Instant loan apps in India: RBI Digital Lending Directions 2025 and how to spot a fake app

A genuine personal loan through an app is always given by an RBI-regulated bank or NBFC; the app is either the lender's own or a lending service provider (LSP) working for it. Under the RBI (Digital Lending) Directions, 2025, the loan must be paid into your own bank account, repaid directly to the lender, and come with a Key Fact Statement showing the APR. You can exit during a cooling-off period set by the lender (at least one day) by repaying the principal and proportionate APR without penalty. Your credit limit cannot be raised automatically, apps must not access your contacts, files or call logs, and lenders must report their apps to the RBI, which publishes a directory of digital lending apps. An app that cannot name its regulated lender, demands an upfront fee, or threatens you is a warning sign.

This guide belongs to the personal loan mistakes guide. No company is named; the patterns are general.

What the 2025 Directions require

Requirement	What it means for you
Disbursal to your bank account	The loan cannot be paid into a third party's or the app's account (limited exceptions in the Directions)
Repayment to the lender	You repay the regulated lender's account; the LSP cannot collect or charge fees separately
Key Fact Statement	Standard KFS with APR before you sign
Cooling-off period	Set by the lender's board, not less than one day; exit by paying principal and proportionate APR; only a reasonable one-time processing fee disclosed in the KFS may be kept
No automatic credit limit increase	A higher limit needs your explicit request, assessed and recorded
Data	Need-based, with prior explicit consent; no access to files and media, contact list, call logs or telephony; one-time camera, microphone or location access for KYC only with consent; data stored in India
Multi-lender apps (from 1 November 2025)	Show all matching offers with lender names, APR, EMI and penal charges, and a KFS link, without dark patterns
Recovery	Agent's details sent to you by email or SMS before contact; RBI recovery conduct rules apply
Grievances	Nodal grievance officers for the lender and LSP; escalate to the RBI Ombudsman if not satisfied or no reply in 30 days
App directory (reporting from 15 June 2025)	Lenders report every app they use to the RBI, which publishes a directory

The RBI notes that inclusion in its directory does not mean the RBI has endorsed the app; it means a regulated lender has reported it.

How to check an app in five steps

Find the regulated lender's name in the app, the website and the KFS.
Check the lender on the RBI website (lists of banks and registered NBFCs).
Check the app in the RBI's directory of digital lending apps linked to that lender.
Read the KFS for APR, all fees, the cooling-off period, recovery and grievance details.
Check permissions the app asks for. Contacts, gallery or call-log access is a red flag.

Cooling-off: a worked example

An illustrative ₹50,000 app loan at an APR of 24% is disbursed. On day 2 you decide you do not need it. Exiting in the cooling-off period costs the principal plus proportionate APR:

Interest ≈ 50,000 × 24% × 2 ÷ 365 ≈ ₹66
Plus a one-time processing fee only if it was disclosed in the KFS
No penalty for exiting

Check the exact cooling-off days in your KFS; the minimum is one day, and lenders may set longer.

Red flags of a fake or illegal lender

An "approval" that needs a fee first: file charge, GST, insurance or "RBI fee".
Payment requests to an individual's account or UPI ID.
Disbursal from a personal account, or far less than agreed with no KFS.
Interest quoted per day or per week with no APR.
The app demands access to contacts and gallery.
Threats to message your contacts, morphed photos, abusive calls.
No identifiable regulated lender, or a name that does not appear on RBI lists.

A worked example of a small "daily" rate

An illustrative app offers ₹10,000 for 15 days at "0.2% a day" with ₹1,000 deducted as a fee.

Interest = 10,000 × 0.2% × 15 = ₹300
Received ₹9,000; repay ₹10,300
Cost ₹1,300 on ₹9,000 for 15 days
Annualised ≈ 1,300 ÷ 9,000 × 365 ÷ 15 ≈ 351% a year

Even when a lender is genuine, very short loans with fixed fees can have extreme APRs. Compare with processing fees and GST on a normal loan.

If something has gone wrong

Situation	What to do
Paid an advance fee to a fake lender	Call 1930 and report on cybercrime.gov.in at once; ask your bank to try to stop the transfer
Harassed or threatened	Keep screenshots and recordings, file a police complaint and report on cybercrime.gov.in; complain to the regulated lender and then the RBI Ombudsman
Lender not regulated by RBI	Report the entity on the RBI's Sachet portal
Data misuse	Revoke permissions, uninstall the app, and include the data issue in your complaint
Loan you never took on your credit report	Dispute with the CIC and the lender; see credit reports

For conduct rules on collections, read recovery agent rules.

Frequently asked questions

Is a loan app the same as the lender?

Often not. Many apps are LSPs for a bank or NBFC, which remains responsible for the loan and must be named in the KFS.

Can an app increase my credit line without asking?

No. Under the 2025 Directions, a credit limit cannot be increased without your explicit request.

Do these rules apply to "buy now, pay later"?

If credit is provided by a regulated entity through a digital channel, the Directions apply. Unregulated structures may fall outside them, which is a reason for caution.

Where is the RBI's list of loan apps?

On the RBI website. Search for the directory of digital lending apps; it lists apps reported by regulated entities.

Sources

Reserve Bank of India — Digital Lending Directions, 2025, the directory of digital lending apps, lists of banks and NBFCs
RBI Sachet portal — reporting unauthorised entities
National Cyber Crime Reporting Portal — reporting fraud and harassment (helpline 1930)
RBI Complaint Management System — complaints against regulated lenders