Are instant loan apps charging high interest and using illegal recovery legal in India?

I took a small loan from a mobile lending app and now they are harassing my contacts and charging very high interest and hidden fees. Is this legal? I have been reading conflicting things online and I would like to understand what Indian law actually says about this, which Act and Section applies, what the realistic timelines and costs are, and what I should be doing right now to protect my position. If the matter can be resolved without litigation I would prefer that route, but I want to know what my rights are before I agree to anything or sign any document.

Are instant loan apps charging high interest and using illegal recovery legal in India? is governed in India primarily by RBI Digital Lending Guidelines 2022, RBI Fair Practices Code for Lenders and Information Technology Act 2000, Section 66E. The short answer is set out below, followed by the practical steps most people in this situation need to take. Read it alongside the specific provisions named, because the exact relief available to you turns on the facts you can prove on paper.

RBI's Digital Lending Guidelines require that all loans be disbursed and repaid only directly between the borrower's bank account and the regulated entity's account, without pass-through of funds through any third-party loan service provider or app account.

The lender must provide a Key Fact Statement disclosing the annual percentage rate, all fees and charges in a standardised format before the loan is disbursed, and cannot charge undisclosed or hidden fees later.

Digital lending apps are required to have their name and that of the regulated entity behind them clearly displayed, and lending apps operating without a tie-up with an RBI-regulated bank or NBFC are functioning illegally.

Accessing a borrower's contact list, photos or messages without explicit consent for lending or recovery purposes and threatening or shaming borrowers by contacting their known persons violates both RBI norms and can amount to an offence under the Information Technology Act.

Borrowers can verify whether the lending app is linked to an RBI-regulated entity by checking the RBI's list of registered NBFCs and can report illegal apps to the RBI and local police cyber cell.

What to do next: 1) Check whether the app discloses the name of its regulated bank or NBFC partner and demand the Key Fact Statement; 2) Stop sharing further permissions such as contacts or gallery access with the app immediately; 3) File a complaint with the local police cyber cell and the RBI if you face harassment or illegal recovery tactics; 4) Report the app to Google Play/Apple App Store and to RBI's Sachet portal for illegal digital lending complaints.

If the other side has already issued a notice, filed a case or set a deadline, treat the matter as time-sensitive — most remedies under RBI Digital Lending Guidelines 2022 carry limitation periods, and a delay you cannot explain weakens an otherwise strong case. You can post the details on the MyVakeel forum for a practising advocate to review, or book a paid consultation with a Bar Council verified lawyer in this practice area.

Disclaimer: This information is for general awareness and does not constitute legal advice. Statutes and their interpretation change, and outcomes depend on the facts of your case. Please consult a qualified advocate before acting on it.