RBI Loan App List in India: How to Verify a Digital Lending App (2026 Guide)

Searching for an “RBI-approved loan app” before borrowing is a sensible precaution, but the phrase can be misleading. The Reserve Bank of India (RBI) does not issue an individual approval badge to every loan app. It publishes a directory called “DLA’s deployed by Regulated Entities”, which helps borrowers check whether a digital lending app has been reported by a regulated bank or non-banking financial company (NBFC). You should also verify the actual lender, read the Key Facts Statement (KFS), check the app’s permissions and confirm where the loan money and repayments will go.

Direct answer: To check a loan app, first find the legal name of the bank or NBFC that will lend to you. Then open the RBI website, go to Citizen’s Corner and select “DLA’s deployed by Regulated Entities”. Search for the app and compare the lender name with the loan offer and KFS. Finally, verify the lender independently and review the loan terms. A directory entry is useful evidence of a reported relationship, but it is not an RBI endorsement or a guarantee that the app, its offer or its conduct is safe.

What is the RBI Digital Lending Apps directory?

A digital lending app (DLA) is a mobile or web application through which a borrower can discover, apply for, receive or manage a digital loan. The app may belong to the lender itself or may be operated by a Lending Service Provider (LSP) engaged by the lender. An LSP can perform functions such as customer acquisition, technology support, servicing or other lending-related activities on behalf of a regulated entity. It is not automatically the lender simply because its brand appears on your phone.

The regulated entity (RE) is the bank, co-operative bank, NBFC, housing finance company or other institution covered by the applicable RBI directions that actually extends the credit. The borrower’s agreement, KFS and sanction documents should make the lending entity clear. This distinction matters: if an app advertises a loan under its own brand, you still need to know which regulated institution is legally providing the money and carrying the lender’s responsibilities.

RBI issued the Reserve Bank of India (Digital Lending) Directions, 2025 on 8 May 2025. These directions introduced reporting requirements for digital lending apps and provided for a public directory so customers could check an app’s claimed association with a regulated lender. RBI announced that the directory would be available by 1 July 2025. The framework was subsequently incorporated into the consolidated credit-facility directions for different regulated entities. The current RBI pages include the NBFC Credit Facilities Directions, 2025 and the Commercial Banks Credit Facilities Directions, 2025, both updated as on 15 July 2026.

How to check a loan app on the RBI directory

Step 1: Find the exact legal name of the lender

Before searching the directory, open the app’s “About”, “Legal”, “Terms and Conditions”, “Loan Partners” or “Lending Partners” section. Look for the full legal name of the bank or NBFC, not only the app’s marketing brand. If you have already received an offer, check the sanction letter, loan agreement and KFS as well. Record the lender name exactly as written, including words such as “Limited”, “Finance” or “Bank”.

If the app says only “our RBI-approved partners” but does not identify the institution offering your loan, do not treat that statement as sufficient disclosure. Ask the app’s customer-support team for the lender’s full legal name and official website. A genuine platform can use a different brand from its lending partner, but it should not leave you guessing about who is lending to you.

Step 2: Open the official RBI DLA directory

Type rbi.org.in into your browser yourself rather than relying on a link sent by an unknown caller or message. On the RBI homepage, find Citizen’s Corner and select “DLA’s deployed by Regulated Entities”. This is the public directory linked from RBI’s own website. Do not rely on copied spreadsheets, social-media posts, unofficial “safe app” lists or screenshots because the information can change.

RBI’s 8 May 2025 press release explains the purpose and limitation of the directory. Regulated entities submit their app details through RBI’s Centralised Information Management System (CIMS). RBI publishes the submitted information on an “as is” basis and does not independently verify or validate each entry. The list is updated when lenders add apps or report that an existing engagement has ended. You can read the official RBI announcement about the DLA directory for this important qualification.

Step 3: Match both the app and the lender

Search for the app’s exact name and inspect the regulated entity shown against it. The lender named in the directory should match the bank or NBFC named in the app’s loan offer and documents. If the app is operated by an LSP, the directory may show the app under the regulated lender that has deployed or joined it. Check the app name, lender name and any available platform or store details rather than relying on a similar-looking brand name.

For example, imagine a platform called “QuickFunds” displays a loan offer from “ABC Finance Limited”. The useful check is not simply whether “QuickFunds” appears somewhere in a search result. You need to establish whether the exact app you are using is reported against ABC Finance Limited, and whether ABC Finance Limited is the lender named in your KFS and agreement. This is an illustrative example, not a statement about an actual lender or app.

Step 4: Verify the lender separately

If the named lender is an NBFC, check its exact legal name in RBI’s official list of NBFCs and asset reconstruction companies. The RBI page also provides a separate list of entities whose Certificates of Registration have been cancelled. Check the latest available list and do not assume that a company is authorised merely because its name resembles a registered company.

If the lender is a bank, verify it through RBI’s official website and the bank’s own website. The NBFC list is not a list of banks, so searching a bank name there is the wrong test. Also compare the legal entity name in the RBI record with the name on the loan documents. A group company, brand, payment company or app operator may have a name similar to the actual lender but may not be the entity extending the loan.

Step 5: Confirm the app through the lender’s own website

A directory entry does not prove that the copy of the app installed on your phone is genuine. Fraudsters can imitate a real lender’s name, logo, app screenshots or customer-care details. Visit the lender’s official website independently and look for its published digital lending apps, LSPs, customer-care details and grievance redressal information. If the lender links to an official app-store listing, use that route to confirm the developer and download source.

Avoid installing an Android application package (APK) sent through WhatsApp, SMS, Telegram, social media or an unfamiliar website. Do not assume that a high app-store rating, a professional-looking website or a copied RBI logo proves regulatory legitimacy. Never share an OTP, UPI PIN, card PIN, net-banking password or remote-access permission with someone claiming to verify your loan.

Read the Key Facts Statement before accepting the loan

Finding a lender in the directory is only the beginning. Before accepting a digital loan, read the Key Facts Statement (KFS) and compare it with the offer shown in the app. RBI’s KFS framework is intended to present important loan terms in a standardised format and in language the borrower can understand. The Annual Percentage Rate (APR) represents the annual cost of credit and includes the interest rate and applicable charges associated with the facility.

Check these details before you tap “Accept” or sign electronically:

• Legal lender name: It should identify the bank or NBFC extending the loan.
• Loan amount and net disbursal: Compare the sanctioned amount with the amount that will actually reach your bank account.
• APR and interest basis: Do not compare offers using only a headline monthly interest rate.
• Processing and other fees: Review processing fees, insurance or third-party charges, taxes and any other disclosed costs.
• EMI and total repayment: Check the instalment amount, number of instalments, due dates and total amount payable.
• Penal charges: Understand what may be charged if a payment is delayed or another loan condition is breached.
• Cooling-off period: Read how long you have to exit and what amount must be repaid.
• Grievance contact: Note the lender’s nodal grievance redressal officer and complaint channel.

Under RBI’s KFS instructions for covered retail and MSME term loans, charges not disclosed in the KFS generally cannot be imposed by the regulated entity later without the borrower’s explicit consent. The KFS should be provided before the loan contract is executed. See RBI’s Key Facts Statement for Loans and Advances circular dated 15 April 2024 for the applicable framework and scope.

Understand the cooling-off period

RBI’s digital lending framework requires the borrower to receive an explicit option to exit a digital loan during an initial cooling-off period by paying the principal and the proportionate APR, without a penalty. The regulated lender determines the period under its policy, but it cannot be less than one day. A lender may retain a reasonable one-time processing fee if the fee is disclosed upfront in the KFS.

This is not a free cancellation after using the money. If you choose to exit, you must repay the principal and the cost of credit for the period you used the loan, subject to the applicable terms. Check the exact deadline, repayment method and any disclosed processing fee in your KFS. Do not assume that every lender offers the same number of days.

Check app permissions and the movement of money

RBI’s digital lending directions place limits on how regulated lenders and their LSPs collect and use borrower data. Data collection should be need-based and supported by prior, explicit consent. The directions require regulated entities to ensure that their lending apps do not access phone resources such as the contact list, call logs, telephony functions, files and media. One-time access to a camera, microphone or location facility may be taken for onboarding or KYC where necessary and with explicit consent.

Be cautious if a loan app insists on unrestricted access to your contacts, photo gallery, call history or files as a condition of applying. Read the privacy policy and understand why each permission is requested. You should also be able to understand the purpose of data collection and the choices available for consent. If an app threatens to contact your family or upload private photographs, preserve the evidence and seek help rather than paying an unofficial “settlement” demand.

Also check the flow of funds. Under the digital lending directions, disbursal should generally be made directly from the regulated lender to the borrower’s bank account, subject to specified regulatory and end-use exceptions. Repayments should generally go directly to the lender’s bank account rather than through an LSP’s personal or pool account. Fees payable to the LSP are the lender’s responsibility and should not be collected separately from the borrower by the LSP. Do not send a release fee, security deposit or repayment to an employee’s personal UPI ID.

Can a loan taken through an app appear in your CIBIL report?

Yes. RBI’s digital lending directions require regulated entities to report lending done through their own DLAs or an LSP’s DLAs to Credit Information Companies (CICs), irrespective of the nature or tenor of the loan. The directions also cover certain structured short-term credit and deferred-payment products offered through merchant platforms. Therefore, a small digital loan or a qualifying buy-now-pay-later facility should not be assumed to be invisible to credit bureaus simply because it was obtained through an app.

The actual lender is responsible for the credit reporting. Depending on the account and the information furnished, the report may show the facility, outstanding balance and repayment history. Paying on time and keeping the account accurate are important; missed payments or incorrect reporting may create problems. However, there is no universal fixed number of CIBIL points that every app loan will add or deduct. The effect depends on the information reported and the scoring model. For more detail, read our guide on how BNPL can affect a CIBIL score in India and our explanation of when credit reports and scores update.

What if the app is missing from the directory?

Do not immediately conclude that every missing result proves fraud, because the directory is based on lender-submitted data and a name may be displayed differently from the marketing name. There can also be reporting or update delays. But absence from the directory is a reason to stop and verify, not a reason to ignore the issue. Contact the lender using the phone number or email published on its official website and ask it to confirm the app, the LSP relationship and the legal entity that will lend to you.

Do not proceed if the app refuses to name the lender, the lender denies the relationship, the app-store developer does not match the lender’s published information, or the KFS names a different entity without a clear explanation. Do not pay money or submit additional identity documents while the relationship remains unclear. Keep screenshots of the app, offer, messages, website address and payment instructions in case you need to report the matter.

How to complain about a suspicious loan app

If you have a complaint about a digital loan provided by a regulated bank or NBFC, first raise it with the lender through the grievance channel shown in the KFS and on the lender’s official website. The lender remains responsible for addressing complaints concerning its LSP and DLA. Keep the complaint reference, email trail, loan agreement, KFS, account statement and payment receipts. If the regulated entity rejects the complaint, gives an unsatisfactory response or does not respond within 30 days, you may be able to escalate it through RBI’s Complaint Management System under the applicable RBI Integrated Ombudsman Scheme, subject to eligibility and scheme conditions.

If money has been taken through an online fraud, report it promptly through the National Cyber Crime Reporting Portal or call 1930 for financial cyber fraud assistance. Preserve transaction IDs, bank statements, UPI details, phone numbers, app links, chat messages and screenshots. Contact your bank or payment provider immediately as well. The cybercrime portal explains how complaints are submitted and tracked; reporting does not guarantee recovery, but quick reporting can help the authorities and financial intermediaries act.

For a credit-report error connected with a digital loan, contact the actual lender and the relevant credit bureau through their official dispute channels. A dispute should identify the exact account, field and reason you believe the information is inaccurate. Accurate repayment history should not be challenged merely because it is inconvenient. Credit Consultant’s credit repair and bureau dispute resource hub explains the difference between correcting an error and trying to remove accurate information.

A practical check before you borrow

Use this sequence every time you consider a digital loan: identify the exact legal lender; find the app in RBI’s DLA directory; match the app and lender names; verify the bank or NBFC separately; confirm the app through the lender’s own website; read the KFS and calculate the total repayment; review permissions and privacy terms; check the cooling-off period and grievance contact; and confirm that disbursal and repayment instructions point to the regulated lender rather than an individual or unrelated account.

If any of these checks fails, pause the application. A legitimate lender should be able to explain who is providing the loan, what it costs, how your information is used and where you can complain. Urgency, guaranteed approval claims, requests for upfront payments and pressure to share sensitive phone data are not substitutes for those disclosures.

Conclusion

The RBI DLA directory is a useful starting point for checking a digital lending app’s reported connection with a regulated lender, but it is not a list of RBI-approved products and it does not guarantee that every listed app is safe, affordable or free from misconduct. Verify the lender independently, compare the legal name across the app and KFS, review the APR and all charges, protect your phone data and make sure money moves through the lender’s official accounts. If the app’s identity or lending partner cannot be confirmed, do not proceed until the regulated lender verifies it through an official channel.

Official references

• RBI press release dated 8 May 2025 on the Digital Lending Directions and public DLA directory.
• RBI (NBFC – Credit Facilities) Directions, 2025, updated 15 July 2026.
• RBI (Commercial Banks – Credit Facilities) Directions, 2025, updated 15 July 2026.
• RBI list of registered and cancelled NBFCs.
• RBI Key Facts Statement circular dated 15 April 2024.
• National Cyber Crime Reporting Portal.