Fake loan apps in India: signs to check before you install

Fake loan apps in India operate without a confirmed banking licence, demand upfront fees, and may misuse your phone data. Learn how to check if a loan app is on RBI's list, read its phone permissions, and report illegal harassment.

By Qrates research desk · 2026-11-01

Fake loan apps in India operate without a confirmed banking licence, demand upfront fees, and may misuse your phone data. You can see an app's publisher, the licences on record, whether it reads your contacts or SMS, and what users report in the Qrates lending apps directory. This guide explains how to do a genuine loan app check and what to do if you are facing fake loan app harassment.

Quick answer: How to spot fake loan apps in India

Illegal loan apps in India usually share three clear signs. They operate without a confirmed RBI licence, they ask for contact list permission, and they often demand an upfront processing fee.

A genuine loan app must name the bank or NBFC behind its loan offer. If an app demands full repayment in a few days or requires an APK download outside the official app store, treat it as a warning sign.

Feature	Genuine loan app	Fake loan app
Licence	Displays RBI registered NBFC	Operates without a confirmed licence
Permissions	RBI rules bar access to contacts and files or media	Asks for contact list permission
Fees	RBI's booklet says the processing fee is deducted from the sanctioned loan	Demands upfront fees before approval
Download	Official app store	APK download link via WhatsApp

Licence and registration: The RBI rule for digital lending

The mandatory NBFC partnership

RBI says legitimate lending can be done by banks, RBI registered NBFCs and entities regulated by state governments under money lending laws. RBI's Digital Lending Directions, 2025 cover apps used by banks and NBFCs. An app run by a service provider only connects you to the lender. It cannot lend its own money if it does not hold a valid licence.

The Key Fact Statement requirement

Lenders must give you a Key Fact Statement before you sign any loan agreement. It must include the annual percentage rate, which covers all charges, and the repayment schedule. A fee or charge not listed in it cannot be charged without your explicit consent. If an app hides these numbers until after you accept the money, it is breaking the rules.

Regulator warnings and red flags to watch for

Upfront fees before loan approval

The RBI warns against paying a fee to get a loan approved. Its BE(A)WARE booklet says the processing fee charged by NBFCs and banks is deducted from the sanctioned loan amount and not demanded upfront in cash. It also says never to pay a processing fee in advance. If an app asks you to send money first, it is a major red flag.

Guaranteed approvals without proper KYC documents

Apps that operate without a confirmed licence often promise guaranteed money without checking your CIBIL score. They also skip asking for proper KYC documents. RBI's booklet says genuine loan providers never offer money without verifying documents and credentials. RBI's Directions also require lenders to collect your age, occupation and income details before lending.

APK downloads outside the Play Store

Apps that send you a link on WhatsApp to download an APK file are bypassing Google Play Store security checks. Google Play accepts personal loan apps in India only with a submitted licence and only if they appear on RBI's list of digital lending apps. RBI's booklet also says never to download apps from unverified sources.

What illegal loan apps can read on your phone

Contact list permission

RBI's Directions say digital lending apps of banks and NBFCs must not access your phone contact list, call logs or telephony functions. One-time access to camera, microphone or location is allowed for onboarding or KYC, with your consent. Illegal apps are not following these rules, and RBI has warned about misuse of phone data.

Photo gallery and media access

RBI's Directions also bar access to files and media on your phone, and Google Play prohibits personal loan apps from reading photos and contacts. If a loan app asks for your gallery, do not allow it. RBI's booklet says to give only the permissions an app really needs.

What users complain about: Blackmail and harassment

Very short repayment periods

RBI says fraudulent loan apps offer instant and short-term loans and may charge much higher interest. Check how much reaches your bank account and how much you must repay, and by when. Google Play does not allow personal loan apps that require full repayment in 60 days or less.

Fake loan app harassment tactics

RBI has warned about high-handed recovery methods and misuse of phone data by unauthorised apps. On Qrates app pages, the problems users report include calls to family and contacts, abusive language and threats.

How to check if a loan app is RBI registered yourself

Step 1: Find the NBFC name on the app

Open the app description on the Play Store or the company website.
Look for the official NBFC name or bank partner.
Google Play requires platform-only apps to name all their NBFC and bank partners in the app description.

Step 2: Check RBI's list of digital lending apps

Go to the official RBI website. Under Citizen's Corner, open "DLA's deployed by Regulated Entities". Menu names can change.
Look for the app and its lender. You can also search for the exact NBFC name in the list of registered non-banking financial companies.
If the name is missing, treat the app as not confirmed. This list shows what lenders report. RBI says it does not validate the list, so a listing is not a guarantee. You can also check if a loan app is RBI registered step by step to ensure you are using a safe platform.

Step 3: Check contact details and use the Sachet portal

Look for a working customer care number and a physical office address on the app. RBI's booklet says to check these.
If you suspect an illegal app, you can report it on the RBI Sachet portal at sachet.rbi.org.in. The government describes Sachet as a place to lodge complaints against entities collecting money illegally.
Do not share copies of your KYC documents with an app you cannot verify.

What to do if a fake loan app is blackmailing you

Block and uninstall immediately

First take screenshots of the threats, messages and app details. Do not pay in response to threats, because paying may not end them. Then revoke all phone permissions in your settings and uninstall the app.

Report on the Chakshu portal

Report suspected fraud calls, SMS and WhatsApp messages on Chakshu, on the Department of Telecommunications Sanchar Saathi site at sancharsaathi.gov.in/sfc. Chakshu is not for money already lost. If you have lost money, call the cyber crime helpline 1930.

File a cyber crime complaint

File a formal complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. Include screenshots of the threats, the abusive messages, and the app details. This creates an official record of the threats. The RBI Ombudsman handles complaints against regulated entities such as banks and NBFCs. If the app is linked to one, learn how to complain to the RBI Ombudsman.

FAQs

How to check if a loan app is RBI registered?

Find the NBFC name in the app details on the Play Store or the company website. Check the app in RBI's list of digital lending apps and the NBFC in RBI's list of registered NBFCs. You can follow our guide on how to check if a loan app is RBI registered for a detailed walkthrough.

Loan app fake hai ya real kaise pata kare?

RBI's rules bar apps of banks and NBFCs from contact list access, and its booklet says they never ask for fees in advance. Offers must name the lender before you accept. You should also compare loan and credit apps to see how legitimate lenders present their terms.

Can loan apps access my contacts?

RBI rules state that digital lending apps of banks and NBFCs must not access your phone contacts or files and media. If an app demands this permission, treat it as a warning sign. You can also check its permissions on the app store page.

Is it safe to give PAN card to loan apps?

It is only safe if you have done a genuine loan app check and confirmed the app is backed by an RBI registered NBFC. Never share your PAN card with an app that you cannot verify.

The short version

Genuine loan apps must name their bank or NBFC lender and the lender must give you a Key Fact Statement.
RBI rules bar digital lending apps of banks and NBFCs from your phone contact list and files or media.
Illegal apps often demand upfront fees, offer very short loans, and use downloaded APK files.
Victims of harassment can report calls and messages on Chakshu and file a complaint on the National Cyber Crime Reporting Portal. If money is lost, call 1930.

You can visit the Qrates lending apps directory to see the licences on record and what users report.

Sources

Disclaimer

Qrates is an information directory. It takes no commission from any company listed and does not recommend products. Figures are taken from the sources named and dated, and they change; check the company's own page before you decide. This is not investment, credit, insurance or tax advice for your situation. A licence or a clean record today does not guarantee how a company behaves later. To complain, use the regulator's own portal (RBI CMS, SEBI SCORES or IRDAI Bima Bharosa).