You’re not alone — talk to someone now
loantrap.org

Practical Guides & Templates

A checklist before you take any digital loan

A few minutes of checking before you tap 'accept' can save you months of harassment. This is a plain, practical pre-loan checklist for any digital loan in India — verify the registered entity, read the Key Fact Statement, and refuse apps that demand access to your contacts and photos.

The hardest harassment to escape is the loan you should never have taken. Many of the most painful cases — calls to your contacts, shaming messages, impossible "totals" — trace back to a single rushed moment: tapping "accept" on an app without checking who was really behind it or what the terms were. The good news is that a few minutes of calm checking before you borrow is one of the most powerful protections you have. This is a practical, plain-language checklist to run before you take any digital loan in India. It is not about fear; it is about borrowing with your eyes open.

None of this is anti-borrowing. Credit, used carefully, is a legitimate and useful thing. The aim here is simply to make sure that if you do borrow, you do it from a properly regulated lender, on terms you have actually read, through an app that respects your privacy. Spend the few minutes now; it can save you months later.

1. Verify the registered entity behind the app

This is the single most important check, so do it first. A digital loan app is only a shop-front. Behind it there must be a real lender — an RBI-registered NBFC or a bank — and that entity carries the legal responsibility for how you are treated. The app's catchy name is not the lender; the regulated entity is.

So before anything else, find out which registered entity is actually lending you the money. A legitimate app names its NBFC or bank partner clearly — usually in the app, on the website, and in the loan documents. Once you have the name, confirm it appears on the RBI's published list of registered NBFCs. You can run this verification quickly using loantrap.org's check tool, which is built to help you confirm a lender's regulated status before you commit. If you cannot find a named regulated lender, or the name does not match anything on the RBI's list, stop. An unregulated app that you cannot trace is precisely the kind that turns to harassment when recovery time comes, because it has no regulator to answer to.

2. Read the Key Fact Statement before you agree

An RBI-regulated digital lender must give you a Key Fact Statement (KFS) before you borrow — a short, standardised summary of the real deal. Do not skim past it. The KFS is where the true cost lives, and reading it is how you avoid nasty surprises. Check, specifically:

  • The amount you will actually receive. Some apps deduct fees upfront, so the money credited to your account can be less than the headline "loan amount". Know both numbers.
  • The interest rate and the APR. The Annual Percentage Rate captures the full cost including processing and other fees. A modest-looking interest rate can hide a punishing APR once charges are added.
  • All fees and penalties. Processing fee, penal charges, bounce charges — every one should be listed here. If a charge is not in the KFS, question it.
  • The tenure and repayment schedule. How much, how often, and by when. Make sure the EMIs are something you can realistically meet.
  • The cooling-off / look-up period. RBI norms give you a window to exit a digital loan by repaying the principal and proportionate cost without penalty. Know that this exists before you need it.

If a lender will not show you a clear KFS, or the figures in the app do not match it, treat that as a red flag. You cannot consent to terms you have not been allowed to read. Save a copy of the KFS the moment you receive it — store it in loantrap.org's private locker so you always have your baseline truth on hand.

3. Refuse apps that demand your contacts, gallery and call logs

This check protects you from the most distressing form of harassment before it can ever start. Ask yourself a simple question: why would a lender need my entire contact list or photo gallery to give me a loan? It would not. A genuine lender assesses you on income and credit, not on who is in your phone.

Under the RBI's digital lending framework, apps are restricted to need-based, one-time permissions taken with your explicit consent — they should not be hoovering up your contacts, media, or call logs. So when an app demands access to your full contact list, your gallery, or your call history, understand what that data is for: it is the raw material for the shaming and "we'll call everyone you know" threats that define predatory recovery. Decline those permissions. If the app refuses to let you proceed without them, that refusal has told you everything you need to know — choose a different lender. A properly regulated app will function with the minimal, relevant permissions only.

4. Check the basics that signal legitimacy

A few more quick checks round out your picture. None is conclusive alone, but together they help you tell a careful lender from a careless or predatory one:

  • A real grievance redressal route. Legitimate lenders publish a named grievance officer with contact details. If you cannot find one, you will have nowhere to turn if something goes wrong.
  • A written loan agreement and sanction letter that you receive a copy of — not just a screen you tapped through.
  • Transparent disbursal and repayment to and from your own bank account, with no instruction to route money through a personal UPI ID or a stranger's account.
  • No demand for upfront "fees" before disbursal. Genuine charges are deducted from the loan or built into the schedule; a demand to pay money first, separately, to "release" a loan is a classic scam pattern.
  • Plausible app-store presence — but treat reviews with caution, since they can be gamed. The registered-entity check in step 1 matters far more than star ratings.

If several of these are missing at once, the safest decision is not to borrow from that app. There are regulated lenders who meet all of these basics; you do not have to settle for one that does not.

5. Borrow only what you can realistically repay

The final check is about you, not the app. Even a perfectly regulated loan becomes a trap if the repayments do not fit your life. Before you accept, look honestly at your monthly income and existing commitments and ask whether the EMI is genuinely affordable, including in a month where something goes wrong. Very short-tenure, high-cost "payday" style loans are especially unforgiving — a single missed payment can trigger steep penalties and aggressive recovery.

If you are borrowing to repay another loan, pause and take that seriously, because that is often the first turn of a debt spiral. It may be a moment to look at lawful repayment or settlement options for the existing loan rather than stacking a new one on top. Our help page points to calmer routes when you are already under pressure, and explains how to deal with existing lenders fairly without taking on more debt.

A two-minute version, and where to turn if it is already too late

If you remember nothing else, remember these five: verify the regulated entity behind the app; read the Key Fact Statement; refuse bulk access to contacts and gallery; confirm there is a real grievance route; and borrow only what you can repay. Run that list before every digital loan, and you will avoid the large majority of loan-app traps.

And if you are reading this after taking a loan that has already turned into harassment, none of this is meant as blame. Borrowing under pressure is human, and predatory apps are designed to be hard to resist. You still have rights, the harassment is still wrong, and there are calm steps to take. If a matter becomes serious — a court notice or sustained threats — and you cannot afford a lawyer, free government legal aid is available through NALSA, your State Legal Services Authority, or your District Legal Services Authority; our legal aid page explains how to reach them. The checklist is for next time. For this time, you are not alone, and there is a way through.

This is general information, not legal advice. For your specific situation — especially if a loan has already led to harassment or a court notice — consider free legal aid (NALSA/SLSA/DLSA) or a qualified advocate.

Frequently asked questions

How do I know if a loan app is legitimate?
A legitimate digital loan is always backed by a Regulated Entity — an RBI-registered NBFC or a bank. The app is only the shop-front; the actual lender must be named, and that named entity should appear on the RBI's list of registered NBFCs. If you cannot find which regulated lender stands behind an app, treat that as a serious warning sign and do not borrow.
What is a Key Fact Statement and why does it matter?
The Key Fact Statement (KFS) is a short, standardised document an RBI-regulated digital lender must give you before you borrow. It sets out the loan amount, the interest rate, the Annual Percentage Rate (APR) including all fees, the tenure, the repayment schedule, and the cooling-off period in one place. It matters because it is your single source of truth — if a lender will not give you a clear KFS, you cannot know what you are agreeing to, and that is reason enough to walk away.
Should I allow a loan app to access my contacts, photos and gallery?
No. A genuine lender does not need your entire contact list or photo gallery to assess or service a loan. The RBI's digital lending norms restrict apps to need-based, one-time permissions with your consent. An app that insists on bulk access to contacts, media or your full call log is collecting the very data used later for harassment and shaming. Decline those permissions — and if they are mandatory to proceed, choose a different lender.
✓ Reviewed by qualified advocates · 15/6/2026Last updated 2026-06-13. General information, not legal advice.