Digital and app lending: regulations, safety, and borrower rights

Digital lending in India has expanded access to credit, but it has also created severe consumer risks. A mobile application downloaded from an app store is not automatically a bank or licensed lender. Under the regulatory architecture established by the Reserve Bank of India, mobile apps act predominantly as Lending Service Providers (LSPs) operating on behalf of licensed commercial banks or NBFCs. Unregulated entities operating outside this perimeter have no legal authority to lend, disburse money, or recover debts in India.

The law establishes uncompromised safeguards for digital borrowers: money must flow directly between your bank account and the regulated lender without passing through fintech pool accounts; lending apps are strictly prohibited from accessing your phone contacts, photo gallery, or device storage; borrowers have a statutory cooling-off window to cancel loans without penalty; and credit guarantee arrangements between fintechs and banks are capped at 5% of the portfolio. This section explains how to verify whether a lending app is legal, how digital data is protected under law, what to do if an app unleashes harassment, and where to file criminal and regulatory complaints.