App Loan Harassment by Recovery Agents — Legal Remedies When Lenders Threaten and Abuse Your Family

One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.

Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.

Rohan Verma, a 28-year-old software professional from Gomti Nagar, Lucknow, had taken loans from three separate mobile lending applications sometime around late February 2025. He'd invested the borrowed funds in an online trading platform and, unfortunately, lost nearly the entire amount. His monthly salary was simply not enough to service all three loans at once.

Then it turned ugly. The agents began calling his parents, his sister, and even a distant uncle in Nagpur. They sent morphed, obscene images of Rohan to family members over WhatsApp. They threatened to physically visit the house and harm him. His mother was in tears. His father had stopped answering unknown calls. The family was living in genuine fear.

Rohan had earlier approached a local advocate in Lucknow who filed a general police complaint, but the police station didn't register an FIR and the harassment continued. A friend then directed him to consult Advocate Sudhir Rao. The approach changed immediately. A formal complaint was drafted citing specific provisions under the Bharatiya Nyaya Sanhita addressing criminal intimidation, extortion, and defamation through morphed images. Simultaneously, a complaint was filed before the Reserve Bank of India's grievance portal against the unregistered lending app. Within a few weeks, the police registered the FIR, the recovery calls stopped, and the agents went silent. Rohan was advised firmly not to pay any further amount under duress — and he didn't.

Advice in Such Cases

Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.

Do not pay under pressure: Paying a lender because you're threatened is not a legal obligation. Threats of violence or public humiliation don't create valid legal debt recovery. Don't make payments out of fear — it emboldens the agents further and, frankly, it won't stop the harassment anyway.

Preserve all evidence immediately: Screenshot every call log, every WhatsApp message, every morphed image received. Back these up to cloud storage. This digital evidence is the foundation of your criminal complaint and must be preserved before it disappears.

File complaints on multiple fronts simultaneously: A police FIR alone isn't always sufficient. File a complaint with the RBI Sachet portal (sachet.rbi.org.in), the Cybercrime portal (cybercrime.gov.in), and the Ministry of Corporate Affairs if the app is a registered NBFC. This multi-pronged approach puts real pressure on the operators. And here's the thing — the moment an app operator sees an RBI complaint number, the tone often changes.

Cases involving app loan harassment require advocates who regularly handle cyber crime, criminal intimidation, and digital evidence matters. Procedural steps like Section 173(4) BNSS complaints to the Superintendent of Police, or applications for preservation of electronic records, are frequently missed by general practitioners who aren't familiar with this specific domain.

Applicable Sections of Law

• Section 308 BNS (Extortion): Recovery agents who threaten harm unless payment is made commit extortion — punishable under this section.
• Section 351 BNS (Criminal Intimidation): Threats of physical violence or threats to reputation through morphed images squarely attract this provision.
• Section 356 BNS (Defamation): Circulating morphed or manipulated images to third parties with intent to harm reputation is a criminal offence.
• Section 66C and Section 67A, Information Technology Act, 2000: Publishing obscene material electronically and identity theft related to digital communications attract serious penalties under these provisions.
• Section 13, Prevention of Money Laundering Act, 2002: Where loan apps operate without RBI registration and collect funds illegally, PMLA provisions may also be triggered.

Punishment and Penalties

• Section 308 BNS (Extortion): Imprisonment up to three years, or fine, or both. If the threat involves death or grievous hurt, punishment extends to ten years with fine.
• Section 351 BNS (Criminal Intimidation): Imprisonment up to two years, or fine, or both. Where threat involves death or grievous hurt, up to seven years.
• Section 66C / 67A IT Act: Imprisonment up to three years and fine up to Rs. 5 lakhs for identity theft; up to five years and fine up to Rs. 10 lakhs for publishing obscene material electronically.
• Offences under Section 308 and 351 BNS are cognizable and non-bailable in aggravated forms. They are non-compoundable without court permission.

Jurisdiction — Where to File the Case

For criminal complaints under BNS and the IT Act, the FIR should be filed at the territorial police station where the victim resides or where the threatening communications were received. For cyber-specific offences, the Cyber Crime Police Station of the relevant state has concurrent jurisdiction. In cases where local police refuse to act, a complaint can be filed before the Judicial Magistrate First Class having jurisdiction over the area. Now, before you act, understand this — jurisdiction matters because an FIR filed in the wrong territorial jurisdiction can be transferred, causing delay and complication in the investigation. As held in Lalita Kumari v. Government of Uttar Pradesh, 2014, police are mandatorily required to register an FIR when a cognizable offence is disclosed — jurisdiction cannot be used as an excuse to refuse registration.

What if Police Refuse to File FIR?

This is unfortunately common in app loan harassment cases, where local police may dismiss the matter as a civil dispute. It isn't. Here's what you can do:

• Approach the Superintendent of Police: Under Section 173(4) BNSS, if the officer in charge refuses to register an FIR, you may send the complaint in writing to the Superintendent of Police, who can direct registration.
• File a private complaint before the Magistrate: Under Section 175(3) BNSS, you may file a private complaint directly before the Judicial Magistrate, who can take cognizance and direct the police to investigate.
• Approach the High Court by writ: A writ of mandamus before the relevant High Court directing police to register the FIR is available as a last resort, grounded in the Lalita Kumari ruling cited above.
• File online on cybercrime.gov.in: Complaints filed on the National Cybercrime Reporting Portal generate a reference number and are forwarded to the concerned state police, creating an official paper trail.

Rights of the Accused

If a recovery agent or app operator is arrested following your complaint, they hold the following rights. Understanding these helps you anticipate their legal strategy — and you should:

• Right against self-incrimination: Under Article 20(3) of the Constitution, no person can be compelled to be a witness against themselves.
• Right to legal representation: Article 22 of the Constitution guarantees the right to consult and be defended by a legal practitioner of choice.
• Produced before Magistrate within 24 hours: Under Section 57 BNSS, any person arrested must be produced before the nearest Magistrate within 24 hours of arrest.
• Right to know grounds of arrest: The accused must be informed of the grounds of arrest at the time of arrest itself.
• Right to copy of FIR: The accused, or their counsel, is entitled to a copy of the FIR upon request.

Bail Provisions

Offences under Section 308 BNS (extortion with threat of grievous hurt) are non-bailable. The accused must apply for bail before the Sessions Court. Anticipatory bail under Section 482 BNSS is available if the accused apprehends arrest — they may apply to the Sessions Court or High Court. Regular bail under Section 480 or Section 483 BNSS can be sought once arrested. Courts typically impose conditions such as surrender of passport, reporting to the police station weekly, and prohibition from contacting the complainant. In harassment cases involving morphed images, courts have generally been strict about bail, treating the reputational harm caused as a serious aggravating factor. Bail strategy here should be developed carefully, particularly regarding evidence of continued harassment after arrest.

Quashing of FIR / Case

Recovery agents or app operators facing an FIR may attempt to get it quashed. Under Section 528 BNSS, the High Court holds inherent powers to quash an FIR in appropriate circumstances. Grounds typically argued include: no prima facie offence disclosed, abuse of process of court, or settlement between parties. But the law differs in practice from what accused persons hope. In State of Haryana v. Bhajan Lal, 1992, the Supreme Court laid down limited categories where quashing is warranted. Extortion and criminal intimidation with morphed images are serious cognizable offences — courts have been reluctant to quash such FIRs. As the complainant, you should be represented effectively at any quashing petition hearing to oppose it.

If You Are the Victim

• Stop all contact with recovery agents: Don't engage, argue, or negotiate with agents who threaten you. Every interaction can be recorded and used against you out of context.
• Inform your family to stop answering unknown calls: Brief your family members calmly. They should block the numbers and not engage.
• File a complaint on cybercrime.gov.in immediately: The online portal is accessible 24/7. A complaint number creates an official record even before police intervention.
• Contact your bank and freeze any automatic debits: Instruct your bank to stop any standing instructions or auto-debit mandates given to the lending app.
• Seek legal advice before making any further payment: A lawyer can assess whether the original loan agreement is even legally enforceable — many app loans aren't, due to missing RBI registration or predatory interest rates.

Documents You Must Keep Ready

• Aadhaar card and PAN card of the victim
• Screenshots of all threatening messages, morphed images received on WhatsApp or other platforms
• Call logs showing the phone numbers used by recovery agents
• Recordings of threatening calls (if available)
• Loan agreement or terms accepted on the app (take a screenshot before uninstalling)
• Bank statements showing amounts disbursed and repaid
• Any written communication from the app or its agents
• Details of witnesses — family members who received calls or messages

What Evidence Is Required?

• Digital messages and images: WhatsApp screenshots, Telegram messages, SMS — these constitute primary electronic evidence under the Bharatiya Sakshya Adhiniyam, 2023.
• Call recordings: Audio recordings of threatening calls, where the victim has recorded them, are admissible as supporting evidence.
• Witness statements: Family members who received calls or messages can give recorded statements before police or the Magistrate.
• App download and transaction records: Google Play Store / App Store records, and UPI or bank transaction history, establish the lending relationship.
• Certificate under Section 63, Bharatiya Sakshya Adhiniyam, 2023: For electronic records to be admissible, a Section 63 certificate from the person managing the device is required — this is often missed and must be arranged with legal guidance.
• RBI / MCA registration status of the app: Official records from RBI or MCA showing whether the app operator is a registered NBFC or an illegal operator strengthen the criminal complaint significantly.

How the Police Behave in Such Cases

Make no mistake — police response to app loan harassment complaints is uneven across states. Many station house officers initially treat it as a civil loan recovery dispute and decline to register an FIR. Some are genuinely unfamiliar with the IT Act provisions triggered by morphed images. Others may suggest the complainant "settle" with the lender. Where the Cybercrime Police Station exists, they're generally better equipped. Persistence matters here. Arriving with a drafted written complaint, specific section citations, and digital evidence already organised tends to change the officer's approach. If the FIR is still refused, escalation under Section 173(4) BNSS to the Superintendent of Police is the immediate next step.

Timeline of Legal Process

• Day 1-3: File complaint on cybercrime.gov.in and at local police station — obtain acknowledgment in writing.
• Week 1-2: If FIR not registered, escalate to Superintendent of Police under Section 173(4) BNSS.
• Week 2-4: FIR registered; police begin investigation, record statements of victim and witnesses.
• Month 1-3: Police may seek call data records from telecom providers and preservation of electronic records from Meta/WhatsApp under lawful process.
• Month 3-6: Chargesheet filed before Magistrate if sufficient evidence collected; cognizance taken.
• Month 6-12: Framing of charges; trial begins with examination of witnesses.

Advocate Sudhir Rao, Supreme Court of India