Fake Loan App Fraud: How to Spot It and Report It in India

If a loan app is threatening you, sending morphed photos to your contacts or demanding far more than you borrowed, you are dealing with fraud, not a legitimate lender. Stop paying, save all evidence, and report it immediately at cybercrime.gov.in or by calling 1930, then flag the entity on RBI's Sachet portal. Genuine lenders must follow RBI's Digital Lending Directions, 2025, and none of them is allowed to behave this way.

How fake loan apps work

Most illegal loan apps follow the same script:

1. Instant approval for a small loan, often ₹2,000 to ₹10,000, with no real checks.
2. The app asks for access to your contacts, gallery and call logs during installation.
3. A large "processing fee" is deducted upfront, so you receive much less than the sanctioned amount.
4. Repayment is due in 7 to 15 days, not months.
5. On the due date, or even before it, threats begin: calls to you and your contacts, morphed images, fake legal notices.
6. You are pushed to take another loan from a "partner app" to repay the first, deepening the trap.

What the real cost looks like

Worked example:

An app sanctions a ₹5,000 loan. It deducts ₹1,500 as "processing and GST", so you receive ₹3,500. You must repay ₹5,000 in 7 days.

• Cost of borrowing: ₹5,000 − ₹3,500 = ₹1,500
• Cost as a share of money received: ₹1,500 ÷ ₹3,500 = 42.9% for 7 days
• Simple annualised rate: 42.9% × 365 ÷ 7 = about 2,235% a year

Compare that with a regulated personal loan at 11% to 24% a year. You can see what a normal loan should cost on our EMI calculator. Any app hiding such a cost is breaking RBI's rule that a Key Fact Statement with the all-in annual percentage rate (APR) must be shown before you sign.

Legitimate vs fake loan app: quick check

Step-by-step: what to do if you are caught by a fake loan app

1. Stop and do not pay more under threat

Paying an extortion demand almost never ends it. The app usually asks for more. Stop all further payments to personal UPI IDs or wallets.

2. Save every piece of evidence

• Screenshots of the app, loan details, amounts received and paid
• Bank statements showing credits and debits
• Call logs, recordings, WhatsApp messages, morphed images
• The UPI IDs and phone numbers used
• The app's name, version and download link

Do this before uninstalling anything.

3. Report at cybercrime.gov.in or call 1930

File a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in under financial fraud or harassment, or call 1930. For money lost, report as quickly as possible so that the transactions can be traced and frozen.

4. File an FIR at your local police station

Threats, extortion, defamation and sharing morphed or obscene images are offences under the Bharatiya Nyaya Sanhita, 2023 and the Information Technology Act, 2000. Police commonly invoke criminal intimidation (BNS Section 351), extortion (BNS Section 308) and IT Act provisions such as Section 66D (cheating by personation) and Section 67 (publishing obscene material). Take printed evidence.

5. Report the entity to RBI's Sachet portal

Report unregulated lenders at sachet.rbi.org.in. This helps RBI and state authorities act against the operators.

6. Report fraud calls and messages on Chakshu

Use the Chakshu facility on the Department of Telecommunications' Sanchar Saathi portal to report the numbers used for fraud calls and messages, so they can be blocked.

7. Report the app to the app store

Report the app on Google Play or the App Store as fraudulent. MeitY can order illegal loan apps blocked under Section 69A of the IT Act, and complaints feed that process.

8. Protect your phone and contacts

• Revoke all permissions, then uninstall the app.
• Change passwords for email, banking and social media.
• Tell close family and friends that you are being targeted and that any message about you is fraud. This takes away the blackmailer's power.

9. If a regulated lender is involved

Sometimes the app is genuine but its recovery agents misbehave. Complain to the lender's grievance redressal officer; if there is no reply in 30 days, escalate to the RBI Integrated Ombudsman at cms.rbi.org.in (helpline 14448) within 90 days after that window ends, under the 2026 scheme. See loan recovery agent harassment and your rights.

Your rights under RBI's Digital Lending Directions, 2025

These directions, issued on 8 May 2025, consolidate RBI's digital lending rules for banks, NBFCs and other regulated lenders:

• Only regulated entities may lend. The lending service provider or app must be tied to a bank or registered NBFC.
• Public directory. RBI publishes a directory of digital lending apps reported by regulated lenders on its website since July 2025.
• Direct money flow. Loans must be disbursed into your bank account and repaid to the lender's account, not through a third party's pool account.
• Key Fact Statement with APR and all charges before you sign; fees not in the KFS cannot be charged.
• Cooling-off period to exit the loan by repaying the principal and proportionate APR, without penalty.
• Limited data access. No access to files, media, contacts or call logs; one-time camera, microphone or location access only for onboarding or KYC with consent.
• Grievance officer details displayed in the app and on the lender's website.

The Union government has also proposed a law to ban unregulated lending, with jail terms for offenders; check its status before relying on it, as it was still a draft in the latest coverage we could verify.

What not to do

• Do not download loan apps from links in SMS, WhatsApp or social media ads.
• Do not grant contact, gallery or call-log permissions to any loan app.
• Do not take a second loan from a "partner" app to repay the first.
• Do not pay to personal UPI IDs, ever.
• Do not stay silent out of shame. Thousands of people are targeted; police and RBI treat this as a serious crime.
• Do not share OTPs, Aadhaar or PAN images with unverified apps.

If you need money urgently, start with regulated options: your bank, a loan against FD, or a gold loan. Our guide on instant loan apps and RBI rules explains how to pick a safe app.

Key takeaways

• A fake loan app typically deducts a big fee, demands repayment in 7-15 days and uses blackmail; a ₹5,000 loan with ₹1,500 deducted and 7-day repayment costs over 2,000% a year.
• Check RBI's digital lending app directory and the lender's registration before using any loan app.
• Report threats and fraud at cybercrime.gov.in or 1930, file an FIR, and report the entity on sachet.rbi.org.in.
• RBI's Digital Lending Directions, 2025 bar regulated apps from accessing your contacts and photos and require a Key Fact Statement.
• Never pay extortion demands or send money to personal UPI IDs.