Instant loan app scams in Nepal: how they trap you and how to get out

Someone borrows Rs 8,000 from an app that approved the loan in four minutes. The money lands as Rs 6,000 after a fee nobody explained, due back in seven days. A week later they are short, ask for a few more days, and the calls start. Not to them. To their mother, their landlord, their team lead at work, with a photo and a line about how this person is a fraud who does not pay debts.

That is the business model. The loan is the bait. The contact list the app quietly copied on install is the actual asset, and the shame is the collection method. These operations are illegal in Nepal, and knowing exactly why changes how you respond when one has its hooks in you or someone you know.

Lending without a licence is illegal here

Start with the part most victims do not realise: the app had no right to lend to you in the first place. Lending is a regulated activity in Nepal. Under the Bank and Financial Institution Act 2073 (BAFIA), only an institution licensed by Nepal Rastra Bank may carry on banking and financial transactions, and doing so without a licence can draw confiscation, a fine of up to three times the amount, and up to five years' imprisonment.

On the digital side, NRB's Guideline on Lending through Electronic Medium, issued in February 2022, permits digital loans only through licensed banks, either directly or via a licensed payment service provider acting as their agent. There is no legal path for a standalone, non-bank app to hand out loans. So a "loan app" that is not clearly tied to a named NRB-licensed bank is not a lender skirting a grey area. It is running an unlicensed operation.

One honest caveat: NRB has not published a single consumer notice that names "instant loan apps" and warns against them by title. The illegality rests on BAFIA and the digital-lending framework, not on a poster from the central bank. Do not wait for an official warning that singles these apps out; the law already covers them.

How the trap springs

The mechanics are consistent, and each step is designed to make the next one work:

1. Permissions on install. The app asks for your contacts, photos, SMS, and sometimes your call log, framed as "verification." Granting it hands over the leverage that will later be used against you.
2. A small loan, a big fee. The approved amount is modest. The amount that actually reaches your account is smaller, because a heavy "processing fee" is deducted upfront and rarely disclosed in plain terms.
3. A tenure measured in days. Repayment is due fast, which manufactures the default the operators are counting on.
4. Harvested-contact harassment. When you slip, the calls and messages go to the people in your phone, sometimes with morphed photos or fake legal and police notices, to humiliate you into paying.

The interest is almost beside the point. The collection method, public shaming through your own contacts, is what these operations sell.

What this actually looks like in Nepal

This is not theoretical. In February 2022, Nepal Police arrested 117 people, two Chinese nationals and 115 Nepalis, in raids at Old Baneshwor and Sano Thimi over an online loan racket registered as an IT company; investigators seized dozens of laptops and desktops. In April 2024, police in Parsa arrested three Chinese nationals in Birgunj over a similar online-fraud operation, seizing more than a hundred computers, phones, passports, and cash.

A pattern worth naming honestly: in the documented Nepali busts, the ringleaders were foreign nationals using Nepalis as local staff, and many of the victims were across the border, with Nepal used partly as an operating base. There is not yet a well-documented Nepali case where the targets were overwhelmingly Nepalis. That is not a reason to relax. Cybercrime here is climbing steeply. Nepal logged roughly 18,900 cybercrime complaints in FY 2081/82, about 52 a day, and counted 18,326 cyber-fraud victims that year. The infrastructure and the playbook are already here.

Legit versus scam: how to tell in 30 seconds

There is a clean line between a regulated digital loan and a predatory app. Use it before you tap "agree."

Signal	Legitimate digital loan	Scam app
Who the lender is	A named NRB-licensed bank (Foneloan partners, eSewa easyloan via Kumari Bank)	Hidden, vague, or a shell "IT company"
Contact-list access	Never needed	Demanded on install
The fee	Small and disclosed (easyloan: from 0.75%)	Large, deducted before you get the money
Interest	Capped and stated (easyloan: 18% a year)	Unstated, or buried in a short tenure
Deadline	Months, with a real schedule	Days

Nepal has a legitimate digital-lending space precisely so you do not need these apps. Under the 2022 guideline, licensed banks can lend up to Rs 500,000 digitally to salary or business account holders (less for others), through products like Foneloan and eSewa's easyloan. For predatory-app interest, the eye-watering 300%-plus annual rates you may have read about are from India's loan-app investigations, not Nepal; treat them as a warning of where this leads, not as a measured Nepali figure.

If you genuinely need to borrow, the personal loan, gold loan, and overdraft comparison and the laghubitta interest reality lay out real options, and the BNPL cost breakdown shows why even "zero EMI" is rarely free. None of them require your contact list.

If an app already has its hooks in you

The instinct is to pay and make it stop. It usually does not. Once you have paid once, you have confirmed that the shame works. Do this instead:

• Stop paying further demands. The debt was issued illegally, and feeding it funds the next round of pressure.
• Preserve evidence first. Screenshot the app, the messages, the call log, the disbursement, and the threats before you delete anything.
• Cut the leverage. Revoke the app's access to contacts, photos, and SMS in your phone settings, then uninstall it.
• Get ahead of the shame. Send a short message to family and close contacts saying you are dealing with a scam and they may receive fake messages about you. This single step defuses most of the operators' power.
• Watch for the second scam. The Cyber Bureau warns that some "loan repayment" or "loan management" apps are actually phishing or remote-access tools that hand attackers control of your device. Do not install anything they tell you to.

If the loan came from a real bank's app and you are simply struggling to repay, that is a different problem with real exits, covered in what happens if you can't pay your loan EMI.

How to report it, and the laws on your side

File with the Nepal Police Cyber Bureau, Bhotahiti, Kathmandu. You can lodge a complaint online at cyberbureau.nepalpolice.gov.np, email cyberbureau@nepalpolice.gov.np, or call a published number such as 01-5319044; outside the Valley, file at your nearest District Police Office, which forwards it. Bring your evidence and a valid ID, and confirm the current contact details on the Bureau's own page first, because numbers change.

Several laws make the operators' conduct an offence, not yours:

• Privacy Act 2075. Section 11 treats your financial details, identity documents, and biometric data as confidential, and unauthorised collection or use can draw up to three years' imprisonment and a fine. Harvesting your contacts and photos falls squarely here.
• Electronic Transactions Act 2063. Section 47 penalises publishing illegal or defamatory material electronically, the provision that fits morphed photos and public shaming.
• BAFIA 2073. The illegal lending itself is an offence, as above.

The shape of this is the same as other digital-fraud playbooks in Nepal, including the OTP and phishing scams that rely on rushing you into a mistake. The defence is the same too: slow down, verify who you are dealing with, and never grant an app access it has no reason to want.

What you actually need to know

• No licence, no legitimacy. Only NRB-licensed banks may lend, and digital loans must run through them. An app that hides its lender and demands your contacts is illegal, full stop, regardless of whether an official notice has ever named it.
• The harassment is the product, so starve it. Do not keep paying. Screenshot everything, revoke permissions, warn your contacts before the operators reach them, and report to the Cyber Bureau. Paying once teaches them the shame works.
• Borrow from something with a name. A real digital loan comes through a named bank with a stated rate and a small disclosed fee (Foneloan, eSewa easyloan at 18% and from 0.75%). Anything that needs your photo gallery to lend you Rs 8,000 is not a lender.

If a loan app is harassing you or a family member and you are not sure what to preserve or where to report, email parjanya57@gmail.com with what you have, and I will point you to the right steps.

This post is part of the Nepal Money Basics guide — the borrowing and credit section.