Key Takeaways
- Every legitimate digital lending app must be reported by its bank or NBFC to the RBI, and the RBI publishes these apps in a public list.
- The money in a genuine loan comes directly from the lender's bank account to yours — never from an individual's account or through a third party.
- A genuine app cannot access your contact list, photo gallery or call logs.
- You must receive a Key Fact Statement showing the APR and all charges before you sign — no fee can be charged outside it.
- Being listed is a first check, not a guarantee. Always confirm the lender's name and terms too.
What Is a Fake Loan App?
A fake or illegal loan app is a lending app that is not backed by any bank or RBI-registered NBFC. These apps typically lend small amounts for very short tenures, deduct heavy "processing fees" upfront, charge interest that can run to double digits per month, and recover money through harassment — calling your contacts, sending morphed photos, or threatening legal action they have no right to take.
In contrast, a legitimate digital loan is governed by the Reserve Bank of India (Digital Lending) Directions, 2025, which set strict rules on disbursal, pricing disclosure, data access, and recovery. Knowing these rules is the easiest way to tell real from fake.
Step-by-Step: How to Check if a Loan App Is RBI-Approved
-
1Search the RBI's list of Digital Lending Apps
On rbi.org.in, open Citizen's Corner and find the list of Digital Lending Apps deployed by regulated entities. Banks and NBFCs are required to report every app they use; the RBI displays these details as reported by the lenders. If the app isn't there, don't use it.
-
2Identify the actual lender
The app's website and Play Store listing must name the bank or NBFC that actually lends you the money. "Partner banks" with no names is a red flag.
-
3Verify the NBFC's registration
If the lender is an NBFC, check its name in the RBI's list of registered NBFCs. Make sure the registered name matches the one in the app — fake apps often use names that look almost identical to real lenders.
-
4Check the developer on the Play Store or App Store
The developer name and support email should belong to the lender or its disclosed partner. Be wary of generic Gmail addresses, very new apps with thousands of identical 5-star reviews, or apps you were asked to install from a link (APK file).
-
5Read the Key Fact Statement before accepting
A genuine lender must give you a KFS showing the lender's name, the Annual Percentage Rate (APR), all fees, the repayment schedule and grievance contact details. No KFS means no loan.
Genuine vs Fake Loan App: Side-by-Side
| Check | Genuine Loan App | Fake Loan App |
|---|---|---|
| Lender | Names a bank or RBI-registered NBFC | No lender named, or a look-alike name |
| RBI DLA list | Listed on rbi.org.in | Not listed |
| KYC | Proper KYC before disbursal | Money sent without KYC, sometimes without even applying |
| Disbursal | Directly from the lender's account to yours | From an individual's account or a random UPI ID |
| Fees | All charges shown upfront in the KFS | Hidden "processing", "GST" or "insurance" deductions |
| Interest | Annual rate (APR) clearly stated | Daily or weekly charges that add up to extreme rates |
| Phone permissions | One-time camera, microphone or location access for KYC, with your consent | Demands contacts, gallery, SMS and call logs |
| Tenure | Months or years, with a repayment schedule | 7–15 days, with rollover pressure |
| Recovery | Reminders from disclosed agents; no contact with your relatives | Threats, abuse, calls to your contacts, morphed photos |
| Grievance | Named grievance officer, escalation to RBI Ombudsman | No complaint channel, or only a WhatsApp number |
9 Red Flags of a Fake Loan App
1. "Approved instantly — no CIBIL, no documents, no checks"
Regulated lenders must complete KYC and assess you. A loan that lands in your account before any verification is a classic trap.
2. Asks for an upfront fee before disbursal
Genuine lenders deduct processing fees from the loan amount and show them in the KFS. Paying a "file charge" or "insurance fee" first is how advance-fee scams work.
3. Wants access to your contacts, photos or SMS
Under RBI rules, lending apps cannot access your files, media, contact list or call logs. Apps that insist on these permissions use them for harassment later.
4. Shared through WhatsApp, Telegram, SMS links or social media reels
Being asked to download an APK file or install from a link outside the official app store is a strong warning sign.
5. No lender name anywhere
If the website, app, sanction letter and KFS don't clearly name a bank or NBFC, there's no regulated entity responsible for your loan.
6. Very short tenure with huge deductions
A ₹10,000 "loan" where you receive ₹6,500 and must repay ₹10,000 in seven days is effectively an interest rate of several hundred percent a year.
7. Money comes from a personal account
Genuine loans are disbursed directly from the lender's bank account to yours. Disbursal from an individual's account or an unrelated UPI ID points to an illegal lender.
8. Asks for your OTP, UPI PIN or remote screen access
No genuine lender ever asks for your OTP or UPI PIN over a call, or asks you to install screen-sharing apps.
9. Threats and pressure from day one
Threatening police action, posting about you on social media or contacting your employer is not recovery — it's harassment, and genuine lenders are prohibited from doing it.
Your Rights Under RBI Digital Lending Rules
When you borrow through a genuine app, the lender and its app must follow these RBI requirements:
- 1Direct disbursal and repayment
Loan money must flow directly between your bank account and the lender's — not through the app company or any third-party pool account.
- 2Key Fact Statement before you sign
You get a standard KFS with the APR and every charge. A lender cannot charge any fee that isn't disclosed in it.
- 3Cooling-off (look-up) period
You can exit the loan within the cooling-off period stated in your agreement by repaying the principal and proportionate APR, without any prepayment penalty.
- 4Limited data access
Data is collected only with your explicit consent and only as needed. Apps cannot access your contacts, media or call logs; camera, microphone and location may be used once, for onboarding or KYC.
- 5No automatic credit-limit increase
Your credit limit cannot be raised without your explicit consent.
- 6Named grievance officer
The app and lender must display a grievance redressal officer. If your complaint isn't resolved within 30 days, you can escalate to the RBI Ombudsman.
These protections sit alongside the general rules for every loan — read our guide to hidden charges in a personal loan to understand what a fair KFS looks like.
Already Borrowed From a Fake App? Do This Now
- 1Don't panic, and don't pay more under threat
Fake apps often demand repeated "extension" payments. Stop making payments to personal accounts or unknown UPI IDs and keep records of what you have paid.
- 2Revoke permissions and uninstall
In your phone settings, remove the app's access to contacts, photos and SMS, then uninstall it. Change passwords for email and banking if you shared them.
- 3Save the evidence
Take screenshots of the app, loan amount received, payment receipts, threatening messages and caller numbers.
- 4Report the fraud
Call the national cyber-crime helpline 1930 or file a complaint at cybercrime.gov.in. You can also report the unauthorised entity on the RBI's Sachet portal (sachet.rbi.org.in) and file a police complaint locally.
- 5Warn your contacts
Let family and close contacts know they may receive abusive messages, and that they should not pay anything or engage.
- 6If the lender is regulated, complain to the RBI
If the app is linked to a genuine bank or NBFC but broke the rules, complain to the lender first, then escalate on the RBI's Complaint Management System (cms.rbi.org.in) after 30 days.
Safer Ways to Get Quick Money
✅ Pre-approved loan from your own bank
Usually the fastest genuine option, often with no fresh documents. See our guide to applying for a personal loan online.
✅ Gold loan
Disbursed within hours by banks and NBFCs, with no CIBIL score needed for small amounts. See the new RBI gold loan rules for 2026.
❌ Stacking small app loans
Taking one short-tenure loan to repay another quickly turns ₹10,000 into a debt trap — even with genuine apps.
❌ Agents asking for "approval charges"
No genuine lender or loan guide charges you money to approve a loan. Walk away.
Got rejected elsewhere? Understand the common personal loan rejection reasons and how to fix them, or improve your chances with a good CIBIL score.
Need a Loan From a Lender You Can Trust?
NamasteRupee connects you only with RBI-regulated banks and NBFCs, and our guidance is always free — we never ask for upfront fees, OTPs or app permissions.
Talk to a Loan Expert FreeFrequently Asked Questions
Go to the RBI website (rbi.org.in), open the Citizen's Corner section and look up the list of Digital Lending Apps deployed by regulated entities. Search for the app and note the bank or NBFC behind it. Then confirm that lender's name appears in the app, on the loan agreement and on the Key Fact Statement. If the app isn't listed, don't borrow from it.
The RBI regulates lenders, not apps directly. Banks and NBFCs must report every digital lending app they use to the RBI, and the RBI publishes these in a public list as reported by the lenders. A listed app is linked to a regulated lender, but you should still check the lender name and loan terms yourself.
No. Under RBI digital lending rules, lending apps cannot access your files, media, contact list or call logs. Camera, microphone or location access may be taken once, with your consent, for onboarding or KYC. An app that insists on contacts or gallery access is a red flag.
Stop paying into personal accounts or unknown UPI IDs, revoke the app's permissions and uninstall it, and save screenshots of messages and payments. Report the fraud by calling 1930 or at cybercrime.gov.in, report the entity on the RBI Sachet portal, and file a local police complaint. Warn your contacts not to engage.
This depends on your situation, so take advice from the police or a lawyer. Keep records of the amount you actually received and everything you have repaid. Do not keep paying repeated extension or penalty demands under threat; report the harassment to the 1930 helpline and cybercrime.gov.in.
No. NamasteRupee is a loan guidance platform, not a lender. We help you compare and apply with RBI-regulated banks and NBFCs, and we never ask for upfront fees, OTPs or access to your phone's contacts or photos.