James D
No — it is illegal. RBI's 2022 digital lending guidelines explicitly prohibit loan apps from accessing your contact list and using it for recovery purposes. Contacting friends, family, or colleagues to shame or pressure a borrower is a violation of RBI rules and the Information Technology Act. You can and should report it. The app cannot legally do this — and reporting it has real consequences for the lender.
Last Updated: May 2026 | By James D — Mumbai-based borrower, not a financial advisor
A couple of years ago, after missing an EMI by just a few hours due to a bank transfer delay, a loan app did something I wasn't prepared for: it threatened to send embarrassing messages to everyone in my contact list. The panic was instant. But once I understood my rights and took the right steps, I was able to stop it — and report it. If a loan app is threatening to contact your friends or family right now, here is exactly what to do.
I had borrowed ₹7,500 from an app I had used once before without any issues. One month I missed the repayment by a few hours — the money was in my account but the bank transfer hadn't processed by midnight. By the next morning, the recovery team had already messaged one of my cousins and an ex-colleague, implying I was a scammer who had defaulted on a loan.
They also called from multiple random numbers using abusive language and sent a fake legal notice via WhatsApp claiming an FIR would be filed against me.
I repaid within 24 hours. But the experience pushed me to understand exactly what these apps can and cannot legally do — and what your options are when they cross the line.
Before doing anything else — screenshot every threatening message, WhatsApp message, call log, and any communications sent to your contacts. These are your evidence. Without documentation, any complaint you file is weaker. Do this before you respond to anyone or revoke any permissions.
Go to Settings → Apps → [App Name] → Permissions → revoke contacts, gallery, microphone, and location access. This cuts off their ability to access any further data from your phone. Do this even if you still owe money — revoking permissions does not affect your legal obligation to repay, but it stops further data harvesting immediately.
Go to cybercrime.gov.in and file a complaint under "Financial Fraud." Attach your screenshots. You can also call the National Cybercrime Helpline at 1930 — available across India. Contact shaming and data misuse are offences under the Information Technology Act and Indian Penal Code.
Go to rbi.org.in → Complaints → Sachet Portal (sachet.rbi.org.in). File a complaint against the app and its lending NBFC. RBI takes these complaints seriously — they have delisted and banned multiple apps based on borrower complaints since 2021.
Contact the friends or family members who may have received messages — before they see them on their own. Explain what happened briefly and honestly. This is uncomfortable, but it is far better than letting them be alarmed or confused by what they received. Most people understand once they know the context.
Reporting illegal recovery behaviour does not erase the loan. If the loan was from a legitimate RBI-registered lender, you still owe the principal and agreed interest. Repay what you can — even a partial payment stops the escalation in most cases and protects your CIBIL score from further damage. The harassment and the debt are two separate issues — address both.
| Action | Legal? |
|---|---|
| Call you to remind about repayment | ✅ Legal |
| Send repayment reminders via app/SMS | ✅ Legal |
| Charge late payment penalties (if disclosed) | ✅ Legal |
| Report missed payments to CIBIL | ✅ Legal |
| Contact your friends, family, or colleagues | ❌ Illegal |
| Access your contact list for recovery purposes | ❌ Illegal |
| Send threatening or abusive messages | ❌ Illegal |
| Share or threaten to share your personal data | ❌ Illegal |
| Claim to be police, lawyers, or courts | ❌ Illegal |
| Send fake FIR or legal notices | ❌ Illegal |
These tactics work because they exploit shame. In India, the idea of friends or family finding out you borrowed money from an app — let alone that you defaulted — carries significant social embarrassment. Predatory apps know this and use it deliberately. The threat of contact shaming is often more effective at forcing repayment than any legal process.
Understanding this dynamic takes away much of the power of the threat. They are not doing this because they have a legal right to — they are doing it because it works on people who don't know their rights. You now know yours.
RBI has delisted and banned multiple loan apps based on borrower harassment complaints since 2021. Filing a complaint at the Sachet portal is not symbolic — it has resulted in enforcement action against multiple NBFCs and their recovery partners.
If the app is backed by an RBI-registered NBFC, missed payments will be reported to CIBIL. In my case, a missed payment dropped my score from 726 to 653 — a 73-point fall. It took approximately 6 months of consistent repayment to recover after I settled the loan and obtained a No Due Certificate from the lender.
If you are in a situation where you genuinely cannot repay, contact the lender's official customer support — not the recovery agent — and ask about a repayment extension or partial settlement. Most registered NBFCs have a formal process for this. It protects your CIBIL far better than ignoring the debt.
| Factor | Assessment |
|---|---|
| Is contact shaming legal in India? | ❌ Illegal — report it |
| Can you stop it mid-harassment? | ✅ Yes — revoke permissions + report |
| Does reporting actually work? | ⭐⭐⭐⭐☆ — RBI has acted on complaints |
| Will you still owe the money? | ✅ Yes — repay what you legitimately owe |
| Can this be avoided next time? | ✅ Yes — use only RBI-registered apps |
If a loan app is threatening to contact your friends, you are not powerless. You have clear legal protections, a documented complaint process, and the ability to cut off their data access immediately. Take the 6 steps above in order, document everything, and report it.
The harassment is illegal — the debt may not be. Handle both separately and calmly.
Mumbai-based borrower who has personally applied for, borrowed, and repaid loans on KreditBee, Fibe, Pocketly, and FlexSalary. He built GetLoanCredit.com to share honest, first-hand reviews after struggling to find unbiased information as a real borrower. Not a financial advisor.