
RBI's recovery framework caps lender calls to 8 AM-7 PM, bans coercive tactics, and sets a 30-day minimum before financed devices can be remotely locked.
The Reserve Bank of India has replaced its loan recovery framework with rules that restrict when lenders can contact borrowers, ban coercive tactics, and formally regulate the remote locking of financed smartphones and laptops.
The new guidelines, effective Jan. 1, 2027, apply to banks and regulated lenders. Recovery calls and field visits are generally permitted only between 8 AM and 7 PM. Communication outside those hours requires the borrower's prior request or explicit consent.
Recovery agents are prohibited from using abusive, threatening or intimidating language. Anonymous calls, repeated harassment, public humiliation and threats involving a borrower's family, assets or reputation are strictly forbidden. Agents also cannot publish or circulate a borrower's personal information, photographs, videos or audio recordings on social media to pressure repayment.
Borrowers must receive at least one day's notice before a recovery agency's first physical visit. Banks are required to disclose the identity of the recovery agency handling the case. During visits, agents must carry a valid identity card, an authorisation letter and the relevant recovery notice. The authorisation letter must include contact details for both the recovery agency and the bank's grievance redressal officer.
Lenders remain accountable even when they outsource recovery operations. Banks must record recovery-related conversations and maintain details such as call timings and phone numbers, with records preserved for at least six months. The RBI made clear that lenders cannot escape responsibility by blaming third-party agencies. Banks must also ensure recovery agents receive proper training and review incentive structures so they do not encourage aggressive or unethical practices.
The RBI has set a specific timeline for the remote locking of financed devices. Lenders can restrict a financed smartphone, tablet or laptop only after the loan remains overdue for at least 30 days, and only if the loan was taken specifically to purchase that device. Devices financed through unrelated personal loans cannot be disabled.
A complete restriction can be imposed only if the account remains overdue for 60 days. Even then, borrowers must retain access to incoming calls, SMS services, emergency communications and features necessary for work or employment. The RBI has also prohibited lenders from using remote access technology to view or collect unrelated personal information, including contacts, photographs, videos, call logs, text messages or location history.
Once the borrower clears outstanding dues or regularises the loan, lenders must restore full device functionality, ordinarily within one hour of payment or settlement. If the lender fails to reactivate the device within the prescribed time, the borrower may be entitled to compensation of ₹250 for every hour of delay, subject to a maximum limit linked to the outstanding loan amount.
The RBI also requires that borrowers be informed upfront if a financed device may be remotely restricted in case of default. Such conditions must be clearly disclosed and cannot be hidden within lengthy loan agreements or fine print.
Recovery agents are directed to exercise sensitivity in exceptional circumstances. Borrowers should not be approached during situations such as bereavement, medical emergencies or family celebrations like weddings.
Privacy protections extend to data access. Recovery agents should have access only to information necessary for recovering dues, and banks must implement safeguards to prevent misuse or unauthorised disclosure of borrowers' personal data.
The framework addresses a pattern of complaints about recovery agents harassing borrowers, including cases where phones were locked within days of a missed EMI. The new rules make the lender responsible for any breach by a third-party agency, closing a loophole that let banks shift blame. The six-month record retention requirement gives borrowers a paper trail to dispute misconduct. The compensation clause for delayed device restoration provides a direct remedy for borrowers. The framework takes effect in 2027, leaving lenders roughly a year to adjust their recovery operations.
Prepared with AlphaScala editorial tooling from the source reporting linked above. Indexable analysis may include a cited Alpha Score value. Publishing checks screen each story before release. Educational coverage, not personalized advice.