Are Loan Apps Safe in Uganda? How to Spot an Illegal One (2026)

☆ Save
Are Loan Apps Safe in Uganda? How to Spot an Illegal One (2026) — Rateweb

Loan apps promise cash in minutes — and for a licensed one, that's a genuinely useful service. But Uganda also has a serious problem with illegal lending apps: UMRA has publicly named 59 apps operating without a licence, and the Bank of Uganda has warned that unlicensed digital lenders use predatory rates, intimidation and "data shaming" against borrowers. This is the two-minute check that tells a safe app from a trap.

Why it matters: what the illegal apps actually do

Borrowers who fall into unlicensed apps report a grim, consistent pattern:

  • Lawless interest — rates far above the legal ceiling for licensed moneylenders (2.8% per month / 33.6% a year), sometimes disguised as weekly "fees".
  • A demand for your contacts — the app requires access to your phone's contact list at install.
  • Harassment on late payment — threatening calls, then defamatory messages sent to everyone in your contacts, sometimes with your photo, to shame you into paying.
  • No physical address — nobody to hold accountable, no office, no regulator on record.

This isn't a fringe risk; it's the defining hazard of Uganda's app-lending boom. The protection is regulatory, and it's public.

The two-minute safety check

Before you install or borrow from any loan app:

  1. Find the operator's legal name — in the app store listing, the terms, or the loan agreement (the brand name and the registered company often differ).
  2. Check UMRA's licensed digital-credit-providers list — licensed digital lenders are published by UMRA under its March 2024 Digital Lending Guidelines. On the list = regulated.
  3. Cross-check the illegal-apps list — UMRA/government has named illegal apps publicly. If your app is on it, uninstall it.
  4. Read the permissions before you tap "install". An app that demands your contact list to lend you money is telling you how it plans to collect. Refuse it.
  5. Confirm a physical address and a written total cost. No address and no stated total repayable = walk away.

Green flags of a legitimate app

  • Appears on UMRA's licensed list (or is a bank/MDI product under Bank of Uganda supervision).
  • States the total repayable and every fee before you accept.
  • Charges within the legal cap for moneylenders.
  • Doesn't need your contacts — it assesses you on your record, not your social graph.
  • Has a real office, phone line and complaint process.

Your rights under the guidelines

The March 2024 Digital Lending Guidelines gave UMRA real teeth. If a lender breaks the rules, UMRA can negotiate revised repayment terms, order the lender to stop harassment (threatening calls, public shaming), and blacklist unlicensed lenders and recommend legal action. Harassment and data-shaming are not lawful debt collection — they're abuse, whoever the lender is.

If an app is already harassing you

  1. Stop granting anything more — revoke the app's contact and storage permissions in your phone settings immediately.
  2. Keep evidence — screenshots of the messages, the agreement, the amounts, the app name.
  3. Report to UMRA — unlicensed lending and harassment are exactly what the regime exists to stop.
  4. Don't be threatened into paying more than you owe. You may still owe the principal, but abuse doesn't make an unlawful charge lawful. Get advice before paying anyone who threatens you.
  5. Warn your contacts if the app has messaged them — a quick heads-up defuses the shaming tactic.

The permissions to refuse

What a loan app asks for at install tells you what it intends to do. A lender assessing whether you can repay needs your identity and your financial position — not your social graph.

Refuse, and treat as a reason not to borrow:

  • Contacts. There is no lending purpose for your address book. It is collected to pressure you through the people in it.
  • Photos / media / storage. Used to harvest images that can be attached to shaming messages.
  • Call logs and SMS. Some apps justify this as "assessment"; it also builds a map of who to contact about you.

Reasonable, in context: camera (for a selfie or ID capture during KYC) and basic device information.

On Android you can review and revoke these under Settings → Apps → → Permissions, and you should revoke them for any lending app you've already installed — including ones you no longer use. Uninstalling alone doesn't undo data already collected, but it stops further access, and revoking permissions first is worth doing before you uninstall.

If you already borrowed from an illegal app

Practical sequence, in order:

  1. Revoke permissions (above), then uninstall.
  2. Don't take a new loan to clear it. That's the spiral, and it's how a small debt becomes an unpayable one.
  3. Keep evidence — the app name, the agreement, amounts, dates, and screenshots of any threatening messages.
  4. Report to UMRA, which can order harassment to stop and blacklist unlicensed lenders.
  5. Warn your contacts if they've been messaged. A one-line heads-up removes almost all of the tactic's power.
  6. Rebuild through licensed credit — only licensed lenders report to the credit bureaus, so only they help you (how to check your credit report).

Frequently asked questions

How do I know if a loan app is legal in Uganda? Check whether its operator is on UMRA's licensed digital-credit-providers list (or is a Bank of Uganda-supervised bank/MDI product). If it's not on any register — or it's on the named illegal-apps list — don't use it.

Is it illegal for a loan app to message my contacts? Sending defamatory messages to your contacts to shame you is abusive collection and is precisely what the Digital Lending Guidelines target. Don't grant contact-list access in the first place, and report any app that does this.

They have my ID and contacts already — what do I do? Revoke the app's permissions now, keep evidence, report to UMRA, and warn your contacts. Handing over your NIN or card as "security" is a hallmark of an unlicensed lender — see is that moneylender licensed?.

Are any loan apps safe? Yes — UMRA-licensed digital lenders and bank/MDI app products are regulated, capped and accountable. The safety is entirely about licensing, so always check first.


Related: the best and safest loan options in Uganda · is that moneylender licensed? · how to check your credit report

General information, not financial advice. Confirm any lender's licence with UMRA or the Bank of Uganda before you borrow.

Tools to act on this today

RE
Rateweb Editorial Team · Editorial Team
The Rateweb editorial team researches and fact-checks every guide before publication. This article is general information, not personalised financial advice.
More from Rateweb Editorial Team →

Related on Rateweb