How-To · Digital Lending · Last verified October 2026
How to Handle Loan App Harassment (2026)
Loan app harassment, abusive and threatening calls, messages blasted to the contacts in your phone, and morphed photos, is illegal in India, and it does not become legal just because you took the loan. A lender can seek repayment, but it cannot threaten you, shame you to your family and colleagues, or misuse your data. This guide, for borrowers facing coercive recovery, sets out how to stop it: what RBI rules forbid, where to complain, when it becomes a police matter, and how to protect yourself and your data. It is general information, not legal advice. Last verified October 2026.
- Harassment is illegal: owing money is civil; threats, abuse, contact-list shaming and morphed photos are crimes.
- RBI rules: the 2022 digital lending guidelines bar hidden lenders, blanket contact access, and undisclosed recovery agents.
- Complain: use the RBI Sachet portal for the app, and the RBI Ombudsman where a regulated bank or NBFC is behind it.
- Police: report threats, blackmail and data misuse on cybercrime.gov.in and 1930, and lodge an FIR or Zero FIR.
- Protect data: revoke contact and gallery permissions, save screenshots of what the app accessed, and never pay a blackmailer.
01The short answer
To stop loan app harassment:
- Keep evidence of every abusive call, message and screenshot, with dates.
- Find the regulated lender behind the app and complain to its grievance officer, then the RBI Ombudsman.
- Complain about the app on the RBI Sachet portal, especially for an unregulated app.
- Report threats, blackmail and contact-list abuse on cybercrime.gov.in and 1930, and lodge an FIR.
Harassment is illegal whether or not the loan is due. Owing money is a civil matter; threatening you, shaming you to your contacts or morphing your photos is a crime.
02Know your rights
Two ideas protect you. First, a debt does not suspend your rights: even if you are behind on a genuine loan, the lender must recover it lawfully, and cannot threaten, abuse or publicly shame you. Second, much of what loan apps do, calling your whole contact list, abusing family, or sending morphed images, is not recovery at all but extortion and criminal intimidation.
So separate the two questions. Whether you owe the money is one issue, to be settled with the lender or in a civil or consumer forum. The harassment is a second, independent issue you can act on at once, regardless of the first.
03What RBI digital lending rules forbid
The RBI Guidelines on Digital Lending, 2022 set rules for regulated lenders and the apps that work for them. Among the protections:
- The app must disclose the regulated bank or NBFC behind it; it cannot pose as the lender while hiding the backend entity.
- A lender may access only the data it genuinely needs; blanket access to your phone contacts, gallery and media is not allowed.
- If a recovery agent is assigned, the lender must tell you the agent details before the agent contacts you.
- Loan terms, fees and grievance channels must be disclosed up front.
An app that harvests your contacts to shame you, or hides who the real lender is, is breaking these rules, and that breach is itself a ground for complaint to RBI.
04Find the real lender
Many predatory apps are fronts. Your first investigative step is to identify the regulated lender, the bank or NBFC named in the loan agreement, the sanction letter or the app disclosures. This matters because the complaint route differs: against a regulated lender you can use the RBI Ombudsman, while a purely unregulated app is a matter for Sachet and the police.
If the app will not reveal any regulated lender and has no traceable entity, treat it as an illegal operation and move straight to the Sachet portal, the cybercrime portal and the police.
05Complain: Sachet and the RBI Ombudsman
Use two RBI channels. The Sachet portal (sachet.rbi.org.in) takes complaints from the public against lending apps and unauthorised schemes; complaints about apps run by entities RBI does not regulate are routed to the Registrar of Companies or the state Economic Offences Wing.
Where a regulated bank or NBFC is behind the app, first complain to its grievance officer, and if it is not resolved in the time allowed, escalate to the RBI Integrated Ombudsman Scheme, 2021, which is free and can direct the lender to set things right and award compensation for the loss and the harassment caused.
06When it is a police matter
The moment harassment turns to threats, blackmail, abuse of your contacts or morphed photos, it is a crime, and the lender rules are no longer the main point. Report on the National Cyber Crime Reporting Portal at cybercrime.gov.in, call 1930 if money has been extorted, and lodge an FIR at a police station. If the station declines on jurisdiction, insist on a Zero FIR.
Likely offences include criminal intimidation, extortion and defamation under the Bharatiya Nyaya Sanhita, 2023, and offences under the Information Technology Act, 2000 for misuse of your data and images. For the reporting walk through, see how to report cyber crime and online fraud and how to file a cyber crime complaint.
07Protect your data
Cut off the fuel for the harassment. Revoke the app permissions to your contacts, gallery, camera and storage in your phone settings, and uninstall the app once you have saved the evidence. Take screenshots first that show what the app had access to, because that proof supports your complaint.
Warn the people whose numbers the app may have harvested, so a shaming message does not catch them off guard. Do not pay anything to a threat; paying a blackmailer invites more demands. Route any genuine repayment only through the regulated lender official channel.
08Where Claw fits
Claw is an all-in-one legaltech platform for Indian advocates, law firms, and corporate legal teams, combining AI-based case search, an AI legal assistant (Legal GPT), case management, and compliance automation across all Indian courts and tribunals.
Be clear on the limits. The complaint itself goes to the Sachet portal, the RBI Ombudsman, the cybercrime portal and the police; Claw is not that filing and does not replace it. Where Claw helps is the dispute and case layer that follows: it tracks the resulting FIR led court matters, consumer and banking ombudsman escalations and appeals, across 9,102 courts, benches and forums, with alerts and monitoring, so a borrower or an adviser can follow the matter as it moves. Its Legal GPT researches across 30 crore+ judgments, with Supreme Court decisions from 1950 and High Court decisions from 1990. Results return in under 5 seconds, and Claw does not train its AI models on your documents. To check whether a lender or an NBFC behind an app has existing litigation, run a case search across Indian courts by name. A clean result means nothing was found on the forums and date searched, and this is general information, not legal advice.
Related reading: how to report cyber crime and online fraud, how to file a cyber crime complaint, and how to respond to cyber defamation and get content taken down.
09Sources and further reading
- RBI Sachet (complaints against lending apps): sachet.rbi.org.in
- Reserve Bank of India (digital lending rules and Ombudsman): rbi.org.in
- National Cyber Crime Reporting Portal (and helpline 1930): cybercrime.gov.in
- Claw: clawlaw.in
This guide is general information, not legal advice. If you are threatened, report to the police and cybercrime.gov.in at once.
10Frequently asked questions
Is loan app harassment illegal even if I owe the money?
Yes. Owing money is a civil matter, to be settled with the lender or in a civil or consumer forum. Threatening you, abusing you, calling or messaging the contacts in your phone to shame you, or morphing your photos is not lawful recovery, it is criminal conduct such as criminal intimidation, extortion and defamation. You can act against the harassment at once, independently of whether the loan is actually due.
Where do I complain about a harassing loan app?
Use two RBI channels. Complain about the app on the Sachet portal at sachet.rbi.org.in, which handles complaints against lending apps and routes those against unregulated apps to the Registrar of Companies or the state Economic Offences Wing. Where a regulated bank or NBFC is behind the app, first use its grievance officer, then escalate to the free RBI Integrated Ombudsman Scheme, 2021. For threats and data misuse, also report on cybercrime.gov.in and lodge an FIR.
What do RBI digital lending rules say about recovery?
The RBI Guidelines on Digital Lending, 2022 require the app to disclose the regulated bank or NBFC behind it, bar blanket access to your phone contacts, gallery and media, require loan terms and grievance channels to be disclosed up front, and require the lender to tell you a recovery agent details before the agent contacts you. An app that harvests your contacts to shame you or hides the real lender is breaking these rules, which is itself a ground to complain to RBI.
What should I do if a loan app threatens me or messages my contacts?
Treat it as a crime. Save every call log, message and screenshot with dates, report on the cybercrime portal at cybercrime.gov.in, call 1930 if money has been extorted, and lodge an FIR, insisting on a Zero FIR if your local station declines on jurisdiction. Revoke the app permissions to your contacts and gallery, warn the people whose numbers may have been harvested, and never pay a blackmailer, because paying invites further demands.
Can I stop a loan app from accessing my contacts and photos?
Yes. Go to your phone settings and revoke the app permissions to contacts, gallery, camera and storage, then uninstall the app once you have saved the evidence. Take screenshots first that show what the app had access to, because that supports your complaint. Under the RBI 2022 rules a lender may access only the data it genuinely needs, so blanket access to your contacts and media was not permitted in the first place.