How to recover money lost to loan app harassment

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 1 Nov 2026 · Online fraud

If an instant loan app has taken money from you beyond what you borrowed — a "processing fee" that was never disclosed, an interest rate that doubled overnight, or a sum you paid after recovery agents threatened you and your contacts — that money is legally recoverable. Recovery runs on three tracks at once: a criminal complaint for the offences behind the harassment, a dispute with your bank under the Reserve Bank of India's 2017 circular on unauthorised electronic transactions, and a civil action for the return of money paid without a lawful basis. The three tracks help each other; the police complaint gives your bank dispute a crime number, and the bank record gives your civil suit clean proof of payment.

Most victims lose money twice. They first pay a "closure amount" to stop the calls, and then they discover that paying was never going to end the harassment because the demand was never a real debt. The law does not treat a payment made under that pressure as a voluntary settlement. It treats it as money obtained by extortion, and extortion is a cognisable offence. The practical question is rarely whether you have a remedy — you usually have several — but which remedy moves fastest on the facts you can actually prove.

What the law says

The harassment itself is dealt with by the Bharatiya Nyaya Sanhita, 2023. Threatening a borrower or their family to force a payment is criminal intimidation under section 351. Demanding money by putting a person in fear is extortion under section 308. A recovery agent who falsely claims authority, fabricates legal notices, or uses a fake identity to collect is liable for cheating under section 318, including the aggravated form where property is dishonestly induced to be delivered. Where an app operator has used a customer's photographs, phone book or identity to impersonate or defraud, the Information Technology Act, 2000 adds section 66C (identity theft) and section 66D (cheating by personation using a computer resource), along with the general computer offence in section 66. Publishing or transmitting a morphed or intimate image of the borrower without consent can attract section 66E of the IT Act and separate offences in the BNS.

On the money itself, the Reserve Bank of India's circular of 6 July 2017 on limiting the liability of customers in unauthorised electronic banking transactions sets the framework. It divides liability by the customer's own fault. If the fraud occurred through no fault of the customer, the customer has zero liability. If the customer's negligence contributed, liability is limited, and it is capped further where the customer reports the transaction promptly. The circular fixes three working days as the benchmark for reporting after noticing a fraudulent debit; report within that window and your liability position improves materially. Banks are required to credit the disputed amount while investigating, subject to the circular's conditions.

The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 require intermediaries, app stores and hosts to publish a grievance officer and act on valid takedown requests, which is how a harassing app is forced off a marketplace. The Digital Personal Data Protection Act, 2023 is also relevant where an app scraped your contact list, gallery or location without consent and used that data to pressure you.

The step-by-step procedure

1. Stop paying and stop engaging. Do not pay a "settlement" to end the calls. Every new payment is money you will have to argue about later, and it signals that pressure works.
2. Preserve the evidence before anything else. Export the loan app's ledger and your payment history, screenshot the threat messages, save call recordings and note the numbers, and download your bank statement showing every debit. Do not delete the app yet — it holds the transaction record.
3. Report on the national cyber crime portal. File at cybercrime.gov.in or call the 1930 financial-fraud helpline. A report filed quickly gives the authorities a chance to freeze beneficiary accounts before the money is layered away. Note the acknowledgement number the portal issues.
4. Write to your bank's nodal officer. Send a written dispute citing the RBI 2017 circular, quoting the 1930 acknowledgement, and expressly stating that the debit was unauthorised or induced by fraud. Ask for provisional credit and preserve the courier or email proof.
5. File an FIR at the police station. Under BNSS 2023 section 173, information disclosing a cognisable offence must be reduced to writing and read back to you, and you are entitled to a free copy. Insist on an FIR rather than a general diary entry.
6. If the police refuse, escalate. Under BNSS section 175(3) you can approach the Superintendent of Police; under section 187 you can file a complaint before the Judicial Magistrate, who may direct an investigation.
7. Approach the bank's grievance redressal and then the RBI's ombudsman route if the dispute is rejected without reason. Keep every written reply.
8. Consider a civil suit for recovery of the amounts paid without consideration, along with interest, once you have the bank and police records in hand.

Which track does what

What decides the outcome

The single largest factor is timeliness. A dispute raised within days of the debit stands on very different footing from one raised months later, both under the RBI circular and in the eyes of a court. The second factor is documentation: a bank statement, the app's own ledger, and screenshots carry more weight than a narrative. The third is whether you can show the money was not owed — a court asked to order a refund wants to see that the fee was undisclosed, the interest was usurious beyond any agreement, or the payment was extracted by threat. The fourth is the conduct of the recovery: threats to contacts, morphed images and late-night calls shift a case from a commercial dispute into a clear criminal offence.

An unlicensed lender has no enforceable debt to recover, which is exactly why its recovery methods depend on fear rather than on a court.

Common mistakes to avoid

• Paying a "final settlement" before taking any legal step.
• Deleting the app, chat threads or call logs, which destroys the best evidence you have.
• Filing only on the app store and treating a takedown as recovery.
• Raising the bank dispute verbally on a helpline call without a written follow-up.
• Waiting for the calls to stop instead of reporting within the three-working-day window.

Recovery is a documented process, not a confrontation. Whether your immediate need is to stop the harassment, to get a debit reversed, or to sue for the return of your money, the same paper trail serves all three. For the criminal side, see cyber crime lawyer in Kolkata; where the objective is a decree for refund, a civil litigation route is the natural fit.

What "money lost" actually includes

Victims usually count only the headline amount and overlook three other categories of loss that are legally recoverable. The first is the undisclosed fee — the "processing", "platform" or "convenience" charge deducted before disbursal, which reduces what you actually received while the app records a larger principal. The second is the excess interest and the "penalty" added after a deliberately engineered default, created by a repayment window too short to meet. The third is the sum paid under pressure once the threats began, often dressed up for you as a "settlement" or "closure" amount. Each of these is money you can ask a court or a bank to return.

Each category is proved differently, and that matters. The undisclosed fee is proved by holding the app's own ledger against the sanctioned letter. The excess interest is proved by comparing the agreement with the statement of account. The pressure payment is proved by the threat messages and the bank entry that followed them. A single chronology that keeps these three threads separate is far more useful than one lump-sum demand, because a court can grant relief on the sums it can clearly identify while the rest goes to trial.

There is also consequential loss that victims rarely claim and often should. Where a morphed image was circulated, the harm is to reputation. Where an employer, a landlord or a relative was contacted, the harm is to livelihood and relationships. Both are recoverable as damages in a civil action, and they are frequently the real reason someone decides to pursue the matter at all. Naming them does not inflate the case; it describes the loss accurately, and it gives the court a complete picture of what the conduct actually cost you.

Keeping the pressure off while the process runs

Legal steps take time, and the calls do not stop on the day you file. Three practical measures reduce the pressure in the meantime. First, route the operator's number to a secondary line or block it after saving the messages, so that the harassment cannot continue into your working hours. Second, tell your immediate family and your employer, briefly and factually, that you have reported the matter, because a warning in advance removes the shock value the operator is relying on. Third, keep paying nothing further and answer any demand with a single written line stating that the matter is under complaint and that all communication should be in writing.

Do not confront the callers or bargain with them. A recorded confrontation may feel satisfying, but it gives the operator material to characterise you as the aggressor and can complicate a later complaint. Let the paper trail do the work. If the calls persist after the FIR, report the continued conduct to the investigating officer and keep a fresh log; persistence after a complaint is itself a factor that strengthens the case and is relevant when a court considers the seriousness of the conduct.

When to involve a lawyer

You do not need a lawyer to file a 1930 report or a bank dispute; those are designed for individuals. You should seek advice when the police decline to register an FIR, when the app operator files a counter-complaint against you, when the amounts are large, or when a civil suit becomes necessary. At that point the choice of forum and the framing of the pleadings decide far more than the merits you already have in hand.

Frequently asked questions

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Related articles

• Loan app harassment what it is and how it works
• Loan app harassment: evidence to preserve in 48 hours
• Loan app harassment: legal remedies and recovery options
• Loan app harassment complaint process: steps and documents
• How to recover money lost to instant loan app fraud
• Instant loan app fraud: what it is and how it runs

Cyber crime lawyer in your city · Bank account freeze help · Contact