Instant loan apps promise money in minutes. Many are run by, or for, genuine banks and NBFCs (non-banking financial companies). Some are not. RBI has warned that unauthorised apps have charged excessive interest and hidden fees, used harsh recovery methods and misused access to borrowers' phones. This guide shows how to check an app before you share any documents, what RBI's rules require, and where to report a fake one.
Who is allowed to lend money in India?
RBI's caution of 23 December 2020 lists who can lend legitimately: banks, NBFCs registered with RBI, and entities regulated by state governments under laws such as state money lending acts.
A loan app itself is usually not the lender. It is a digital lending app (DLA), run either by a regulated lender or by a lending service provider (LSP), a company that works for the lender. Either way, there must be a regulated lender behind the loan. RBI calls these lenders regulated entities.
How do you check if a loan app is genuine? Three steps
Step 1: Find the lender's name
RBI said in 2020 that digital lending platforms working for banks and NBFCs must disclose the lender's name to customers upfront. Under RBI's Digital Lending Directions, 2025, where an LSP shows you loan offers, it must show the names of the lenders making the offer, with the amount, tenure, APR and repayment due. If you cannot find which bank or NBFC is giving the loan, stop there.
Step 2: Search RBI's directory of loan apps
Since 1 July 2025, RBI has published a directory of digital lending apps on its website. On rbi.org.in, look under Citizen's Corner for "DLAs deployed by Regulated Entities". Search for the app's name and check that the lender shown matches what the app told you.
One caution: the list is built from what lenders report on RBI's CIMS portal. RBI's Directions say RBI does not verify or validate this data. So treat the directory as a strong check, not a guarantee, and also do step 3.
Step 3: Confirm on the lender's own website
RBI requires lenders to keep their websites updated with their digital lending products, the apps and LSPs they use, and their grievance contacts, and apps must link to that website. Open the bank's or NBFC's site yourself (do not use a link sent by the app) and check that it lists the app. For an NBFC, you can also look it up in RBI's list of NBFCs.
What RBI rules protect you when you borrow through an app?
These come from RBI's Digital Lending Directions, 2025 (8 May 2025). They apply to loans from regulated lenders, so they help you spot an app that is not following them. RBI updates its rules from time to time, so check the latest directions.
| Rule | What it means for you |
|---|---|
| Money goes straight to your account | The loan must be paid into your own bank account, and you repay straight into the lender's bank account, not a third party's account. |
| Key Facts Statement (KFS) | You must get a KFS with the APR (annual percentage rate, which includes charges). The KFS, sanction letter and other key documents, on the lender's letterhead, must reach your registered email or SMS when the loan is signed. |
| Cooling-off period | You can exit the loan in an initial period, set by the lender but at least one day, by repaying the principal and the proportionate APR, without penalty. The lender may keep a reasonable one-time processing fee if it is disclosed upfront in the KFS. |
| Limits on phone access | Apps must not access your files and media, contact list, call logs or telephony functions. One-time access to camera, microphone or location is allowed only for onboarding or KYC, with your explicit consent. |
| No automatic limit increase | Your credit limit cannot be raised unless you ask for it explicitly. |
| Recovery agent details | If a recovery agent is assigned after a default, you must be told the agent's details by email or SMS before the agent contacts you. |
| Grievance officer | The lender and the LSP must have a grievance redressal officer. If you get no reply within 30 days, or your complaint is rejected or you are not satisfied, you can go to the RBI Ombudsman. |
What are the red flags of a fake loan app?
- No lender name, or a name you cannot find on RBI's directory or the lender's own site.
- It asks for access to your contacts, photos or call logs.
- It asks you to pay a fee before the loan, or to repay to a personal UPI ID or someone else's account.
- No KFS, no sanction letter, or a total cost that is not clear before you accept.
- Very short tenures with large deductions from the amount you receive.
- Threats, abuse, or messages to your family and friends when you are late.
How expensive can a short app loan really be?
Say an app approves ₹10,000 but deducts a ₹1,500 "fee", so you receive ₹8,500. You must repay ₹11,000 after 30 days.
- Cost for the month: ₹11,000 − ₹8,500 = ₹2,500.
- As a share of the money you actually got: ₹2,500 ÷ ₹8,500 = about 29.4% for one month.
- Multiplied by 12, that is about 353% a year, before any late fees.
The headline amount and the "fee" can hide this. That is why the APR in the KFS matters: it is meant to show the full cost, including charges, as one yearly rate.
What should you do if you are stuck with a fake loan app?
- Stop sharing information. Do not send more documents, OTPs or photos. RBI advises never to share KYC documents with unidentified persons or unverified apps.
- Keep records. Save screenshots, messages, call logs, payment receipts and the bank or UPI details you were asked to pay into.
- Report cyber fraud or harassment. Call the National Cybercrime Helpline 1930 or file a complaint at cybercrime.gov.in. You can also report to your local police.
- Report the entity. RBI's 2020 caution says unauthorised lending apps can be reported on the Sachet portal.
- If the lender is regulated, complain to it first. If it does not reply within 30 days, or you are not satisfied, complain to the RBI Ombudsman at cms.rbi.org.in.
The government said on 21 July 2026 that MeitY had blocked 87 illegal loan apps. New ones keep appearing, so check every app yourself.
Do it in 10 minutes, free
Before you accept any loan, use the LowerMyEMI compare offers calculator to put the real cost of each offer, including fees, side by side, and export it to Excel or PDF.
If you already have a costly loan from a regulated lender, LowerMyEMI can write one email per bank and NBFC asking for a lower rate, which you send from your own email. We are not a lender, we never ask for your documents, and we never promise a rate; each lender decides.