AI Hackers Hit NBFCs: Is Your Loan Money Safe?

AI-powered cybercriminals have stolen around ₹300 crore from smaller NBFCs across India in roughly two months. Over 150 police complaints have been filed. If you borrow from a small NBFC, here is what you need to know to protect yourself.

Here's what happened: AI-powered cybercriminals stole an estimated ₹300 crore from smaller Indian NBFCs over approximately two months, with over 150 FIRs filed across the country.. Attackers focused on NBFCs with turnover below ₹1,000 crore — the mid-tier lenders behind millions of personal, gold, and vehicle loans for Indian households.. Individual lenders suffered repeated hits in quick succession, suggesting organised, targeted campaigns rather than opportunistic breaches..

What you should do: Check your CIBIL or CRIF report immediately at no cost — look for any loan accounts or hard enquiries you did not authorise, which may signal your data is already being misused.. Call your NBFC lender's official customer care number (from their website, not an SMS) to confirm your registered mobile number and email have not been changed without your knowledge.. Avoid clicking any loan-related SMS or WhatsApp links claiming to be from your lender — breached lender data is often used to craft highly convincing phishing messages targeting existing borrowers..

File a complaint on RBI's Sachet portal (sachet.rbi.org.in) if you spot an unauthorised loan on your credit report — this creates a timestamped record that protects you legally if a recovery agent later approaches you for a loan you never took.

If you're dealing with recovery agents, read our recovery agent harassment guide covering your RBI rights.