A loan app is likely fake if it is not linked to an RBI-registered bank or NBFC, asks for an upfront fee, wants access to your contacts or photos, or does not give you a Key Fact Statement. Under RBI’s digital lending rules, the loan must come from a regulated lender, be paid directly into your bank account, and come with a KFS showing the APR. Report fraud on RBI’s Sachet portal or the cybercrime helpline 1930.