Loan Sharks vs Digital Lenders Nigeria: Legal Rights Explained

Loan Sharks vs Digital Lenders in Nigeria: Your Legal Rights, Red Flags and What to Do

Loan Sharks vs Digital Lenders in Nigeria: Your Legal Rights, Red Flags and What to Do

Published: March 2026   |   Updated: September 29, 2026   |   Reading time: About 30 minutes

A loan can be completely legitimate and still become financially difficult to repay. The difficulty becomes a legal and consumer-protection problem when a lender moves beyond enforcing a genuine debt and begins using deception, coercion, unfair tactics, unlawful data processing, intimidation or other prohibited conduct.

That distinction matters in Nigeria because the digital-lending market is now operating under a substantially more developed regulatory framework than it was a few years ago. The Federal Competition and Consumer Protection Commission (FCCPC) issued the Digital, Electronic, Online or Non-Traditional Consumer Lending Regulations 2025, commonly called the DEON Regulations. The framework addresses transparency, registration, data protection, responsible lending and recovery practices.

This is therefore not an article about assuming every loan app is a scam, nor is it an argument that every borrower is entitled to escape a debt. It is about something more precise: knowing the difference between a legitimate debt-recovery process and conduct that may cross a legal or regulatory line.

The answer in 60 seconds

• A digital lender is not automatically legitimate simply because it has an app.
• The word “loan shark” is a common description, not a single Nigerian statutory licence category.
• The FCCPC maintains a public register of digital money lenders. Its current online register shows 505 approved entries and separately identifies conditional approvals and delisted apps.
• Digital lenders covered by the DEON framework have obligations relating to transparency, consumer protection, data protection and recovery conduct.
• A borrower still has a responsibility to repay a valid debt according to the applicable agreement. A dispute about harassment or privacy does not automatically cancel the principal debt.
• At the same time, owing money does not give a lender unlimited permission to use coercion, harassment, unfair tactics or unlawful processing of personal information.
• If the lender is a CBN-regulated financial institution, CBN's complaint process may also apply. The CBN says customers should first complain to the institution and can escalate unresolved complaints to its Consumer Protection Department under the applicable timelines.

First decision: what kind of lender are you dealing with?

Before arguing about the amount demanded, identify the legal and regulatory identity of the lender.

What you see	What you need to establish	Why it matters
A bank	Which CBN-regulated institution is the creditor?	CBN consumer-complaint channels may apply.
A microfinance bank	What is the licensed institution and what entity made the loan?	The regulatory route may differ from a standalone digital lender.
A digital money lender	Is the company/app on the FCCPC register?	The FCCPC's digital-lending registration and consumer-protection framework is directly relevant.
An unfamiliar app or website	Who legally owns it, who receives the repayment, and what regulator covers the entity?	An app name alone does not establish legitimacy.
A person lending privately	What state law, licence requirements and contractual arrangements apply?	“Digital lender” rules should not automatically be assumed to cover every private lending arrangement.

Nigerian students in a technology learning environment. Image: Wikimedia Commons, Federal Polytechnic Bida, Niger State, Nigeria, CC BY-SA 4.0.

1. Why “loan shark” and “digital lender” are not opposites

One of the biggest problems with discussions about Nigerian loan apps is that two different questions are often mixed together.

The first question is technological: How was the loan delivered? If money was requested through an app, website, USSD channel or other electronic platform, the lending process is digital.

The second question is legal and regulatory: Who is providing the credit, under what authority, and how is the lender behaving?

A lender can therefore be digital without being abusive. Equally, a digital platform can be unregistered, non-compliant or subject to enforcement. The existence of a polished application, a company logo or an apparently professional customer-service number does not answer the regulatory question.

This is why Daily Reality NG uses the term “loan shark” carefully. It is useful in ordinary conversation to describe predatory or abusive lending, but it should not be treated as though every lender fitting a particular business model automatically carries a statutory label called “loan shark.”

The more useful question is: What conduct is taking place, what agreement exists, what entity is responsible, and which Nigerian law or regulator applies?

That approach is much safer than deciding that a lender is lawful or unlawful merely because someone on social media called it a loan shark.

2. What changed in Nigeria's digital-lending rules?

Nigeria's digital-lending regulatory environment has evolved substantially. The FCCPC issued the DEON Consumer Lending Regulations 2025 to establish standards for digital, electronic, online and other non-traditional consumer lending. The Commission says the rules address longstanding concerns involving transparency, data privacy, abusive recovery practices, harassment and other consumer-protection issues.

The regulations came into effect on July 21, 2025. The FCCPC subsequently set January 5, 2026 as the deadline for affected operators to complete full compliance. In January 2026, the Commission announced that enforcement had begun against operators that had not regularised their status.

There was then a further legal development in 2026. In May, the FCCPC announced that an ex-parte order from the Federal High Court in Lagos had temporarily restrained implementation of the DEON Regulations and said it was suspending implementation in obedience to the order while challenging it.

On July 20, 2026, the FCCPC announced that the restraining order had been vacated and that it had resumed implementation of the DEON Regulations. That means an article describing the rules as permanently suspended would now be materially outdated.

The practical lesson is important: regulatory status can change while an article is still circulating online. Borrowers should check the regulator's current register rather than relying on an old screenshot, blog list or social-media post.

3. The FCCPC register is one of your first checks

The FCCPC's public digital-money-lender page separates operators into categories including approved lenders, conditional approvals, delisted apps and lenders operating under waivers because of CBN licensing arrangements. The live page currently displays 505 approved entries.

This creates an important distinction between three questions:

1. Does the app exist?
2. Does the company behind the app exist?
3. Does the relevant company currently appear in the regulator's applicable register or otherwise have the required regulatory status?

Only the third question begins to answer the regulatory-status issue.

A search result in an app store is not a licence. A social-media account is not a licence. A WhatsApp number is not a licence. A company's registration with the Corporate Affairs Commission, by itself, also does not prove that it has every regulatory approval required to provide a particular category of financial service.

Daily Reality NG verification rule: identify the legal entity first, then check the regulator whose rules apply to that activity. Do not verify an app only by its brand name.

4. What the DEON framework means for an ordinary borrower

The FCCPC describes the DEON framework as covering non-bank lenders providing unsecured consumer credit through digital, electronic, online or other non-traditional means. Its FAQ says the framework requires clear and simple contract language, disclosure of interest rates, fees and repayment schedules, compliance with the Nigeria Data Protection Act 2023, and inclusion on the FCCPC's public register where applicable.

This changes the way a borrower should evaluate a loan offer. The question is no longer merely “How much will they send to my account?”

A responsible pre-loan review should ask:

• Who exactly is the creditor?
• What is the amount actually disbursed?
• What amount must be repaid?
• When is the repayment due?
• What interest or finance charge applies?
• What fees apply?
• What happens if payment is late?
• What personal information is being collected?
• Why is that information being collected?
• Which company controls the information?
• What customer-service and complaint channels exist?
• Does the lender appear on the applicable official register?

The strongest habit is to save the loan offer, agreement and repayment schedule before accepting the money. If the terms later change or a dispute arises, your contemporaneous records can become much more useful than trying to reconstruct the agreement from memory.

5. Your debt is real even when the lender behaves badly

This point deserves special emphasis because consumer-rights discussions can become misleading in both directions.

If a person legitimately borrowed money and owes a contractual amount, a complaint about the lender's conduct does not automatically erase the underlying debt.

At the same time, the existence of a debt does not mean the creditor receives unlimited power over the borrower.

Nigeria's Federal Competition and Consumer Protection Act contains a right to fair dealings. Section 124 addresses conduct involving physical force, coercion, undue influence, pressure, harassment, unfair tactics and similar conduct in connection with consumer transactions, including demand for or collection of payment.

That creates a useful legal distinction:

Issue	Borrower's obligation	Lender's boundary
Principal borrowed	Repay according to the applicable agreement.	Must accurately represent the debt.
Agreed charges	Understand and meet valid contractual obligations.	Charges and terms should not be concealed or misleading.
Late repayment	Communicate and seek a lawful resolution where necessary.	Recovery cannot simply become coercion or harassment.
Personal data	Provide information reasonably required for a lawful transaction.	Processing must comply with applicable data-protection requirements.
Dispute	Preserve records and use the appropriate complaint route.	Should provide an accessible and lawful process for addressing complaints.

6. Harassment is not the same thing as debt recovery

A lender has a legitimate interest in recovering money it is owed. That does not mean every recovery technique is legitimate.

The FCCPC specifically identified abusive recovery tactics, harassment, data-privacy violations and other exploitative practices as problems the DEON Regulations were designed to address.

The FCCPA separately prohibits physical force, coercion, undue influence, pressure, harassment and unfair tactics in connection with the demand for or collection of consumer payment.

Therefore, when assessing a recovery interaction, do not ask only, “Do I owe the money?” Ask two separate questions:

1. Is the claimed debt accurate and enforceable?
2. Is the method being used to recover it lawful and fair?

Both questions can matter at the same time.

A borrower may owe ₦100,000 and still have a legitimate complaint about the way a lender is attempting to collect it. Conversely, a complaint about harassment does not automatically prove that the ₦100,000 debt is invalid.

7. Contacting your friends or family: what actually matters?

This is one of the most misunderstood areas of digital lending.

The existence of another person's phone number in a lender's system does not by itself answer whether the lender has lawfully processed or disclosed that person's information. The relevant questions include how the information was obtained, the lawful basis for processing, the purpose of the processing, what was disclosed, to whom it was disclosed and whether the processing complied with applicable data-protection requirements.

The Nigeria Data Protection Act 2023 provides a statutory framework for complaints against data controllers and processors. Section 46 allows an aggrieved data subject to lodge a complaint with the Nigeria Data Protection Commission (NDPC), which may investigate qualifying complaints.

The NDPC also provides a Data Subject Access Request process through which individuals can seek information about personal data held about them and make requests relating to rights such as rectification, erasure, restriction and objection, subject to the Act's conditions.

So the useful legal question is not simply “Can a loan app call someone I know?” The better question is what data was processed, for what lawful purpose, and what exactly was communicated?

Evidence rule: if you believe a lender has contacted third parties improperly, preserve the actual messages, caller information, dates, screenshots and other records. Avoid editing the original evidence before storing a copy.

Students working in a Nigerian educational setting. Image: Wikimedia Commons, Nigeria, CC BY-SA 4.0.

8. What personal-data rights are relevant to borrowers?

A digital loan application necessarily involves information processing. The lender may need information to assess an application, establish identity, administer an account, communicate with the borrower, comply with legal obligations or perform other legitimate functions.

That does not mean every imaginable piece of information can automatically be collected or used for every purpose.

The NDPC's published privacy principles emphasise fair, lawful and transparent processing; specified and legitimate purposes; data minimisation; retention limits; accuracy; and appropriate security.

For a borrower, this produces a practical “data map.”

Data question	What to look for
What data is collected?	Look beyond your name and phone number. Read the privacy notice.
Why is it collected?	There should be a stated purpose or applicable lawful basis.
Who controls it?	Identify the legal entity responsible for processing.
Who receives it?	Look for disclosures to service providers or other third parties.
How long is it retained?	Look for retention information and applicable legal obligations.
How can you complain?	Keep the lender's privacy and complaint contact details.

A privacy policy is not merely decorative website text. It can help establish what the organisation says it does with personal information. Save the version you saw when applying if you anticipate a dispute.

9. What counts as a red flag before you borrow?

A red flag is not automatically proof of illegality. It is a reason to stop and verify.

1. The legal company name is difficult to identify.
2. The app name and the creditor name do not match and no explanation is provided.
3. The total repayment amount is difficult to determine before acceptance.
4. Important fees appear only after you proceed.
5. The lender discourages you from reading the agreement.
6. Customer-service information is vague or inaccessible.
7. The lender's regulatory status cannot be verified through the relevant official source.
8. The application demands information that appears unrelated to the stated lending purpose without a clear explanation.
9. The recovery language relies on threats or humiliation rather than ordinary debt communication.
10. The lender tells you that you must pay a new fee before it will explain the original debt.
11. The organisation impersonates a government agency, bank or other institution.
12. The repayment account is suddenly changed without a reliable verification process.

The important point is that a red flag is a verification trigger, not a legal verdict. A borrower should distinguish evidence from suspicion.

10. The five-minute lender verification test

Before accepting a digital loan, I would structure the verification process into five separate checks. This is a Daily Reality NG analytical framework rather than a government checklist.

Check 1 — Identity

Write down the full legal name of the creditor. Do not rely only on the app's brand.

Check 2 — Regulatory status

Check the applicable official register. For digital money lenders subject to FCCPC registration, check the FCCPC's current published list. The Commission's page also distinguishes approved, conditional, delisted and CBN-licensed waiver categories.

Check 3 — Cost

Write the amount received, total amount repayable, repayment date and every disclosed fee in one place.

Check 4 — Data

Read the privacy notice. Identify what information is collected and why.

Check 5 — Recovery

Look for the lender's stated complaint and recovery processes. A lender that makes its terms and complaint channels difficult to understand creates an avoidable risk before the first repayment date.

The rule: if you cannot explain the creditor, cost, due date, data use and complaint route in your own words, you have not finished checking the loan.

11. Why the amount you receive is not the same as the cost of the loan

One of the easiest mistakes is to compare loans by the amount displayed in the advertising headline.

Imagine, purely as an illustrative example, that a borrower receives ₦80,000 but the disclosed repayment obligation is ₦96,000. The borrower should not describe the loan simply as “an ₦80,000 loan.” The relevant cash-flow question is how much money arrived and how much must leave the borrower's hands.

The simple illustrative calculation is:

Total financing cost = total amount repayable − amount actually received.

In that example:

₦96,000 − ₦80,000 = ₦16,000.

This is not a statement about what any particular lender charges. It is a way to teach the borrower how to read the economics of a loan.

The borrower should separately record:

• principal;
• interest or finance charge;
• origination or processing fees, where applicable;
• late-payment charges;
• other disclosed charges;
• the date each amount becomes due.

If a lender cannot clearly explain the arithmetic, stop and seek clarification before accepting the money.

12. Why short repayment periods can make a loan feel more expensive

The calendar matters.

A borrower who receives money today and must repay the entire obligation very soon is facing a different cash-flow problem from a borrower who repays the same total amount over a longer period.

Consider another purely illustrative example:

Example	Amount received	Total repayment	Repayment structure
A	₦100,000	₦115,000	One payment very soon
B	₦100,000	₦115,000	Several scheduled payments

The total nominal cost in this simplified example is the same, but the repayment burden on a household's cash flow may be very different.

That is why responsible comparison should consider amount received + total repayment + repayment timing, rather than looking only at the advertised loan amount.

13. What if you already borrowed and cannot repay on time?

The worst response to a difficult repayment date is often silence.

That does not mean a borrower should promise money that cannot be produced. It means the borrower should preserve evidence and communicate through the lender's official channels.

1. Confirm the original agreement.
2. Confirm the amount actually disbursed.
3. Confirm the current amount being demanded.
4. Identify any fees or charges added after disbursement.
5. Request a written statement of the outstanding balance.
6. Ask whether a lawful repayment arrangement is available.
7. Keep copies of every communication.
8. If there is abusive conduct, separate the debt dispute from the conduct complaint.

This separation is important. A borrower can say, in substance: “I acknowledge the loan, but I dispute this calculation,” or “I am requesting a statement of account,” or “I am complaining about the method used to contact third parties.”

Those are much more precise positions than simply saying “I will not pay.”

14. What if the amount demanded is different from your records?

Start with arithmetic, not anger.

Build a small reconciliation table:

Item	Your record	Lender's figure	Difference
Amount disbursed	Record the actual credit received	Record lender's figure	Calculate
Repayment already made	Bank/app transaction evidence	Lender's credited amount	Calculate
Interest/finance charge	Agreement	Statement	Calculate
Other fees	Agreement/receipt	Statement	Calculate
Outstanding balance	Your calculation	Lender's demand	Calculate

The objective is not to manufacture a dispute. It is to determine whether both sides are actually talking about the same numbers.

15. What evidence should a borrower preserve?

If a dispute develops, evidence can be more valuable than a long explanation.

• Original loan offer.
• Loan agreement and terms.
• Privacy notice available when you applied.
• Disbursement transaction.
• Repayment receipts.
• Bank statements showing repayments.
• Messages from the lender.
• Emails.
• Call logs.
• Relevant screenshots.
• Dates and times of disputed communications.
• Names or identifying information of people contacted by the lender.
• The lender's legal company name.
• The app name and developer information.
• Copies or screenshots of relevant regulator-register information.

Keep the original files where possible. Do not rely on a screenshot if the underlying message, email or transaction record can also be preserved.

Do not expose sensitive information unnecessarily. If you publish screenshots online, remove passwords, PINs, full account numbers, BVN, NIN and other sensitive personal information unless there is a legitimate legal reason to disclose it.

A Nigerian educational environment in Lagos. Image: Wikimedia Commons, CC BY-SA 4.0.

16. What should you do if a lender threatens or humiliates you?

First, distinguish a normal repayment reminder from a threatening or abusive communication.

A message saying that a payment is overdue is not automatically harassment. A lender may legitimately communicate about a debt.

The concern increases where communications involve coercion, intimidation, unfair tactics, threats or other conduct prohibited by applicable law. The FCCPA expressly addresses coercion, pressure, harassment and unfair tactics in consumer transactions, including collection of payment.

The FCCPC has also specifically identified abusive recovery practices and harassment as issues within its digital-lending regulatory response.

The sensible response is evidence preservation rather than an argument on the phone.

1. Save the message.
2. Record the date and time.
3. Preserve the sender information.
4. Keep the underlying loan documents.
5. Do not send passwords, PINs or unnecessary sensitive information in anger.
6. Use the lender's formal complaint channel.
7. Escalate to the appropriate regulator where the matter falls within its jurisdiction.

17. Which regulator should receive your complaint?

There is no single complaint route for every kind of lender and every kind of dispute. The correct route depends on who provided the credit and what went wrong.

Problem	Possible regulatory route	Important qualification
Digital-lending consumer-protection issue	FCCPC	Confirm that the lender/activity falls within FCCPC's applicable mandate.
Personal-data complaint	NDPC	Relevant where the complaint concerns processing of personal data under the NDP Act.
Complaint against a CBN-regulated financial institution	Institution first, then CBN Consumer Protection Department where applicable	CBN's published process requires the customer to first complain to the institution and provides escalation rules.
Possible criminal conduct	Appropriate law-enforcement authority	A consumer complaint and a criminal investigation are different processes.
Contractual dispute requiring legal determination	Legal advice/court process where appropriate	A regulator cannot necessarily determine every private contractual question.

Do not send the same complaint blindly to every institution. Identify the actual issue and choose the channel that has jurisdiction over it.

18. The FCCPC complaint route

The FCCPC provides a consumer complaints portal, and the Commission has specifically directed digital-lending consumers toward its complaint mechanisms for unlawful or unregistered lenders, unfair practices and privacy-related violations.

When making a complaint, clarity matters.

Instead of writing a long emotional narrative, structure the complaint around:

1. Who: identify the company and app.
2. What: explain the conduct complained of.
3. When: give dates and times.
4. Amount: identify the loan and disputed amount if relevant.
5. Evidence: list the documents attached.
6. Remedy sought: explain what you want investigated or corrected.

This structure makes the complaint easier to understand and helps separate the underlying debt from the alleged regulatory breach.

19. The CBN complaint route is different

If the creditor is a CBN-regulated financial institution, the CBN's published complaint guidance says the customer should first report the issue to the institution where it originated. The CBN says complaints involving excess charges and loans have specified resolution timelines, and customers can escalate unresolved complaints to the Consumer Protection Department after the applicable period.

This means a borrower should not automatically send every loan complaint directly to CBN.

Start by identifying the regulated institution and following its internal complaint procedure. Keep proof that the complaint was made.

That proof can become important if escalation later becomes necessary.

20. The NDPC route for data-protection complaints

The Nigeria Data Protection Act provides a route for an aggrieved data subject to lodge a complaint with the NDPC concerning conduct by a data controller or processor that violates the Act or subsidiary legislation.

A data complaint should therefore be framed around data processing rather than simply around the fact that a borrower is unhappy with a lender.

Examples of issues that may warrant examination include:

• what personal information was collected;
• the purpose stated for collecting it;
• how it was subsequently used;
• whether it was disclosed to another person;
• whether the disclosure was connected to a lawful purpose;
• whether the data was retained or processed in accordance with applicable requirements.

The facts matter. Do not label conduct as a data-protection violation merely because a lender contacted someone you know. Document exactly what happened.

21. What if the lender is not on the FCCPC register?

Treat the absence as a serious verification issue, not as an invitation to make an immediate legal conclusion without checking the lender's regulatory category.

The FCCPC's register itself identifies categories such as approved lenders, conditional approvals, delisted apps and entities covered by waivers because they are licensed by the CBN.

Therefore, “not found” should lead to a second identity check:

1. Did you search the correct legal company name?
2. Did you search the app name?
3. Is the lender a CBN-regulated institution?
4. Is the app merely a technology platform for another creditor?
5. Is there another relevant regulatory status?

If the lender still cannot establish its legal and regulatory identity, that uncertainty itself is a significant consumer-risk signal.

22. Approved does not mean “borrow without reading”

A regulator's register answers an important question, but it does not replace personal financial judgment.

A registered lender can still offer a loan that is unsuitable for a particular borrower.

The borrower therefore needs two separate filters:

Filter	Question
Regulatory filter	Is the lender operating within the relevant legal and regulatory framework?
Financial filter	Can I realistically meet the repayment obligation without creating a larger problem?

Passing the first filter does not automatically pass the second.

23. Why taking one loan to repay another can become dangerous

Debt becomes structurally more difficult when the borrower begins using new credit primarily to satisfy previous short-term credit obligations.

Consider an illustrative cycle:

Loan A → repayment pressure → Loan B → new repayment pressure → Loan C.

The problem is not simply the number of apps. It is that the borrower's future income is being committed repeatedly before it arrives.

A simple personal-finance diagnostic is to list all repayment dates on one calendar. If several obligations mature within the same short period, the total cash-flow pressure becomes visible.

This is an analytical tool, not a prediction that every short-term loan causes a debt spiral. The purpose is to expose the timing problem before it becomes invisible inside multiple applications.

24. Loan stacking: the number that matters is future cash flow

Suppose, purely for illustration, that a borrower has three outstanding obligations:

Loan	Due	Amount due
A	Day 7	₦45,000
B	Day 12	₦60,000
C	Day 20	₦35,000

The total upcoming obligation is ₦140,000.

That figure may be more important for immediate budgeting than the fact that the borrower originally received three separate loan amounts at different times.

Again, this is an illustrative calculation, not a statement about any lender's actual pricing.

25. Why a repayment plan should be written down

When discussing a repayment arrangement, do not rely solely on a phone conversation.

Ask for the arrangement in writing and verify:

• the total balance;
• the payment dates;
• the amount of each payment;
• any revised fees or charges;
• whether the arrangement changes the original due date;
• what happens after the final payment;
• how the account will be marked as settled.

A written record reduces the possibility that two people later remember the agreement differently.

26. What a legitimate debt collector may still do

Consumer protection should not be confused with immunity from lawful debt recovery.

Depending on the agreement, applicable law and the creditor's legal status, a creditor may have lawful mechanisms for demanding payment, communicating with the borrower, charging valid contractual amounts, using permitted collection processes or pursuing a court remedy.

The central distinction is between enforcement of a legitimate obligation and unlawful or prohibited conduct used in the process of enforcement.

A borrower should therefore not assume that every demand for repayment is harassment simply because it is uncomfortable.

Nor should a lender assume that every collection method is acceptable simply because money is owed.

27. What a borrower should never confuse with legal rights

There are several statements that sound powerful online but are too broad to rely upon.

• “They cannot contact you after the due date.”
• “Once a lender violates privacy, the debt disappears.”
• “Every loan app is illegal.”
• “If an app is on an app store, it is licensed.”
• “If the company is registered with CAC, it can automatically lend.”
• “A lender can never take you to court.”
• “You can ignore every demand because the lender is a fintech.”

These statements collapse different legal questions into one sentence.

Nigerian lending disputes need to be analysed by the identity of the creditor, the nature of the credit, the contract, the conduct complained of, the personal-data processing involved and the regulator with jurisdiction.

Nigerian students working in a laboratory environment. Image: Wikimedia Commons, Nigeria, CC BY-SA 4.0.

28. The “legal rights ladder” for a Nigerian borrower

I find it useful to think about borrower protection as a ladder rather than a single right.

Level 1 — Information

You need to know who is lending, how much you receive, what you repay and when.

Level 2 — Fair dealing

Consumer law addresses coercion, harassment and unfair tactics in relevant transactions.

Level 3 — Data protection

Personal-data processing is governed by the Nigeria Data Protection Act and related requirements.

Level 4 — Regulatory accountability

Relevant regulators maintain complaint and enforcement mechanisms.

Level 5 — Legal remedy

Where a dispute cannot be resolved administratively, legal advice and formal legal processes may become necessary.

This ladder helps prevent the common mistake of expecting one regulator to solve every part of a dispute.

29. What if your account has already been charged or debited?

Treat the transaction as a separate evidence problem.

Record:

• the date;
• the amount;
• the account from which it was taken;
• the description on the transaction;
• the contractual basis claimed for the debit;
• any communication received before or after it.

If the account is with a CBN-regulated financial institution and the complaint concerns that institution, follow the institution's complaint procedure and the CBN escalation process where applicable.

Do not assume that an unexplained debit is automatically lawful merely because the lender says it is part of the debt. Ask for the contractual and transactional explanation.

30. The difference between a complaint and a refusal to pay

These are different actions.

A complaint says: “I believe something about this transaction or the lender's conduct requires investigation or correction.”

A refusal to pay says: “I am declining the claimed obligation.”

A borrower should know which position they are taking.

If the debt itself is disputed, say why. If only the interest calculation is disputed, say that. If the debt is accepted but the recovery conduct is disputed, say that instead.

Precision reduces confusion.

31. A practical complaint template

The following is an original Daily Reality NG structure for organising a complaint. It is not a substitute for a regulator's official form.

Subject: Complaint regarding digital lending transaction and recovery conduct

1. My identity: State your name and appropriate contact information.

2. Lender: Give the company's legal name, app name and any relevant account/reference number.

3. Transaction: State when the loan was received, the amount received and the repayment terms you understood.

4. Dispute: State precisely what you believe is wrong.

5. Evidence: List agreements, receipts, messages and screenshots.

6. Remedy requested: State what you want investigated, clarified or corrected.

Avoid insults. Avoid threats. Avoid making allegations you cannot support.

32. What if a lender says you will be reported to a credit bureau?

Do not treat the phrase “credit bureau” as a threat that automatically makes the lender unlawful.

Credit reporting can form part of legitimate financial activity. The important questions are whether the reporting is accurate, lawful and connected to the applicable framework.

If you believe inaccurate information has been reported, the practical first step is to obtain the relevant information, identify the reporting entity and dispute inaccurate records through the appropriate channel.

This is another reason to preserve payment evidence. A borrower who can show the exact dates and amounts paid is in a much stronger evidentiary position than someone relying only on memory.

33. Why “delete the app” is not a complete privacy strategy

Removing an application from your phone is not necessarily the same thing as deleting personal data held by the company.

An app is an interface. The organisation may have information stored on servers, records associated with the loan, transaction information or data retained because of legal or operational requirements.

If you have a genuine data-protection question, identify the controller and use the applicable data-subject rights and complaint mechanisms rather than assuming that uninstalling software resolves the underlying processing issue.

The NDPC's published Data Subject Access Request process specifically explains that individuals may request information about personal data held about them and may seek certain rights under the NDP Act, subject to applicable conditions.

34. Why app permissions deserve attention

Permission screens are easy to accept without reading, especially when someone needs money urgently.

The better habit is to pause before granting access and understand what information the application is requesting.

This does not mean every permission request is unlawful. Some digital services require particular technical information to function. The relevant question is whether the processing is appropriate, transparent and lawful for the stated purpose.

The NDP Act's data-protection framework includes principles around lawful and transparent processing, specified purposes, data minimisation and security.

35. The difference between urgency and evidence

Debt disputes often happen when people are under financial pressure. That pressure can make it tempting to delete messages, change phones, block every number or respond angrily.

Evidence preservation should come first.

If communications become abusive, you do not have to turn every interaction into an argument. Preserve the record and use the appropriate formal channel.

The strongest complaint is usually not the loudest one. It is the one that allows an investigator to reconstruct what happened from documents.

36. What makes a digital lender different from a traditional bank?

The delivery channel is different, but the legal analysis cannot be reduced to technology.

A bank, microfinance bank, standalone digital money lender and another financial service provider can have different licensing and regulatory arrangements.

That is why the lender's corporate identity matters.

The FCCPC's own register illustrates this complexity by listing digital lenders while also identifying certain entities as licensed by the CBN and therefore covered by waivers on that register.

So the correct comparison is not simply:

Bank = safe; app = dangerous.

It is:

Identify the entity → identify the regulatory category → verify current status → read the contract → understand the data processing → evaluate the recovery process.

37. What should a borrower check on the day the loan is approved?

Approval day is the last point at which you can still walk away before the money changes your obligations.

1. Take a screenshot or save the final offer.
2. Confirm the exact amount to be disbursed.
3. Confirm the exact repayment amount.
4. Confirm the due date.
5. Read the late-payment provisions.
6. Read the privacy notice.
7. Confirm the legal creditor.
8. Verify regulatory status through the appropriate official source.
9. Check the complaint channel.
10. Only then decide whether the loan makes financial sense.

38. What should a borrower check on repayment day?

• Pay through the verified official channel.
• Confirm the account or payment destination before transferring money.
• Save the transaction receipt.
• Check whether the lender has credited the payment.
• Keep the repayment record with the original agreement.
• If the account should now be settled, request confirmation where appropriate.

Fraud can happen even after a legitimate loan has been obtained. A message saying “pay this new account immediately” should not automatically be trusted simply because it appears to come from a lender.

39. What should a borrower do if the lender's app disappears?

Do not assume that the debt disappears with the app.

Preserve whatever documentation you have. Identify the legal entity. Check the regulator's current information. If you are trying to make a repayment and the normal channel no longer works, request an official alternative through a verifiable contact route.

The disappearance of an application and the legal status of an underlying obligation are two different questions.

40. What if an app has been delisted?

The FCCPC register includes a separate delisted-app category.

Delisting is therefore something borrowers should take seriously, but it should not be interpreted without examining the specific entry and circumstances.

If you have an existing loan with a lender whose app is no longer available, preserve the agreement and repayment evidence and seek authoritative information about the creditor and its current status.

41. Why screenshots of regulator registers need dates

Regulatory registers are dynamic.

An operator that appeared on a list last year may have a different status later. A conditional approval can become full approval, an operator can be delisted, and legal developments can affect implementation of regulations.

That is why a useful evidence record should include:

• the date checked;
• the exact page or register;
• the company name;
• the app name;
• the status displayed.

This is much more reliable than saying “I saw it online.”

42. What the 2026 regulatory developments teach borrowers

The 2026 timeline demonstrates why static articles can become misleading.

In January 2026, the FCCPC announced enforcement following the January 5 compliance deadline. In April, a Federal High Court order temporarily restrained implementation, leading the FCCPC to announce a suspension in May. In July, the Commission announced that the order had been vacated and that implementation resumed.

The lesson is broader than digital lending: when the legal status of a regulation is important to your decision, check the current position of the regulator and, where necessary, the court record.

43. A borrower decision matrix

Situation	Immediate priority	What not to do
Considering a new loan	Verify lender, cost, terms and data practices.	Accept because the approval is fast.
Payment is late	Confirm balance and communicate through official channels.	Take another loan automatically.
Balance is disputed	Reconcile the account using documents.	Argue without checking the arithmetic.
Third-party contact is disputed	Preserve evidence and examine the data-processing issue.	Publish sensitive information publicly.
Threatening messages received	Preserve the communications and identify the appropriate complaint route.	Respond with threats.
Lender identity unclear	Establish the legal creditor before paying.	Transfer money to an unverified account.

44. The seven-document borrower file

For a significant loan, I recommend maintaining one digital folder containing seven core records:

1. Final loan offer.
2. Loan agreement.
3. Privacy notice.
4. Disbursement evidence.
5. Repayment evidence.
6. Statements and balance calculations.
7. Complaint and communication history.

This is not a government requirement. It is a Daily Reality NG record-keeping framework designed to make a future dispute easier to reconstruct.

45. The ten-question pre-borrowing checklist

1. Who legally owns the lending business?
2. Who will be my creditor?
3. What regulator applies?
4. Can I verify the lender's current status?
5. How much money will actually reach me?
6. How much must I repay in total?
7. Exactly when is it due?
8. What happens if I pay late?
9. What personal information will be processed?
10. How do I complain if something goes wrong?

If you cannot answer these ten questions, the loan has not been properly understood.

46. Fifteen common misconceptions about Nigerian loan apps

Misconception 1: “Every loan app is a loan shark.”

False as a generalisation. Digital lending is a broad category, and the relevant question is the identity, status and conduct of the particular lender.

Misconception 2: “Every loan app is legitimate.”

Also false. The FCCPC maintains approval, conditional, delisted and other categories on its register.

Misconception 3: “CAC registration proves a lender is licensed for every financial activity.”

Corporate registration and sector-specific regulatory authorisation are different questions.

Misconception 4: “A lender cannot ask for repayment after the due date.”

A creditor can have lawful recovery rights. The issue is whether the method used is lawful and fair.

Misconception 5: “A debt complaint automatically cancels the debt.”

A complaint and the underlying obligation are separate issues.

Misconception 6: “If my data was mishandled, I owe nothing.”

Data-protection and debt questions can coexist.

Misconception 7: “Deleting the app deletes my data.”

Not necessarily.

Misconception 8: “An app-store listing is regulatory approval.”

An app store is not the Nigerian financial regulator.

Misconception 9: “Every contact with a relative is automatically illegal.”

The legal analysis depends on the data, purpose, disclosure and circumstances.

Misconception 10: “Every aggressive reminder is automatically criminal.”

The facts and applicable law matter.

Misconception 11: “The cheapest-looking loan is necessarily the cheapest loan.”

Compare actual cash received, total repayment and timing.

Misconception 12: “A fast approval means a good loan.”

Speed is a service feature, not proof of affordability.

Misconception 13: “I should take another loan to keep my account current.”

That can create a loan-stacking problem and should not be treated as an automatic solution.

Misconception 14: “A screenshot is enough for every dispute.”

Preserve original transaction records and documents whenever possible.

Misconception 15: “The rules never change.”

The 2026 litigation and subsequent resumption of DEON implementation demonstrate why current official sources matter.

47. Fifteen questions to ask before accepting a loan

1. What is the lender's full legal name?
2. What is the app's legal relationship with the lender?
3. Which regulator covers the lender?
4. Where can I verify its current regulatory status?
5. What amount will enter my account?
6. What amount will I repay?
7. When is each payment due?
8. What happens after a missed payment?
9. Are there additional fees?
10. What data is collected?
11. Why is that data collected?
12. Who controls the data?
13. Who can I contact about a dispute?
14. What happens if I want to complain?
15. Can my current cash flow realistically support the repayment?

48. A 24-hour response plan after a serious lender dispute begins

First hour

Stop arguing. Preserve the messages, transaction records and agreement.

Hours 2–4

Identify the creditor and verify its regulatory category.

Hours 5–8

Reconcile the amount borrowed, amount repaid and amount demanded.

Hours 9–12

Write a factual timeline.

Hours 13–24

Use the appropriate complaint channel and attach organised evidence.

This framework is deliberately boring. Boring is useful when financial and legal records matter.

49. A 30-day borrower-protection system

The best protection is not only what you do after a dispute. It is what you build before one.

Week 1 — Document

Create one secure folder for financial agreements, receipts and important lender communications.

Week 2 — Verify

Review every active lending relationship and record the legal creditor and applicable regulatory category.

Week 3 — Reconcile

Compare outstanding balances against your own records.

Week 4 — Protect

Review privacy notices, complaint channels and your own device/account security.

50. Why legal rights work best when paired with financial records

A legal right is more useful when the facts can be demonstrated.

If a borrower claims an incorrect balance, the agreement and transaction history matter. If the borrower claims a privacy problem, the communications and data involved matter. If the borrower claims harassment, the messages and call records matter.

That is why the central practical lesson of this article is not “fight your lender.”

It is document your relationship with your lender.

51. What I would check before calling a lender a “loan shark”

I would use five evidence questions:

1. What is the legal identity of the creditor?
2. What regulatory status does it currently have?
3. What does the contract actually say?
4. What conduct is alleged?
5. What evidence supports the allegation?

This approach avoids a common reporting error: turning a consumer's allegation into an established legal fact.

For Daily Reality NG, that distinction matters because a serious financial article should tell the reader what has been verified, what is alleged and what remains uncertain.

52. What the official evidence establishes

The current official evidence establishes several important points.

• The FCCPC has a dedicated regulatory framework for digital, electronic, online and non-traditional consumer lending.
• The framework addresses transparency, responsible conduct, data privacy and recovery practices.
• The FCCPC required affected operators to regularise their status by January 5, 2026 and announced enforcement after that deadline.
• Implementation was temporarily restrained in April 2026, and the FCCPC announced a suspension in May while challenging the order.
• The FCCPC announced on July 20, 2026 that the restraining order had been vacated and that implementation resumed.
• The FCCPC's current public register displays 505 approved DML entries and separately displays conditional and delisted categories.
• The FCCPA provides consumer protections against coercion, harassment and unfair tactics in relevant transactions, including payment collection.
• The Nigeria Data Protection Act provides a complaint mechanism for aggrieved data subjects.
• The CBN has a separate complaint process for financial institutions within its regulatory purview.

53. What the evidence does not establish automatically

The same evidence does not justify several shortcuts.

• It does not mean every lender outside one particular list is automatically criminal.
• It does not mean every borrower complaint is proven merely because it was submitted.
• It does not mean every debt is invalid because a lender allegedly behaved improperly.
• It does not mean every contact with a third party violates data-protection law.
• It does not mean regulatory approval makes a particular loan financially suitable for every consumer.

These distinctions are not technicalities. They are what prevent financial reporting from turning allegations into conclusions.

Related articles

These related resources provide additional context on credit, digital banking, consumer protection, personal finance, business systems and other issues connected to borrowing and financial decisions in Nigeria.

1. Nigeria Credit Score Explained: What Your Credit History Means
2. AMCON and Nigeria's Bad Bank: How NPLs Move Through the Recovery System
3. Digital Banking in Nigeria: A Complete Guide
4. How Nigerian Freelancers Can Manage Remote-Work Income
5. How Nigerian Youths Are Driving the Technology Economy
6. High-Paying Skills Nigerians Can Learn for Free
7. Nigeria Business Resources: Tools, Guides and Practical References
8. Nigeria Business Templates and Checklists
9. Daily Reality NG Research and Data Resources

55. Frequently asked questions

1. What is a loan shark in Nigeria?

“Loan shark” is commonly used to describe predatory, abusive or unregulated lending, but it should not be treated as a single statutory Nigerian licence category. The legal analysis depends on the lender's identity, regulatory status, contract and conduct.

2. Is every digital lender illegal?

No. Nigeria has a regulatory framework for digital lending, and the FCCPC maintains a public register of approved digital money lenders. Its current page also distinguishes conditional approvals, delisted apps and certain CBN-licensed entities.

3. How do I check whether a digital lender is approved?

Start with the FCCPC's current digital-money-lender register and identify the legal company name as well as the app name. If the entity falls within another regulatory category, verify the appropriate regulator as well.

4. Can a lender contact me about an unpaid loan?

A lender may have lawful debt-recovery rights. The method of recovery is a separate question. Nigerian consumer law addresses coercion, harassment and unfair tactics in relevant transactions, including collection of payment.

5. Can a loan app contact my friends or family?

The answer depends on the circumstances and the personal-data processing involved. If you believe information was improperly collected, used or disclosed, preserve the evidence and consider the applicable data-protection complaint route.

6. Does harassment cancel my debt?

Not automatically. A debt dispute and a complaint about lender conduct are separate issues.

7. Can I complain to the NDPC about a loan app?

A data subject who is aggrieved by qualifying conduct involving a data controller or processor can lodge a complaint with the NDPC under the Nigeria Data Protection Act.

8. Can I complain to the FCCPC about a digital lender?

The FCCPC has digital-lending consumer-protection responsibilities and provides complaint channels. The Commission has specifically directed consumers to report unlawful or unregistered lenders and certain unfair or privacy-related practices.

9. When should I contact CBN?

If the complaint concerns a financial institution within CBN's regulatory purview, follow the CBN complaint process. CBN says customers should first complain to the institution and can escalate unresolved matters under its published timelines.

10. Does deleting a loan app delete my information?

Not necessarily. Removing the app from a device is different from deleting personal information held by the organisation.

11. Can a lender charge any amount it wants?

Do not assume that any amount demanded is automatically valid. Examine the contract, applicable regulatory requirements, disclosed charges and the lender's legal status.

12. What if the loan amount in the app does not match my records?

Reconcile the disbursement, repayments, fees and current demand. Request a written statement of account and preserve the transaction evidence.

13. What if the loan app disappears?

Preserve your agreement and payment records. The disappearance of an app does not by itself determine the legal status of the underlying debt.

14. Is FCCPC's digital-lending regulation currently in force?

The FCCPC announced in July 2026 that a Federal High Court restraining order had been vacated and that it had resumed implementation of the DEON Regulations 2025.

15. What is the most important thing to do before taking a digital loan?

Identify the actual creditor, verify its current regulatory status, calculate the total repayment and understand the data and recovery terms before accepting the money.

56. The borrower protection framework I would use

After reviewing the regulatory framework, the most useful way I can reduce the issue to one working model is this:

Layer	Question	Evidence
Identity	Who is the creditor?	Legal name, agreement, regulator records
Status	Is the relevant activity properly authorised/registered?	Current official register
Economics	What will this loan actually cost?	Offer, agreement, statement
Data	What personal information is being processed?	Privacy notice, communications
Recovery	How is repayment being pursued?	Messages, calls, notices
Redress	Where can I complain?	Regulator and lender complaint channels

This six-layer model is the original Daily Reality NG analytical framework in this article. It is designed to stop borrowers from treating “loan app” as the entire legal analysis.

57. What I would do if I were investigating a disputed loan record

I would begin with the evidence rather than the accusation.

1. Download the original agreement.
2. Record the legal creditor.
3. Check the current regulator register.
4. Record the exact amount disbursed.
5. List every repayment.
6. Calculate the claimed outstanding balance.
7. Save all recovery communications.
8. Separate debt calculations from privacy allegations.
9. Identify the regulator with jurisdiction over each issue.
10. Submit a factual complaint with supporting documents.

I would not start by posting the lender's name on social media and asking strangers to decide whether it is illegal. The evidence should come first.

58. What this investigation changed in my understanding of the issue

The most important finding is that “loan shark versus digital lender” is too simple a framework for understanding Nigeria's current credit market.

The real dividing lines are more useful:

identified creditor versus unidentified creditor;
verifiable regulatory status versus unverifiable status;
transparent terms versus unclear terms;
lawful data processing versus questionable processing;
fair recovery versus coercive or abusive recovery.

That framework is more durable because it remains useful even when particular app names, companies or regulatory lists change.

59. What borrowers should remember when the pressure starts

Financial pressure can make a person feel that the only choices are to pay immediately or fight immediately.

There is a third option: document, verify and respond precisely.

If the debt is legitimate, understand it and deal with it. If the balance is wrong, document the calculation. If the lender's conduct appears improper, preserve the evidence. If personal data is involved, identify the data issue. If the lender's regulatory status is unclear, verify it. If the matter belongs with a regulator, use the appropriate complaint channel.

You do not need to choose between consumer rights and financial responsibility. Both can matter at the same time.

60. The bottom line

Nigeria's digital-lending market is no longer operating in the same regulatory environment that existed when many older loan-app stories were written.

The FCCPC's DEON Regulations 2025 establish a framework for digital and non-traditional consumer lending, including requirements around transparency, data protection, responsible conduct and recovery practices. The FCCPC began enforcement after the January 2026 compliance deadline; implementation was temporarily restrained during litigation and, according to the Commission's July 2026 announcement, resumed after the restraining order was vacated.

The Commission's current digital-money-lender register shows 505 approved entries, alongside separate categories for conditional approvals, delisted apps and certain CBN-licensed entities.

For consumers, the practical lesson is straightforward:

• Verify the creditor.
• Verify the applicable regulatory status.
• Calculate the real repayment obligation.
• Understand the data being collected.
• Keep every important record.
• Separate a debt dispute from a conduct complaint.
• Use the regulator that actually has jurisdiction.
• Do not assume a complaint automatically cancels a legitimate debt.
• Do not assume a legitimate debt gives a lender unlimited power to harass or misuse personal information.

The strongest protection for a Nigerian borrower is therefore not simply knowing the word “loan shark.” It is knowing how to identify the lender, understand the agreement, verify the regulatory position, protect personal information, preserve evidence and use the correct redress mechanism when something goes wrong.

That is the difference between reacting to a lending problem and actually understanding the system around it.

About the author

Samson Ese | Founder, Publisher & Editor-in-Chief, Daily Reality NG

I founded Daily Reality NG as an independent Nigerian digital publication focused on explaining the financial, business, technology, legal and everyday systems that affect Nigerians. My approach is to research primary and authoritative sources, put them into Nigerian context and clearly separate verified facts from Daily Reality NG analysis.

Continue your Nigerian finance research

For related banking, fintech and financial-system explainers, explore the Daily Reality NG Digital Banking Hub and the Research & Data page.

If you are dealing with an active legal dispute, use this article as general educational information and consider obtaining advice from a qualified Nigerian legal professional for advice specific to your circumstances.

Research and source note

This article was rebuilt from the ground up as an original Daily Reality NG analysis. The regulatory and legal portions were checked against primary or official Nigerian sources, including the FCCPC, CBN and NDPC. The article does not treat unverified social-media claims, anonymous accounts or secondary summaries as proof of a lender's legal status.

Key primary-source references include the FCCPC's DEON Regulations and digital-money-lender register; the Federal Competition and Consumer Protection Act 2018; the Nigeria Data Protection Act 2023; the NDPC's published data-subject information; and the CBN's official consumer-complaint guidance.

Important: Regulatory registers, court proceedings and administrative guidance can change. Readers making a current legal or financial decision should verify the latest official position rather than relying on an old screenshot or copied list.