Skip to content
Back to Learn
Trapped

Loan app calling your contacts? Do this in the next 24 hours

A 24-hour playbook for borrowers facing loan app harassment, contact scraping, or recovery threats.

VS
By Vikram Sharma · Borrower-Rights Writer
7 minPublished 6 Jun 2026Updated 5 Jun 2026

Loan app calling your contacts? Do this in the next 24 hours

If a loan app has started calling your family, employer, or random contacts, treat this as an emergency. Every hour you wait, more contacts get called and more screenshots get forwarded. Here's the 24-hour response that actually works.

Hour 1 — Lock down the app

  • Open phone Settings → Apps → the loan app → Permissions
  • Revoke all permissions: contacts, SMS, gallery, call log, storage
  • Force stop the app, then uninstall
  • Change your Google account password if the app had OAuth access

This won't undo what's already been scraped, but it stops fresh scraping immediately.

Hour 2–4 — Warn your contacts

Send one short message to your phone book: "You may get calls or messages from a loan recovery agent claiming I owe money. This is harassment; please ignore and screenshot if it continues." This single message neutralises 80% of the social damage.

Hour 4–8 — Collect evidence

  • Screenshot every threatening message and missed call
  • Ask 2–3 contacted people to forward you the messages they received
  • Record any threatening voice call (one-party consent is legal in most Indian states)
  • Save the app's Play Store listing URL and current screenshots

Hour 8–24 — File three complaints in parallel

  • RBI Sachetstep-by-step guide
  • cybercrime.gov.in — file under "Social Media Crime" → "Online Harassment"
  • Local police station — written complaint with evidence; ask for an FIR if threats include physical harm

What you can quote at them

  • IT Act §66E and §67 (privacy violation, obscene content)
  • IPC §503/506 (criminal intimidation), §509 (insulting modesty)
  • RBI Digital Lending Guidelines §6.2 (data access limits)
  • RBI Fair Practices Code (recovery agent conduct)

What NOT to do

  • Don't pay "settlement" amounts negotiated by the harassing agents — pay only via the lender's official channel after a written agreement
  • Don't argue with the agents — every word becomes their next screenshot
  • Don't delete the app immediately if you haven't screenshotted the messages first

FAQ — Loan-app harassment

Q: Can the agent legally morph my photo and send it to contacts? No — this is an IT Act §66E and §67 violation (privacy + obscene content), punishable with jail and fines. File a cybercrime.gov.in complaint with the morphed image, the source app, and the contact who received it. Conviction rate is rising as cyber cells take these cases seriously since 2023.

Q: How fast can I stop the harassment? The RBI Sachet complaint + written legal notice combo stops 70% of harassment within 7 days for regulated lenders. For unregulated lenders, add a police complaint and cybercrime case — most operators back off once they see formal documentation, because they cannot risk RBI revoking the partner NBFC's licence.

Q: Should I block the agent's number? Not immediately — let calls go to voicemail or use a call-recording app for 24 hours to collect evidence. After you have 5–10 recorded threats, block the numbers and add them to your Sachet complaint.

Q: My boss got a call — what do I tell them? Send the warning message template, and follow up in person with a one-line explanation: "A loan recovery agency is using illegal contact-scraping tactics; I've filed a complaint with RBI and cybercrime." Most employers understand once you frame it as harassment, not debt.

Q: Can I sue the lender for damages? Yes. Consumer Protection Act §2(11) covers "deficiency in service" and §38 allows compensation for mental harassment. Awards of ₹50,000–₹5,00,000 are common in district consumer forums. Keep evidence and consult a consumer-court lawyer.

Right of Reply

Are you the lender named in this article? Submit a response. We review every submission and publish approved replies alongside the article.

We verify authenticity before publishing. Your email is never shown publicly.

0/8000 · minimum 30 characters