A loan app is harassing me and calling my contacts.
Simple answer
That is not allowed. RBI rules bar lenders and their agents from threatening or shaming you, and legal lending apps cannot access your contacts. Threats and morphed photos are also crimes. Report to 1930 or the police — but a genuine loan still has to be repaid.
Real-life examples
Imran borrowed ₹5,000 on an instant loan app. A week later it demanded ₹12,000 and sent morphed photos of him to his contacts. The app was not in RBI's directory of lending apps. He saved the messages, reported on the cyber crime portal and RBI's Sachet portal, and warned his contacts.
Kavya missed an EMI on a loan from an RBI-registered NBFC's app. The lender can remind her to pay, but its agents cannot threaten her or call before 8 am or after 7 pm. She complained to the lender's grievance officer, and then to the RBI Ombudsman.
What should you do?
- 1Don't panic, and don't pay extra to unknown UPI IDs. Save screenshots of threats, call recordings and messages sent to your contacts.
- 2Check RBI's Digital Lending Apps directory on its website, and see which bank or NBFC is named in your loan papers.
- 3For a regulated lender, complain to its grievance officer. If it is not resolved in 30 days, complain to the RBI Ombudsman at cms.rbi.org.in.
- 4For threats, abuse or morphed photos, report on cybercrime.gov.in or call 1930, and file a police complaint.
- 5Tell your contacts the messages are harassment. After saving evidence, remove the app's phone permissions.
- 6Feeling overwhelmed? Call Tele-MANAS at 14416 — free and confidential.
Exceptions & limits
- The law protects you from harassment, not from the debt. A genuine loan must still be repaid as agreed; you can ask the lender for more time.
- Apps not linked to an RBI-regulated lender are outside RBI's rules, so the RBI Ombudsman cannot help. Their threats are still crimes — go to the police and the cyber crime portal.
Official legal reference
Reserve Bank of India (Digital Lending) Directions, 2025
Rules for digital loans by RBI-regulated lenders: apps cannot access contacts or call logs; a Key Fact Statement and a grievance officer are mandatory.
RBI circular: Outsourcing of Financial Services – Responsibilities of regulated entities employing Recovery Agents (12 August 2022)
Recovery agents must not intimidate, humiliate or harass borrowers, or call them before 8 am or after 7 pm.
Bharatiya Nyaya Sanhita, 2023 — Section 351
Criminal intimidation: threatening harm to your body, reputation or property; extra jail if the threat is anonymous.
Earlier: IPC Sections 503, 506, 507Read the official textBharatiya Nyaya Sanhita, 2023 — Section 356
Defamation: words or images shared with others that harm your reputation; up to 2 years' jail, fine or community service.
Earlier: IPC Sections 499, 500Read the official textInformation Technology Act, 2000 — Section 67
Publishing or sending obscene material electronically, such as morphed nude photos: up to 3 years' jail and fine on first conviction.
Where to get help
National Cyber Crime Helpline
Report online financial fraud immediately so the money trail can be frozen.
RBI Ombudsman (CMS)
Complain about a bank, NBFC or payment app if they don't resolve your complaint.
Tele-MANAS (mental health)
Free, confidential 24x7 mental health support if you feel overwhelmed (also 1-800-891-4416).
Source & status
- Applies to
- All of India
- Law in force since
- 8 May 2025
- Legal review
- Draft — awaiting lawyer review
Educational information, not legal advice for your case. Exact facts and the law that applies matter — speak to a lawyer before acting.