You missed a payment on a short-term loan app. Within hours, your mother gets a call. Your manager receives a message. A WhatsApp group with your contacts gets a post calling you a defaulter. This is not a grey area — it is illegal, and the Reserve Bank of India has said so explicitly.
What the RBI Digital Lending Guidelines 2022 Say
The RBI issued its Digital Lending Guidelines in August 2022. They apply to all regulated entities (banks, NBFCs) and to the lending service providers (LSPs) and digital lending apps that work with them. The key prohibition is direct:
Regulated entities and LSPs shall ensure that loan recovery is carried out in a manner consistent with the RBI guidelines on fair practices code for lenders. Recovery agents shall not resort to intimidation or harassment.
Specifically, the guidelines ban: RBI DLG 2022
- Contacting the borrower's family members, friends, or employer for recovery purposes
- Accessing phone contacts beyond what is strictly necessary for the loan disbursement process
- Sending messages to third parties about the borrower's debt status
- Using intimidation, threats, or public shaming tactics
The Consent Argument is Invalid
Most loan apps bury a contact access permission in their app installation terms and claim this is "consent" to contact your contacts for recovery. This argument does not hold up.
Consent to data collection at installation cannot authorise a later use — recovery harassment — that was not clearly and specifically described at the time of consent. The IT Act 2000 and information privacy principles require that data be used only for the purpose for which it was collected. Accessing contacts to disburse a loan is not the same as authorising contact of those people for debt recovery. IT Act 2000
Additionally, IPC Section 503 covers criminal intimidation — threatening to harm a person's reputation to compel action. Threatening to notify an employer falls squarely within this. IPC 503
What You Can Do
- Send a written demand — email or message the app's support citing RBI Digital Lending Guidelines 2022, demand immediate cessation of all third-party contact, and state you will file with the RBI Ombudsman within 24 hours if it continues.
- File with the RBI Ombudsman — at cms.rbi.org.in. This is free and the company is required to respond within a set timeline. Mention the specific guideline violated.
- File a police complaint — for IPC Section 503 (criminal intimidation). Bring screenshots of the messages sent to your contacts.
- Complaint to the National Consumer Helpline — 1800-11-4000 (toll free) or consumerhelpline.gov.in.
- RBI's Sachet portal — for complaints about unauthorised lending apps: sachet.rbi.org.in.
Documentation Matters
Before escalating, screenshot everything: the messages sent to your contacts, the call logs if possible, and all communication from the app. Your complaint will be much stronger with concrete evidence of the harassment.
Frequently Asked Questions
Can loan apps legally call my family if I miss a payment?
No. RBI Digital Lending Guidelines 2022 prohibit recovery agents from contacting your family, friends, or employer for debt collection.
Does app install consent allow contact access for recovery?
No. Consent given at installation for one purpose cannot authorise later use for harassment. The IT Act requires data to be used only for the purpose collected.
Where do I complain about loan app harassment in India?
File with the RBI Ombudsman at cms.rbi.org.in, the National Consumer Helpline (1800-11-4000), or your local police for criminal intimidation under IPC Section 503.
Related Guides
Fix AI has a case where you face exactly this scenario — a QuickCash loan recovery bot citing "Recovery Assistance Clause" to justify contacting your family. Practice the arguments before you need them for real.
Practice This Dispute Free →