Loan App Harassment in India: What the RBI Says and What You Can Do

March 2026 · India · Finance · RBI Digital Lending Guidelines 2022

You missed a payment on a short-term loan app. Within hours, your mother gets a call. Your manager receives a message. A WhatsApp group with your contacts gets a post calling you a defaulter. This is not a grey area — it is illegal, and the Reserve Bank of India has said so explicitly.

What the RBI Digital Lending Guidelines 2022 Say

The RBI issued its Digital Lending Guidelines in August 2022. They apply to all regulated entities (banks, NBFCs) and to the lending service providers (LSPs) and digital lending apps that work with them. The key prohibition is direct:

Regulated entities and LSPs shall ensure that loan recovery is carried out in a manner consistent with the RBI guidelines on fair practices code for lenders. Recovery agents shall not resort to intimidation or harassment.

Specifically, the guidelines ban: RBI DLG 2022

• Contacting the borrower's family members, friends, or employer for recovery purposes
• Accessing phone contacts beyond what is strictly necessary for the loan disbursement process
• Sending messages to third parties about the borrower's debt status
• Using intimidation, threats, or public shaming tactics

The Consent Argument is Invalid

Most loan apps bury a contact access permission in their app installation terms and claim this is "consent" to contact your contacts for recovery. This argument does not hold up.

Consent to data collection at installation cannot authorise a later use — recovery harassment — that was not clearly and specifically described at the time of consent. The IT Act 2000 and information privacy principles require that data be used only for the purpose for which it was collected. Accessing contacts to disburse a loan is not the same as authorising contact of those people for debt recovery. IT Act 2000

Additionally, IPC Section 503 covers criminal intimidation — threatening to harm a person's reputation to compel action. Threatening to notify an employer falls squarely within this. IPC 503

What You Can Do

1. Send a written demand — email or message the app's support citing RBI Digital Lending Guidelines 2022, demand immediate cessation of all third-party contact, and state you will file with the RBI Ombudsman within 24 hours if it continues.
2. File with the RBI Ombudsman — at cms.rbi.org.in. This is free and the company is required to respond within a set timeline. Mention the specific guideline violated.
3. File a police complaint — for IPC Section 503 (criminal intimidation). Bring screenshots of the messages sent to your contacts.
4. Complaint to the National Consumer Helpline — 1800-11-4000 (toll free) or consumerhelpline.gov.in.
5. RBI's Sachet portal — for complaints about unauthorised lending apps: sachet.rbi.org.in.

Documentation Matters

Before escalating, screenshot everything: the messages sent to your contacts, the call logs if possible, and all communication from the app. Your complaint will be much stronger with concrete evidence of the harassment.

Related Guides

• How to Dispute a Denied Refund — EU, UK, US, India
• AI Denied My Insurance Claim: Your Right to Human Review
• 🇮🇳 India Consumer Rights — Full Guide