Mistakes, Problems and Official Sources
Instant business loan apps: how to check a digital lender and avoid MSME loan fraud
What RBI's Digital Lending Directions, 2025 require of business loan apps, how to verify a lender is regulated, and the warning signs of fake MSME loan offers and agents.
A genuine digital business loan in India is always given by an RBI-regulated entity, a bank or a registered NBFC, even if you apply through a fintech app (a lending service provider). Under the RBI Digital Lending Directions, 2025, the loan must be disbursed directly into your bank account and repaid directly to the lender's account, you must get a Key Fact Statement with the APR before you sign, and the app must be one the lender has reported to RBI, which publishes a directory of digital lending apps linked to regulated entities. Anyone who asks for an upfront fee to "release" a loan, pays from a personal account, or cannot name the regulated lender behind the app is a warning sign.
This guide belongs to the MSME loan mistakes and rejections overview. Patterns described here are general; no specific company is named.
How to check a digital lender in four steps
- Find the regulated entity's name. The app and KFS must name the bank or NBFC that lends. A fintech brand alone is not enough.
- Check registration. For NBFCs, check the RBI's list of registered NBFCs on the RBI website; for banks, the RBI's list of banks.
- Check the app is linked. RBI publishes a directory of digital lending apps reported by regulated entities. If the app is not linked to a regulated entity there, be cautious.
- Read the KFS. It must show the loan amount, APR, all fees, repayment schedule, recovery mechanism, grievance officer and the cooling-off period.
What the 2025 Digital Lending Directions require
| Requirement | What it means for you |
|---|---|
| Direct disbursement and repayment | Money flows between your account and the lender's account, not through the app's or an agent's pool account (limited exceptions exist for some co-lending and specific flows) |
| Key Fact Statement before signing | Standard format, APR and all charges; no charge outside the KFS without consent |
| Cooling-off (look-up) period | You can exit the loan by repaying principal and proportionate APR without penalty during this window; the lender's board sets its length, which under the Digital Lending Directions, 2025 must not be less than one day; check the exact period in your KFS |
| Data collection | Only need-based data with your explicit consent; apps should not access contacts, media and call logs without a need and consent |
| Grievance officer | Named grievance officer of the lender and the LSP, with a resolution timeline; unresolved complaints can go to the RBI Ombudsman |
| Recovery | Recovery agents' details must be communicated; RBI's recovery conduct rules apply |
| Multi-lender platforms | If an LSP shows offers from several lenders, it must show all matching offers with the lender names and APRs, without dark patterns |
Warning signs of a fake or illegal business loan offer
- A guaranteed "Mudra" or "government scheme" loan for an upfront fee, file charge, GST fee or insurance fee.
- Loan "approval" letters on WhatsApp with government emblems, from mobile numbers.
- A request to pay to an individual's bank account or UPI ID.
- Disbursal from a personal account, or an amount far below what was agreed.
- An app that wants access to your contacts and gallery before showing any terms.
- Threats to contact your customers, family or suppliers, or morphed images, after a missed payment.
- No KFS, or interest quoted only "per day" or "per week".
Worked example: what a "small daily rate" really costs
An illustrative app offers a ₹2 lakh business loan for 90 days at "0.1% per day" plus a ₹10,000 processing fee deducted upfront.
- Interest = ₹2,00,000 × 0.1% × 90 = ₹18,000
- Net received = ₹2,00,000 − ₹10,000 = ₹1,90,000
- Total repaid = ₹2,18,000; cost = ₹28,000 on ₹1.9 lakh for 90 days
- Annualised simple rate ≈ 28,000 ÷ 1,90,000 × 365 ÷ 90 ≈ 59.8% a year
A bank overdraft or cash credit at an illustrative 11% would cost about ₹5,400 for the same 90 days. Even if a short app loan is legitimate, compare its APR against alternatives using the comparison worked example.
If you have been targeted
| Situation | What to do |
|---|---|
| Paid an upfront fee to a fake lender | Report on the National Cyber Crime Reporting Portal or call 1930 at once; inform your bank to try to freeze the transfer |
| Harassed by an app lender | Keep screenshots and recordings, file a police complaint, report on cybercrime.gov.in, and complain to the regulated entity and RBI Ombudsman if it is a regulated lender |
| Lender not registered with RBI | Report it on RBI's Sachet portal |
| Data misuse | Revoke app permissions, uninstall, and include the data issue in your complaint |
| Unexplained loan in your name | Check your credit reports and dispute with the CIC and the lender; see credit reports |
When a digital loan is a reasonable choice
Digital lending by banks and well-run NBFCs can be legitimate and convenient for MSMEs: quick decisions from bank statements and GST data through the Account Aggregator framework, smaller ticket sizes and less paperwork. It is reasonable when the lender is regulated, the APR is acceptable for a short and clearly profitable use, repayments match your cash flow and you have read the KFS. For larger or longer needs, a bank term loan or CGTMSE-covered loan is usually far cheaper.
Frequently asked questions
Is a fintech app the lender?
Usually not. Most apps are lending service providers acting for a bank or NBFC. The regulated entity is responsible for the loan and must be named in the KFS.
Can I cancel a digital loan after it is disbursed?
Yes, within the cooling-off period stated in the KFS, by repaying the principal and the proportionate APR, without a penalty.
Do these rules apply to business loans or only personal loans?
The Digital Lending Directions apply to digital lending by regulated entities generally, including loans to businesses.
Are "buy now, pay later" or merchant cash advances covered?
If credit is given by a regulated entity through a digital channel, the directions apply. Unregulated structures may not be, which is itself a reason for caution.
Sources
- Reserve Bank of India — Digital Lending Directions, 2025, NBFC lists and the directory of digital lending apps
- Sachet (RBI) — report unregistered lenders
- National Cyber Crime Reporting Portal — report fraud, helpline 1930
- Sahamati — Account Aggregator information
