RBI’s New Loan Recovery Rules: No Device Disabling

The Reserve Bank of India (RBI) has implemented new regulations to curb aggressive loan recovery tactics employed by banks and their agents. These directives, effective January 1, 2027, introduce strict prohibitions on methods like disabling personal devices for debt collection.

Officially titled ‘Conduct of Regulated Entities in Recovery of Loans and Engagement of Recovery Agents,’ these measures were issued on August 6, 2026. The RBI’s action follows increasing concerns over harassment, abusive contact, and the misuse of borrower data by lenders and their recovery agencies.

Key Regulatory Timelines

• New regulations become effective: January 1, 2027
• Official issuance date of directions: August 6, 2026

The new rules specifically address the use of technology to restrict a borrower’s device functionality. Banks are now explicitly prohibited from disabling personal devices such as laptops, phones, or tablets to recover loan dues. This restriction applies unless the device itself was the subject of the loan financing.

Device Functionality Restrictions Explained

• Banks cannot restrict device functionality unless the device was loan-financed.
• If financed, restrictions can only start after the loan is 30 days past due, with prior notices.
• Full restrictions are permitted only after 60 days past due, as outlined in the loan agreement.
• Crucially, essential functions like incoming calls, SMS, and emergency SOS must always remain accessible.

The RBI has also laid down stringent guidelines regarding the conduct of recovery agents and the information shared with them. These measures are designed to prevent intrusive and unfair practices during the recovery process.

Guidelines for Recovery Agent Conduct

• Information shared with agents must be limited to what is strictly necessary for recovery.
• Agents are forbidden from using abusive language, threatening borrowers, or publicly shaming them.
• Contacting relatives, friends, or colleagues to intimidate borrowers is prohibited.
• Banks and third-party service providers cannot access personal data such as contacts, SMS, call logs, photos, or location history from a borrower’s device for recovery purposes.

Despite these new protections, borrowers must understand that the regulations do not absolve them of their repayment obligations. All loan dues, accumulated interest, and the impact of missed payments on credit scores still apply. The framework, however, mandates banks to establish systems for managing financial distress cases.

This includes providing guidance on available resolution options, signaling a move towards a more humane and regulated approach to debt collection. The RBI’s directives aim to balance borrower protection with the fundamental responsibility of loan repayment.