Loan app scams: no lender asks you to pay before it pays you
A genuine lender never collects a fee before it releases a loan; its charges come out of the amount it sends you or go into your EMI, and RBI's rules require the money to arrive directly in your own bank account. A loan that is "approved" and then needs a processing fee, GST, insurance or a verification code paid first will never arrive, and an app that wants your contacts and photos before lending is collecting the material for the harassment that follows.
How it plays out
The ₹5,000 loan that was ₹3,500, due in seven days, and then was everyone's business
A student needs ₹5,000 for a week. The app is near the top of a search for instant loans, the approval takes four minutes, and the permission screen asks for contacts, photos, location and SMS. He allows them, because the app says it cannot assess him otherwise.
₹3,500 arrives. The ₹5,000 loan carried a ₹1,500 "processing charge" deducted up front, and it is repayable in seven days at ₹7,000. On day eight the calls start: from different numbers, several an hour, and then from his friends, who have received a message calling him a fraud with his photo attached.
He borrows from a second app to pay the first, and a third to pay the second. Each one takes the same permissions, deducts the same kind of charge, and begins the same calls a week later. The threat arrives on day twenty: a morphed photograph, which will go to every contact in his phone unless ₹18,000 is paid today.
He pays. The photograph goes out anyway, because the person sending it had no reason to stop, and the next demand arrives the following morning. None of the three apps belonged to any bank or NBFC that RBI regulates.
₹22,000 paid across three apps against ₹10,500 ever received, and a morphed photograph sent to his contacts regardless.
A composite of the predatory loan-app pattern as described by RBI, I4C and Indian police advisories and in reported cases: the up-front deduction, the seven-day term, the harvested contacts and the morphed-photo threat. No real person, app or case is depicted; the amounts are illustrative.
Where it could have stopped
The permission screen. RBI's digital lending rules say a lending app may not access your contacts, photos, call logs or files, so an app that insists on them before lending is not operating under those rules and does not intend to. Denying the permission, or walking away, ends the harassment before it has a list to work from.
High riskWhat EnfoldAI does here
Fake app & APK detection
Many of these apps arrive as an APK through a link rather than from the Play Store. EnfoldAI checks the file before it is installed and flags a loan APK that wants your contacts and messages as a scam, which is the point at which it still has nothing of yours.
Checks APKs before you install.
Auto-check with EnfoldAIHow this scam works
The order is the explanation. Find where your own experience stops in this list. That is how far along the script has run.
- The advance-fee version: an ad, a message or a call says your loan is pre-approved. The amount is generous, the approval instant, and the first thing asked for is a processing fee, GST, insurance, a "micro code" or an account-activation charge, payable before disbursal. Each paid fee produces another. The loan never arrives.
- The predatory version lends, briefly. The app deducts a large charge from the amount, sets a term of a week, and prices the repayment so that it cannot be met without another loan from another app in the same network.
- Before it lends, the app takes permissions that RBI's rules forbid a lending app to ask for: contacts, photos, location, call logs. That is the real product. The loan is the price of the data.
- When the repayment date passes (sometimes before it), the harassment starts: dozens of calls a day, then messages to your contacts calling you a defaulter, then morphed or private photographs with a demand attached.
- The demand has no relationship to the loan. Having paid, you are not released; you are a person who pays, and the list is sold on.
- A genuine digital loan under RBI's rules is disbursed by a bank or a registered NBFC straight into your bank account, comes with a key fact statement that states the annual percentage rate, allows you to exit in a cooling-off period, and names a grievance officer. RBI publishes a directory of the apps its regulated lenders actually use.
If it has already happened
In order, and the order matters. The first step is the one that can still get the money held, so it comes before everything else.
- Stop paying. A fee before disbursal will never produce a loan, and a payment to stop a photograph being sent does not stop it.
- If you paid a fee or a demand, call your bank on the number on your card and ask it to raise a fraud dispute on those transfers and to flag the beneficiary.
- Report on 1930 or at cybercrime.gov.in, naming the app, the numbers that called and the accounts you paid into. Harassment, threats and morphed images are offences, and the complaint is what gets the numbers blocked.
- Report the app to RBI's Sachet portal as well, where complaints against unauthorised lenders are routed to the right regulator, and to the app store it came from.
- Tell the people in your contacts first, in one message, that your phone's contact list was taken by a loan app and that any message about you from an unknown number is part of that. Said in advance, the threat has nothing left to threaten with.
- Uninstall the app, revoke its permissions, and change the passwords of accounts whose OTPs went to that phone. If the app was an APK, treat the phone as compromised until it has been checked.
- For a genuine loan you still need, check the lender in RBI's directory of digital lending apps and borrow only through an app that names the bank or NBFC behind it.
Loan app scams: common questions
The questions people actually ask about this one, answered in a line or two each.
The app says my loan is approved but needs a processing fee first. Is that normal?
How do I check whether a loan app is genuine?
A loan app is calling my contacts and threatening to send my photos. What do I do?
Can a legitimate loan app ask for my contacts and photos?
Check before you trust
Paste any SMS, link or app and get a verdict before money moves. Auto-scan flags scam messages the moment they arrive.
Suspicious message? Check it free →