Loan app threatening to leak your photos? 5 laws protect you

Ananya, 24, is a freelancer in Kolkata. She borrowed ₹12,000 from a loan app for a medical emergency. When she missed two EMIs, she received a WhatsApp message that made her hands shake: "Pay ₹18,000 by tomorrow or we will send your photos to your contacts and workplace."

She had never shared any photos with the app. But she had given the app camera and gallery permissions during signup — something millions of borrowers do without understanding the implications.

Ananya was terrified. She almost paid.

She did not pay. Instead, she filed — and the story ended very differently.

If this is happening to you right now, read this first. Then act.

Is This Happening to You? The Warning Signs

Loan app threats involving photos or reputation typically take these forms: "We have your photos and will share them with your contacts" "We will create a 'defaulter' post with your image on social media" "We will send morphed/edited photos to your family" "Pay now or we will message everyone in your contact list with your photo and debt information"

These are not collection techniques. These are criminal threats. And the law takes them very seriously.

The 5 Laws That Protect You

Law 1: Information Technology Act 2000 — Section 66E (Privacy Violation)

Punishes capturing, publishing, or transmitting images of a person's private areas without consent.

Penalty: Imprisonment up to 3 years and/or fine up to ₹2 lakh

How it applies: Even if the photos in question are not "private area" images, the principle extends to any image used to harass or coerce.

Law 2: Information Technology Act 2000 — Section 67 (Publishing Obscene Material)

Punishes publishing or transmitting obscene material in electronic form.

Penalty (first conviction): Imprisonment up to 3 years, fine up to ₹5 lakh

First offence penalty is enhanced on repeat offence

How it applies: If morphed images are involved, this section is directly applicable.

Law 3: Indian Penal Code — Section 384/385 (Extortion/Attempt to Extort)

Section 384: Whoever commits extortion shall be punished with imprisonment up to 3 years or fine or both

Section 385: Putting a person in fear of injury in order to commit extortion — imprisonment up to 2 years

How it applies: "Pay money or we publish your photos" is textbook extortion. The demand for money under threat of harm is the definition of extortion.

Law 4: Indian Penal Code — Section 499/500 (Defamation)

Section 499: Making or publishing any imputation concerning any person to harm their reputation

Section 500: Punishment — simple imprisonment up to 2 years and/or fine

How it applies: Sharing a borrower's photo with fabricated or contextually misleading "defaulter" labels is defamation.

Law 5: Digital Personal Data Protection Act 2023

Prohibits processing of personal data (including images) without consent and for purposes beyond what was disclosed.

Using a borrower's photos — obtained via camera permission during app signup — for debt collection threats is a clear DPDP violation.

Penalty: Data Protection Board can impose fines up to ₹250 crore on the entity.

What to Do Right Now — Your Emergency Action Plan

In the Next 30 Minutes

1. Screenshot everything. Every threatening message. Every notification. Every WhatsApp message. Include the timestamp. This is your evidence.

2. Do NOT delete the messages. Even if you feel distressed and want to. They are evidence.

3. Block the number on WhatsApp — but only after screenshotting. If they can still reach you, screenshot any further messages.

4. Revoke the app's permissions immediately. Settings > Apps > [Loan App] > Permissions. Revoke: Camera, Gallery/Storage, Contacts, Microphone.

Today

5. File on the National Cybercrime Portal: cybercrime.gov.in > Report Cyber Crime > Online Financial Fraud > Cyber Stalking/Harassessment

In your complaint, specifically mention: The threat message (copy the exact words) That the app has access to your photos via permissions granted during signup That this constitutes extortion under IPC Section 384/385 and IT Act Section 66E

6. File at RBI Sachet: sachet.rbi.org.in — same evidence, same narrative. Select "Inappropriate recovery practices."

7. Contact your local Cybercrime Police Station: Many states have dedicated cybercrime cells. Walk in with printed screenshots. This creates a physical FIR record which is harder to ignore than an online complaint.

This Week

8. Send a legal notice to the app (HeyZ AI can draft this): Cite the specific laws violated. Demand immediate cessation of threats and deletion of all your personal data. A formal legal notice changes the calculus for many apps.

9. Report to Google Play / Apple App Store: These platforms remove apps that violate their policies. Apps that threaten borrowers violate both stores' developer policies. Your report + screenshots can get the app removed.

Ananya's Outcome

Ananya filed at cybercrime.gov.in and RBI Sachet with her screenshot evidence. She also sent HeyZ AI's drafted legal notice to the app citing IT Act and IPC sections.

The threats stopped within 48 hours. The app never published any photos.

Cybercrime police contacted the app company. Within three months, the app was removed from Google Play Store following multiple similar complaints.

The loan debt: Ananya subsequently negotiated a repayment plan through the SahiSujhav Harassessment Checker's escalation process.

You have more power than the app wants you to believe. Use it.

HeyZ AI drafts your cybercrime complaint and legal notice — free at www.sahisujhav.com

If you are in immediate distress, call the National Cybercrime Helpline: 1930

Related on SahiSujhav:

• Recovery agent at your home — your rights
• File an RBI Sachet complaint step-by-step
• Send a legal notice for loan harassment