The Heart of the New Mandate
The Reserve Bank of India has introduced a comprehensive framework that consolidates and strengthens rules for loan recovery. Coming into effect on January 1, 2027, these guidelines are designed to protect borrowers from harassment and misuse of their
personal information. At its core, the mandate forces banks and lending institutions to be far more transparent and accountable for the actions of their recovery agents. The goal is to strike a better balance between the lender's right to recover dues and the borrower's right to dignity, privacy, and fair treatment.
Your Information Before the First Call
This is where the most significant change lies. The new rules strictly limit what information about you can be shared with a recovery agent. Banks must ensure that agents are given only the data absolutely necessary to perform their duties. This means details about your family, friends, social media activity, and other personal matters are off-limits. Furthermore, the rules explicitly prohibit banks and their technology partners from accessing personal data stored on your phone or other devices—like your contacts, photos, or location history—for recovery purposes. Any attempt to do so is illegal.
Transparency is Now Mandatory
Before any recovery proceedings begin, the bank is now required to inform you about the agency and the specific agent assigned to your case. This must be communicated clearly. If the bank changes the agency or agent, they must promptly inform you of the update. Lenders are also required to publish an updated list of their approved recovery agencies on their websites. This removes the anonymity that agents often operated with, making them and the banks they represent more accountable for their conduct.
Ending Harassment and Coercion
The RBI has laid down a strict code of conduct. Recovery agents are prohibited from using abusive or threatening language, making repeated calls, or contacting you outside of the hours of 8 a.m. to 7 p.m. unless you agree to it. They cannot publicly shame borrowers, contact their relatives or colleagues to apply pressure, or post personal details on social media. To enforce this, all telephonic conversations between agents and borrowers must be recorded and preserved for at least six months, adding another layer of transparency and evidence in case of disputes.
New Rules for Digital Lending
The guidelines also address modern recovery tactics, particularly those involving technology. Banks are now barred from using any technology that remotely locks or disables functionalities of a borrower's personal devices like phones or laptops to coerce repayment for an unrelated loan. An exception exists only if the loan was taken specifically to finance that device. Even then, lenders must follow a gradual process with proper notice and cannot disable essential functions like incoming calls and emergency services.
What You Can Do as a Borrower
These rules empower you. If a recovery agent contacts you, you have the right to ask for their ID card and the authorisation letter from the bank. If you face any harassment or feel an agent has violated these guidelines, you should first complain through the bank's dedicated grievance redressal mechanism, the details of which must be provided in your loan agreement. If the issue isn't resolved within 30 days, you can escalate the complaint to the RBI Ombudsman at no cost. Keeping a log of calls and interactions can strengthen your case.
