RBI Guidelines Regarding Digital Lending and Loan Recovery Agents

Updated: July 15, 2026Published: July 15, 2026

Quick Answer

The RBI has issued strict guidelines prohibiting loan recovery agents from harassing borrowers. Agents cannot call before 8:00 AM or after 7:00 PM, cannot use abusive language, and digital lending apps must not access an individual's contacts or gallery without explicit consent.

Table of Contents

Key Takeaways

  • Recovery agents are legally barred from contacting borrowers at odd hours (before 8 AM or after 7 PM).
  • Digital lending apps must display a Key Fact Statement (KFS) detailing the Annual Percentage Rate (APR) before executing the loan.
  • Borrowers can file complaints against abusive recovery agents directly with the RBI Ombudsman.
  • Apps are prohibited from accessing private mobile data like contacts, media, and location without explicit necessity and consent.

Introduction

The explosive growth of digital lending apps in India brought convenience but also a wave of predatory recovery practices. From publicly shaming defaulters by messaging their contact lists to employing abusive recovery agents, some lenders crossed severe legal and ethical boundaries. In response, the Reserve Bank of India (RBI) introduced comprehensive guidelines to regulate digital lending and rein in the aggressive tactics of loan recovery agents. Understanding these RBI guidelines empowers borrowers to protect their dignity, data privacy, and legal rights against harassment.

Applicable Laws & Sections

The regulatory framework is primarily drawn from the RBI's specialized circulars and banking codes:

  • RBI Guidelines on Digital Lending (2022): Dictates how Regulated Entities (REs) like Banks and NBFCs must operate their digital lending platforms (Lending Service Providers or LSPs).
  • Fair Practices Code (FPC): Mandates that lenders and their recovery agents cannot resort to undue harassment, physical threats, or abusive language to recover loans.
  • RBI Circular on Recovery Agents (August 2022): Explicitly strictly prohibits calling borrowers before 8:00 AM and after 7:00 PM for recovery purposes.
  • Information Technology Act, 2000 (Section 43A & 72A): Protects borrowers against the unauthorized sharing or misuse of their personal data (such as contact lists) by digital apps.

Step-by-Step Procedure to Handle Harassment

  1. Document the Harassment: If recovery agents use abusive language or call at prohibited hours, record the phone calls and save all WhatsApp messages or emails as evidence.
  2. Lodge a Formal Complaint with the Lender: Send a formal written complaint (via email) to the Grievance Redressal Officer of the Bank or NBFC that disbursed the loan.
  3. File an FIR (If Necessary): If the agents resort to physical threats, extortion, or send morphed images to your contacts, immediately file an FIR under Section 384 (Extortion) and Section 503 (Criminal Intimidation) of the Bharatiya Nyaya Sanhita (BNS).
  4. Approach the RBI Ombudsman: If the lender fails to resolve your grievance within 30 days, escalate the complaint digitally via the RBI's Complaint Management System (CMS).

Practical Tips

To effectively counter predatory lending apps and aggressive recovery agents, borrowers must act strategically:

  • Verify the App: Always verify if the digital lending app is backed by an RBI-registered NBFC or Bank. Illegal, unregistered loan apps have no legal standing to recover money and should be reported to the cyber police immediately.
  • Preserve Evidence: Explicitly preserve call recordings, threat messages, email trails, and the Key Fact Statement (KFS) provided at the time of loan disbursement. Do not delete the app until you have secured screenshots of the loan terms.
  • Revoke Permissions: If a loan app is accessing your contacts or gallery, immediately go to your phone settings and revoke all unnecessary app permissions. RBI guidelines strictly prohibit apps from scraping this data.

If the harassment continues, you have multiple legal avenues:

  • RBI Ombudsman: Can penalize the NBFC/Bank and order compensation for the harassment suffered.
  • Consumer Court: You can file a case in the District Consumer Disputes Redressal Commission for "deficiency in service" and "unfair trade practices" seeking damages.
  • Civil Injunction: A lawyer can file a civil suit seeking a permanent injunction restraining the recovery agents from visiting your home or workplace.

When Should You Consult a Lawyer?

You should consult a banking or cyber law advocate if a recovery agent threatens you with physical violence, if a digital app illegally accesses and shares your data with your contacts, or if the lender initiates false criminal proceedings (like a fabricated Cheque Bounce case under Section 138) to pressure you into paying exorbitant hidden charges.

Conclusion

Taking a loan does not strip a borrower of their fundamental right to dignity and privacy. The RBI's strict guidelines on digital lending and recovery agents establish a clear boundary between legal debt recovery and illegal extortion. By documenting harassment, utilizing the RBI Ombudsman, and taking swift legal or police action against data theft and abuse, borrowers can effectively shield themselves from the predatory tactics of unregulated digital lenders.

Frequently Asked Questions

Q: Can recovery agents contact my friends or family?

A: No. RBI guidelines strictly prohibit lenders or their agents from contacting the borrower's family, friends, or employer for loan recovery, unless those individuals were explicitly signed as legal guarantors to the loan.

Q: What are the allowed timings for recovery calls?

A: Under strict RBI mandates, recovery agents are legally prohibited from calling or visiting a borrower before 8:00 AM or after 7:00 PM.

Q: What is a Key Fact Statement (KFS)?

A: A Key Fact Statement is a mandatory document that digital lenders must provide before executing a loan. It clearly outlines the Annual Percentage Rate (APR), recovery mechanisms, and grievance redressal officer details.

Need personalized legal help?

Find advocates on JurisOS and send an enquiry.

Find Banking Law Lawyers