The Problem: A History of Harassment
For too long, the loan recovery process has been marred by stories of intimidation and distress. Tales of agents calling at all hours, contacting family or colleagues, using abusive language, or showing up unannounced have become disturbingly common.
This approach, while aimed at recovering dues, often crossed the line into harassment, leaving borrowers feeling helpless and publicly shamed. The lack of clear, enforceable rules and direct accountability for lenders created a system where the conduct of third-party recovery agents often went unchecked, putting the onus on the borrower to prove misconduct.
The January 2027 Mandate: What’s New?
Effective January 1, 2027, the Reserve Bank of India is rolling out a comprehensive framework that shifts the balance of power. These rules are not just suggestions; they are mandates that regulated entities like banks and NBFCs must follow. One of the most significant changes is the strict prohibition of harassment. Agents are explicitly banned from using threatening language, making anonymous calls, or publicly humiliating borrowers on social media. Contact is now restricted to a civilised window between 8 a.m. and 7 p.m., unless the borrower agrees otherwise. This rule alone is designed to end the late-night pressure tactics that have caused immense stress for many families.
Putting Banks on the Hook
Perhaps the most critical aspect of the new rules is that banks and lending institutions are now directly and inescapably responsible for the actions of the recovery agents they hire. They can no longer outsource the work and wash their hands of the consequences. Lenders must ensure their agents are properly trained and certified. Before an agent's first visit, the bank must notify the borrower, providing the agent's name and details. Agents must carry proper identification and an authorisation letter from the bank at all times. This ends the era of anonymous intimidation and introduces a clear chain of command and accountability. The rules make it plain: the lender is accountable for every action taken on its behalf.
A Digital Leash: Call Recording and Data Privacy
To add another layer of accountability, banks are now required to record and store all recovery-related communications, including phone calls, for at least six months. This creates an objective record that can be used to verify claims of misconduct from either side. Furthermore, the rules clamp down on digital harassment. Agents are forbidden from accessing a borrower's personal data like contact lists, photos, or call logs for recovery purposes. The practice of remotely locking a borrower's phone or other devices is also banned, except for the specific device that was financed by the loan, and even then, only after following a strict, gradual process.
What This Means for Borrowers
For borrowers, these rules represent a major step towards fair treatment and dignity in the lending process. You now have clearly defined rights. You have the right to be contacted only at reasonable hours. You have the right to know exactly who is contacting you and to verify their credentials. You have the right to privacy, and your personal data and social circle are now protected from being weaponised against you. Most importantly, you have a clear path for recourse. If an agent violates these rules, the complaint goes directly to the bank, which is now responsible for investigating and providing a resolution through a dedicated grievance redressal mechanism.














