Loan App Accessed My Contacts, Photos or Location Illegally
A loan app has accessed your phone's contacts, photos, or media without legitimate need, and may be using this data to harass you or your contacts for loan recovery.
⚖️Your Rights Under RBI Regulations
Digital lending apps can only access camera, microphone, and location with explicit borrower consent — and only for specific, disclosed purposes.
Apps cannot access your contacts list under any circumstances — this is prohibited by RBI guidelines.
Using your private photos or contacts for recovery is a criminal offence under the IT Act.
You can revoke app permissions through your phone settings immediately — this does not affect the loan itself.
💰 What You Can Recover
Criminal complaint can be filed. DPDPA 2023 provides for penalties against the app. Civil damages for breach of privacy.
⏱ Response Deadline
File FIR immediately. Write to RBI within 7 days.
📋Step-by-Step — What to Do
Immediately revoke all permissions from the app in your phone settings and uninstall the app.
Screenshot all threatening messages received.
File an FIR at your local cyber crime police station or online at cybercrime.gov.in.
Report the app to Google Play Store / Apple App Store for removal.
File complaint at sachet.rbi.org.in with app name and details.
🏛 Where to Escalate If Bank Doesn't Respond
cybercrime.gov.in + sachet.rbi.org.in + Local Cyber Crime Police
Facing this issue with your Bank, NBFC, MFI, SFB or Fintech?
AI merit analysis + expert-drafted RBI-backed communication. Starting at ₹199.
File Complaint →Check my rights first →Use our Free Instant Rights Tool — type your problem, get your exact rights in seconds.
Check My Rights Free →