What a legal loan agreement must contain — and predatory red flags

A loan should be a clear, honest agreement: you know exactly how much you are borrowing, what it will cost, when you must repay, and who you are dealing with. When any of that is hidden, vague or missing, the arrangement is tilted against you from the start. Many borrowers who later face harassment discover that the warning signs were present in the paperwork — or in the absence of paperwork — all along. Understanding what a legal loan agreement must contain helps you spot trouble early, and it strengthens your position if a dispute arises later.

This article explains, in plain language, what a proper loan agreement and its accompanying documents should include in India, and the predatory red flags that signal an unfair or unsafe loan. This is not about escaping a debt you genuinely owe. It is about making sure the terms you are held to were fair, disclosed and lawful in the first place.

Why the paperwork protects you

Disclosure rules exist so that you can see the true cost and terms of a loan before you are bound by them, and so that you have something concrete to point to if the lender later behaves unfairly. The Reserve Bank of India's Fair Practices Code requires lenders to be transparent about terms, interest and charges. Its Digital Lending Directions go further for app-based loans, mandating a standardised Key Fact Statement (KFS), clear disclosure of the actual lender, an all-inclusive cost figure, a cooling-off period, and accessible grievance redressal. The Digital Personal Data Protection Act, 2023 (DPDP Act) governs how your personal data may be collected and used, which is directly relevant to apps that overreach.

When a lender follows these rules, you can borrow with open eyes. When a lender ignores them, the gaps are not an accident — they are usually where the unfairness hides.

What a legal loan agreement must contain

A proper loan, whether from a bank, an NBFC, or a digital lender working through a Regulated Entity, should give you the following in writing:

• The identity of the actual lender. The name of the Regulated Entity (bank or RBI-registered NBFC) that is lending the money must be clear. An app or platform is not itself the lender; it should disclose the RE behind your loan.
• The principal amount sanctioned, and the amount actually disbursed to you.
• A Key Fact Statement (KFS) — a plain, standardised summary showing the interest rate, the all-inclusive Annual Percentage Rate (APR), every fee and charge, the cooling-off period, and the total amount payable over the life of the loan.
• The interest rate and how it is calculated, stated clearly, along with whether it is fixed or floating.
• All fees and charges — processing fees, documentation charges, penal charges for late payment, and any other deductions — itemised, with nothing buried or unnamed.
• The repayment schedule — the instalment amount, due dates, tenure, and the consequences of delay, set out plainly.
• Penal charge terms that are reasonable and disclosed, not open-ended.
• Grievance redressal details — the name and contact of the grievance officer and the escalation path, so you know exactly where to complain.
• Your copy. You are entitled to receive copies of the signed agreement and the KFS. A lender who will not give you the documents you signed is a serious concern in itself.

If these elements are present, clear and given to you, you are in a far stronger position — both to plan your repayment and to challenge any later overreach.

Predatory red flags to watch for

Now the warning signs. Any one of these deserves caution; several together suggest the arrangement is unsafe.

• No written agreement or no KFS. If you cannot see the full terms in writing before you are bound, that is a fundamental red flag.
• The real lender is hidden. If you cannot tell which Regulated Entity is actually lending, or the app dodges the question, be wary. RBI requires this to be disclosed.
• The amount you receive is much less than what you "borrowed." If you are sanctioned one figure but money far smaller lands in your account because of undisclosed "fees", while you are expected to repay the full sanctioned sum plus interest, that is a classic predatory tactic.
• Very short repayment windows with steep penalties. Loans designed to be hard to repay on time, then loaded with heavy penal charges, are built to trap rather than to serve.
• Interest and charges that are vague, shifting or not itemised. If you cannot get a clear total cost (APR), the cost is probably worse than it looks.
• Demands for sweeping phone permissions — access to your contacts, gallery, photos, call logs or location that has nothing to do with assessing or servicing a loan. RBI's Digital Lending Directions restrict such data collection, and misuse of your data engages the DPDP Act. This is one of the strongest signals of a harassment-oriented operation.
• No grievance officer or escalation details. A lawful lender tells you how to complain. The absence of this is telling.
• Pressure to accept instantly, "limited time" offers, or discouragement from reading the terms.
• The entity is not traceable to RBI registration. Unregistered lending and impersonation are serious concerns.

Recognising these does not mean you have done anything wrong. It means you are reading the arrangement clearly — which is exactly what protects you.

Verify before you commit — or before you repay

Whether you are about to borrow, or already in a dispute, one step is worth doing: confirm that the lender is a genuine, RBI-registered Regulated Entity and that the party contacting you is really connected to your loan. Impersonation cuts both ways — some "lenders" are not registered, and some "recovery agents" are not connected to any loan you actually took. You can cross-check a lender's details using our lender check tool before you sign or before you pay anyone.

Quietly keep your documents safe

Your loan paperwork is your evidence. Keep it organised and private from the start.

• Save the signed loan agreement, the KFS, the sanction letter, and any terms you accepted in the app.
• Keep bank statements showing the actual amount disbursed versus what you were told.
• Retain screenshots of the app's permission requests, fee disclosures and lender identity.
• Hold all charge and repayment records, so any discrepancy is easy to show.

Store these in one place, away from prying eyes, using the document locker, so you can produce them quickly if you need to complain or dispute a charge.

If the terms were unfair — how to raise it

If you have already taken a loan and the disclosures were missing, misleading or predatory, you have free routes to challenge the conduct.

1. Write to the lender's grievance officer, setting out exactly what was not disclosed or what was misrepresented — for example, undisclosed deductions, a missing KFS, or hidden charges — and ask for correction and a written response. Cite the RBI Fair Practices Code and, for app loans, the Digital Lending Directions.

2. Escalate to the RBI Ombudsman if unresolved within 30 days, free of cost, at cms.rbi.org.in under the Integrated Ombudsman Scheme (RB-IOS).

3. Report unfair or unauthorised practices on RBI's Sachet portal (sachet.rbi.org.in).

4. For data misuse or app-based harassment, the DPDP Act governs your data, and you can use the cybercrime helpline 1930 and cybercrime.gov.in.

If you cannot afford a lawyer

You do not need to hire anyone to raise these issues — the complaint routes above are made for borrowers to use directly, free of cost. If your matter is more serious and you need legal help but cannot afford it, India's free legal aid system exists for exactly this. The National Legal Services Authority (NALSA), State Legal Services Authorities (SLSA) and District Legal Services Authorities (DLSA) provide free legal assistance to eligible people. You can learn how to approach them through our free legal aid guide.

A calm closing thought

A fair loan has nothing to hide. The lender is named, the cost is shown in full, the schedule is clear, and you hold a copy of everything you signed. When those things are missing, the gaps are the warning. Reading your agreement carefully — and checking the lender before you commit or repay — is not paranoia; it is ordinary prudence, and it puts you in a position of strength. If you would like to read more, our blog has further guides on lender verification, your data rights and responding to unfair recovery.

This is general information, not legal advice. Rules and procedures can change, and your situation may have specific facts that matter. For advice on your own case, consider free legal aid through NALSA/DLSA or a qualified professional.