The Reserve Bank of India has introduced an extensive framework defining accountable recovery practices for lenders and agents, with the new directions taking effect on January 1, 2027. According to reports from Mint, the new directives establish eight red lines that lenders and agents are prohibited from crossing, including abusive language, posting borrower details on social media, sending inappropriate messages, calling outside permitted hours, making anonymous threats, intimidating family members or colleagues, threatening physical violence, and making misleading claims about debt consequences. Banks and NBFCs retain full legal responsibility for third-party agency conduct and must compensate borrowers harmed by agent misconduct. The framework seeks to replace multiple sector-specific guidelines with a single set of conduct standards applicable to commercial banks, small finance banks, regional rural banks, cooperative banks, all-India financial institutions, NBFCs and housing finance companies.
Under the new framework, recovery agents must be certified by the Indian Institute of Banking and Finance (IIBF) with existing agents without certification required to obtain it within one year of the regulations becoming effective. Regulated entities must establish a Board-approved policy covering recovery of dues, engagement of recovery agents and possession of security, defining eligibility criteria and due diligence for recovery agents, performance standards, code of conduct, monitoring mechanisms, penalties for misconduct, procedures in cases involving borrower death, identification of repayment stress, and compensation for losses arising from inappropriate recovery practices. Agents must carry valid identity cards and authorisation letters displaying the lender's grievance redressal contact details, with recovery calls recorded only after informing the borrower and records preserved for at least six months or until completion of related legal proceedings. According to Business Standard, lenders must publish the names of empanelled agencies, while agents must show their IDs, and the certification issued by the Indian Institute of Banking & Finance (IIBF).
The framework introduces significant borrower protections, including the ability for borrowers to select their preferred meeting place and communication channel, potentially preventing unannounced doorstep visits. Borrowers must receive prior notice before the first recovery visit—at least one day in advance through SMS or email where digital contact details are available, or three days' notice through physical communication otherwise. Recovery agents may contact borrowers only between 8:00 a.m. and 7:00 p.m. and only the borrower or guarantor may be approached. Excessive calling or repeated same-day contact after a response is given counts as a violation, with recovery proceedings suspended while a related borrower grievance is pending with the lender. According to Business Standard, borrower consent is required for contact outside the mandated hours, and agents must remain respectful, avoid sensitive occasions, and share loan details only with the borrower or guarantor. RBI rules specifically prohibit attempts to publicly humiliate borrowers or intrude on the privacy of family members, referees and friends, with contacting relatives, employers or colleagues being a violation of these regulations.
The RBI has proposed detailed safeguards around technology-based remote restriction of mobile devices financed through loans, with device-locking permitted only where the loan financed the specific device and the loan agreement contains explicit borrower consent and clearly defined trigger conditions. Restrictions may begin only after an account becomes 90 days past due, following a 21-day cure notice and an additional seven-day reminder. Essential functions—including internet access, incoming calls, emergency SOS services and government safety alerts—must remain operational. Once payment defaults are cured, device access must be restored within one hour, failing which lenders will be required to pay compensation of ₹250 per hour. Lenders will also be prohibited from accessing or retaining personal device data, and all locking mechanisms must be removed after full loan repayment. According to Business Standard, even if locking is allowed, four conditions must be met: the device is loan-financed, agreement permits locking, due notice is given, and mechanism is manufacturer/OS certified, where available. The ₹250-per-hour compensation for wrongful restrictions or delayed restoration gives borrowers a clear remedy and makes recovery more transparent and structured.
The new framework comes as new-to-credit borrowers reached 4.4 crore in the 12 months ending February 2026, accounting for 17.8% of all loan originations, as reported by Mint. According to Mint, a single missed EMI does not give the bank the right to seize the borrower's property or assets, with banks having the right to enforce security only after a secured debt is classified as an NPA under Section 13(2) of the SARFAESI Act. Under this provision, lenders can issue a written demand notice requiring borrowers to clear dues within 60 days, with the bank unable to immediately take possession of the house or vehicle. Banks may also have a right of set-off in certain circumstances, allowing them to adjust borrower dues against funds held with the same bank, but this does not grant unrestricted access to accounts held with other banks. For secured loans like home loans, vehicle loans or loans against property, lenders have legal security interest and can enforce that through repossession or sale after following due process. For unsecured loans such as personal loans and credit card dues, there is no collateral backing, and banks generally rely on collection efforts, demand notices and legal proceedings to recover outstanding amounts. Regardless of loan type, lenders must follow due process and comply with RBI's recovery guidelines, with borrowers facing genuine financial difficulties advised to contact lenders early for restructuring options.
