Instant-loan apps promise cash in minutes with only a CNIC. Some are licensed by the SECP or the State Bank; many are not, and the unlicensed ones are behind the harassment and data-theft cases in the news. Here is how to check before you install.
The fastest way to borrow Rs. 10,000 in Pakistan is an app. The fastest way to lose your contact list, your photos and your peace of mind is also an app. The difference is not the design of the interface but the licence behind it, and the regulators have made it possible to check in a few minutes.
Who is allowed to lend digitally
Two regulators cover consumer lending. The State Bank of Pakistan supervises banks, microfinance banks and electronic money institutions, which is why products such as a bank’s app-based personal loan or a microfinance bank’s salary advance fall under its rules. The Securities and Exchange Commission of Pakistan licenses non-bank finance companies, and since 2022 it has required every digital lending app of an NBFC to be registered and listed by the SECP. If a lender is neither a bank under the SBP nor an NBFC whose app appears on the SECP’s list, it has no right to lend to you.
How to check in five minutes
Search the SECP website for its list of licensed NBFCs and their approved digital lending apps and confirm that the app name, the company name and the developer name on the app store all match. For a bank or microfinance bank, check the SBP’s list of regulated institutions and make sure the app is published by that institution, not by a look-alike. Then read the app’s disclosure: licensed lenders must show the total cost of the loan, the annual percentage rate, the fees and the tenure before you accept. An app that shows only “service fee 10%” and a repayment date is already breaking the rules.
The warning signs
Permissions are the first tell. A legitimate lending app needs your CNIC, a selfie and perhaps access to SMS for the OTP; it does not need your contacts, your photo gallery or your call log. Pricing is the second: fees that translate into hundreds of percent per year, tenures of seven or fourteen days and “processing” deductions from the disbursed amount are typical of the unlicensed operators. The third is pressure: countdown timers, promises of pre-approved limits and messages saying your “eligibility expires today”. No bank or licensed NBFC lends this way.
If you are already in trouble
Harassment of borrowers and their contacts, threats and publication of personal data are offences under the Prevention of Electronic Crimes Act 2016, and the SECP has stated that recovery practices of licensed lenders must follow its guidelines. Keep screenshots of every message, do not pay any amount beyond what the contract shows, and complain to the SECP for an NBFC app or to the SBP’s Banking Mohtasib for a bank. Report criminal harassment to the cybercrime wing of the FIA. Uninstalling the app does not delete the data it already collected, so change the passwords of any account it could reach.
The safer alternatives
If you need a small, quick loan, the regulated options have grown: microfinance banks offer salary loans through their apps, banks offer app-based personal loans to their salary customers, and several licensed NBFC apps are on the SECP list. They are slower than the scams by a day or two and far cheaper over the month. And if the amount is a few thousand rupees to bridge a week, a credit card instalment plan or an honest conversation with your employer about an advance is cheaper than any app.
