The Reserve Bank of India (RBI) has tightened rules governing how banks and other regulated lenders can use technology to recover unpaid loans, restricting the remote locking or disabling of mobile phones, tablets and laptops in most cases. The new framework is aimed at curbing coercive recovery practices while protecting borrowers from losing access to essential digital devices because of loan defaults.
Under the new rules, which take effect from January 1, 2027, lenders will generally not be allowed to use technology to disable or restrict a borrower’s device as a recovery tool. An important exception applies when the loan was specifically taken to finance the device being restricted. Even in such cases, lenders must follow safeguards, including disclosure, notice requirements and restrictions on which device functions can be disabled.
RBI Restricts Remote Device Locking
The new framework draws a clear distinction between a device that was purchased using a loan and a device that is unrelated to the loan.
A lender will not be permitted to remotely lock a borrower’s personal smartphone simply because the borrower has defaulted on a personal loan, vehicle loan, home loan or another type of credit.
The exception applies to loans specifically used to finance the device itself.
| Key Detail | New RBI Framework |
|---|---|
| Regulator | Reserve Bank of India |
| Effective date | January 1, 2027 |
| Devices covered | Smartphones, tablets, laptops and similar devices |
| General rule | Remote disabling prohibited as a recovery tool |
| Exception | Loan specifically finances the device |
| Main objective | Prevent coercive recovery practices |
| Essential functions | Cannot be disabled |
| Data access | Lenders cannot use device data for recovery |
| Restoration after repayment | Full functionality must be restored promptly |
The rules apply across regulated lenders, including banks and non-bank financial companies.
Device-Financing Loans Are the Main Exception
The RBI has not completely banned remote restrictions in every situation.
If a customer takes a loan specifically to purchase a smartphone, tablet or laptop, the lender may use a device-restriction mechanism if it is explicitly permitted under the loan agreement and the RBI’s conditions are satisfied.
This creates a distinction between device financing and other types of borrowing.
Two Different Situations
Personal loan
↓
Borrower defaults
↓
Lender cannot remotely lock unrelated phone
VS
Device-financing loan
↓
Borrower defaults
↓
Device restriction may be permitted
↓
Only under RBI safeguards
The exception is designed to recognize the lender’s interest in recovering the financed asset while preventing the technology from being used broadly as a debt-collection tool.
Why the RBI Has Tightened the Rules
Remote device-locking technology has increasingly been used in small-ticket consumer financing.
Under such arrangements, software installed on a financed smartphone can potentially allow a lender or financing company to restrict access when EMIs are not paid.
The RBI’s new framework seeks to prevent such technology from becoming a coercive mechanism.
The broader rules also address harassment, privacy and the conduct of recovery agents.
Borrowers Cannot Be Forced Into Payment Through Device Disabling
A phone has become an essential tool for banking, work, education, communication and access to government services.
Locking a device can therefore have consequences beyond preventing the borrower from using the phone for entertainment.
A disabled smartphone can prevent a person from accessing banking applications, authentication services, emergency contacts and other essential functions.
The RBI’s framework recognizes this concern by restricting the use of device disabling as a general recovery tactic.
Essential Device Functions Must Remain Available
Even where remote restrictions are permitted for a device-financing loan, lenders cannot simply render the device completely unusable.
Essential functionalities such as internet access, incoming calls, emergency SOS functions and public-safety or government alerts must remain available.
Protected Functions
Internet access
+
Incoming calls
+
Emergency SOS
+
Government alerts
+
Public-safety alerts
↓
Cannot be disabled
This prevents a lender from turning a financed smartphone into a completely unusable device.
Lenders Must Follow a Notice Process
The rules also require lenders to give borrowers an opportunity to regularize the loan before device restrictions are activated.
Under the framework, the process involves advance notices rather than immediate locking following a missed EMI.
A borrower therefore gets time to address the overdue payment before a permitted device restriction can begin.
Recovery Process
Loan becomes overdue
↓
Notice to borrower
↓
Opportunity to clear dues
↓
Further notice
↓
Only then can permitted device restrictions begin
This is intended to make the process more transparent and reduce sudden loss of device access.
90-Day Default Threshold Applies
For device-financing loans, restrictions can be imposed only after the loan account becomes 90 days past due and the required notice process has been completed.
This means a single missed EMI does not automatically give the lender the right to lock the financed device.
Protection Timeline
Loan overdue
↓
60 days overdue
↓
First notice
↓
At least 21 days to cure default
↓
Second notice
↓
Additional seven-day period
↓
90+ days past due
↓
Permitted restriction may begin
The structured process gives borrowers multiple opportunities to clear the outstanding amount.
Borrowers Get Time to Cure Defaults
The notice requirements are particularly important for consumers who experience a temporary cash-flow problem.
A missed EMI may not necessarily mean that a borrower intends to stop paying the loan.
The notice period provides an opportunity to make the overdue payment before restrictions are activated.
Lenders Cannot Access Device Data
The RBI has also imposed restrictions on lenders’ access to information stored on a borrower’s device.
A lender cannot access, use, obtain or retain data stored on the mobile phone or other device for loan recovery or other purposes.
Device Privacy
Borrower’s device
↓
Personal data
+
Photos
+
Contacts
+
Messages
+
Other stored information
↓
Lender cannot access for recovery
This is an important privacy safeguard as device-locking technology can otherwise create opportunities for excessive data collection.
Loan Recovery Cannot Become a Data-Collection Exercise
The new framework separates the right to recover a debt from the right to access a borrower’s personal information.
A borrower who has missed an EMI does not automatically give a lender permission to inspect information stored on their phone.
This principle is particularly important as more consumer lending is conducted through digital platforms.
Full Device Functionality Must Be Restored
If a borrower clears the outstanding dues or regularizes the loan, the lender must restore the device’s functionality.
Under the framework, restoration is expected to happen within one hour after the borrower cures the default.
This requirement is intended to prevent borrowers from remaining locked out even after resolving their payment issue.
Compensation Can Apply for Wrongful Delays
The RBI has also introduced a compensation mechanism for wrongful restriction or delayed restoration.
Where applicable, lenders can be required to compensate borrowers at ₹250 per hour for delays in restoring device functionality.
After Dues Are Cleared
Borrower pays outstanding amount
↓
Loan regularized
↓
Lender must restore device
↓
Target: within one hour
↓
Delay or wrongful restriction
↓
₹250 per hour compensation may apply
This creates a financial incentive for lenders to restore access quickly.
Device Restrictions Must Be Removed After Full Repayment
Once the loan has been fully repaid, the technology used to restrict the device must be removed.
The lender cannot retain a permanent mechanism that could continue controlling the device after the financing relationship has ended.
This gives borrowers greater certainty over ownership and control of their devices after repayment.
Borrowers Retain the Right to Prepay
The framework also preserves borrowers’ ability to prepay their loans, either partly or fully, subject to applicable rules.
A device-financing arrangement therefore cannot be used to permanently restrict the customer’s ability to settle the loan early.
Rules Apply Beyond Smartphones
Although smartphones are the most visible example, the framework covers other similar digital devices.
This can include tablets, laptops and other connected devices used by consumers.
Devices Covered
Smartphones
+
Tablets
+
Laptops
+
Similar digital devices
↓
Remote-restriction rules
The growing popularity of electronics financing makes the rule relevant to a large consumer-credit market.
Small-Ticket Consumer Loans Are Growing
Consumer financing for smartphones and other electronics has expanded rapidly in India.
Many consumers purchase expensive devices through monthly instalments rather than paying the full price upfront.
This has created a large market for lenders and financing companies.
Consumer Device Financing
Customer wants smartphone
↓
Device purchased through EMI
↓
Monthly repayment
↓
Device financed by lender
↓
Potential default
↓
RBI safeguards apply
The new rules establish a formal regulatory framework around what lenders can do after a default.
Digital Lending Has Changed Loan Recovery
Traditional loan recovery generally relied on calls, notices and physical recovery processes.
Digital lending has introduced new technological tools that can automatically identify overdue accounts and potentially trigger restrictions.
The RBI’s latest framework places limits on how far technology can go in the recovery process.
Traditional Recovery
Missed EMI
↓
Notice
↓
Calls
↓
Recovery process
VS
Technology-Based Recovery
Missed EMI
↓
Automated system
↓
Device identified
↓
Remote restriction
The RBI is attempting to prevent the second model from becoming excessively coercive.
Recovery Agents Face Separate Restrictions
The new framework also strengthens rules governing human recovery agents.
Agents cannot use abusive, threatening or intimidating language while attempting to recover loans.
They are also prohibited from using methods designed to publicly shame borrowers.
Prohibited Recovery Practices
Threats
+
Abusive language
+
Intimidation
+
Repeated harassment
+
Public humiliation
+
Threats involving family or reputation
↓
Not permitted
The RBI’s approach therefore addresses both technology-based and human recovery practices.
Recovery Calls Have Time Limits
The new framework also establishes boundaries around when recovery-related communications can take place.
Generally, recovery calls and visits are permitted between 8 a.m. and 7 p.m.
Communications outside those hours require the borrower’s request or explicit consent.
This is intended to reduce excessive or intrusive contact.
Social-Media Shaming Is Prohibited
Recovery agents cannot publish or circulate a borrower’s personal information, photographs, videos or audio recordings to pressure the borrower into repayment.
This is particularly relevant in an environment where personal information can spread rapidly through social-media platforms and messaging applications.
Borrower Privacy Is Becoming a Major RBI Focus
The device-locking rules form part of a broader shift toward stronger borrower protection in digital lending.
The RBI has previously required regulated entities and their lending-service providers to collect only necessary data and obtain appropriate consent.
The latest rules reinforce the principle that debt recovery does not give lenders unrestricted access to a borrower’s digital life.
Lenders Must Balance Recovery and Consumer Rights
Financial institutions have a legitimate interest in recovering loans.
Defaults create credit losses and can make consumer financing more expensive.
However, the RBI’s framework makes clear that recovery methods must remain proportionate and fair.
Regulatory Balance
Lender’s interest
↓
Recover outstanding loan
+
Borrower’s rights
↓
Privacy
+
Access to essential services
+
Fair treatment
↓
RBI framework
The objective is to maintain credit discipline without permitting coercive practices.
What It Means for Smartphone Buyers
For consumers buying a phone with cash or through an unrelated loan, the new rules provide significant protection against remote locking as a debt-recovery mechanism.
For customers who finance the phone itself, some restrictions may still be possible if the loan agreement and RBI conditions allow them.
Consumers should therefore read the financing agreement carefully before purchasing a device on EMI.
What It Means for EMI Defaulters
Missing one EMI does not automatically mean that a lender can lock a device.
For qualifying device-financing loans, the restrictions apply only after the required default threshold and notice process have been completed.
Borrowers therefore have opportunities to clear their dues before restrictions can be imposed.
What It Means for Banks and NBFCs
Banks and non-bank financial companies will need to review their technology-based recovery systems.
Any device-locking mechanism will need to comply with the new restrictions, including consent, notice, functionality and privacy requirements.
Lenders may also need to redesign recovery software that currently provides broader device-control capabilities.
What It Means for Fintech Companies
Digital lenders and fintech companies that facilitate consumer-device financing will also need to ensure that their technology and contracts comply with the RBI framework.
Third-party lending-service providers cannot use technology in ways that regulated lenders themselves would be prohibited from using.
What It Means for Smartphone Manufacturers
The rules could also affect companies involved in financed-device sales.
Manufacturers and retailers that partner with lenders may need to ensure that device-management software used for financing complies with the new regulatory requirements.
The Rule Could Change Device-Financing Models
Financing companies may need to rely more heavily on traditional recovery methods rather than automated device restrictions.
This could increase collection costs.
However, it could also encourage lenders to improve credit assessment and customer-support systems before approving small-ticket loans.
Better Credit Underwriting Could Become More Important
If lenders have fewer coercive tools available after a borrower defaults, they may place greater emphasis on assessing repayment capacity at the time a loan is issued.
Lending Cycle
Better credit assessment
↓
Lower-risk borrowers
↓
Fewer defaults
↓
Lower recovery costs
↓
More sustainable consumer lending
The policy could therefore indirectly encourage stronger underwriting standards.
The Rules Could Affect Loan Pricing
If recovery becomes more expensive, lenders could reassess the economics of small-ticket device financing.
This could influence interest rates, fees or eligibility criteria.
However, competition among lenders may limit how much additional cost can be passed on to consumers.
Consumer Protection Is Becoming More Important
The RBI’s latest framework reflects a wider regulatory focus on protecting borrowers from aggressive digital collection practices.
As more financial services move online, regulators are increasingly concerned about how technology affects consumer rights.
The central bank is seeking to ensure that digital convenience does not come at the cost of privacy or fair treatment.
What Investors Should Watch
Investors and financial-sector stakeholders should monitor:
- Implementation of the new recovery framework
- Lender changes to device-locking technology
- Consumer-device loan defaults
- Recovery costs
- Digital-lending growth
- Complaints related to recovery agents
- Data-privacy compliance
- Changes in small-ticket consumer credit
- Loan pricing and underwriting standards
The January 2027 implementation date gives lenders time to modify their systems and agreements.
Key Facts at a Glance
| Metric | Detail |
|---|---|
| Regulator | RBI |
| New framework effective | January 1, 2027 |
| General rule | Remote device locking prohibited as a recovery tool |
| Main exception | Device-financing loans |
| Default threshold for permitted restriction | 90 days past due |
| First notice | At 60 days overdue |
| First notice period | At least 21 days |
| Additional notice period | Seven days |
| Essential functions | Must remain available |
| Restoration after repayment | Within one hour |
| Compensation for qualifying delays | ₹250 per hour |
| Data access | Device data cannot be accessed for recovery |
| Devices covered | Smartphones, tablets, laptops and similar devices |
Infographic: RBI’s New Device-Locking Rules
RBI
↓
NEW LOAN RECOVERY FRAMEWORK
↓
EFFECTIVE
JANUARY 1, 2027
↓
GENERAL RULE
NO REMOTE DEVICE LOCKING
FOR LOAN RECOVERY
↓
EXCEPTION
DEVICE-FINANCING LOANS
↓
90 DAYS PAST DUE
+
MANDATORY NOTICES
↓
RESTRICTION MAY BE PERMITTED
↓
BUT ESSENTIAL FUNCTIONS
MUST REMAIN AVAILABLE
↓
INTERNET
+
INCOMING CALLS
+
EMERGENCY SOS
+
PUBLIC-SAFETY ALERTS
↓
BORROWER CLEARS DUES
↓
DEVICE RESTORED
WITHIN ONE HOUR
↓
DELAY
↓
₹250/HOUR COMPENSATION
↓
AFTER FULL REPAYMENT
↓
LOCKING MECHANISM REMOVED
The Bigger Picture
The RBI’s new framework represents a significant tightening of technology-based loan recovery practices in India. From January 1, 2027, banks and other regulated lenders will generally be prohibited from remotely disabling smartphones, tablets, laptops or similar devices simply because a borrower has defaulted on a loan. The main exception is when the loan itself was used to finance the device, and even then lenders must follow a structured notice process and cannot disable essential functions. :contentReference[oaicite:0]{index=0}
The rules also strengthen borrower privacy by preventing lenders from accessing or retaining data stored on devices for recovery purposes. They require functionality to be restored quickly after dues are cleared and provide for compensation in cases of wrongful restriction or delayed restoration. Together with restrictions on abusive recovery calls, threats, public humiliation and social-media shaming, the framework signals a broader RBI effort to make digital loan recovery more proportionate and transparent. :contentReference[oaicite:1]{index=1}
Looking Ahead
The immediate priority for lenders will be to update their loan agreements, recovery policies and technology systems before the January 2027 implementation date. Companies involved in smartphone and electronics financing will need to clearly explain any permitted device-restriction mechanism to borrowers and ensure that their systems preserve essential functions and comply with the RBI’s notice and privacy requirements.
Over the longer term, the rules could push the consumer-lending industry toward better credit assessment and less reliance on technology-based coercion. Device financing is likely to remain an important part of India’s digital-credit market, but lenders will have to balance repayment enforcement with borrower privacy and access to essential digital services. The RBI’s approach could also set a broader standard for how technology is used in financial recovery as digital lending continues to expand.
Get the day’s top stories in your inbox
One concise email. No spam, unsubscribe anytime.
