RBI Bans Device Disablement for Loan Defaults from 2027
By ThePip Desk
Effective Jan 1, 2027, the RBI prohibits banks from disabling borrower devices for loan recovery, addressing harassment concerns and protecting consumers.
The Reserve Bank of India (RBI) has issued a significant directive, effective January 1, 2027, prohibiting banks from disabling mobile phones and laptops of borrowers who default on their loans. This move aims to curb harassment practices observed during the loan recovery process.
Understanding the New Restrictions
The new regulations specifically apply to a range of common loan types. Banks will no longer be permitted to use device-disabling tactics for:
- Personal loans
- Car loans
- Home loans
This broad prohibition covers most consumer credit products, safeguarding borrowers from losing access to their essential devices due to financial distress. The central bank introduced these rules following numerous complaints from individuals regarding aggressive recovery methods.
Exceptions and Safeguards
An important exception exists: banks can still disable devices if the device itself was the specific item financed by the lending institution. However, even in these instances, the RBI mandates a carefully managed and gradual approach to recovery.
Furthermore, critical functionalities must remain accessible to the borrower. Banks cannot restrict essential device features such as:
- Incoming calls
- SMS services
- Emergency SOS features
This ensures that borrowers maintain basic communication and safety capabilities, even when a device-specific loan is in default.
Technology and Data Compliance
The RBI has also laid out strict requirements for any technology-based recovery mechanisms employed by banks or their third-party service providers. These systems must be secure, fully compliant with regulations, and certified by the original equipment manufacturer (OEM) or the operating system (OS) platform.
Additionally, banks are directed to strictly limit the disclosure of borrower or guarantor information. This data can only be shared with employees or recovery agencies to the absolute extent necessary for their assigned duties, reinforcing privacy protections for individuals.