Loan App Harassment: What to Do and Where to Complain (Sachet, 1930, Ombudsman)

If a loan app's recovery agents are threatening you, calling your family, or editing your photos, take a breath and read this in order. Harassment thrives on panic. The system for fighting back in India is genuinely usable in 2026 — but only if you preserve evidence first and escalate in the right sequence.

One principle up front: owing money does not make harassment legal, and harassment does not erase what you legitimately owe. These are two separate tracks. You can (and should) fight the harassment while dealing with the debt on its own merits.

First 24 hours: stabilise and preserve

Do these before anything else:

1. Do not pay anything in response to a threat. Extortion payments don't end extortion; they mark you as someone who pays. If a legitimate amount is due, you'll pay it through the app's official channel, not to a personal UPI ID sent on WhatsApp.
2. Preserve evidence — this is the step people skip and regret.

• Screenshot every threatening message with the sender's number and timestamp visible.
• Record calls if your phone supports it; otherwise, note date, time, number, and what was said, immediately after.
• Save the exact app name, the Play Store link (or APK file if sideloaded), and the named lender, if any.
• Export your UPI/bank transaction history showing disbursal and any repayments — transaction IDs matter.
• Back all of this up to email or cloud storage, off your phone.

3. Do not delete the app yet if you can tolerate it — it is evidence. If you must remove it, screenshot the loan screens, KFS (if any), and permission list first. Never factory-reset a phone that holds evidence.
4. Warn your close contacts with one short message: "A loan app may call you claiming things about me. Do not engage, do not pay anyone, just screenshot and send to me." Pre-warning defuses 80% of the social damage the harassers are counting on.

Know what recovery agents legally cannot do

RBI's conduct norms for regulated lenders and their agents draw hard lines. Agents cannot:

• Call before 8:00 am or after 7:00 pm
• Threaten violence, use abusive language, or threaten to "send police"
• Reveal your debt to third parties — family, employer, contacts
• Access your phone contacts at all: under the RBI Digital Lending Directions, 2025, lending apps are barred from accessing contacts, call logs, and media. If they are messaging your contact list, the app either broke the law to obtain it or was never a regulated lender's app to begin with
• Add charges never disclosed in your Key Fact Statement

Also under the 2025 Directions: the lender must tell you the details of the recovery agent authorised to contact you. An anonymous number claiming to be "recovery" has no standing.

The escalation ladder — use it in this order

Rung 1: The lender's Grievance Redressal Officer (regulated apps)

If a real bank/NBFC is behind the app, email its Grievance Redressal Officer (contact details must be published in the app and on the lender's and LSP's websites — that's an RBI requirement). Keep it factual:

On [dates], I received calls/messages from [numbers] that [threatened me / contacted third parties / demanded undisclosed charges]. This violates RBI's Digital Lending Directions, 2025 and your Fair Practices Code. I have preserved recordings and screenshots. Please respond within 30 days as required.

The 30-day clock matters: it is the regulatory SLA, and it unlocks the next rung.

Rung 2: RBI Ombudsman — cms.rbi.org.in

If 30 days pass without resolution, or the reply is unsatisfactory, file with the RBI Ombudsman under the Integrated Ombudsman Scheme at cms.rbi.org.in (free, online, no lawyer needed). Attach the GRO email trail and your evidence pack. Ombudsman complaints get lenders' attention in a way customer care never will, and the Ombudsman can direct redress including compensation.

Rung 3: Sachet — for unregistered/fake apps

If you cannot trace the app to any RBI-registered entity, the Ombudsman route doesn't apply — report it on Sachet (sachet.rbi.org.in), RBI's portal for flagging unregistered entities. This feeds state-level coordination committees that pursue illegal lending operations.

Rung 4: Cybercrime — 1930 and cybercrime.gov.in

Go here in parallel (not instead of the above) the moment any of these happen:

• Morphed/obscene images of you are created or circulated
• Your contacts are being mass-messaged
• Explicit extortion: "pay or we ruin you"
• You paid money to fraudsters

Call 1930 (national cybercrime helpline — speed matters most when money moved, as banks can sometimes freeze it in transit) and file at cybercrime.gov.in with your evidence pack. Morphed-image extortion is a serious criminal offence; police cybercells handle loan-app rings routinely now. You will not be the first complainant against that number.

Rung 5: Local police FIR

For direct threats of harm, visit your local police station and insist on an FIR (extortion and criminal intimidation are cognisable offences). Carry printed screenshots. If the station hesitates, the cybercrime portal complaint number from Rung 4 helps anchor it.

Rung 6: National Consumer Helpline — 1915

For deficiency-of-service issues with a regulated lender (wrong charges, no KFS, refusing closure documents), 1915 / consumerhelpline.gov.in adds a parallel pressure channel. It's slower, but it creates a record.

Quick-reference table

Situation	Forum	Contact
Regulated lender, agent misconduct	Lender GRO → RBI Ombudsman	GRO email → cms.rbi.org.in
App has no RBI-registered lender	Sachet + cybercrime	sachet.rbi.org.in, 1930
Morphed photos / contacts spammed / extortion	Cybercrime + FIR	1930, cybercrime.gov.in, police station
Money paid to fraudsters	Cybercrime immediately	1930 (fastest)
Billing/service disputes	NCH	1915

"Do I still have to repay?"

Honest answer, in two halves:

• Genuine loan from a regulated lender: yes, the principal and lawful charges per your KFS remain payable, and non-payment will hit your credit report. Pay through the app's official channel only. If charges appear that were never in the KFS, dispute them via the GRO — RBI's rules bar charging anything outside the KFS, and penal charges may only be levied on the overdue amount.
• Fake/unregistered app: you have no relationship with a regulated lender, and what's happening to you is extortion, not "recovery". Do not negotiate with the harassers; go straight to Rungs 3–5. Talk to a lawyer before paying anything further.

One more pressure pattern to recognise: harassers often dangle a "settlement" mid-campaign — "pay ₹6,000 right now and we delete everything". From a regulated lender, a genuine settlement comes in writing from an official email, with a revised figure and a closure letter; it is never a WhatsApp countdown timer. From a fake app, the "settlement" is simply the extortion re-priced, and paying it reliably triggers a second round at a higher number. Any real negotiation happens in writing, through the GRO channel, at your pace.

If the debt itself is the root problem — you're borrowing from one app to pay another — read our guide on escaping the loan-stacking cycle; harassment complaints treat the symptom, not the spiral.

What we've seen work

From the complaints borrowers share with us: the combination that reliably stops harassment from regulated lenders is GRO email + Ombudsman filing, because the lender now has a regulator reading its conduct file. For fake apps, it's warning your contacts early plus a cybercrime complaint — the rings move on to easier targets once you're clearly documented and non-paying. Panic is their product. Paper is your weapon. Sab kuch screenshot karo, phir system ko kaam karne do.