Illegal Loan App Trap: RBI Digital Lending Checklist
The fastest loan can become the costliest mistake if the lender is unauthorised and the app accesses contacts, photos or location data.
Detailed analysis
RBI’s digital lending framework focuses on regulated entities and lending service providers. Borrowers should verify the regulated lender, KFS/cost, disbursal route, consent, data permissions and grievance channel before borrowing.
Practical example
A borrower takes ₹8,000 from an app and receives only ₹5,600 after upfront fees. Within days, recovery agents threaten contacts. Evidence: app name, lender name if disclosed, loan agreement, payment proof, recovery messages and complaint record.
Evidence and control checklist
| Area | What to check | Evidence to save |
|---|---|---|
| Risk trigger | What event makes loan app borrowing risky for a household. | Statement, app screenshot, policy copy or transaction proof. |
| Money impact | EMI, interest, penalty, tax, lock-in, liquidity or claim impact. | Calculator working, schedule and assumptions. |
| Evidence file | Documents needed before complaint, claim, investment or decision. | PDF folder with statements, emails and screenshots. |
| Decision rule | What action to take, avoid or verify before proceeding. | Checklist and reviewer/partner sign-off. |
| Complaint/escalation | Where to complain or escalate if money is stuck or fraud happens. | Complaint acknowledgement and timeline tracker. |
Common mistakes
- Borrowing from app without lender name.
- Ignoring upfront deductions and APR.
- Granting contact/photo access casually.
- Paying recovery agents outside official channel.
- Not saving harassment evidence.
Official reference framework
Based only on official RBI/Sachet, SEBI, IRDAI, PFRDA and Income Tax Department source pages listed below. Check latest circulars, product documents and regulator portals before acting.
Official sources used
This article is source-limited to official RBI/Sachet, SEBI, IRDAI, PFRDA and Income Tax Department material. Source validation date: 17 June 2026. Verify final positions with latest circulars, product documents, policy terms and regulator portals before acting.
For the connected rule or filing step, see Fintech Data Sharing: Loan Apps, Consent and Grievance Records.
- RBI: Guidelines on Digital Lending FAQs
- RBI: Default Loss Guarantee in Digital Lending FAQs
- PIB/RBI caution against unauthorised digital lending platforms/mobile apps
- RBI Sachet: report/check unauthorised deposit or scheme activity
FAQs
Cross-check the lender's name (not just the app's brand name) against the RBI's list of regulated entities and lending service providers, and verify it independently on RBI Sachet rather than trusting the app's own claims or app-store rating.
The Key Fact Statement (KFS) must show the annualised percentage rate (APR), all fees, and the exact disbursal amount after deductions — not just the headline loan amount advertised in the app.
No. RBI's digital lending guidelines restrict data access to what is strictly necessary for the loan, require explicit borrower consent for each data category, and prohibit using contact-list access for recovery harassment.
Save every message, call log and screenshot, then file a complaint with the regulated lender's grievance officer and, if unresolved or the lender is unauthorised, report it on RBI Sachet.
The lender's name not being disclosed anywhere in the app or loan agreement — a genuinely regulated digital lending arrangement always names the actual bank or NBFC behind the loan, not just the app brand.
Source and review trail
Use the current official instrument, portal or regulator publication before acting. This panel separates the category authority from page-specific references.
- Primary category
- Banking, RBI & Payments
- Official starting point
- www.rbi.org.in