The app name on a phone screen is not the legal lender. A safe digital-loan check starts by identifying the RBI-regulated bank or NBFC behind the offer, then checking whether the app is associated with that regulated entity, whether a Key Facts Statement is issued, and whether money flows directly between borrower and regulated entity as required by the digital-lending framework.
Finin2min summary
Identify the legal lender before sharing PAN or bank details.
Treating an RBI DLA listing as an endorsement of pricing or suitability.
Screenshot of app name/developer and claimed lender
Rules in practice
| Rule |
|---|
| RBI digital-lending framework requires clear identification of the regulated entity and lending service provider. |
| Consumers should verify the lender and app rather than relying on an app-store listing or social-media advertisement. |
| KFS, APR, grievance details and direct disbursal/repayment path should be checked before borrowing. |
| Permissions, data collection and recovery conduct should be reviewed against RBI digital-lending rules. |
RBI’s DLA directory is intended to help customers verify the relationship between digital lending apps and regulated entities; it is not a product endorsement or credit-quality rating.
The borrower should identify the bank or NBFC before accepting terms. A technology platform or lending service provider may facilitate the journey without being the balance-sheet lender.
The KFS should show APR and charges in a standardised way, allowing the borrower to compare the economic cost rather than looking only at a monthly interest number.
Disbursal and repayment flows deserve scrutiny. Requests to send instalments to a personal UPI ID or unrelated wallet are a strong reason to stop and verify.
Permissions requested by the app should be proportionate. Access to contacts, photos or unrelated device data can create privacy and recovery-abuse risks.
A genuine grievance route should identify the regulated entity and nodal/grievance officer; a support chat with no legal lender details is not enough.
Fraudsters can copy logos and names. Verification should move from the app to RBI/bank/NBFC channels, not from an advertisement to another advertisement.
A five-point legitimacy test before accepting the loan
The RBI website now exposes a “DLAs deployed by Regulated Entities” route, but the borrower should still verify the legal lender. Repository data is reported by regulated entities; it helps test an app’s claimed association but it is not a credit rating or RBI endorsement of the app. Cross-check the same relationship on the bank/NBFC’s own website and in the sanction/KFS documents.
Money flow is another powerful authenticity check. RBI’s digital-lending framework generally requires disbursal into the borrower’s bank account and servicing/repayment directly between the borrower and the regulated entity, subject to narrow specified exceptions. A demand to route EMI through a personal account, wallet or unknown collection account is a red flag that deserves verification before any payment.
The KFS should identify the all-inclusive APR and key charges before the contract is executed. The borrower should also know the grievance officer and the identity of any Lending Service Provider. An app-store listing, high download count or professional-looking logo cannot substitute for these regulatory markers.
| Situation | Practical treatment |
|---|---|
| App claims it works for an NBFC | Verify the NBFC on RBI’s regulated-entity records and confirm the app/LSP relationship on official sources. |
| App asks for a processing fee to a personal UPI ID | Stop and verify; RBI digital-lending rules place LSP fees on the regulated entity rather than allowing an LSP to collect them directly from the borrower. |
| Loan offer appears but no KFS is provided | Do not rely on the headline rate; obtain the KFS/APR and lender identity before accepting. |
Worked example 1
A borrower sees an instant ₹80,000 loan advertisement promising “1.2% monthly interest”. Before granting permissions, she notes the app name and claimed NBFC, checks the claimed lender and its digital-lending association through official sources, demands the KFS, and converts the quoted costs into APR. The app then asks her to repay to a personal UPI handle and refuses to name a grievance officer. Those inconsistencies are sufficient to abandon the application and report the suspicious channel rather than testing it with a small payment.
Worked example 2
A borrower receives a WhatsApp link for an app offering ₹75,000 instantly. The app uses the logo of a known NBFC but asks for a ₹2,999 “unlock fee” to an individual UPI ID. Before paying, the borrower checks the NBFC’s official site and the RBI DLA route and finds no matching relationship. The correct response is to stop, preserve screenshots, avoid sharing KYC/OTP data and report the suspicious app through appropriate law-enforcement or RBI/Sachet channels rather than trying to recover the fee later.
Common mistakes to avoid
- Treating an RBI DLA listing as an endorsement of pricing or suitability.
- Checking only the app-store page instead of the legal lender and LSP relationship.
- Paying fees to a personal or unrelated account.
- Allowing unnecessary access to contacts, photos or device data without understanding the consent request.
Action checklist
- Identify the legal lender before sharing PAN or bank details.
- Cross-check the app-lender association using official RBI/regulator information.
- Read the KFS and compare APR, not only the nominal rate.
- Reject requests to repay to personal or unrelated accounts.
- Review device permissions before installation or consent.
- Save the lender’s grievance-contact information.
- Report impersonation or suspected fraud through official channels promptly.
Records to retain
- Screenshot of app name/developer and claimed lender
- KFS, sanction letter and loan agreement
- Bank/NBFC webpage showing the DLA/LSP relationship
- Payment account details and grievance officer information
Questions users actually ask
Does an RBI-listed DLA mean RBI guarantees the loan app?
No. The directory helps verify an app’s reported association with a regulated entity; it is not an endorsement of the product or its pricing.
Where should loan repayment normally go?
Under RBI’s digital-lending framework, servicing and repayment should generally flow directly between the borrower and the regulated entity, subject to specified exceptions.
Should the borrower pay an LSP fee directly?
RBI’s digital-lending guidelines require fees payable to LSPs in the credit-intermediation process to be paid by the regulated entity, not charged by the LSP directly to the borrower.
What is the quickest scam check?
Identify the bank/NBFC, verify the app relationship on official sources, obtain the KFS, and confirm the bank account into which money will be disbursed and repaid.
Primary and official sources
- RBI — Digital Lending Guidelines
- RBI — Annual Report discussion of public DLA directory
- RBI — Key Facts Statement framework
Educational only. Verify official sources before acting.