RBI Rules for Loan Apps: What Every Borrower Should Know

The Reserve Bank of India (RBI) regulates digital lending through its Digital Lending Directions, 2025. In plain terms, RBI guidelines for loan apps require clear disclosure of costs before you borrow, limits on what data an app can take, and a working complaints route if something goes wrong. This page explains each rule as it affects you and what you can do if a lender ignores it.

The rules are written for lenders, so they can read as dense. Below, each one is turned into something you can check on your phone before you accept a loan, or act on after a problem.

What are the RBI guidelines for loan apps?

The RBI guidelines for loan apps are the set of rules the Reserve Bank of India applies to banks and non-banking financial companies (NBFCs) that lend through apps and digital channels. The current rulebook is the Digital Lending Directions, 2025, which covers the key fact statement, the cooling off period, direct disbursement, fees charged by lending service providers, limits on data access and grievance redressal.

Two points shape everything else. First, the rules bind the regulated lender, whether a bank or an NBFC, even when an app or another company is the one you see on your screen. Second, an app that is not a regulated lender and does not work with one is outside this system, which is where most of the harm to borrowers comes from.

The older September 2022 guidelines have been superseded by the 2025 Directions. If you read a blog or video quoting only the 2022 text, treat it as background and check the current Directions instead.

Which loan apps does RBI actually regulate?

RBI regulates the bank or NBFC that lends the money, not the app as a piece of software. A loan app is generally one of two things: the lender’s own app, or a lending service provider (LSP) that finds borrowers and handles the interface on behalf of a regulated lender. In both cases the regulated lender is responsible for how you are treated.

That is why the old advice to use only RBI registered apps is slightly off. RBI does not register apps. It regulates lenders, and the question to ask is which regulated lender is giving you this loan.

You can start with the RBI Sachet portal, which lets you check whether an entity is registered and report illegal lending. For a step by step walkthrough, see our guide on how to check whether a loan app is legal.

What must a loan app tell you before you accept?

Before you accept, the lender must give you a key fact statement. This is a short standard summary of the loan terms, so you can see what you are agreeing to before money moves. The Digital Lending Directions, 2025 list it as one of the core protections, and the same Directions cover fees charged through lending service providers.

In practice, you should be able to find these items before you tap accept:

• The loan amount, the interest rate and the repayment schedule.
• Every fee, including processing and any charge paid to the app or service provider.
• The name of the regulated lender actually giving the loan.
• How to complain and who handles complaints.

If a screen hides these behind a vague “terms” link, or shows a monthly rate without the total you will repay, stop and compare it with another offer. The cost of a loan is the total you repay minus what you actually receive, not the headline rate.

How can unclear fees change what you pay?

The two loans below have the same headline interest. The only difference is how much was taken as fees before the money reached you. All figures are illustrative assumptions, not any real lender’s pricing.

Item	Loan A: fees shown up front	Loan B: fees found later
Loan amount	Rs 20,000	Rs 20,000
Processing fee taken at disbursal	Rs 600	Rs 2,000
Amount you actually receive	Rs 19,400	Rs 18,000
Interest at 2% a month for 3 months	Rs 1,200	Rs 1,200
Total you repay	Rs 21,200	Rs 21,200
Real cost of borrowing	Rs 1,800	Rs 3,200

The arithmetic is simple. Loan A: Rs 20,000 minus Rs 600 is Rs 19,400 received, and Rs 20,000 plus Rs 1,200 is Rs 21,200 repaid, so the cost is Rs 21,200 minus Rs 19,400, which is Rs 1,800. Loan B: Rs 20,000 minus Rs 2,000 is Rs 18,000 received, and the same Rs 21,200 is repaid, so the cost is Rs 3,200.

Loan B costs Rs 1,400 more while looking identical on the interest line. A key fact statement exists so that this difference is visible before you accept, not after.

If numbers like these have already stacked up across cards and apps, you may be looking at repayment pressure on several fronts at once. BillCut offers a way to look at converting high interest credit card dues into structured EMIs, and you can see how it works on BillCut.

Can you cancel a loan after taking it?

The Digital Lending Directions, 2025 include a cooling off period, which lets you exit a digital loan within a set window after taking it. The number of days, and what you must repay on exit, are set out in the Directions themselves, so read that section on the RBI notification page instead of relying on a figure from a blog or an app.

Two practical points. The cooling off right is meant for a change of mind, not for avoiding repayment of what you used. And it is worth asking the lender how to exercise it before you accept, so you know the route if you need it.

How do RBI guidelines for loan apps protect your data?

The Directions place limits on the data a digital lender can access, so an app cannot simply take everything on your phone. The limits sit in the same Digital Lending Directions, 2025 that cover disclosure and grievances. In short, the data an app collects should be tied to a clear need connected with assessing and servicing your loan.

When you install a loan app, you will be asked for permissions. Treat the following as questions to ask yourself:

• Does the app need access to your contacts, photos or files to give you a loan?
• Can you refuse a permission and still complete the application?
• Is the permission request explained in plain language?

If an app insists on broad access and will not proceed without it, that is a reason to walk away. For the reader’s view of how this plays out, our article on why loan apps ask for contact access goes through it in detail.

Where should the money go, and who may it come from?

Under the Digital Lending Directions, 2025, loan money should go directly between the regulated lender and your own bank account, and repayments should flow the same way. This direct disbursement rule is meant to stop an app or agent from sitting in the middle of your money.

This gives you a simple test. If an app asks you to pay a fee into a personal account, a wallet you do not recognise, or a UPI ID that is not the lender’s, treat it as a warning sign. A regulated lender collects through its own channels, and repayment mandates such as eNACH run on rails overseen by the National Payments Corporation of India.

How must lenders and recovery agents behave if you miss an EMI?

Missing an EMI does not remove your rights. RBI’s guidelines on recovery agents cover how agents may contact you, including permitted contact hours, and prohibit intimidation. Abuse, threats and public shaming are not a lawful way to collect a debt.

Penalties are also regulated. RBI’s rule on penal charges in loan accounts says a penalty must be a flat penal charge and cannot be compounded into interest. So if an app adds a late fee and then charges interest on that fee, ask for the basis in writing.

If you are being harassed, our guide on how to stop harassment from fake loan apps covers the practical steps. Keep screenshots, call logs and messages, because every complaint route below works better with a record.

What rights do you have as a borrower, and where do you act on each?

The table below lines up each protection with the place you can use it. It summarises the rules covered above and is not legal advice.

If this happens	What the rules cover	Where to act
You cannot see the full cost	Key fact statement before you accept	Ask the lender, or decline the loan
You regret taking the loan	Cooling off period	Check the Directions, then contact the lender
An app wants broad phone access	Limits on data access	Refuse the permission or leave the app
Agents threaten or call at odd hours	Recovery agent conduct rules	Complain to the lender, then to RBI
Late fees keep growing	Penal charge must be flat, not compounded	Ask for the charge basis in writing
The lender does not respond	Grievance redressal and Ombudsman	RBI Complaint Management System

How do you complain if a lender or app breaks the rules?

Complain to the lender first and keep a written record. If you do not get a response, escalate to RBI. The RBI Complaint Management System is where you file a complaint against a regulated entity, and RBI’s Ombudsman and consumer protection overview explains the Integrated Ombudsman route against a bank or NBFC.

If the app is not a regulated lender at all, or you suspect fraud, report it on the National Cyber Crime Reporting Portal. The helpline for this is 1930. RBI complaint tools cover regulated entities, so a fraudulent app calls for a cybercrime report rather than a lender complaint.

How can BillCut help if loan and card repayments are piling up?

BillCut is a debt refinancing platform, and it is a provider in the category of solutions this article touches. It helps Indian borrowers convert high interest credit card debt into structured, lower interest EMIs. It does not replace the protections above, and it is not a way to report a loan app.

The reason it appears here is narrow. Many people reach quick loan apps because card dues have grown, and a loan taken to cover a card bill can add a second set of fees and a second repayment date. Looking at the whole picture first, including interest on the card and the cost of any app loan, helps you compare options on total repayment rather than on how fast the money arrives.

Whether a refinanced EMI plan suits you depends on your dues, your income and your eligibility, and no outcome is promised. If you are unsure, compare the total repayment under each option, as in the worked example above, before you commit. Use the complaint routes above for any lender that has broken the rules, whatever you decide about your debt.

Who should and should not rely on these rules alone?

These rules work best for people who borrow from a bank or NBFC, can read the key fact statement, and keep records. They work less well if you borrowed from an app that is not a regulated lender, because the complaint routes above may not reach it.

Use the rules as your main protection if:

• You know the regulated lender behind the loan and can name it.
• You received a key fact statement and saved the loan agreement.
• Repayments run through the lender’s own channels.

Do not rely on them alone if:

• You cannot find out which lender is behind the app.
• You were asked to pay fees into a personal account or unfamiliar UPI ID.
• Your debt is already across several cards and apps, where the real problem is total repayment, not one lender’s conduct.

The rules protect your rights. They do not make a loan affordable. For a quick check of an app you are unsure about, use our safe versus unsafe instant loan apps checklist before you share any documents.

What should you remember about RBI rules for loan apps?

RBI guidelines for loan apps put the duty on the regulated lender, not on you. You are entitled to see the full terms before you accept, to limit what an app takes from your phone, to be treated with respect during recovery, and to complain through proper channels. The rules are current as of October 2026, but they can change, so confirm the latest text on the official RBI notification before relying on any detail here.

Frequently Asked Questions