One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.
Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.
TL;DR: Payday loan harassment can be prosecuted as a crime, not merely treated as a debt problem. When recovery agents threaten you, call your family, your colleagues or your employer, or misuse the contact list you handed over while installing an app, you can file an FIR under the Bharatiya Nyaya Sanhita, complain to the cyber crime portal and the RBI Ombudsman, and seek protection. You still owe what you lawfully borrowed, but you do not owe anyone your dignity or your contact list.
Rohit Deshmukh's phone started ringing at 6:40 in the morning. By the time he reached his desk in Nagpur, three of his colleagues had already received calls about money he owed.
The slide began around November 2024, when a shortfall at home pushed him towards a cluster of instant loan apps. Small amounts at first. Then renewals, processing fees, rollovers onto fresh apps to clear the old ones. By February 2025, the outstanding on a monthly salary of about ₹50,000 had climbed to roughly ₹1.6 lakh. The apps had asked for permissions he granted without reading: contacts, gallery, call logs. Back then it felt like a formality.
He tried to handle it alone. A YouTube channel promising debt solutions took a fee and handed him a template notice that nobody answered. A few angry calls to the recovery numbers made things worse, and the messages moved to his mother's phone. His manager sat him down and asked what was happening.
He approached the Chamber of Advocate Sudhir Rao in early March 2025. What followed was a structured response: a complaint to the cyber crime police, a legal notice to the lenders and their recovery partners, and a representation to the regulator. The calls to his contacts stopped, and the recovery agents were identified and proceeded against. Advocate Sudhir Rao's familiarity with digital lending practices and recovery agent misconduct shaped that complaint from the first draft, which is why it moved where his own earlier attempts had stalled.
Key Facts of the Case
- The client had borrowed from multiple instant loan apps over roughly four months, rolling over old loans into new ones.
- Total outstanding had reached about ₹1.6 lakh against a monthly salary of around ₹50,000.
- Each app had been granted access to the client's contact list, gallery and call logs at the time of installation.
- Recovery agents called the client's colleagues, employer and family, and sent messages disclosing the debt to third parties.
- The client had earlier paid an unregulated "debt solution" service that produced no result.
- The legal response combined a criminal complaint, a civil notice to the lenders and their recovery partners, and a regulatory complaint.
- The harassment stopped only after the complaint was formally registered and traced back to the recovery agencies.
The Direct Legal Answer
Is payday loan harassment a criminal offence in India?
Yes, in the situations that matter most. Threats of harm, reputational pressure, calls to your employer and disclosure of your debt to your contacts can attract Section 308 BNS (extortion) and Section 351 BNS (criminal intimidation). Where several agents act together, Section 61(2) BNS (criminal conspiracy) comes into play. Debt recovery itself is legal. Harassment in the course of it is not.
Can recovery agents legally access my phone contacts?
Not the way it usually happens. The RBI's digital lending framework requires lenders and their lending service providers to collect only need-based data with your explicit, informed consent, and consent has to be withdrawable. Blanket, permanent access to your contact list is very hard to justify under that framework. Once they dial those numbers and tell people you are a defaulter, you have a separate grievance against the app and against the person making the calls.
Do I still have to repay the loan?
Yes. The legal obligation to repay what you actually received, with lawful interest , does not disappear because the recovery was illegal. What changes is the method. You pay the principal and lawful interest on the amounts actually disbursed into your account. You do not pay recovery charges that were never in the sanction letter, penal interest that has no contractual basis, or "settlement" demands invented on a phone call. Several of these apps also deduct processing fees upfront without disclosing the effective annual rate, which is a legitimate point to raise in the complaint and with the regulator.
Can the lender file a case against me for not paying?
Yes, they can file a civil suit for recovery, and in some cases a criminal complaint alleging cheating under Section 318 BNS if they claim you borrowed with no intention of repaying. That is a real risk and it is why the response has to be two-sided: build a documented record of the harassment, and separately address the amounts you actually owe. A complaint about harassment does not erase the debt, and a pending recovery suit does not licence the harassment.
What Counts as Payday Loan Harassment in Law?
Two things have to be separated because they get mixed up constantly. Demanding repayment is lawful. Demanding it in a way designed to frighten, humiliate or socially isolate you is not.
Where the criminal case is strong
- Threats to reputation or of harm to you or your family. Section 351 BNS covers criminal intimidation, and the definition expressly includes threats of injury to a person's reputation. Telling your colleague that you are a defaulter is not a neutral reminder.
- Demanding more than what is lawfully due, backed by that threat. Where the demand exceeds the sanctioned amount and the pressure tactics are what secure payment, Section 308 BNS (extortion) is the provision to examine.
- Several agents acting in concert. Where the calls, the messages and the contact-list circulation are coordinated, Section 61(2) BNS (criminal conspiracy) is added.
- Imputations published to third parties. Messages to your employer, your neighbours or your relatives that identify you as a defaulter can attract Section 356 BNS (defamation), which is a complaint case, not an FIR.
Where it is genuinely contested
I am not going to tell you that every abusive call becomes an FIR. It does not. Extortion requires that the person was dishonestly induced to part with property. Where the money is genuinely owed, defence counsel argue that the element of dishonesty is missing, and that argument sometimes lands. The strength of the criminal case usually turns on two questions: whether the amount demanded went beyond what was contractually due, and whether the contact was threatening rather than merely persistent. Courts have taken different views on borderline facts. A single rude call is not an offence. A pattern of calls to your workplace over weeks, with the debt disclosed to people who have nothing to do with it, is a different animal.
There is also a practical fork worth knowing before you file. Many of these apps are not RBI-regulated lenders at all — no NBFC licence, no registered lending service provider, sometimes no Indian entity you can sue easily. If the app is unregulated, the RBI Ombudsman route may not have jurisdiction over it, and the police complaint becomes the primary remedy rather than the secondary one. Figuring out which category your app falls into is the first piece of real work.
The data angle — IT Act and the DPDP Act
The contact list is a separate harm from the harassment. The RBI's digital lending framework requires need-based collection of data with explicit, informed consent, and it requires that consent to be withdrawable. Lifting a contact list or gallery and using it for recovery is not a permitted use under that framework. Depending on how the app obtained and used the data, the Information Technology Act (including the compensation provisions for failure to protect data, and the provision penalising disclosure of information in breach of a lawful contract) and the Digital Personal Data Protection Act, 2023 can come into the picture. The DPDP framework is new and its enforcement machinery is still settling in, so treat that route as promising but not yet predictable.
What Happens After You File: Process, Time and Cost
Here is the sequence as it usually runs, in order.
- A written complaint to the cyber crime police in the district where you live or where the calls originate, and a parallel entry on the national cyber crime portal with the calls and messages attached. If recovery agents have your bank details and are making unauthorised debits, say so separately.
- A legal notice to the lender and to every recovery agency named or traceable, putting them to terms on the calls, the contact-list circulation and the amounts claimed. This is mostly about creating a dated record and forcing the lender's own grievance officer to respond. Silence from them helps you later.
- A representation to the RBI Ombudsman if the lender is a regulated entity. The scheme requires you to first complain to the lender and give them about thirty days to reply, unless they reject it outright or do not respond at all, in which case you escalate.
- Escalation if the FIR is not registered. Send the substance of your information to the Superintendent of Police under Section 173(4) BNSS. If that produces nothing, an application before the Magistrate under Section 175(3) BNSS asking for a direction to investigate.
- A defamation complaint before the Magistrate under Section 356 BNS if you want the third-party disclosure separately addressed. This is a summons case, and there is a limitation period running, so it should not be left for a year while the police complaint drags on.
- Protection where needed. If agents are physically appearing at your home or workplace, that goes into the same complaint immediately, and the High Court's powers under Section 482 BNSS remain available in the appropriate case.
How long does this take?
The FIR, if it is registered at all, usually comes within days to a few weeks of a written complaint. The investigation is slower — three to twelve months is common when the recovery agency has to be traced through a lender that is uncooperative. The regulator's timeline is more predictable; the thirty-day window for the lender's own response is written into the scheme. What I have seen stop harassment fastest is not any single filing but all three happening within the same fortnight, because the lender's compliance team suddenly has a dated police complaint in front of it.
What it costs
Filing an FIR costs nothing, and the cyber crime portal is free. What costs money is the drafting — the notice, the complaint, the ombudsman representation and any subsequent court work. Any lawyer who quotes you a figure before reading your sanction letters, your bank statement and your screenshots is guessing. Send the papers first; you will get a real estimate.
What Not to Do
- Do not take a fresh loan from a new app to clear an old one. That is how a ₹40,000 gap becomes a ₹1.6 lakh hole in four months.
- Do not uninstall the app before you have screenshotted everything — the loan agreement, the permission screen, the messages, the call log. Uninstalling can take your own evidence with it.
- Do not argue with recovery agents on the call. Keep it to one line, let them talk, and record it if your phone permits. Anger on your side becomes their defence later.
- Do not pay a "debt solution" intermediary who promises to settle everything. In the matter I described, that fee bought a template notice and nothing else.
- Do not tell the next app your employer's number or grant gallery access "just for KYC".
Frequently Asked Questions
Will the police register an FIR or tell me it is a civil matter?
Both happen. Police stations frequently treat loan disputes as civil and push you toward the lender's grievance cell. Your answer is that the complaint is not about the debt — it is about the calls to your employer and the disclosure of your debt to third parties. Put that in the first two lines of the written complaint, not on page three.
Can I stop paying altogether until the harassment stops?
No, and it is a bad strategy. Stopping payments hands the lender a clean case and weakens your harassment complaint, because the response becomes "we were chasing a genuine default". Keep paying what is undisputedly owed, in a traceable way, and fight the excess separately.
They called my manager. Can I do anything about that specifically?
Yes. That call is the strongest part of your complaint. Note the date, time, the agent's number, what was said, and your manager's name as a witness. If your employer asks, a two-line note explaining that you have filed a complaint is usually enough and is better than silence.
Can I complain if the app has no office in India?
You can file the criminal complaint regardless — the offence happened where the calls landed. Recovery from a foreign entity is the hard part, and if the app's Indian payment gateway or lending service provider is identifiable and regulated, that is where pressure gets applied.
Is my contact list still with them?
Assume yes until told otherwise. A written demand for deletion of the data collected, addressed to the app's grievance officer, is worth sending even if you expect no reply. It creates a record of non-compliance.
If you are in this situation now, the first step is not a phone call to the chamber — it is a folder. Loan app names, the sanction or disbursement screenshots, your bank statement showing what actually came in, the messages, the call log, and a list of everyone who was contacted about your debt. Send that, with the FIR or complaint if one exists, and a two-line note on what you want stopped. Consultations and case papers can be taken up through the contact page or by requesting an appointment at /book. If your facts do not support a criminal case, I will tell you that in the first meeting rather than the fifth.
This article is general information about Indian law and is not legal advice on your own situation. Please consult an advocate with your documents before acting.
Advocate Sudhir Rao, Supreme Court of India
Facing a similar matter? Speak to a Delhi criminal defence lawyer — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.