Are instant loan apps charging high interest and using illegal recovery legal in India?

I took a small loan from a mobile lending app and now they are harassing my contacts and charging very high interest and hidden fees. Is this legal? I would like to understand which provision governs this, what it entitles me to, and how long I have before the remedy lapses. I also want to know whether I need a lawyer for this or can do it myself.

In India, the answer to "Are instant loan apps charging high interest and using illegal recovery legal in India?" turns on RBI Digital Lending Guidelines 2022, RBI Fair Practices Code for Lenders and Information Technology Act 2000, Section 66E. The points below set out the position and then what to do about it, in the order it should be done.

RBI's Digital Lending Guidelines require that all loans be disbursed and repaid only directly between the borrower's bank account and the regulated entity's account, without pass-through of funds through any third-party loan service provider or app account.

The lender must provide a Key Fact Statement disclosing the annual percentage rate, all fees and charges in a standardised format before the loan is disbursed, and cannot charge undisclosed or hidden fees later.

Digital lending apps are required to have their name and that of the regulated entity behind them clearly displayed, and lending apps operating without a tie-up with an RBI-regulated bank or NBFC are functioning illegally.

Accessing a borrower's contact list, photos or messages without explicit consent for lending or recovery purposes and threatening or shaming borrowers by contacting their known persons violates both RBI norms and can amount to an offence under the Information Technology Act.

Borrowers can verify whether the lending app is linked to an RBI-regulated entity by checking the RBI's list of registered NBFCs and can report illegal apps to the RBI and local police cyber cell.

Practical steps: 1) Check whether the app discloses the name of its regulated bank or NBFC partner and demand the Key Fact Statement; 2) Stop sharing further permissions such as contacts or gallery access with the app immediately; 3) File a complaint with the local police cyber cell and the RBI if you face harassment or illegal recovery tactics; 4) Report the app to Google Play/Apple App Store and to RBI's Sachet portal for illegal digital lending complaints.

If the other side has already issued a notice, filed a case or set a deadline, treat the matter as time-sensitive — remedies under RBI Digital Lending Guidelines 2022 carry limitation periods, and unexplained delay weakens an otherwise strong case. You can post the details on the MyVakeel forum for a practising advocate to review, or book a paid consultation with a Bar Council verified lawyer in banking law.

Disclaimer: This information is for general awareness and does not constitute legal advice. Statutes and their interpretation change, and outcomes depend on the facts of your case. Please consult a qualified advocate before acting on it.