FRAUD ALERT

When money is needed urgently, a loan that promises instant approval online can feel like a lifeline. A medical emergency, school fees, rent due, an unpaid credit card bill, or simply a bad month — any of these can push someone towards a digital lending app promising cash within minutes, barely any paperwork, and none of the usual credit checks.

 

That desperation is exactly what cybercriminals are counting on.

 

The Indian cybercrime coordination centre (I4C) has warned that criminals are using fake loan apps that mimic genuine lending platforms solely to steal personal information, hijack device permissions and trap borrowers in fraudulent schemes. Once installed, these apps can reach into your contacts, your photographs and other private data and that data later becomes a weapon, used for intimidation, blackmail and extortion.

 

This is not a hypothetical risk. Several people across India have lost money, had their personal information misused, and in some cases, seen morphed photographs of themselves sent to family and friends.

 

Take a case reported in Mumbai in August last year. A 25-year-old woman, in urgent need of money, downloaded an app called 'Cash Loan' after spotting an ad on Instagram. She asked for a loan of ₹2,000 but was given only ₹1,300 for a six-day term. Even after repaying more than she actually borrowed, the operators kept harassing her and eventually circulated morphed nude photographs to her relatives and friends. Police registered a case and began investigating.

 

Another young woman in Mumbai, just 20, found a loan app through a YouTube ad and applied for a ₹15,000 loan. She shared her bank details and permanent account number (PAN), only to be told her loan application had been rejected. She deleted the app and thought that was the end of it. Days later, strangers messaged her on WhatsApp demanding ₹1,500 as an instalment for the loan. When she refused to pay, they sent morphed nude photographs of her to her father, her uncle and a friend. A police complaint followed.

 

The sums involved can spiral fast, too. In January 2025, Mumbai police arrested two men accused of helping cybercriminals run bank accounts used in online scams. The case came to light after a Bandra resident, who borrowed just ₹2,700 through a loan app, said he was forced to transfer ₹9,900 after fraudsters threatened him with morphed photographs of himself and his daughter.

 

In a separate case out of Bengaluru, a 20-year-old engineering student borrowed ₹3,000 through an app and repaid it with ₹2,000 in interest. Then, out of nowhere, the app credited ₹12,500 to his account, a loan he never asked for. When he tried to hand the money back, his request was denied, but the demands for repayment only escalated. The fraudsters threatened him too, sending morphed photographs to everyone in his contact list.

 

And here is the part that catches so many people off guard: repaying the high-interest digital loan does not necessarily stop the harassment.

 

One victim in Karnataka borrowed ₹12,000 through a seven-day loan app in late 2025, handing over his Aadhaar, PAN, a selfie, his location and contact details as part of the application. He repaid the full amount within six days. According to his complaint, criminals then threatened to publish his personal data unless he kept paying, and by the time it was over, he handed over a staggering ₹4.4 lakh. Police registered a case under the Information Technology (IT) Act.

 

That really is the heart of the difference between a genuine loan and a predatory one dressed up to look like it. A lender registered with the Reserve Bank of India (RBI) operates on transparent terms, with a clearly identifiable, regulated entity behind it and costs spelt out upfront. A criminal operation in the name of a loan is not interested in lending you anything. It is only interested in your money and your data.

 

Moneylife Foundation, which counsels distressed borrowers, has seen a steady rise in people asking for help since early 2025. Its study of more than 107 digital lending apps found borrower-reported interest rates ranging from 30% to as high as 57.45%, depending on the lender and the length of the loan. Three short-term lenders in the sample were charging 1% per day, which, when worked out on an annual basis, comes to 365%.

 

According to Moneylife Foundation, many borrowers start out by taking a single-app loan to cover a genuine emergency, then find themselves borrowing from several more apps just to keep up with repayments on the first. It is not only low-income borrowers falling into this trap, either — plenty are relatively well-paid professionals who have maxed out their personal loans and credit cards and turned to app-based credit as a last resort.

 

This is exactly how desperation curdles into a debt trap. Someone borrows ₹5,000 to solve one problem, then finds themselves taking out loan after loan just to meet impossibly tight repayment deadlines. Processing charges, interest, late fees — they stack up fast, and before long, the original, modest borrowing has become genuinely unaffordable.

 

There is also a distinction that catches many borrowers out: the app itself is often not the actual lender.

 

A digital lending app frequently operates as a lending service provider (LSP) on behalf of a bank or a non-banking finance company (NBFC) regulated by the banking regulator. Under RBI's framework, both digital lending apps (DLAs) and LSPs are recognised categories, but it is the regulated entity behind the app that is actually responsible for the lending relationship and for complying with the rules.

 

In other words, don't assume a loan app is legitimate just because it drops a name of an NBFC or displays a bank's logo. That association needs to be checked independently — never take it at face value.

 

To help with exactly this, RBI has set up a public directory of digital lending apps, which went live on 1 July 2025, allowing customers to check whether an app's claimed link to an RBI-regulated entity actually holds up. Separately, the government confirmed in July 2026 that the Union ministry of electronics and information technology (MeitY) had blocked 87 illegal loan-lending apps under Section 69A of the IT Act.

 

Useful as all this is, though, enforcement can't protect someone who is about to hit 'download'.

 

1.Excessive Permissions: There is no legitimate reason for a loan app to need unrestricted access to your contacts, photos, call logs, or unrelated files on your phone. If it insists on this before it will even consider your application, just uninstall it.

 

2.Upfront Payments: Be very wary if anyone asks for a processing fee, an insurance charge, goods and services tax (GST), a security deposit — anything — before the loan is actually released. Fraudsters love the 'pay now for instant approval' line, precisely because urgency clouds judgement.

 

3.No Clearly Identifiable Regulated Lender: Don't trust a name or a logo on its own. Track down the actual entity behind the loan and independently verify its actual registration details from RBI and its genuine link to the app. Remember, RBI does not directly approve or register individual mobile apps. Instead, it regulates the banks and NBFCs that partner with or provide services through these apps. 

 

4.Guaranteed Approval: Phrases like '100% approval', 'no documents needed', 'no CIBIL check' and 'money in 10 minutes' are bait, plain and simple — designed to appeal to exactly the people who feel they have no other option. 

 

5.Vague Terms: If an app won't clearly spell out who the lender actually is, what the interest rate is, the repayment schedule, the charges involved, and how to raise a complaint, don't borrow from it.

 

The single most useful thing you can do is slow down before you borrow anything.

 

If the need is real and urgent, go to your own bank first, or to a lender you can clearly identify and verify. Never download any file with .APK or .apk (Android package kit) extension sent to you through WhatsApp, Telegram, SMS or an unfamiliar website. Check the developer's details on the official app store, and independently verify the regulatory status of the lender or the entity behind it before doing anything else.

 

Don't hand over your Aadhaar, PAN, bank statements, selfies or any other documents simply because an app asks for them. And never, under any circumstances, share a one-time passcode (OTP), your UPI PIN, your internet banking password or your card PIN with anyone claiming to be a loan agent — no legitimate lender will ever need it.

 

It is also worth remembering that an app being listed in an official app store is not proof of anything on its own, nor of its legitimacy. The only real safeguard is verifying the lender itself and its genuine link to the app through official channels.

 

If you have already installed something that looks suspicious, revoke its permissions straight away. Before you delete or uninstall it, though, preserve the evidence — screenshots of the app, its name and developer, any loan documents, bank transactions, WhatsApp messages, phone numbers, payment demands and threats.

 

And if the fraudsters start threatening to send morphed photographs to your contacts, don't let embarrassment push you into paying more. That is precisely the pressure they are relying on. Tell trusted family or friends what is happening, so they know in advance to recognise any messages that arrive as fraudulent rather than genuine.

 

There is plenty of evidence that these operations run at real scale. In February last year, the directorate of enforcement (ED) froze ₹123.58 crore linked to a ₹719-crore fake loan-app network with Chinese connections — investigators alleged the network ran on hundreds of mule bank accounts, demanded advance EMIs, and used data stolen through loan apps to blackmail victims.

 

A separate investigation in Maharashtra in July 2025 uncovered what looked like a nationwide racket, allegedly run by a former loan recovery agent who had developed at least eight fake loan apps. Police said these apps were linked to more than 10,000 complaints on the national cybercrime portal, and were used to gain access to victims' phones before blackmailing them with morphed photographs.

 

All of which points to one simple truth: paying one more demand rarely ends anything. If anything, it just tells the criminals you are willing to keep paying.

 

If you have already lost money to a scam like this, act fast. Call the national cybercrime helpline on 1930, and report the incident through the national cybercrime reporting portal (NCRP) at cybercrime.gov.in. 

 

Also, let your bank or payment provider know immediately if your account or card details have been compromised.

 

The lesson underneath all of this is a simple one: a genuine financial emergency doesn't make a dangerous loan app safe to use.

 

When you are desperate for even a small sum, the promise of instant money can make every warning sign feel like an inconvenience to brush past. But handing an unknown app access to your contacts, your photographs and your financial information can turn a short-term cash problem into something far bigger — and far more personal.

 

A legitimate lender will want to look closely at your income, credit history, and ability to repay. A fake one isn't interested in any of that. It is interested in something else entirely: your data, your money, and your fear.