RBI Draft Directions on Loan Recovery and Device Locking
Why in the news
The Reserve Bank released revised draft amendment directions on recovery of loans and the engagement of recovery agents. They allow limited phone restrictions for defaulters, wrapped in tight consumer safeguards.
Key facts
- Regulator: RBI; applies to banks and NBFCs; stated effective date 1 October 2026.
- Device restriction is allowed only if the lender financed the device and the loan contract unambiguously permits it.
- A gradual approach is needed, not sudden total blocking.
- Lenders must not touch internet access, incoming calls, emergency SOS or government and public-safety notifications.
- Restrictions must be reversed within 1 hour after the borrower cures the default.
- Wrongful restriction or late reversal attracts ₹250 per hour compensation.
- The tech tool must be uninstalled once the loan is fully repaid.
- Lenders are not allowed to collect, use or hold any data from a borrower’s device, whether for recovery or otherwise.
| Stage | Trigger | Minimum time to cure |
|---|---|---|
| First notice | 60 days past due date | 21 days |
| Second notice | After the first notice expires | 7 more days |
| Reversal after cure | Borrower clears the default | Within 1 hour |
Recovery-agent norms
- Lenders need policies on recovery triggers, escalation matrices, a code of conduct, borrower compensation and due diligence of agencies.
- Agents need IIBF certification (or one from its affiliates); lenders keep updated agency lists at branches, websites, apps and other touchpoints.
- Borrowers and guarantors get notice at least 1 day ahead (SMS or email) or 3 days ahead (letter) before a first in-person visit.
- Contact window: 8 am to 7 pm, unless the borrower authorises another time.
- Banned: abusive language, threats, excessive messages, public humiliation, social media posts and intimidation.
- Recovery calls must be recorded and kept at least 6 months, longer if litigation is on.
Why RBI acted
- Aggressive recovery has led to suicides, harassment, public shaming and privacy breaches, especially in digital and fintech lending.
- Device disabling grew popular without a clear legal framework.
- Recovery-agent abuse is a regular complaint category at the RBI Ombudsman.
Background
- IIBF: Mumbai-based body of banking professionals, started in 1928 under the name Indian Institute of Bankers; runs exams, training and certification.
- Digital Lending Guidelines (Sept 2022): direct disbursal to borrower accounts, consent for credit-limit increases, Key Fact Statement, cooling-off exit, grievance redress, need-based data collection.
- RB-IOS 2021: independent complaint-resolution route, free of charge, open to customers of banks, NBFCs and digital lenders.
- Other laws in play: Banking Regulation Act 1949, RBI Act 1934, Consumer Protection Act 2019, IT Act 2000, DPDP Act 2023.
Exam angle
- Likely question: the 60-day trigger, 21-day and 7-day notice periods, and the ₹250 per hour compensation.
- Certification of recovery agents: through IIBF or its affiliates.
- Related terms: Digital Lending Guidelines (2022), FLDG guidelines (2023), Fair Practices Code, RB-IOS 2021, Digital Personal Data Protection Act 2023.