RBI Recovery Agent Rules 2026:
What Banks Can and Cannot Do

"They called my office number. Then they called my mother. Then they showed up at my house at 9 PM. I didn't know I had any rights."

Stories like this are, unfortunately, common in India. Millions of borrowers who fall behind on loan payments — even by a few days — face recovery tactics that range from aggressive to outright illegal. Many borrowers do not know that the Reserve Bank of India has issued detailed guidelines governing exactly how banks and their agents can pursue loan recovery. Ignorance of these rights leaves borrowers vulnerable to harassment that should never be happening.

This guide covers the complete RBI framework for loan recovery in India as it stands in 2026 — what is permitted, what is explicitly prohibited, and how to protect yourself and file a complaint if your rights are violated.

The RBI Framework: Where These Rules Come From

The RBI's rules on recovery agents come from multiple circulars and guidelines issued over the years, with the most important being the Fair Practices Code (FPC) for lenders, the Code of Conduct for Direct Sales Agents and Recovery Agents, and guidelines issued under the Banking Regulation Act. Key documents include:

• RBI Master Circular on Customer Service in Banks (updated periodically)
• RBI Guidelines on Fair Practices Code for Non-Banking Finance Companies
• RBI Circular on Engagement of Recovery Agents by Banks
• The Indian Contract Act and Consumer Protection Act provisions on unfair trade practices

These rules apply to all scheduled commercial banks, cooperative banks, and NBFCs regulated by RBI. They apply regardless of whether the lender uses in-house recovery staff or outsources to third-party recovery agencies.

Permitted vs. Prohibited: The Complete List

Permitted Calling Hours — The 8 AM to 7 PM Rule

This is the most commonly violated rule, and also one of the most important ones to know. RBI guidelines explicitly restrict recovery agent calls to between 8:00 AM and 7:00 PM only. Calls outside this window — whether at 7:30 AM, 8:45 PM, or midnight — are a direct violation of RBI norms.

Additionally, if you have explicitly requested that the bank contact you only at specific times or through specific channels (e.g., email only, or only after 10 AM), the bank must make reasonable efforts to accommodate this request. While they may not be legally obligated to honour every request, repeated calls outside your stated preference, especially combined with other aggressive tactics, strengthens your complaint.

The Bank Is Responsible for Its Recovery Agents

One of the most important principles under RBI guidelines is that banks remain fully responsible for the conduct of recovery agents they engage — even if those agents are employed by a third-party agency. A bank cannot use the outsourcing relationship as a shield against complaints about agent behaviour.

If a recovery agent employed by an outsourcing firm harasses you, your complaint goes to the bank, not the outsourcing firm. The bank is the regulated entity and bears responsibility for ensuring its agents comply with RBI's code of conduct. Banks are required to have a documented process for grievance redressal related to recovery agent conduct.

What Happens If You Miss EMIs — The Legal Escalation Path

Understanding the actual legal sequence helps reduce panic. Banks do not immediately take you to court for missing two EMIs. The typical escalation ladder for unsecured loans (personal loans, credit cards) is:

1. Days 1–30 after missed payment: Reminder calls and SMS. Standard dunning process.
2. 30–90 days (SMA-1 and SMA-2 classification): More frequent calls. Formal written notice sent. Account flagged as Special Mention Account in the banking system.
3. 90 days (NPA classification): Loan classified as Non-Performing Asset. Recovery agents become more active. Bank can refer to a recovery tribunal or legal team.
4. 180+ days: Bank may initiate legal proceedings — specifically a civil suit for recovery of money. For secured loans, SARFAESI Act proceedings may begin.
5. Legal notice and court summons: Formal legal process. You will receive notice and have the right to respond.

For secured loans (home loan, car loan), banks have the right to repossess the secured asset (house, vehicle) under the SARFAESI Act after following a specific legal process. However, this process requires formal notices, waiting periods, and adherence to specific procedures — a recovery agent cannot simply seize your car in your driveway without due process.

Your Rights During Asset Repossession (Secured Loans)

For vehicle loans and home loans, if your loan becomes an NPA and the bank initiates repossession, you have important rights:

• The bank must issue a 60-day notice before initiating SARFAESI proceedings
• You have the right to file an objection within 45 days of the notice
• The bank must acknowledge your representation and provide a reasoned response
• You can approach the Debt Recovery Tribunal (DRT) to challenge the action
• Any auction of repossessed property must follow specific procedures — you must be given a reserve price and proper notice
• If the auction proceeds exceed your outstanding loan, the surplus must be returned to you

Physical seizure of a vehicle without proper SARFAESI notice or by force outside the permitted legal process is illegal. If agents forcibly take your vehicle without following due process, you have grounds for a police complaint and legal action.

Digital Lending Apps and Recovery Agents — Additional Rules (2022–2026)

Following a surge in complaints about abusive practices by digital lending apps in 2021–2022, RBI issued specific guidelines in 2022 and reinforced them through 2025 for digital lenders:

• No access to contacts: Digital lending apps cannot access your phone contacts. Calling your contacts to pressure you for repayment is explicitly prohibited.
• No camera or microphone access: Lending apps cannot access your device's camera, microphone, location (beyond what is necessary for onboarding), or gallery.
• No AI harassment: Automated bulk-calling or WhatsApp message campaigns designed to harass borrowers are prohibited.
• KFS disclosure: All digital lenders must provide a Key Fact Statement with APR, all fees, and recovery process details upfront.
• Cooling-off period: Digital lenders must provide a minimum cooling-off period during which you can exit the loan without penalty.

If a digital lending app has accessed your contacts and is threatening to call them unless you repay — this is both an RBI violation and potentially an offence under the IT Act and DPDP Act 2023.

How to File a Complaint Against a Recovery Agent

What You Still Owe — Rights Do Not Erase the Debt

This is important to state clearly: knowing your rights against recovery agent misconduct does not eliminate or reduce the amount you owe. Your rights are about how the recovery process happens — not whether repayment happens.

If you are behind on loan payments, the most productive path forward combines asserting your rights against harassment with taking active steps to address the debt itself. Banks are often willing to negotiate repayment plans, especially when the borrower is proactively communicating and shows good faith.

Use our Debt-Free Date Calculator to understand your full outstanding picture, and read our guide on what to do when your EMIs exceed your salary for a practical plan to address the root problem.

Special Situations — What About NBFC Loans and Fintech Lenders?

All NBFCs regulated by RBI are required to follow the same Fair Practices Code as banks, including the rules on recovery agent conduct. The vast majority of personal loan apps operating in India are either NBFCs themselves or loan service providers partnered with NBFCs. They fall under the same framework.

There are, however, entities operating outside the regulated framework — informal moneylenders, unregistered apps, or entities registered abroad that technically fall outside RBI's direct jurisdiction. If you have borrowed from an unregistered lender, your legal protections are more limited, but the general provisions of IPC (criminal intimidation, trespass) still apply to any agent's conduct.

Frequently Asked Questions

Can a recovery agent call my family members?

Only if they are co-borrowers or guarantors on the loan. If a family member is not a party to the loan agreement, contacting them to pressure you for repayment is a violation of RBI guidelines and your right to privacy under the DPDP Act 2023.

Can a bank contact my employer?

Contacting your employer to inform them of your default or to pressure you through your employer is generally prohibited under RBI guidelines unless your employer is your guarantor or co-borrower. It could also constitute defamation if false statements are made about you.

What if the recovery agent visits my home with multiple people?

Sending multiple agents together to intimidate you is prohibited. A single agent visit during permitted hours (8 AM to 7 PM) is allowed. If multiple agents arrive to intimidate or if any agents physically prevent you from leaving or entering your home, call the police immediately. This is trespass and criminal intimidation.

Can I record calls with recovery agents?

Yes. Recording a phone call you are participating in (i.e., you are one party to the conversation) is legal in India for personal use. You do not need to inform the other party. These recordings are admissible as evidence in consumer forums and with the Banking Ombudsman.

Will complaining to RBI affect my CIBIL score?

No. Filing a legitimate complaint about recovery agent conduct with RBI or the Banking Ombudsman does not affect your credit score. Your CIBIL score reflects your payment history, outstanding balances, and credit utilisation — not whether you have filed grievances against your lender.