Recovery Agent Rules in India: What They Can and Cannot Legally Do

Share
Recovery Agent Rules in India: What They Can and Cannot Legally Do

A 34-year-old logistics manager in Pune, call him Anand, fell behind on a ₹4 lakh personal loan after a six-month gap between jobs. By the third missed EMI, the calls started. By the fifth, they were coming at 11 PM. The recovery agent called Anand's mother, called his old office's HR, and put a WhatsApp message in a group chat with his cousins. Anand paid down the loan eventually, but the agent had broken at least four RBI rules and committed acts that, by the letter of the law, are criminal offences.

Almost none of this is legal. And almost every borrower being harassed by a recovery agent has more rights than they realise. Here is what the rules actually say, what an agent cannot do, and what to do if it happens to you.

Why the rules tightened

Recovery-agent abuse, late-night calls, threats, public shaming on WhatsApp groups, contact with employers and relatives, became serious enough that the RBI issued a sharp circular in August 2022 directing all regulated lenders (banks, NBFCs, ARCs, housing finance companies) to rein in their agents. Those rules sit inside the Fair Practices Code that every regulated lender is required to follow. In 2024, the RBI further consolidated digital-lending and recovery norms; in 2025, a draft proposal was floated to uniformly apply the same recovery rules across all regulated entities, including cooperative banks and microfinance lenders.

The lender is responsible for the agent's behaviour. The bank cannot shrug and say "the agent did that, not us." If their agent breaks a rule, the lender is on the hook for it under RBI's regulations.

What an agent can legally do

  • Contact you between 8 AM and 7 PM, at your residence or, if you've given a workplace as contact, at your workplace.
  • Ask for repayment, communicate the outstanding amount, and explain consequences of default (additional interest, credit-score impact, legal recourse open to the lender).
  • Carry valid identification, bank-issued ID card, authorisation letter naming them as agent for your specific loan account.
  • Record the call, after telling you it is being recorded.
  • Offer settlement or restructuring options on behalf of the lender.

What an agent cannot do, these are the actual rules

Cannot call before 8 AM or after 7 PM. Not on Sundays earlier or holidays later. The window is the same every day.

Cannot use abusive language, threats, or intimidation. Not verbal, not written, not over WhatsApp. The RBI's exact words are "intimidation or harassment of any kind, either verbal or physical." Threatening physical harm, foreclosure that isn't legally available, criminal cases that don't apply, or arrest (recovery agents have no power of arrest, only the police do, with a court order) are all rule-breaks.

Cannot contact your family, employer, neighbours, friends, or anyone else about your loan. Your loan is a private matter between you and the lender. The agent calling your sister to "make her aware" violates both the Fair Practices Code and your privacy rights under the Digital Personal Data Protection Act, 2023. Posting in WhatsApp groups, sending messages to your contacts list, or speaking to your watchman, all prohibited.

Cannot show up at your residence or workplace to publicly shame you. Hanging posters, shouting at the gate, surrounding the house, all illegal and arguably criminal.

Cannot threaten arrest, "police case," or "non-bailable warrant." Civil loan default is not a criminal offence. Cheque bounce on EMI repayment can be a Section 138 NI Act matter, but that's a process initiated by the lender in court, the agent does not get to invoke it as a threat.

Cannot take physical possession of any asset outside the SARFAESI process (for secured loans), or without due process and court orders (for everything else). An agent cannot tow your bike "for non-payment." Even for vehicle loans, the lender has to follow notice procedures under the loan contract and applicable law.

Cannot continue contact if you've raised a dispute that the lender hasn't yet resolved. The lender's grievance-redressal process must run its course first.

The 30-day notice (and other procedural protections)

Before a loan is handed off to a recovery agent, most lenders are required under their own Fair Practices Code policy to notify the borrower in writing. The exact form varies, but you should ordinarily receive a written notice naming the agent or the agency, before the agent makes contact. If an agent calls you out of the blue with no prior notice, that itself is a deviation you can complain about.

If the loan is secured (home loan, loan against property, gold loan, vehicle loan with hypothecation), the SARFAESI Act gives the lender a separate, formal route for taking possession, with a 60-day notice, opportunity for representation, and District Magistrate involvement. No recovery agent can short-circuit this.

If you're being harassed, the practical playbook

1. Document everything. Record calls (legal in India when you are a party to the call). Screenshot WhatsApp messages with timestamps. Note dates, times, the agent's name, the phone number they called from. This is your evidence.

2. Send a written complaint to the lender first. Email the lender's grievance redressal officer, not the agent or branch, describing the breaches. State that you are putting them on notice and that further harassment will be escalated to the RBI and police. Lenders are required to acknowledge within 24 hours and resolve grievances within 30 days. Keep the email.

3. Escalate to the RBI Ombudsman if unresolved in 30 days. Use the RBI's integrated CMS portal (cms.rbi.org.in), it's free, online, and you don't need a lawyer. The Ombudsman has the power to order compensation up to ₹20 lakh for harassment, mental agony, or expenses caused.

4. File a police complaint for the criminal acts. Threats, intimidation, public shaming, unauthorised contact with family or employer, these aren't just rule-breaks, they are offences under the Bharatiya Nyaya Sanhita (BNS), which replaced the Indian Penal Code in July 2024. Provisions on criminal intimidation, extortion, defamation, and causing fear of injury all apply. File an FIR or NCRP cyber-crime complaint depending on the medium.

5. Consumer court for compensation. Mental agony, harassment, reputational damage caused by recovery practices that violate Fair Practices Code are grounds for a consumer complaint. Decisions in 2022-24 have awarded ₹50,000-₹5 lakh in compensation for such cases.

What rarely helps

  • Ignoring calls and hoping it stops. The agent's instructions are usually output-linked, they get paid on recovery. Ignoring escalates, it doesn't quiet things down. A written complaint to the lender, even a one-page email, works far better than not picking up the phone.
  • Engaging the agent in an argument. Anything you say can be twisted in their recording. Keep contact in writing wherever possible. "Please email me the details" is a complete answer.
  • Paying a settlement only the agent has promised. Settlement offers must come on lender letterhead, signed by an authorised official, with a clear amount and a date by which credit bureau update will be reflected. Agents have no authority to settle on their own.

The bottom line. The borrower has more rights here than the agent has powers, and almost every harassment tactic an agent uses (late-night calls, threats, contacting family, public shaming, claims of arrest) is a rule-break, often a criminal offence, that the lender is legally responsible for. Document. Complain in writing to the lender first. Escalate to the RBI Ombudsman if not resolved in 30 days. File a police complaint for the criminal acts. None of this requires a lawyer to start. Anand's agent could have faced consumer court damages and criminal proceedings, Anand just didn't know that at the time. You can.


This article is for educational purposes only and does not constitute legal or financial advice. For specific complaints, consult a qualified legal professional or an RBI-recognised credit counsellor. Where individual rights are at stake, file complaints through the official RBI CMS portal (cms.rbi.org.in), the Banking Ombudsman, or local law-enforcement as appropriate.

Chat on WhatsApp