The Reserve Bank of India (RBI) is tightening rules governing loan recovery practices, introducing clearer safeguards for borrowers facing repayment difficulties and placing stricter limits on how banks, non-banking financial companies and recovery agents can contact customers. The revised framework is scheduled to take effect from January 1, 2027, and is designed to prevent harassment, intimidation and inappropriate recovery tactics while creating a more structured process for collecting overdue payments.
The new framework also addresses technology-based recovery methods, including the remote locking of devices purchased through loans. The RBI’s approach seeks to balance lenders’ ability to recover money with borrowers’ rights to privacy, dignity and continued access to essential device functions. The changes are particularly relevant as digital lending and small-ticket consumer financing have expanded, increasing the use of automated recovery tools and outsourced collection agencies.
What Happened
The RBI has revised its framework for loan recovery, setting out more detailed requirements for how regulated lenders and their recovery agents should interact with borrowers.
The new provisions cover phone calls, messages, field visits, recovery-agent conduct and technology-based methods used to encourage repayment. The framework is intended to ensure that borrowers who miss EMIs are pursued through lawful and professional processes rather than intimidation or excessive pressure.
The rules are scheduled to become effective on January 1, 2027. They update the existing framework governing responsible recovery practices and introduce specific provisions for newer lending models and technology-enabled collection methods.
Key Details
| Area | New RBI Framework |
|---|---|
| Effective date | January 1, 2027 |
| Covered entities | Banks and other RBI-regulated lenders |
| Recovery agents | Must follow prescribed conduct standards |
| Harassment | Prohibited |
| Recovery calls | Subject to defined communication standards |
| Field visits | Must follow borrower-protection requirements |
| Public shaming | Not permitted |
| Device restrictions | Specific rules for financed devices |
| Personal devices | Cannot generally be restricted for loan recovery |
| Technology-based recovery | Subject to RBI safeguards |
The framework builds on earlier RBI requirements that already prohibited intimidation, harassment, threatening calls and inappropriate recovery practices.
Borrowers Cannot Be Harassed
One of the central elements of the revised framework is the emphasis on respectful treatment of borrowers.
Recovery agents cannot use threatening or abusive language, publicly shame borrowers or employ coercive methods to force repayment.
The RBI had already instructed regulated entities and their recovery agents not to resort to intimidation or harassment. Existing RBI directions also restrict persistent recovery calls and prohibit practices such as contacting relatives, friends or co-workers inappropriately.
The updated framework puts these principles into a more comprehensive recovery system as lending becomes increasingly digital.
Recovery Agents Face Greater Accountability
Banks and financial institutions remain responsible for the conduct of recovery agents working on their behalf.
Outsourcing the recovery process does not transfer the lender’s regulatory responsibility. RBI directions require regulated entities to exercise oversight over outsourced recovery operations and maintain mechanisms for handling borrower grievances.
This is important because borrowers often interact with third-party collection agencies rather than directly with the bank or NBFC that provided the loan.
Rules Around Recovery Calls
The revised framework places greater emphasis on how lenders communicate with borrowers.
Recovery agents are expected to identify themselves appropriately and communicate with borrowers professionally. Lenders must also ensure that collection practices do not become excessive or intimidating.
The RBI has previously imposed restrictions on the timing of recovery calls, with existing rules prohibiting calls at inappropriate hours and persistent attempts to contact borrowers.
The latest framework expands the broader borrower-protection approach and brings newer technology-enabled collection methods into the regulatory framework.
No Public Shaming
Another important protection concerns the use of public pressure to recover loans.
Lenders and their agents cannot use methods designed to humiliate borrowers or disclose their repayment problems to unrelated people as a collection tactic.
Existing RBI rules specifically prohibit practices such as publishing borrowers’ names or harassing relatives, friends or co-workers.
This is particularly relevant in digital lending, where borrowers’ contact information and other personal data can potentially be accessed through apps or third-party systems.
Phone-Locking Rules Get Specific Attention
One of the most closely watched provisions concerns the use of technology to restrict electronic devices after an EMI default.
The RBI’s revised framework distinguishes between a general personal device and a device that was specifically financed through the loan.
Lenders generally cannot use technology to disable or restrict a borrower’s personal smartphone, tablet or laptop merely because the borrower has defaulted on an unrelated loan. However, the framework provides a regulated mechanism for devices that were themselves purchased through financing.
This distinction is significant because some digital-financing models have used remote device-management technology as a repayment-enforcement mechanism.
Financed Devices Can Face Gradual Restrictions
The revised framework does not completely eliminate the possibility of restricting a financed device.
Instead, the RBI has allowed a more controlled process for devices purchased through EMI financing, with safeguards intended to prevent abrupt and disproportionate action.
Reports on the revised provisions indicate that device restrictions can follow a staged process after prolonged default and require appropriate notices. Essential functions, including incoming calls, internet access, emergency SOS and public alerts, are expected to remain available.
This creates a middle ground between allowing lenders to protect their financed assets and preventing borrowers from suddenly losing access to their phones.
Device Recovery Framework
| Situation | RBI Approach |
|---|---|
| Personal device unrelated to the loan | Technology-based restriction generally not permitted |
| Device specifically financed through EMI | Restrictions may be possible under prescribed conditions |
| Immediate complete lock | Subject to safeguards and staged procedures |
| Essential functions | Must remain accessible under reported safeguards |
| Borrower notification | Required before restrictions |
The framework is therefore not a blanket prohibition on device locking. Instead, it regulates when and how the practice can be used.
Why the RBI Is Changing the Rules
The lending industry has changed substantially with the growth of digital credit.
Consumers can now obtain small personal loans, consumer-finance products and other credit facilities through mobile applications, often with minimal physical interaction with the lender.
This has made lending faster but has also created new challenges around data privacy, automated collection and recovery-agent behaviour.
The RBI has previously required digital lenders to disclose recovery-agent details, obtain appropriate consent for data collection and ensure that lending-service providers follow regulatory requirements.
The new recovery framework extends this borrower-protection philosophy into the wider collection process.
Impact on Banks and NBFCs
For banks and NBFCs, the new rules will require adjustments to recovery operations.
Financial institutions may need to review contracts with collection agencies, update call-monitoring systems and ensure that employees and third-party agents are trained according to the new requirements.
Technology platforms used for automated collections may also need to be reviewed.
The changes could increase compliance costs in the short term, particularly for lenders that rely heavily on outsourced recovery networks.
However, clearer rules could also reduce regulatory uncertainty and provide lenders with a standardized framework for dealing with defaults.
Impact on Digital Lending Companies
Digital lenders are likely to face particular scrutiny because technology plays a larger role in their customer acquisition, lending and recovery processes.
Automated messages, app notifications, payment reminders and device-management tools can make collections more efficient, but they also create risks if used excessively.
The RBI’s framework makes it important for digital lenders to ensure that technology supports legitimate recovery rather than becoming a tool for harassment.
Companies may increasingly need to combine automated reminders with clear escalation procedures and human support for borrowers facing genuine repayment difficulties.
Borrower Rights Become More Important
The revised framework strengthens the principle that missing an EMI does not give a lender unlimited authority over a borrower.
A borrower remains responsible for repaying the outstanding amount, but recovery must take place within regulatory boundaries.
This distinction is important because default and harassment are separate issues.
A lender can pursue legitimate recovery, charge applicable contractual amounts and take lawful action where appropriate. It cannot use threats, humiliation or inappropriate technology-based restrictions simply because a payment is overdue.
What Borrowers Should Know
Borrowers facing repayment difficulties should understand that the new rules do not eliminate their repayment obligations.
Instead, they establish boundaries around how lenders can pursue overdue payments.
Borrowers should:
- Keep records of recovery calls and messages.
- Verify the identity of recovery agents.
- Request written details of outstanding dues.
- Avoid sharing sensitive information with unverified callers.
- Use the lender’s official grievance mechanism for disputes.
- Report harassment through appropriate regulatory channels where necessary.
- Continue communicating with the lender about genuine repayment difficulties.
The RBI’s existing framework also requires regulated entities to maintain mechanisms for recovery-related grievances.
Challenges for Lenders
The biggest challenge for lenders will be maintaining recovery efficiency while operating within stricter boundaries.
Aggressive collection practices may sometimes produce short-term repayment results, but they can also create complaints, reputational damage and regulatory risks.
Lenders will therefore need better borrower segmentation and early-warning systems.
Customers showing signs of repayment stress could potentially be offered restructuring information, repayment assistance or other appropriate options before accounts progress into more serious default stages.
Industry Impact
The new rules could accelerate the professionalization of India’s loan-recovery industry.
Banks and NBFCs may increasingly invest in centralized monitoring, recorded communications, agent training and technology that tracks compliance.
Third-party recovery agencies will also face greater pressure to demonstrate that their employees follow standardized conduct requirements.
For fintech companies, the changes could encourage a shift away from aggressive technology-based recovery toward more transparent and borrower-sensitive collection systems.
What Investors Should Watch
Investors in banks, NBFCs and lending-focused fintech companies will need to assess how the rules affect collection costs and credit losses.
Important indicators could include:
- Recovery rates on overdue loans
- Collection costs
- Credit losses and write-offs
- Complaints against recovery agents
- Technology and compliance expenditure
- Use of third-party collection agencies
- Digital-lending portfolio performance
The impact is likely to differ across lenders depending on their customer segments and existing recovery practices.
Looking Ahead
The RBI’s revised loan-recovery framework represents a significant effort to bring traditional collection practices and newer technology-driven methods under clearer borrower-protection standards. From January 1, 2027, lenders will have to operate within more detailed requirements covering communication, recovery-agent conduct and technology-based recovery. The provisions around device restrictions are particularly relevant as consumer financing increasingly moves onto smartphones and digital platforms.
For borrowers, the changes should provide stronger protection against harassment and disproportionate recovery tactics, while lenders retain the right to pursue legitimate outstanding dues through lawful means. For banks, NBFCs and fintech companies, the next phase will involve adapting collection systems, agent training and technology to meet the new requirements. Investors and industry participants should watch how the rules affect recovery costs, delinquency management and digital-lending practices once the framework takes effect in 2027.
Get the day’s top stories in your inbox
One concise email. No spam, unsubscribe anytime.
