Are these loan apps legal in India?

Every lender named in this file is an NBFC registered with the Reserve Bank of India, so the lending itself is legal — these are not unlicensed, overseas apps. A registration is a licence to lend, not a licence to harass. What can be challenged is the conduct: charges that were not properly disclosed, interest charged on money deducted upfront so you never received it, and any recovery that breaches the RBI Fair Practices Code. You can verify any NBFC yourself on the RBI's public register.

Can a loan app call my office, employer or family?

No. The RBI Fair Practices Code bars a lender and its recovery agents from contacting your employer, colleagues, family, friends or references, or disclosing your debt to them. Calls are permitted only to you, and only between 8 a.m. and 7 p.m. Emailing your colleagues about a 'default', or threatening 'employment verification' emails to your office, is exactly what the Code prohibits.

What is the maximum interest a loan app can charge in India?

The RBI does not cap NBFC interest rates, but it requires the full cost to be disclosed as an Annual Percentage Rate (APR) in a Key Facts Statement before you borrow. That is why disclosures of 173.39%, 458.59% or an effective 635% a year matter on their own terms: the cost is enormous, and charging interest on money deducted upfront makes the effective rate higher still than the quoted APR.

How do I file an RBI complaint against a loan app?

First raise a written complaint with the lender's grievance officer and keep a copy. If it is not resolved within 30 days, escalate to the RBI Ombudsman through the Centralised Receipt and Processing Centre (CRPC). You can also report the entity or practice on RBI Sachet (sachet.rbi.org.in). For data exposure, blackmail or criminal harassment, file on the National Cyber Crime Reporting Portal (cybercrime.gov.in) or call 1930. Keep every document and screenshot.

Can I be jailed for not repaying a loan app?

Inability to repay a loan is, by itself, a civil matter — you cannot be jailed simply for being unable to pay, and a threat of 'arrest' over a defaulted loan is itself unlawful pressure. Distinct situations such as cheque dishonour or actual fraud are treated differently under the law. This is general information, not legal advice.

The instant-loan trap: what RBI-registered NBFCs put in their own paperwork

An evidence file on RBI-registered 'instant loan' NBFCs in India — Ram Fincorp, Zayloloan, Rupee On Time, Lendit and more. Built only from their own Key Facts Statements, agreements and recovery emails: APRs in the hundreds of percent, employer-contact pressure and mass data exposure — each case documented in full, plus how to file an RBI complaint against a loan app.

A salaried borrower in Bengaluru took small "instant" loans from a series of app-based lenders. What their paperwork shows is not the work of unlicensed, overseas operators — every lender named in this file is an NBFC registered with the Reserve Bank of India. This is an evidence file built only from the lenders' own documents — Key Facts Statements, loan agreements and recovery emails — and from the RBI's public register. Each case is documented in full in its own report; this page is the overview.

The Government of India has blocked 600+ predatory digital-lending apps and the RBI has issued repeated advisories. The companies here are not in that bucket. They are registered, regulated entities — which is precisely why their own paperwork carries weight.

What their own numbers show

Lender (operating company)	What its own document shows	Disclosed rate
Ram Fincorp (R.K. Bansal Finance Pvt Ltd)	₹26,901 received, ₹42,622 demanded; 6 × ₹7,103	120% p.a.; APR 173.39% (its KFS)
Zayloloan (Naman Finlease Pvt Ltd)	₹85,000 sanctioned, ₹74,970 received; interest on the full ₹85,000; 39-day single repayment	1%/day; 2%/day penal; APR 458.59% (its KFS)
Rupee On Time (Vrinda Finlease Ltd)	—	Documented effective APR ~635% p.a.
Lendit (Chinmay Finlease Ltd)	36.5% labelled "flat" but charged on a reducing balance; loan rolled into a larger one 3 days later	36.5% "flat" (its agreement)

The full file on each lender

Ram Fincorp — a 173% APR on its own KFS — ₹26,901 reached the borrower; ₹42,622 is demanded back.
Zayloloan / Naman Finlease — a 458.59% APR, and three more apps — interest charged on money deducted upfront; the same company also runs Qualoan, Funds Bull and Zepto Finance.
Rupee On Time — a documented effective APR of about 635% — what a triple-digit rate does to a small loan.
Lendit / Chinmay Finlease — the 3-day rollover — a "flat" rate on a reducing balance, and clauses that pre-authorise visits to your office.
Mass data exposure — Toofan Loan and Subhlakshmi — recovery emails that put hundreds of borrowers' addresses on display.
The harassment playbook — calls and emails to your office — documented call logs and alleged employer-contact pressure.

The pattern, in their own documents

Lent low, charged high. Across these agreements, 10–12% is often deducted upfront, and interest is then charged on money the borrower never received. A daily-interest structure — 1% a day is roughly 365% a year before penalties — is wrapped in paperwork that quotes smaller, friendlier-sounding figures.

Recovery aimed at the people around you. When repayment slips, the documents and complaints describe a manufactured deadline, then pressure on a borrower's workplace and contacts — and, in two cases, recovery emails that exposed hundreds of borrowers' addresses to each other, a personal-data exposure of the kind the Digital Personal Data Protection Act, 2023 exists to prevent.

Fine print written in advance. Agreements pre-authorise home and office visits, contact with the borrower's employer and references, and clauses that purport to override the National Do-Not-Disturb (NDNC) registry. Several of these NBFCs even use a personal Gmail or Yahoo address as their RBI-registered corporate email.

One company, many masks. A single registered NBFC can run several consumer-facing app brands, so a borrower who avoids one app may be lent to, and pursued by, the same company under another name.

Know your rights

Whatever you owe, the RBI Fair Practices Code binds every NBFC and its recovery agents. They cannot call you before 8 a.m. or after 7 p.m.; cannot contact your employer, family, friends or references or disclose your debt to them; cannot use abuse, threats or public shaming; must disclose the APR in the Key Facts Statement; and may recover only by lawful means. The Regulated Entity is accountable for its recovery agents. Inability to repay a loan is, by itself, a civil matter — you cannot be jailed simply for being unable to pay, and a threat of "arrest" over a defaulted loan is itself unlawful pressure.

How to report it

These channels are free and official — you never need to pay anyone to use them.

RBI Sachet — sachet.rbi.org.in — to report an entity or an unlawful lending practice.
RBI Ombudsman / Centralised Receipt and Processing Centre (CRPC) — for a complaint against a regulated NBFC, after first raising it with the lender's grievance officer and waiting 30 days.
National Cyber Crime Reporting Portal — cybercrime.gov.in — and helpline 1930 — for data exposure, blackmail, or harassment that has become criminal.
Consumer commission — for deficiency in service or an unfair trade practice.

Keep your evidence: every email, the Key Facts Statement, the call logs and the screenshots. They are what turn a complaint into a case.

Right of reply: any company named in this investigation may submit a factual correction or response through our right-of-reply channel, and we will publish it.