Legal information notice: this article provides general information and isn't a substitute for advice from a qualified lawyer.
You took a small, quick loan through a mobile app during a genuine cash crunch — and now recovery agents are calling incessantly, contacting people in your phone’s contact list, or even circulating morphed photos to pressure you into paying amounts far beyond what you actually borrowed. This is illegal, not just aggressive collection, and Indian law gives you real, specific protections. Here’s exactly what to do.
The RBI’s Digital Lending Guidelines, 2022 and Fair Practices Code strictly prohibit lenders from harassing borrowers, and unauthorized/unregistered lending apps operating outside RBI’s NBFC framework are themselves illegal. Specific tactics common among these illegal apps are separately, seriously unlawful:
Paying amounts beyond your actual loan terms to make harassment stop often doesn’t end it — it frequently signals you’ll pay under pressure, inviting further demands. Focus on documenting and reporting instead.
Screenshot all messages, call logs, any morphed images circulated, and the app itself (including its listed terms and any inconsistencies) — this evidence is central to every report that follows.
Legitimate digital lenders operate as registered NBFCs or in partnership with one — an app with no verifiable registration, opaque ownership, or a name not matching any registered entity is a strong sign you’re dealing with an illegal operation.
File a complaint at sachet.rbi.org.in, RBI’s dedicated platform for reporting unauthorized/illegal financial entities — this can trigger regulatory action including app removal.
Report at cybercrime.gov.in or call 1930, citing the threats, contact scraping, and any morphed content — this is a criminal matter, not just a debt dispute.
It’s worth separating two genuinely different issues that often get conflated: whether you actually owe money, and whether the collection tactics used against you are legal. Even if you did take the loan and genuinely owe some amount, that doesn’t make contact-scraping, threats, or circulating morphed images lawful — no debt, however real, justifies these tactics, and you can pursue harassment complaints regardless of your underlying repayment obligation.
Since 2026, contact scraping specifically carries criminal exposure under the DPDp Act as a data protection violation, separate from and in addition to whatever else the lender might be doing wrong — this is a relatively recent, meaningful strengthening of your legal position if you’re dealing with an app that accessed your phone’s contacts without proper, specific consent for that exact purpose.
If the app has already been removed from the Play Store (RBI has directed removal of numerous illegal lending apps), this doesn’t mean the underlying debt or the harassment stops automatically — continue documenting any ongoing contact and pursue your complaints regardless of the app’s current availability, since the operators typically continue collection efforts through other channels.
| Route | Purpose |
|---|---|
| Sachet portal (sachet.rbi.org.in) | Reporting the lender's unauthorized/illegal status to RBI |
| Cybercrime.gov.in / 1930 | Criminal harassment, threats, privacy violation, morphed content |
Report unauthorized lenders at sachet.rbi.org.in. Report harassment and privacy violations at cybercrime.gov.in or 1930.
Both the Sachet portal and cybercrime.gov.in are completely free to use.
Yes, for reporting itself. A lawyer becomes useful if you’re facing a civil dispute over the actual loan amount owed, or need to pursue defamation/harassment claims formally against identifiable individuals behind the app.
Need professional legal help with this?
Find a Lawyer on VidyodayIf the harassment has escalated to explicit threats or blackmail beyond loan collection, see our guide on online blackmail. For broader identity/privacy concerns from data misuse, our guide on identity theft may also be relevant.
This is a genuinely complex question depending on the specific facts — an unauthorized lender’s ability to legally enforce collection is itself questionable, and a lawyer’s advice is valuable here rather than assuming either full repayment or no obligation.
Continue with your reports regardless — screenshots and records you already have remain valid evidence, and the operators typically continue contacting you and others through other means.
No — contacting third parties about your personal debt, especially using contacts scraped without specific consent, violates both RBI’s Fair Practices Code and data protection law.
This is a serious matter warranting immediate cybercrime reporting citing privacy violation and defamation — treat this with the same urgency as any non-consensual image circulation case.
RBI periodically publishes lists of registered NBFCs and has warned against numerous specific illegal apps — cross-check the app/company name against official RBI sources, or consult with a financial advisor if uncertain.
Excessive or harassing call frequency, especially outside reasonable hours or after being asked to stop, can itself violate RBI’s Fair Practices Code for lenders, independent of whether the underlying debt is genuine.
This suggests identity theft or fraudulent loan origination — file both a cybercrime complaint and see our identity theft guide, since someone else may have taken this loan using your details.
Yes, and you should, but also preserve the evidence first — blocking prevents further contact from that specific number, though harassment sometimes continues from different numbers.
This article is for general information only and does not constitute legal advice. If you’re facing threats or feel unsafe, contact the police (100) immediately. Consult a cyber lawyer for guidance specific to your situation.
