Skip to content

Loan app abuse

Loan App Permission Scam

Risky loan apps may request contacts, photos, SMS, location, and storage access, then use that data for harassment, hidden fees, and repayment pressure.

if you got this

Treat it as a scam until you check. Don’t click, pay or share a code. Do not grant unnecessary permissions.

Check my message with KavalFree to start. Nothing to install.

what it looks like

Forwarded

Instant loan approved. Install app, allow permissions, pay processing fee, and receive money today.

The promise of fast money hides the cost of permissions and abusive recovery practices.

red flags

  • Loan app link from WhatsApp, SMS, or ad with no credible lender identity
  • Contacts, photos, SMS, location, accessibility, or storage permissions
  • Processing fee before disbursal
  • Threats to message contacts or edit photos
  • No clear grievance, lender, or regulatory information
  • An APK shared on WhatsApp or Telegram instead of a Play Store listing
  • Loan approval within minutes with no income or credit check
  • Demands for contacts, photos, and SMS access before showing any offer

if it’s happening now

  1. Do not grant unnecessary permissions.
  2. Document threats and payment demands.
  3. Contact bank/payment provider if unauthorized debits occurred.
  4. Report harassment through official channels if threatened.
Already clicked, paid or shared something?

Don’t

  • Do not install loan APKs from chat links.
  • Do not grant contact/photo permissions casually.
  • Do not pay new fees without checking the lender.

Save this evidence

  • App name and link
  • Permission screens
  • Loan terms screenshots
  • Threat messages and caller numbers

Stop it happening again

  • Use regulated lenders and official app stores.
  • Read permissions before installation.
  • Avoid apps that demand contacts or media access for loans.
  • Borrow only from RBI-regulated lenders; check the app’s lender partner and NBFC registration.
  • Never install a loan app from a link. If it is not on the official app store, it is not a lender.

questions people ask

Why do loan apps ask for contacts?

Some abusive apps use contacts for pressure and harassment. A legitimate loan process should not need broad contact-list access.

Should I pay a processing fee before receiving the loan?

Be very cautious. Upfront fee demands from unknown loan apps are a common scam and abuse pattern.

The app is threatening to send edited photos to my contacts. What do I do?

Do not pay. Blackmail escalates with payment. Revoke the app’s permissions, uninstall it, preserve evidence, warn close contacts, and report at cybercrime.gov.in and 1930. Morphed-image extortion is a crime.

How do I check if a loan app is RBI approved?

Look for the regulated lender behind the app. Real lending apps name their NBFC or bank partner, and RBI publishes lists of registered NBFCs. No named lender means no loan, only data theft.

Can they really access my contacts and gallery?

If you granted permissions during install, yes. That access is the actual product of the scam, used later for harassment and blackmail. Revoke permissions and uninstall immediately.

Last reviewed 14 July 2026.