Complaints & Forums: How to Fight Back
Filing a cybercrime complaint for loan-app harassment
When a loan app crosses from collection into threats, blackmail, contact-shaming or morphed images, it has entered criminal territory — and that goes to the cybercrime system, not a grievance queue. This guide explains the helpline 1930, how to file on cybercrime.gov.in, what to preserve as evidence, and how this runs in parallel with your RBI and police steps.
There is a clear line that some loan apps cross. Calling you about an overdue amount is collection. Threatening to circulate a morphed photo of you, messaging your entire phone book to shame you, or demanding money under threat is crime. When an app crosses that line, the right destination is not a grievance queue — it is the cybercrime system, through the helpline 1930 and the portal cybercrime.gov.in. This guide shows you how to use it calmly and effectively.
You did nothing wrong by borrowing, and falling behind on a repayment is not a crime. But what some apps do in the name of recovery very much can be. Recognising that, and acting on it, moves you from feeling hunted to being a complainant the system is built to protect.
What makes loan-app harassment a cybercrime
Not every annoying call is a police matter, so it helps to know what tips conduct over the line. The following are the kinds of behaviour that belong in the cybercrime channel:
- Threats to harm you, your family, or your reputation.
- Extortion or blackmail — demanding money under threat of exposure or harm.
- Contact-shaming — messaging or calling people in your phone book to humiliate you or pressure them.
- Morphed, obscene, or sexual images created from your photos, or threats to make and share them.
- Impersonation — pretending to be police, a court, or an official body to frighten you.
- Misuse of your personal data harvested from your phone — contacts, gallery, location — turned into a weapon.
If you are unsure whether what you are facing counts, our guide on what actually counts as recovery harassment walks through the line in more detail. As a rule of thumb: anything involving a threat, a demand-under-threat, your contacts, or your images is serious and should be reported without waiting.
Preserve your evidence first
Cyber investigations run on digital traces, so before you report, preserve everything — and never delete the app, messages, or call logs in panic, because that is your proof. Keeping it organised in one place, like loantrap.org's free private locker, means your complaint is coherent and complete.
Capture and keep:
- Screenshots of every threatening message, with the sender's number or ID and the date and time visible.
- Call recordings, where lawful, and a log of call times and the numbers used.
- The messages sent to your contacts, if any reached you or them — these are powerful evidence of contact-shaming.
- The app details — exact name, Play Store or website link, and the UPI IDs, bank accounts, and phone numbers money was demanded to.
- Your loan record — what was disbursed, what was demanded, and what you actually paid, which often exposes unlawful sums.
Label each item by date so every claim in your complaint points to a piece of proof.
Reporting through 1930 and cybercrime.gov.in
There are two complementary ways in, and for a serious case you should use both.
The helpline — 1930. This is the national cyber-crime helpline, free to call. It is the fastest first contact, especially where money has moved or is being extorted, because quick reporting helps act on financial trails. Call it early, explain plainly what is happening, and note any reference you are given.
The portal — cybercrime.gov.in. For a full, documented complaint, file on the National Cyber Crime Reporting Portal. Step by step:
- Open the portal and choose to report a complaint. For threats, extortion and shaming you will generally use the option for reporting other cybercrimes; the portal also has a dedicated track for crimes against women and children, including obscene or morphed images.
- Register or verify using your mobile number and the OTP sent to it.
- Describe the incident factually and in date order — what the app demanded, the exact threats made, whether your contacts were messaged, and whether any image was morphed or shared. Quote the wording where you can.
- Enter the suspect details you have — app name, numbers, UPI IDs, accounts, links. Partial information is still useful.
- Upload your evidence — screenshots, recordings, the messages sent to contacts.
- Submit and save the acknowledgement number. You can use it to track status, and you may be contacted for more detail.
You can file on the portal even if you do not know the operator's real identity — that is precisely what investigators work to establish.
How this fits with your other steps
A cybercrime complaint does not replace your other actions; it runs alongside them, and the combination is what makes you safe and credible.
- For criminal threats and extortion, beyond the online complaint you can go to your local police and request that an FIR be registered. Our guide on when and how to file an FIR explains that step. The online complaint and an FIR can coexist.
- If the harassing app is not RBI-regulated, report the entity on the RBI's Sachet portal as well, since that is the RBI's channel for illegal lenders.
- If the lender is RBI-regulated, you can still pursue the grievance officer and then the RBI Ombudsman at cms.rbi.org.in for the unfair-practice side of things, in parallel with the criminal complaint.
- If the harassment is sexual or targets a woman with obscene messaging, the National Commission for Women (NCW) is an additional avenue.
Our help page lays these routes out in order so you can run the criminal and regulatory tracks side by side without getting tangled. You can also use check to confirm quickly whether the app is registered, which decides whether Sachet or the Ombudsman is the right RBI door.
Looking after yourself while you do this
Reporting a cybercrime when you are being threatened takes nerve, and it is normal to feel shaken. A few steadying points are worth holding onto. The threats are designed to make you panic and pay; reporting is how you take that power back. The shame the app tries to weaponise is theirs, not yours — you borrowed money and fell behind, which is ordinary and human, not disgraceful. And you do not have to face the next call alone: telling one trusted person, and putting the facts on the record with the police and cybercrime portal, changes your situation from private terror to documented complaint.
If the messages have reached your contacts, a short, calm note to the people who matter — that a loan app is harassing you and you have reported it to the police — drains the threat of its force. Most people respond with concern, not judgement.
If you feel out of your depth
You can file all of this yourself, free, without a lawyer. But if the matter escalates — a court notice, sustained criminal threats, or anything you cannot manage alone — and you cannot afford legal help, you are entitled to free government legal aid through NALSA, your State Legal Services Authority (SLSA), or your District Legal Services Authority (DLSA). Our legal aid page explains how to reach them.
The first time you report, the fear does not vanish overnight. But you will have done the one thing that genuinely shifts the balance: you will have turned a private threat into an official complaint — and that is where these operators begin to lose their hold.
This is general information, not legal advice. For your specific situation — especially sustained threats or a court notice — consider free legal aid (NALSA/SLSA/DLSA) or a qualified advocate.