Flexiloans: The Approval That Was Never an Approval

The message does not sound like marketing. It sounds like a bank telling you the money is already yours.

A man receives an SMS and a WhatsApp note. The language is not “you may be eligible.” It is that his loan has been approved — in one documented account, for about ₹27 lakh. He has not filed a live application. An older attempt, years earlier, had already been rejected. Confused, he does what any anxious Indian does when a lender waves a seven-figure sanction in his face: he clicks the link.

The next screen is not a disbursal. It is a document counter. Aadhaar. PAN. Identity first; cash later. He uploads what the State issued him as proof that he exists. Moments later the theatre collapses. On-screen rejection. Internal “threat-detection” check failed. Score not strong enough. The “approved” loan was never a loan. It was a door.

Two questions follow. They are not rhetorical. They are the entire case.

If the loan was approved, why were the documents demanded after the approval?
An approval, in ordinary English and in ordinary banking, is the end of underwriting, not the beginning. You do not sanction ₹27 lakh and then ask the man who he is.

If the documents still had to be submitted, how did the message say the loan was approved?
That sentence is not a courtesy. It is a claim of fact. Either the claim was true, in which case the rejection is an outrage, or the claim was false, in which case the SMS was a lure.

There is no third explanation that smells clean.

What the click actually costs

A genuine pre-approved offer can be built on a soft look at a credit file. A soft look does not bruise the score. The bruise begins when the person is pulled into a formal application and the lender runs a hard enquiry.

Industry and bureau guidance is consistent: one hard enquiry typically knocks about 5 to 10 points off a CIBIL score. The enquiry stays visible for up to two years. Several hard pulls in a short window do worse than addition. They advertise desperation. Lenders read a cluster of enquiries as a man hunting credit from every window on the street. Three or four applications in weeks can mean a 20–40 point slide — the difference between a working-capital line and a closed door. Credit-enquiry behaviour is commonly treated as roughly 10% of the CIBIL model. That is not a rounding error. That is a weapon if you point it at people who never meant to apply.

RBI-era practice is also clear on the principle: marketing and pre-screening are supposed to stay on the soft side. A hard pull is for a loan the customer actually asked for, with consent. If a citizen is told a facility is already sanctioned, then is walked through KYC, then is rejected, and then finds a new enquiry on the report, the citizen is entitled to ask whether consent was obtained for a real application — or manufactured by a sentence that should never have been sent.

Two days later, in the documented sequence, the phone rings again. Not with an apology. With a different shelf: a loan at a higher rate, or a secured product. Gold, collateral, the expensive aisle. The unsecured “approval” is dead. The cheaper story is dead. What remains is the damaged file and a salesperson who suddenly has a reason to sell the heavier product.

Call that a coincidence if you work in the building. From the street it looks like a funnel: inflate certainty, extract identity, run the bureau, reject, remonetise the weaker score.

That is the allegation. It is not a court verdict. It is a pattern that has now been written down in public reporting and in the company’s own Google review pile. Regulators exist to decide whether the pattern is sloppy marketing or a machine.

Meet the machine, not the slogan

FlexiLoans is not a fly-by-night APK on a shady store. It is the consumer brand of Epimoney Private Limited (CIN U71309TN1995PTC030536), an RBI-registered, non-deposit-taking NBFC, classified in the Scale-Based framework as Middle Layer. Registered office: Harita Towers, Abhiramapuram, Chennai. Corporate address: One World Centre, Lower Parel, Mumbai. Founders named in company material: Deepak Jain, Manish Lunia, Ritesh Jain. The digital platform sits with subsidiary Flexiloans Technologies Private Limited.

The numbers they like to print are not small. Company and rating material put AUM in the ₹2,200–₹2,900 crore band across 2025–26 disclosures (CRISIL: about ₹2,467 crore as of 31 December 2025; Acuité: AUM rising from ₹1,064.47 crore in FY23 toward ₹2,920.93 crore). They claim ₹13,000+ crore of cumulative disbursals, loans from ₹50,000 to ₹50 lakh, “trusted by over 1 lakh MSMEs,” and — in a 2023 first-person account by a co-founder — over 3.5 lakh monthly applications and over 10 lakh monthly visits. In June 2025 they raised another ₹375 crore. CRISIL has the bank lines at BBB/Stable; Acuité has assigned A-/Stable on a slice of facilities. This is a funded, rated, regulated shop — which is precisely why the “approved” SMS is not a street-corner prank. An RBI licence is not a costume. It is a duty.

Their own site still advertises interest “starting from 1% per month,” depending on profile. Google reviewers have said the brochure and the bill do not live in the same house: one long-form complaint put processing and insurance near 12% off the top and an effective cost nearer 28%. That is a customer allegation, not a regulator’s finding. It is also the oldest trick in retail credit — print the teaser, collect the load.

The rest of the charge-sheet is already on Google

If the ₹27-lakh text were a one-off, the company could bury it under “an agent misspoke.” It is not the only smell in the file.

Recovery that looks like a raid, not a reminder

Aadesh Bhise: agents at the house, shouting in the lane, personal threats. He called it illegal under RBI recovery rules and said he would go to the Reserve Bank and the police.

CK 1213: harassment inside three days of an EMI bounce, even after a part-payment; known contacts called; abuse; violent threats.

Ketan Gupta: abuse at the doorstep, a threat to beat the borrower in front of the house, neighbours’ numbers harvested, those neighbours then harassed.

A printing-works owner: ₹130 stuck on a receiving-bank glitch; more than 100 calls a day for a three-digit balance.

RBI’s own recovery grammar is not poetry. Contact generally 8 AM to 7 PM. No threats. No public shaming. No using family, neighbours, referees or employers as a pressure tool. The lender owns the agent. “Outsourced goon” is not a defence. The company’s public reply to these reviews is always the same velvet paragraph: we are shocked, this is not our policy, please mail [email protected]. Shock, on a loop, is not a control system. It is a script.

The loan that will not die

Juned Khan: dues paid, account still live a year on, mail ignored.

Pavan Pandey: EMI pulled twice in one month, silence on mail and phone, RBI complaint planned.

An older ConsumerComplaints.in case: twelve EMIs paid, then a demand for ₹2,000 on a bounce the customer said never happened because the EMI had already gone through.

Documents in. Human beings out.

Hirdesh Lohumi: papers taken, mail and WhatsApp dead, call centre “good for nothing.”

M J Enterprises: a week of trying to change a bank account, 50-plus emails, no adult on the other end.

Leito Pndy, years earlier: site dies mid-form, rejection mid-process, nobody picks, nobody writes back.

MouthShut’s thin sample still managed a 2.4 / 40% score, with reviews titled “Never give any loans just collect your data” and “Fraudulent and suspicious behaviour” — Sunday calls, Aadhaar verification allegedly without consent.

Wrong person, same phone

Dewang Shah never took the loan. Someone else did. His name and number were yoked to that file. The collectors still called.

Nitin Prasana and others describe a different harassment: the loan they refused, pitched again, and again, after they had already said no.

Women told to be “more careful”

Bhavana Singh’s review is short and ugly: bad staff; women, especially, should stay away. That is not a product review. That is a safety warning left on a public wall.

None of this is a statistically audited census of every FlexiLoans account. It is the public residue of a lender that answers almost every one-star with a mail-merge apology. A company that needs a unique investigation for every unique atrocity is a company that has industrialised the atrocity.

The law they wrap themselves in

Epimoney is not unregulated. That is the point.

RBI’s Fair Practices Code and digital-lending directions demand honest communication, a Key Fact Statement, consent before a hard bureau pull, and dignity in recovery. TRAI’s commercial-communication rules exist so that a DND number is not a free hunting ground for “your loan is approved” bait. The CIC framework exists so that a credit file is not a punching bag for lead-gen. Inventiva’s August 2026 series put the same SMS pattern against those rules and called the “approved” wording inherently misleading when no live application exists. That is journalism’s charge. The regulator’s charge is still unwritten.

The company will say: we are an MSME lender, we have a grievance officer (named in filings as Ms. Pranaali Sawant), a phone line (022-68219595), a nodal mail ([email protected]), a 7/14/30-day ladder, and after that the RBI Ombudsman at cms.rbi.org.in and 14448. On paper, that is a cathedral. In the reviews, it is a locked side door. “Mail us your name and number so we can look into it” is what you write when you want the complaint off Google and into a private inbox you control.

Why the bait works

India’s credit culture is built on one superstition: the CIBIL number is destiny. A shopkeeper who needs stock before Diwali, a trader who needs a GST-season float, a woman who was told her file is “just a little short” — they will click a link that says approved. The word is doing the violence. “Pre-qualified,” “indicative,” “subject to KYC” are ugly phrases. They are also honest. “Approved” is a stolen verdict.

Once Aadhaar and PAN are inside the pipe, the company has what every digital lender wants: a clean identity spine, a bureau hook, and a phone that will pick up when the next product is pushed. If the unsecured book is too risky, the secured book is waiting. If the score just took a hit, the “we can still help you” call writes itself. The citizen paid for that call with points he did not agree to spend.

Is every rejected click a hard enquiry? Not proven in a courtroom for every name on the list. Is that the question Epimoney should be forced to answer, file by file, with bureau logs? Yes. Soft versus hard is not a branding choice. It is the difference between advertising and an injury.

What “millions” actually means here

The company itself talks about serving “millions of deserving small businesses.” It boasts six-figure monthly applications and seven-figure monthly visits. That is the scale of the hose. It does not, on present public evidence, prove that millions of CIBIL files have already been wrecked by this exact SMS trick. Anyone who prints that as a convicted fact is doing the company’s work in reverse — replacing investigation with a slogan.

What the record does support is narrower and still damning: a documented ₹27-lakh “approval” that was not an approval; a KYC grab; a rejection; a follow-up sale; a stack of Google reviews about recovery thuggery, zombie accounts, double debits, and silence; and a regulated NBFC whose public answer is a template. That is enough to put the brand in the dock of public opinion. It is enough for RBI, TRAI and the credit bureaus to pull the message logs, the consent trails and the enquiry tapes. It is not enough to skip the hearing and print a hanging.

The sentence that should be banned

Until a supervisor says otherwise, one line ought to be treated as radioactive on any NBFC’s SMS desk:

Your loan of ₹X has been approved. Click here.

If the underwriting is unfinished, the sentence is a lie. If the underwriting is finished, the documents-after-approval ritual is a farce. Either way, the citizen who trusted the word “approved” is the one who walks away with a thinner score and a thicker sales call.

FlexiLoans can keep mailing [email protected] into every one-star review. The country can keep a simpler address: cms.rbi.org.in. Screenshots of the SMS. The rejection screen. The CIBIL enquiry line. The call two days later. That file, not the apology, is the story.

Epimoney asked to be trusted with the plumbing of Indian small-business credit. The reviews, and the ₹27-lakh text, ask a ruder question: when they say the loan is approved, is anything approved except the harvest of your papers?