Skip to content
Loan app abuse

Loan App Permission Scam

Risky loan apps may request contacts, photos, SMS, location, and storage access, then use that data for harassment, hidden fees, and repayment pressure.

Common script

What the message or call may sound like

Instant loan approved. Install app, allow permissions, pay processing fee, and receive money today.
Mechanism

Why this scam works

The promise of fast money hides the cost of permissions and abusive recovery practices.

Red flags

Stop when you see these signals

  • Loan app link from WhatsApp, SMS, or ad with no credible lender identity
  • Contacts, photos, SMS, location, accessibility, or storage permissions
  • Processing fee before disbursal
  • Threats to message contacts or edit photos
  • No clear grievance, lender, or regulatory information
  • An APK shared on WhatsApp or Telegram instead of a Play Store listing
  • Loan approval within minutes with no income or credit check
  • Demands for contacts, photos, and SMS access before showing any offer
Do now

If this is happening to you

  1. Do not grant unnecessary permissions.
  2. Document threats and payment demands.
  3. Contact bank/payment provider if unauthorized debits occurred.
  4. Report harassment through official channels if threatened.
Do not
  • Do not install loan APKs from chat links.
  • Do not grant contact/photo permissions casually.
  • Do not pay new fees without checking the lender.
Save evidence
  • App name and link
  • Permission screens
  • Loan terms screenshots
  • Threat messages and caller numbers
Prevent repeat risk
  • Use regulated lenders and official app stores.
  • Read permissions before installation.
  • Avoid apps that demand contacts or media access for loans.
  • Borrow only from RBI-regulated lenders; check the app’s lender partner and NBFC registration.
  • Never install a loan app from a link. If it is not on the official app store, it is not a lender.
Run a check

Use Kaval on this pattern

Answers

Common questions

Why do loan apps ask for contacts?

Some abusive apps use contacts for pressure and harassment. A legitimate loan process should not need broad contact-list access.

Should I pay a processing fee before receiving the loan?

Be very cautious. Upfront fee demands from unknown loan apps are a common scam and abuse pattern.

The app is threatening to send edited photos to my contacts. What do I do?

Do not pay. Blackmail escalates with payment. Revoke the app’s permissions, uninstall it, preserve evidence, warn close contacts, and report at cybercrime.gov.in and 1930. Morphed-image extortion is a crime.

How do I check if a loan app is RBI approved?

Look for the regulated lender behind the app. Real lending apps name their NBFC or bank partner, and RBI publishes lists of registered NBFCs. No named lender means no loan, only data theft.

Can they really access my contacts and gallery?

If you granted permissions during install, yes. That access is the actual product of the scam, used later for harassment and blackmail. Revoke permissions and uninstall immediately.

Guides