Digital Lending Rules 2025: A Borrower’s Safety Checklist
Reviewed by CA Nikhil Gupta · Last reviewed 24 June 2026
1. Current position
The Reserve Bank of India (Digital Lending) Directions, 2025 apply to regulated banks, co-operative banks, NBFCs including housing finance companies, and specified institutions. They require credit assessment, KFS and APR disclosure, direct disbursal and repayment flows, cooling-off, grievance officers, data controls, credit-bureau reporting and reporting of digital lending apps by regulated entities.
For broader context, see the RBI Digital Lending Directions 2025: The Borrower’s Rights Checklist.
2. How it works in practice
The DLA directory is not an RBI endorsement of an app or return promise. RBI states that app information is submitted by regulated entities and inclusion should not be marketed as authorisation. Borrowers should verify the lender on its official website and avoid apps demanding contacts, call logs or unnecessary device data.
For the connected rule, example or next step, see Buy Now Pay Later in India: RBI Rules, Costs and Borrower Checklist.
A reliable decision separates the legal rule, the commercial contract and the actual cash flow. A regulatory permission does not guarantee suitability, and a product label does not override the substance of the transaction.
3. Key rules and measurement boundaries
| Item | Position | Why this specific boundary exists |
|---|---|---|
| Borrower document | KFS with APR and charges | Before the 2025 Directions, apps disclosed a headline interest rate that hid processing fees and insurance add-ons; APR forces the true annualised cost into one number you can actually compare across lenders. |
| Fund flow | Borrower/end-beneficiary and regulated entity | Routing money through an app’s own pooled account was the exact mechanism that let unregistered “loan apps” disburse and collect without ever being a licensed lender — direct flow removes that laundering layer. |
| Complaint escalation | Regulated entity, then RBI CMS if eligible | The LSP (the app you actually used) usually has no independent grievance obligation to you — the regulated entity behind it is the one RBI holds accountable, so complaints must start there before RBI CMS will accept them. |
4. Practical example
A loan app offers ₹20,000 instantly but credits ₹17,000 after an unexplained deduction and demands ₹22,000 in seven days. The borrower should compare the KFS, APR and disbursal record. If the lender is hidden or repayment is sought to a personal account, stop and report the conduct rather than paying an unknown collector.
5. Action checklist
- Confirm the regulated lender and its official website.
- Read KFS, APR, fees, penal charges and repayment schedule.
- Check that disbursal and repayment follow permitted account flows.
- Use cooling-off rights within the disclosed period if appropriate.
- Deny unnecessary device permissions and preserve consent records.
6. Evidence and document checklist
- KFS, sanction letter and signed loan agreement.
- Bank statement showing disbursal and repayment.
- App permissions and privacy policy screenshots.
- Recovery-agent identity communication.
- Complaint reference and credit report.
7. Common mistakes
- Comparing only the disbursed cash with instalment.
- Assuming app listing equals RBI approval.
- Paying a collector’s personal account.
- Giving access to contacts or call logs.
8. Red flags
- No lender name or KFS.
- Threats to contact family or publish data.
- Upfront fee to “release” an approved loan.
- Automatic limit increase without request.
9. Complaint or escalation route
Complain to the regulated entity and its nodal grievance officer. If rejected, unsatisfactory or unanswered for 30 days, use RBI CMS where covered. Harassment, extortion or data misuse should also be reported to police/cybercrime authorities.
10. Official sources
- RBI — Digital Lending Directions, 2025
- RBI — Digital lending FAQs
- RBI — Integrated Ombudsman Scheme FAQs
Information date: 20 June 2026. Rates, thresholds, portal processes and live proceedings can change; use the linked official material for the transaction or filing date.
For the connected rule, example or next step, see Loan App Recovery Data Misuse: Contacts, Harassment and Evidence.
Frequently Asked Questions
Source and review trail
Use the current official instrument, portal or regulator publication before acting. This panel separates the category authority from page-specific references.
- Primary category
- Banking, RBI & Payments
- Official starting point
- www.rbi.org.in
Page source links
- See Official sources above for the RBI Digital Lending Directions/FAQ citations used on this page — cited once there to avoid duplicate reference blocks.
- RBI Master Directions index
- RBI notifications
For the connected rule, example or next step, see Illegal Loan App Trap: RBI Digital Lending Checklist Before Borrowing.
For the connected rule, example or next step, see Fintech Data Sharing: Loan Apps, Consent and Grievance Records.
For the connected rule, example or next step, see RBI Digital Lending: When Loan Apps Became a Compliance Case Study.