Illegal loan apps are one of the most common digital frauds in India. They advertise on social media, promise instant cash with almost no checks, then charge hidden fees and threaten borrowers who fall behind. The good news is that you can now check an app before you borrow. This guide shows you how.
Quick answer
- RBI does not approve individual apps. It regulates the banks and NBFCs that lend. A safe app is one deployed by an RBI-regulated lender.
- Since 1 July 2025, RBI’s website has carried a public directory of digital lending apps reported by regulated entities.
- Check three things: the app is in the directory, the lender behind it is a bank or NBFC, and your loan agreement names that same lender.
- If any one of the three is missing, do not borrow.
What does “RBI-registered” really mean?
People often search for “RBI-approved loan apps”, but RBI does not license apps one by one. Instead, banks, NBFCs and other regulated entities must report the digital lending apps they use to RBI. Those apps are then listed in RBI’s public directory of Digital Lending Apps (DLAs).
Many apps are only a platform. They find borrowers and pass them to a lender, and are called lending service providers. In that case, the real lender must still be a regulated entity, and the app must clearly tell you who it is.
Step-by-step: how to verify a loan app
Step 1: Find out who the lender is
Look for the name of the bank or NBFC in the app description, on the website, and in the loan offer. RBI’s digital lending rules require the app to name the regulated lender. If you cannot find a clear lender name, stop here.
Step 2: Search the app in RBI’s directory
Open the Digital Lending Apps directory on RBI’s website and search for the app’s name. Note which regulated entity is listed against it. That name should match the lender in your loan agreement. Regulated entities add and remove apps themselves, so the list changes over time.
Step 3: Verify the lender itself
Check that the bank or NBFC appears in RBI’s lists of banks or registered NBFCs. Match the exact legal name, not just a similar-looking brand name.
Step 4: Check where you are downloading from
Install apps only from official app stores, or from links on the lender’s own website. Do not install from links in SMS, WhatsApp or social media ads, and never from APK files shared by strangers. Google Play has also tightened its policy so that loan apps in India must be linked to regulated entities, but fake apps can still reach you through links outside the Play Store. Check that the developer name matches the lender or its service provider.
Step 5: Look at the permissions it asks for
A genuine lending app needs only what is required for onboarding, KYC and servicing your loan. Under RBI’s digital lending rules, apps should not access your contact list, call logs, or files and media. Be very careful if an app asks for them. One-time access to the camera, microphone or location with your consent can be part of KYC.
Step 6: Read the loan agreement and cost summary
Before you accept, you should see a Key Fact Statement or similar summary. Check that it shows:
- The lender’s name
- Loan amount, tenure and repayment dates
- The annual percentage rate (APR) and every fee and charge
- The contact details of the grievance officer
If charges are vague, spread across several screens, or revealed only after you submit your application, treat it as a red flag.
Step 7: Check how the money moves
Under RBI’s rules, the loan should be paid from the lender’s account directly into your bank account, and you should repay directly to the lender’s account. Walk away if you are asked to pay a fee or “processing charge” to a personal account or an individual’s UPI ID before you receive the money.
Red flags at a glance
| Red flag | Why it matters |
|---|---|
| The app is not in RBI’s directory | It may not be linked to any regulated lender |
| No lender named, or a vague company name | You cannot hold anyone accountable |
| Asks for contacts, gallery or call logs | These are often used to harass or blackmail borrowers |
| Upfront fee before the loan is paid out | A classic loan scam |
| You receive far less than the loan amount shown | Hidden deductions are being taken from the loan |
| No proper KYC, “instant approval for everyone” | Genuine lenders verify who they lend to |
| Threats, abuse or messages to your contacts | Unacceptable recovery practice; report it |
What if the app is not in the directory?
Do not borrow from it. If the app claims to belong to a bank or NBFC you know, go to that lender’s own website, find the official link to its app, and contact the lender to confirm. A directory entry only shows that an app is linked to a regulated lender. It does not guarantee a good deal, so still read the costs. If you are weighing short-term loans, see our guide to payday loans in India and how they compare with personal loans.
What to do if you have already installed a suspicious app
- Do not pay extra “fees”, and never share OTPs, PINs or card details.
- Uninstall the app, and remove any permissions you gave it.
- If you shared banking, UPI or card details, tell your bank right away and change your passwords and PINs.
- Save screenshots of messages, call logs and payment proofs.
- Report fraud, extortion or harassment on the national cybercrime helpline 1930 or at cybercrime.gov.in.
- If the lender is a regulated entity, complain first to its grievance officer, and then use RBI’s complaint portal (cms.rbi.org.in).
- Do not take another loan to repay the first one. If you have already missed a payment, read how a missed EMI affects your credit score.
Quick checklist before you borrow
- The app is in RBI’s Digital Lending Apps directory
- The lender named in the app and the agreement is a bank or NBFC
- The lender appears in RBI’s lists
- The app asks only for permissions it needs
- You have read the full cost, and money moves directly between you and the lender
Also read | Payday Loan in India: Eligibility, Documents & Real Cost
FAQs
Does RBI approve or license loan app?
No. RBI regulates banks, NBFCs and other lenders. Those lenders report their apps, and RBI publishes the list as a directory.
Is every app missing from the directory fake?
Not necessarily, but it cannot be verified, so you should not borrow unless you can confirm independently that a regulated lender stands behind it.
Are banks’ own apps in the directory too?
The directory covers apps deployed by regulated entities, and banks are regulated entities.
Is an app on Google Play automatically safe?
No. Play Store rules help, but you should still check the lender, the directory and the costs yourself.
If a lender is RBI-registered, is the loan cheap?
Not always. A regulated lender can still charge a high price for a short-term loan, so compare the annual cost before you accept.
This article is for general information and is not financial advice or legal advice. Rules can change, so confirm the latest details on RBI’s website.