Loan app harassment: evidence to preserve in 48 hours

By Advocate Panchanand Shaw, Bar Council of West Bengal · Published 1 Nov 2026 · Digital evidence

The evidence in a loan app case is perishable. An app can push an update that overwrites its own ledger, a server can delete your transaction history, and a contact list can be wiped by the operator before any authority looks at it. The first 48 hours are therefore not a period for waiting — they are the window in which you capture the material that a court will later read. What you save here is what your complaint, your bank dispute and your eventual suit will rest on.

Think of the evidence in four layers: what the app tells you it is doing (the ledger, the fees, the permissions), what the recovery agents say to you (messages, calls, threats), what actually moved (your bank statement and payment handles), and the device itself, which holds all three. Preserve each layer in a form that can be authenticated, or its value collapses when it reaches court.

What the law says about this evidence

Electronic records are now governed by the Bharatiya Sakshya Adhiniyam, 2023. Section 63 sets out when an electronic record is treated as a document and how it is proved — through a certificate identifying the record, describing how it was produced, and confirming the integrity of the device or system. The practical consequence is that a bare screenshot is weak on its own; a screenshot that is dated, tied to a device, and accompanied by a proper certificate is strong. Where the original device or the app data is unavailable, a certificate from the person in control of the device explaining the retrieval carries real weight.

The offences you are proving sit in the BNS 2023 — section 308 (extortion), section 351 (criminal intimidation), section 318 (cheating) and section 336 (forgery, for a fabricated notice) — and in the IT Act, 2000: section 66, section 66C (identity theft), section 66D (cheating by personation) and section 66E (publishing a private image without consent). Each of these is proved by documentary evidence, and the document is usually an electronic one. The RBI's 2017 circular on unauthorised electronic transactions also fixes the reporting window that determines your bank liability, so the timestamp on your first report is itself evidence.

The 48-hour preservation checklist

1. Export the app's records. Before removing the app, open it and screenshot the loan agreement, the fee breakdown, the repayment schedule and the ledger. If the app has an export or statement option, use it.
2. Capture the messages. Screenshot every threat, keeping the sender number, the timestamp and the full thread visible in the same frame where possible. Do not crop out the header.
3. Log the calls. Save the call log and, where possible, the call recordings. Note the numbers, the dates and the exact words used.
4. Download the bank statement. Get a statement covering every debit connected to the app, showing the beneficiary handle, the reference number and the narration.
5. Preserve the device. Do not factory-reset the phone or uninstall the app before the export is complete. Set a strong screen lock and keep the device charged and available.
6. Record the contacts contacted. If recovery agents messaged your family or colleagues, get their forwarded screenshots too; third-party recipients are independent witnesses.
7. Note the identity trail. Capture the app's developer name, its listing page, the permissions it requested, and any payment handle it gave you.

What to preserve and how to secure it

What decides whether the evidence survives

The first factor is integrity of the source. A record taken directly from the app or the bank, with a stable timestamp, is far harder to dislodge than a screenshot forwarded through several hands. The second is completeness: partial threads invite the argument that a message was edited or taken out of context, so preserve the surrounding conversation. The third is the certificate under BSA section 63, which converts a file into admissible evidence and identifies who produced it. The fourth is immediacy — a first report made within the 48-hour window both strengthens your position under the RBI 2017 circular and makes the account-freezing mechanism in the 1930 system effective.

Evidence gathered calmly in the first two days is worth more than evidence that existed but was never captured.

Common mistakes

• Deleting the app "to be safe" and losing its ledger with it.
• Taking screenshots that crop the sender's number or the timestamp.
• Relying on memory instead of the bank's official statement.
• Factory-resetting the phone, which destroys the source the BSA certificate describes.
• Sending originals out and keeping nothing; always keep a copy.

Once preserved, this material goes to work across the standard routes — the cyber crime portal, the bank dispute and an FIR under BNSS 2023 section 173. For a wider look at reporting and escalation, read the notes on our cyber law blog; to understand how the evidence is used in a prosecution, see the cyber crime legal services page.

How the evidence travels through the system

When you report on cybercrime.gov.in or at a police station, your screenshots do not simply sit in a file. They are logged, and a copy is often shared with the bank through the 1930 mechanism so that the beneficiary account can be flagged. Under BSA 2023 section 63 the record must be capable of being proved by a certificate, and that requirement runs backwards through the whole process: the cleaner your original capture, the easier the certificate becomes at every later stage.

Attribution is where evidence turns into a case. The phone numbers in your call log, the payment handle or account number in your bank statement, and the developer details on the app listing page are the three threads the police pull. If any one is missing, the investigation can stall, which is why the checklist above treats the identity trail as evidence in its own right rather than as background. A victim who saved the app icon, the terms screen and the payment handle has given the police three starting points; a victim who deleted the app has given them none.

Finally, ask for an acknowledgement at every stage — the portal reference, the FIR copy, the bank's written reply. Each of these is a dated document, and a dated document is what proves that you acted promptly. In a case that turns on promptness, that paperwork is as valuable as the underlying screenshots.

Two practical habits protect the record. First, keep a single master folder that mirrors the chronology, so that the same numbered list of events accompanies every complaint, dispute and application you file. Second, never edit an original; where you need to highlight something, keep the untouched file and add a marked copy alongside it, because an edited image invites the very challenge you are trying to avoid.

You should also think about the person who will read this material years later. A certificate under BSA 2023 section 63 identifies who produced the record and how, so note down, at the time of capture, which device was used, who took each screenshot and whether the file was transferred unaltered. These notes cost nothing to make while the events are fresh and are difficult to reconstruct afterwards.

Preserve the negative evidence too. Messages in which you asked the app to stop, or in which you disputed the fee, show that you did not accept the demand. They are easy to overlook because they feel unimportant, but they answer the defence that you consented to the charge, and they belong in the folder alongside the threats.

Documenting what the data was used for

Harvesting data is only half the harm; the other half is what the operator did with it. Record that too, because it is what converts a data-protection complaint into a criminal one. If the app sent messages to your contacts, note which contacts received them and on what date. If a morphed photograph was circulated, keep the original image you know to be genuine alongside the version that was sent, so the alteration can be shown. If the app published anything publicly, capture the page before it is taken down.

This record matters under the Digital Personal Data Protection Act, 2023, because it shows that the data was used beyond the purpose for which consent was given. It also matters under IT Act 2000 section 66C and section 66D, because those offences turn on the misuse of an identity or a computer resource, not merely on the collection of data. A victim who can point to the exact misuse is far ahead of one who can only say that the app had access.

Finally, document the loss in money terms as you go. List each payment, each deduction and each charge with its date and amount, and keep the running total separate from the principal. A clear money schedule is what a bank dispute needs, and it is what a court reads first when the question of refund arises.

Where the evidence ends up

Understand the destination of what you preserve, because it shapes how you should label it. The bank receives the statement and the debit schedule. The police receive the threat messages, the call logs and the identity trail. A civil court receives all of it together with a money schedule. A certificate under BSA 2023 section 63 will be prepared for the electronic records whichever forum is used, and the certificate names the person who produced the record, so keep the capture within your own control rather than relying on a friend's phone.

If the matter reaches a trial, the original device may be required for examination. Keep it available and unaltered for as long as the case runs. That instruction sounds trivial at the start of a complaint and becomes the difference between a proved record and an excluded one eighteen months later, when the phone has long since been sold or reset.

When to involve a lawyer

Preservation itself needs no lawyer. A lawyer becomes useful when disputes arise about whether a screenshot is genuine, when a BSA section 63 certificate has to be drafted or challenged, or when the app's records must be obtained from a third party who will not produce them voluntarily.

Frequently asked questions

Information for general guidance only and not legal advice. Provisions cited follow the Information Technology Act 2000, the Bharatiya Nyaya Sanhita 2023 and the Bharatiya Nagarik Suraksha Sanhita 2023.

Related articles

• Instant loan app fraud: evidence to preserve in 48 hours
• Trading app scam: the evidence to preserve in 48 hours
• Work from home scam evidence to preserve in first 48 hours
• Mutual fund scam evidence to preserve in the first 48 hours
• Job Scam: The Evidence to Preserve in the First 48 Hours
• Investment scam evidence to preserve in the first 48 hours

Cyber crime lawyer in your city · Bank account freeze help · Contact