Fraudulent Loan Showing on Your CIBIL Report? The Exact Steps to Get It Removed (India 2026)

By Nitish Bharadwaj · Published Sep 19, 2026 · 6 min

A loan or credit account on your CIBIL report you never applied for is identity theft, not a bureau mistake, and needs a faster response than a routine dispute. The sequence that works: notify the lender in writing immediately, file a complaint on the National Cyber Crime Reporting Portal or its 1930 helpline, raise a formal bureau dispute under RBI's 30-day resolution window (₹100/day compensation if breached), and freeze your report at all four bureaus so no new accounts can open in your name. If the lender doesn't act, RBI's Ombudsman is next.

You check your CIBIL score out of routine, and there's an account you never opened — a personal loan, a credit card, sometimes both. That's not a bureau typo or a data-entry mismatch; it's identity theft, and it needs a faster, more layered response than a normal dispute. Every day it sits unresolved, it drags your score down, shows up to any lender who pulls your report, and — if it's an active credit line rather than a closed one — can still be drawn against without your knowledge. Here is the exact order of steps that actually gets a fraudulent entry investigated and removed.

Step 1: Confirm It's Fraud, Not a Genuine Bureau Error

Before escalating this as identity theft, rule out the more mundane explanation: a bureau or lender data mismatch, most often caused by a PAN typo, a similar name matched to the wrong individual, or a loan you genuinely co-signed and forgot. Pull your full report from CIBIL directly and check the account's sanction date, the lender named, and the branch or city it was opened in — a completely unfamiliar lender, city, or loan amount is a strong signal of genuine fraud rather than a clerical mix-up. If it turns out to be a PAN or personal-detail mismatch instead, our guide to fixing PAN, Aadhaar, and mobile number mismatches on your CIBIL report covers that narrower, faster fix.

Step 2: Notify the Lender in Writing, Immediately

Contact the bank or NBFC named against the fraudulent account through its official grievance or fraud-reporting channel — not just a phone call, which leaves no paper trail. State clearly that you never applied for or authorised this account, request an immediate freeze on any further transactions on it, and ask for a written acknowledgment with a complaint reference number. This written record becomes essential evidence at every later stage, including a bureau dispute and, if needed, an RBI Ombudsman complaint.

Step 3: File a Cybercrime Complaint

Report the fraud on the National Cyber Crime Reporting Portal at cybercrime.gov.in, or call the 1930 helpline, as soon as you notify the lender. Keep the complaint acknowledgment and reference number — it's frequently asked for as supporting evidence by both the lender's fraud team and the credit bureau when you raise your dispute. If the lender or cyber cell doesn't act within a reasonable time, or the fraud involves a larger sum, escalate to a formal FIR at your local police station under the relevant provisions of the Bharatiya Nyaya Sanhita and the IT Act.

Step 4: Raise a Formal Dispute With the Credit Bureau

File a dispute directly with CIBIL (and separately with Experian, CRIF High Mark, and Equifax if the fraudulent account shows on those reports too, since bureaus don't automatically share dispute outcomes with each other) marking the account as fraudulent rather than a routine factual error. Under RBI's rules for credit information companies, the lender gets 21 calendar days and the bureau gets a further 9 to resolve a dispute — 30 days in total from the date you raise it.

For the mechanics of raising a bureau dispute step by step — the online form, documents to attach, and how to track status — our full guide to disputing and fixing errors in your CIBIL report covers the process in detail; the fraud-specific difference is simply marking the account as unauthorised rather than incorrect, and attaching your cybercrime complaint number as supporting evidence.

Step 5: Freeze Your Report at All Four Bureaus

Once you've reported the existing fraud, freeze your credit report at CIBIL, Experian, CRIF High Mark, and Equifax to stop a second fraudulent account from opening while the first is still being investigated. A freeze blocks bureaus from sharing your report with new lenders until you lift it, and doesn't affect your score. Our complete guide to credit report freeze and lock covers how to activate this at each of the four bureaus, since freezing only one still leaves three doors open.

If the Lender Doesn't Act: RBI Ombudsman

If the lender's grievance cell doesn't resolve your complaint within 30 days, or rejects it without adequately investigating the fraud claim, you can escalate to the RBI Banking Ombudsman through the Complaint Management System at cms.rbi.org.in. This route is specifically meant for exactly this situation — an unresponsive or unsatisfactory response from a regulated lender — and doesn't require you to have exhausted every other channel first, only that you gave the lender a genuine first opportunity to fix it.

Once the fraudulent entry is removed and the account shows as closed or deleted on your report, check back after 30-45 days to confirm the correction actually stuck — a dispute marked "resolved" internally doesn't always reflect immediately on every bureau's live report. Our guide to why an account sometimes still shows active after it should have updated covers the normal update lag versus a genuine unresolved error, which is useful context here too.