Archive · 10 Aug 2026
RBI rules bar device locking and harassment in loan recovery
The Reserve Bank of India is like the country's money manager.
It made new rules to make sure banks are fair when people miss loan payments.
When you borrow money from a bank, you usually pay a little bit every month.
This is called an EMI.
If someone misses these payments, the bank wants its money back.
The new rules say banks cannot lock your phone or computer to force you to pay.
They also say recovery agents cannot shout at you or call your family to embarrass you.
Banks cannot read your messages or look at your private photos either.
But people must still pay back the money they borrowed.
The new rules start on 1 January 2027.
The Reserve Bank of India (RBI) issued new loan recovery directions on 6 August, taking effect from 1 January 2027.
Banks are barred from using technology to forcibly lock or restrict borrowers' personal devices for recovery of unrelated loans.
Recovery agents cannot use abusive language, threats, public shaming, or contact relatives, friends, or colleagues to intimidate borrowers.
Banks and technology providers cannot access personal data such as contacts, photos, SMS, call logs, and location history for recovery purposes.
The new rules do not cancel or dilute loan obligations; borrowers remain responsible for unpaid EMIs, pending debt, and applicable interest.
- Who
- The Reserve Bank of India (RBI)
- What
- Issued new guidelines protecting borrowers from intrusive loan recovery practices, including bans on device locking, agent harassment, and personal data misuse
- When
- Issued on 6 August, effective from 1 January 2027
- Where
- India
- Why
- To shield borrowers from harassment, device locking, and data misuse during loan recovery
- Regulator
- Reserve Bank of India (RBI)
- Guidelines title
- Conduct of Regulated Entities in Recovery of Loans and Engagement of Recovery Agents
- Issued on
- 6 August
- Effective from
- 1 January 2027
- Device restriction start
- 30 days past due
- Full restrictions (financed device)
- 60 days past due
- Protected essential functions
- Incoming calls, SMS, emergency SOS
- Prohibited data access
- Contacts, photos, SMS, call logs, location history