Loan App Harassment: What to Do About Recovery Agent Blackmail

Unregulated instant-loan apps have built a well-documented pattern: request excessive phone permissions at install, extract a small loan, then use contact-list access and threats to pressure repayment — often contacting people who have nothing to do with the loan.

What RBI's rules actually say

RBI issued formal directions on 6 August 2026 (effective 1 January 2027, though harassment has always violated existing RBI norms) that explicitly prohibit:

• Threatening, abusive, or intimidating language toward a borrower or guarantor.
• Anonymous or excessive calls, or contact outside permitted hours (recovery calls and visits are restricted to 8am–7pm).
• Contacting or harassing a borrower's relatives, friends, guarantor, or co-workers to pressure repayment — this is explicitly barred.
• Public humiliation or threats to a borrower's reputation, assets, or family.
• Field visits without at least one day's prior notice, and agents must carry identification and a bank authorization letter.

Is this app even legal?

Only banks, NBFCs, and entities regulated by state governments under statutory provisions are permitted to offer lending in India. Many apps behind harassment complaints aren't regulated at all — check whether the app discloses its partner bank or NBFC upfront, which is now mandated. If it doesn't, that's a significant red flag on its own.

What to do if you're being harassed

• Don't engage with threats. Document everything — screenshots of messages, call logs, and any threats made — rather than responding directly.
• Complain to the bank or NBFC the app claims to partner with, if disclosed. Ask specifically about their grievance redressal process.
• Escalate to the RBI Ombudsman via the Complaint Management System (CMS) at cms.rbi.org.in if the lender doesn't resolve it.
• Report unauthorized apps to the RBI directly — unregulated lending is a statutory violation, separate from any harassment complaint.
• File a police complaint if threats escalate to intimidation of family, workplace contact, or anything resembling extortion — this crosses from a lending dispute into a criminal matter.

Securing your phone

Loan apps that gathered contact-list, SMS, or gallery access during install can misuse that data well beyond the loan itself. Review and revoke unnecessary app permissions, and if the app accessed your contacts, assume those numbers may already be exposed — worth checking with a Scan My Shadow report what's tied to your own number and email.

If this harassment happened alongside actual financial fraud — not just a legitimate loan gone aggressive — see the complete India recovery guide for the rest of the process. This is one entry in our running field guide to what's actually circulating right now — see Common Scams in India Right Now (2026) for the rest.

Curious what's already out there about you? Scan My Shadow checks your phone number and email across 1,500+ sources and sends you a clear report — no guesswork, just facts. Start your scan.