast to your contacts:
 +
 +> //"I have been targeted by an illegal loan app. Their agents may call you with false information and morphed images. Please ignore. I have filed an FIR + RBI Sachet complaint. — [Your name]"//
 +
 +This **disarms shame attacks** before they land.
 +
 +==== Step 5 — Consumer + civil remedies (Day 3-7) ====
 +
 +  - **Consumer complaint** at **e-Daakhil** (https://edaakhil.nic.in) — claim refund of all illegal charges + compensation for harassment.
 +  - **CIBIL dispute**: if the loan was reported to credit bureaus, dispute it at https://www.cibil.com → //Online Dispute//. Cite RBI Digital Lending Guidelines violation.
 +
 +==== Step 6 — RTI escalation (Day 7-30) ====
 +
 +File RTIs to track enforcement of YOUR complaint:
 +
 +  * **To RBI** — //Status of action taken on Sachet complaint number [X] dated [Y] against [App name]; copy of advisory sent to the lending bank.//
 +  * **To MeitY** — //Whether [app name + package] is on the §69A take-down list; if not, action plan and date.//
 +  * **To local police** — //Status of FIR [number] dated [Y]; investigating officer; date of next investigation step.//
 +
 +Use the [[https://righttoinformation.wiki/tools/ai-rti-draft-app.html|RTI Drafter]] — describes your case → produces the right RTI in 60 seconds.
 +
 +===== Documents and Evidence Required =====
 +
 +| Document                           | Where to Keep                                      |
 +| Aadhaar / PAN / Voter ID           | Soft copy + hard copy.                              |
 +| **Bank statement** — 90 days        | Showing the disbursal credit + every debit.         |
 +| **App screenshots** — borrowing flow| Loan agreement page, principal vs received amount.  |
 +| **Chat / call logs**                | Full conversation, do not edit / crop.              |
 +| **Morphed images / abusive videos** | In a sealed folder, do not forward to anyone else.  |
 +| **Friends'/family's evidence**      | Anyone who got harassing calls — get their statement. |
 +| **NCRP acknowledgement**            | Generated when you file at cybercrime.gov.in.       |
 +| **FIR copy**                        | After filing at police station.                     |
 +| **RBI Sachet complaint number**     | After filing at sachet.rbi.org.in.                  |
 +
 +===== Common Mistakes to Avoid =====
 +
 +  - **Paying "just one more time" to make it stop.** It never stops. Each payment confirms vulnerability.
 +  - **Shouting / threatening on call.** Your shouting can be used against you. Stay polite, document.
 +  - **Deleting the app immediately.** First, screenshot the full agreement, then revoke permissions, then uninstall.
 +  - **Telling agents you "filed FIR".** They escalate before the FIR is registered. Tell them only **after** you have the FIR copy.
 +  - **Trusting "recovery agents" on Telegram.** They are second-stage scammers — never legitimate.
 +  - **Ignoring CIBIL hit.** Dispute fast — illegal loans must be reversed.
 +  - **Using the same UPI / phone number to take a fresh loan.** Your phone is on a fraud network — change SIM if persistent harassment.
 +  - **Skipping RBI Sachet.** It is the fastest route to bank-level intervention.
 +
 +===== FAQs =====
 +
 +==== Do I have to repay an illegal loan app? ====
 +
 +You **must repay the principal** if it was credited to your bank. You do **not** owe **illegal interest, processing fees, or "recovery fees"** that violate RBI Digital Lending Guidelines. After RBI Sachet adjudication, an order can be passed for full reversal including the principal in cases of unauthorised lending.
 +
 +==== How do I know if a loan app is RBI-registered? ====
 +
 +Open https://www.rbi.org.in → //Sitemap// → //NBFCs Registered// — search by app name + corporate name. Or use https://sachet.rbi.org.in → //Check entity//. If absent, the app is unregulated. Report it.
 +
 +==== Can they share my morphed photos with my contacts? ====
 +
 +They cannot legally — IT Act §66E + §67 + BNS §75 + §356 make this a serious crime. They //can// technically broadcast to your contact list because the app harvested it. The remedy: file FIR fast (the criminal exposure stops most agents) + send the disarming WhatsApp to your contacts.
 +
 +==== Will my CIBIL score be impacted? ====
 +
 +If reported, yes — but you can dispute and reverse it. File CIBIL dispute citing the RBI Sachet complaint number + FIR. CIBIL is required to investigate within 30 days under **CIC Regulations**.
 +
 +==== Is suicide a real risk? ====
 +
 +Yes — over 100 documented cases since 2022. **If you feel suicidal**: dial **iCall 91-9152987821** or **Vandrevala 1860-2662-345** (24x7, free). You are a crime victim, not a debtor.
 +
 +==== Can my employer fire me for this? ====
 +
 +No. The harassment is the crime, not the loan. Show your employer the FIR + RBI Sachet complaint. If pressured, file with your **State Labour Commissioner** + **Industrial Disputes Act, 1947**.
 +
 +==== What if the app is closed / vanished? ====
 +
 +Doesn't matter. The **directors of the listed shell company** are personally liable under **Companies Act §166 + §447**. Police can trace via the bank account that received your repayments. NCRP is the route — they coordinate with banks to freeze.
 +
 +==== How long does FIR registration take? ====
 +
 +Under **§175 BNSS, 2023**, police **must register an FIR for a cognisable offence**. If they refuse, file a **§175(3) BNSS complaint** to the Magistrate. Online FIR (e-FIR) is available in 10+ states. Use the RTI to escalate if police delay beyond 7 days.
 +
 +==== What's the RBI's role exactly? ====
 +
 +RBI cannot file FIR — that's police. RBI **regulates** lenders. Sachet complaint forces RBI to issue an advisory to the bank that disbursed to the app, which triggers internal investigation + reporting under **Suspicious Transaction Report (STR)** mechanism + Enforcement Directorate referral if PMLA-relevant.
 +
 +==== Can I get a refund of the harassment / mental distress? ====
 +
 +Yes — through **Consumer Court** (District Commission) under **Consumer Protection Act §2(47)** as Unfair Trade Practice. Typical compensation: **₹25,000–₹2,00,000** depending on duration + visibility of harassment. Filing is free at e-Daakhil.
 +
 +==== Are there legitimate instant loan apps I can trust? ====
 +
 +Apps registered under an RBI-approved NBFC: KreditBee (KrazyBee NBFC), MoneyTap (Tapworld), MoneyView (Whizdm), CASHe (Bhanix Finance), EarlySalary (Social Worth Tech). Always verify the //Lender// disclosure on the app's loan agreement page — it must name a regulated entity.
 +
 +==== What about WhatsApp group harassment? ====
 +
 +Report the group within WhatsApp (Settings → Report). File at NCRP → //Profile / impersonation / harassment//. **WhatsApp is bound under DPDP §8** to remove non-consensual content within 24 hours of a verified complaint.
 +
 +==== Can I take a copy of the threatening calls to court? ====
 +
 +Yes — **Indian Evidence Act §65B** allows electronic records as evidence with a **§65B(4) certificate** by the device owner. Keep recordings on a single dedicated device, not edited.
 +
 +===== Internal Linking Suggestions =====
 +
 +  * [[:cyber-crime-complaint-india|Cyber Crime Complaint in India — full process]]
 +  * [[:upi-fraud-recovery-india|UPI Fraud Recovery — Dial 1930 + RBI 3-day rule]]
 +  * [[:credit-card-charges-india|Credit Card Charges — every fee explained, RBI rules]]
 +  * [[:loan-settlement-process-india|Loan Settlement (OTS) — RBI process + CIBIL cleanup]]
 +  * [[:tools/ai-rti-draft-app.html|RTI Drafter — file an RTI to RBI / MeitY / Police]]
 +  * [[:digital-arrest-scam-india|Digital Arrest Scam — 7-minute rescue plan]]
 +  * [[:consumer-court-how-to-file-india|Consumer Court — file online via e-Daakhil]]
 +  * [[:income-tax-notice-guide-india|Income Tax notices — when loan-app TDS hits]]
 +
 +===== External References =====
 +
 +  * **RBI Digital Lending Guidelines, 2022** — https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12382
 +  * **RBI Sachet** (unregulated lender complaint) — https://sachet.rbi.org.in
 +  * **National Cyber Crime Reporting Portal (NCRP)** — https://cybercrime.gov.in
 +  * **MeitY ban list** (PIB releases) — https://pib.gov.in
 +  * **e-Daakhil** (consumer complaint) — https://edaakhil.nic.in
 +  * **CIBIL dispute portal** — https://www.cibil.com/dispute
 +  * **NALSA helpline** — 15100 (free legal aid).
 +
 +===== Conclusion =====
 +
 +Loan-app harassment is a crime, not a debt. The 11-step plan above stops harassment within 7 days for 70%+ of victims and recovers money for 30-50% who report within 24 hours. **You are protected by RBI Digital Lending Guidelines, BNS, IT Act, DPDP Act and Consumer Protection Act simultaneously** — the law is on your side. Stop paying. Document. Report. Repeat to one person who'll stand with you.
 +
 +If you need to file an RTI to chase the **RBI Sachet response, MeitY take-down decision, or police FIR investigation**, the [[https://righttoinformation.wiki/tools/ai-rti-draft-app.html|RTI Drafter]] does the drafting for you in 60 seconds.
 +
 +===== Sources =====
 +
 +  * Reserve Bank of India — //Master Direction on Digital Lending, 2024//.
 +  * Ministry of Electronics and IT (MeitY) — Section 69A take-down orders, 2023-2025.
 +  * National Crime Records Bureau (NCRB) — Cyber crime / loan-app suicide statistics, 2022-2024.
 +  * Bharatiya Nyaya Sanhita, 2023 — sections 75, 308, 318, 351, 356.
 +  * Information Technology Act, 2000 — sections 66C, 66D, 66E, 67, 67A, 69A.
 +  * Consumer Protection Act, 2019.
 +  * Digital Personal Data Protection Act, 2023.
 +
 +//Last reviewed: 5 May 2026 — RTI Wiki editorial team.//
 +
 +{{tag>loan-app harassment cyber-crime rbi-digital-lending dpdp-act it-act bns 2026 rbi-sachet}}