The bottom line
- Unlicensed loan apps demand your contacts, photos and call logs — not for verification, for leverage over you.
- Check the lender on the RBI lists before applying, and deny those permissions at install.
- Already trapped? Stop paying inside the app, tell your bank, report on cybercrime.gov.in.
A “personal loan in 5 minutes” app is fast to approve and even faster to become a nightmare. The problem is not loans — it is unlicensed lenders.
The giveaway is in the permissions
Genuine licensed lenders operate under RBI rules. Unlicensed apps demand your contacts, call logs, photos and location — not to verify you, but to have leverage over you. When a payment is late, they message your entire phonebook.
Watch for these behaviours
- The app's lender is not listed among the banks and NBFCs on the RBI website.
- It asks for contact and photo permissions that have nothing to do with disbursing a loan.
- It collects its “interest” and “late fees” as a UPI collect request pulled from your account.
- Threats, false police complaints and contact-harassment follow a missed EMI.
The 60-second permission test
Key takeaways
- Fast approval plus full phonebook access equals unlicensed lender.
- Legitimate loans come from RBI-listed banks and NBFCs, and never need your contacts.
- Recovery agents cannot threaten or shame you — only courts and authorised processes can enforce a debt.
Before you install any loan app, open its store page and read the permissions it wants. A genuine lender needs your identity, your income proof, and your bank details for disbursal. That is the whole list. Contacts, call logs, photo gallery, SMS access — none of these decide whether you can repay a loan. Each one is a collection tool aimed at the people around you, to be used the day you cannot pay. If the list includes your phonebook, delete the app; no interest rate is worth handing strangers your family.
Why it matters
- The loan amount itself is usually correct; the terms around it are where the trap lives.
- Permission access is the real product — your phonebook is the collateral.
- Once granted, the app keeps your data even if you uninstall. Prevention beats cleanup.
The actual interest trap
The screen shows a small daily “processing fee”; the contract inside the app converts it to an annual rate many times what regulated lenders charge. You are essentially signing a blank cheque — and the collectors holding your contacts make sure you keep paying it.
What you should do
- Check the lender on the RBI lists of banks and NBFCs before applying.
- At install, deny Contacts, Call Logs, Photos, SMS and Location. A lender that refuses to proceed without them has told you what it is.
- If you are already trapped: stop paying inside the app, ask your bank to block the UPI collect mandates, and report on cybercrime.gov.in.
- Tell one person you trust what is happening — isolation is what the harassment model feeds on.