Why These New Rules Were Necessary
For years, tales of harassment by recovery agents have been a dark cloud over India's lending landscape. Borrowers have reported incessant calls at odd hours, threats, public shaming, and intimidation of family and friends. These coercive tactics, often
crossing legal and ethical lines, prompted numerous complaints and highlighted the need for a stronger, more humane regulatory framework. The RBI's new directions, announced on August 6, 2026, consolidate and strengthen existing guidelines into a single, comprehensive code of conduct. The primary goal is to ensure that the recovery of legitimate dues does not come at the cost of a borrower's dignity and privacy, balancing the rights of lenders with the fair treatment of customers.
The End of Harassment and Intimidation
The most significant change is the explicit prohibition of a wide range of coercive practices. Effective January 1, 2027, recovery agents will be barred from contacting borrowers outside the hours of 8 a.m. and 7 p.m., unless a different time is expressly agreed upon by the borrower. The rules strictly forbid the use of abusive or threatening language, making anonymous calls, and publicly humiliating borrowers by, for instance, posting their personal details on social media. Furthermore, agents cannot contact a borrower's relatives, friends, or colleagues in an attempt to intimidate them. They are also instructed to avoid contacting borrowers during sensitive times such as periods of bereavement or medical emergencies.
Putting Banks on the Hook
A crucial element of the new framework is that it places the ultimate responsibility for misconduct squarely on the shoulders of the lending institutions—the banks and Non-Banking Financial Companies (NBFCs). These Regulated Entities (REs) must now adopt a board-approved policy that covers the entire recovery process. They are responsible for the due diligence of recovery agencies they hire and must ensure agents are properly trained and certified by the Indian Institute of Banking and Finance (IIBF). Banks are also required to maintain an updated list of their empanelled recovery agencies on their websites and must inform the borrower which agency has been assigned to their case before any recovery proceedings begin.
New Rules for Digital and Tech-Based Recovery
In a nod to the digital age, the RBI has also laid down strict rules for technology-enabled recovery. The practice of remotely locking a borrower's mobile phone or other devices to compel repayment is now heavily restricted. Banks are prohibited from disabling a device unless the loan was specifically taken to finance that particular device. Even in such cases, a gradual approach must be taken. Restrictions can only begin after an account is 30 days past due, with full restrictions permissible only after 60 days. Crucially, essential functions like incoming calls, SMS, and emergency SOS features cannot be blocked. The rules also forbid lenders and their tech providers from accessing a borrower's personal data, such as contacts, photos, and call logs, for recovery purposes.
Empowering Borrowers with Clear Rights
The new framework significantly empowers borrowers by providing clear channels for grievance redressal. Banks are now required to establish a dedicated mechanism for handling complaints related to recovery practices, and the contact details for this must be included in loan agreements and all recovery-related communications. If a borrower's financed device is wrongly restricted, they are entitled to a compensation of ₹250 per hour, capped at the loan amount. It is important to note, however, that these new rules do not cancel any loan obligations. Borrowers remain fully responsible for repaying their dues, and failure to do so will still impact their credit score and could lead to legal consequences. The rules are designed to make the process fair, not to erase debt.
