RBI Rules on Recovery Agents: What Banks and Collection Agents Are Barred From Doing to a Borrower

Coercive loan recovery is not a grey area in Indian banking law; it is expressly prohibited. The Reserve Bank of India's Master Circular on Loans and Advances, RBI/2010-11/73 (DBOD.No.Dir.BC.13/13.03.00/2010-11, dated 1 July 2010), devotes an entire section to "Recovery Agents engaged by banks", and nineteen years ago the Supreme Court, in Manager, ICICI Bank Ltd v Prakash Kaur (decided 26 February 2007), held in terms that "the Banks cannot employ goondas to take possession by force." A borrower who is threatened, shamed before their neighbours, or telephoned at odd hours is not facing lawful recovery. They are facing conduct that both the regulator and the courts outlawed long ago.

This playbook sets out precisely what a bank and its collection agents are barred from doing, the statutory scaffolding behind those bars, and the escalation ladder a borrower can climb, ending in a Debt Recovery Tribunal (DRT) appeal under Section 17 of the SARFAESI Act, 2002. Every rule cited below is traceable to a Reserve Bank circular dated between 24 May 2007 and 1 July 2010 or to a reported judgement, because in Your-Money-Your-Life matters a defence that cannot be sourced is a defence that will not hold.

The Statutory Position

There is no single "Recovery Agents Act". The rules that govern collection conduct are regulatory, issued by the RBI under Sections 21 and 35A of the Banking Regulation Act, 1949, and they bind every scheduled commercial bank. The consolidated position sits in the Master Circular RBI/2010-11/73 dated 1 July 2010, which folds in the operative circular on the subject, RBI/2007-2008/296 (DBOD.No.Leg.BC.75/09.07.005/2007-08, dated 24 April 2008). That April 2008 circular was itself the RBI's response to the Supreme Court's criticism of collection practices in the Prakash Kaur judgement delivered fourteen months earlier.

The 24 April 2008 circular carries three commitments that a borrower can quote back at any agent. First, the RBI "requested the Indian Banks' Association to formulate, in consultation with Indian Institute of Banking and Finance (IIBF), a certificate course for Direct Recovery Agents with minimum 100 hours of training", and required banks to ensure that within one year every recovery agent had obtained that certificate. Second, banks were directed to carry out due diligence on agents consistent with the outsourcing guidelines of November 2006, including pre-employment police verification of the agent's antecedents. Third, and most powerfully, the RBI reserved the right to "consider imposing a ban on a bank from engaging recovery agents in a particular area, either jurisdictional or functional, for a limited period", with the period or area of the ban extendable in cases of persistent breach.

Alongside the conduct rules sits the security-enforcement machinery. Where a loan is a secured loan and the account has been classified as a non-performing asset, a bank does not need a recovery agent's muscle at all; it has Section 13 of the SARFAESI Act, 2002, which lets it issue a 60-day demand notice under Section 13(2) and, on default, take possession under Section 13(4) through a legally appointed authorised officer. The point is decisive: the statute already gives banks a lawful route to enforce a mortgage, so intimidation is never the "only option" an agent may claim it to be. A recovery agent has no statutory power of possession whatsoever; only the authorised officer, and where required a District Magistrate acting under Section 14, can take physical possession.

Procedure Step by Step

A compliant recovery follows a fixed sequence. If your lender skips any of these steps, that omission is itself a defence, because the 1 July 2010 Master Circular treats the sequence, not merely the outcome, as mandatory.

1. Default and classification. The account must first be genuinely overdue and, for SARFAESI action, classified as a non-performing asset after 90 days of default, per the RBI's asset-classification norms carried in the same Master Circular dated 1 July 2010.
2. Written notice from the bank, not the agent. Under Section 13(2) of the SARFAESI Act, 2002, the bank must serve a 60-day demand notice before any enforcement. A phone call from an agent demanding immediate payment is not a substitute for this statutory notice.
3. The borrower is told who is collecting. The 24 April 2008 circular requires the bank to "inform the borrower the details of recovery agency firms / companies while forwarding default cases to the recovery agency." An anonymous caller who will not name the agency is acting outside the circular.
4. The agent proves authority. At the doorstep the agent must carry a copy of the bank's notice, the authorisation letter from the bank, and a photo identity card. A borrower is entitled to refuse to deal with anyone who cannot produce all three, on the strength of the 1 July 2010 Master Circular.
5. The agent is verified and trained. The agent must have cleared pre-employment police verification and, under the 24 April 2008 circular, obtained the IIBF certificate built on the minimum 100-hour course.
6. Contact stays civilised. Calls and visits must be made only at reasonable times and never at odd hours, and the agent may not use muscle power, abusive language, or public shaming, all three being expressly barred by the 1 July 2010 Master Circular.
7. Possession, if any, is taken lawfully. Only the bank's authorised officer under Section 13(4), or the District Magistrate under Section 14 of the SARFAESI Act, 2002, can take possession of secured property. A recovery agent physically seizing a vehicle or locking a home is committing a wrong the Supreme Court condemned in 2007.

Borrower Defences Available

A borrower has a layered set of remedies, running from an internal complaint that costs nothing to a tribunal appeal with a statutory deadline. The table below maps the ladder; the paragraphs that follow explain the grounds, deposits, and timelines attached to each rung.

Internal escalation first. Every bank must publish a grievance-redressal mechanism, and the 1 July 2010 Master Circular makes the bank, not the outsourced agency, responsible for agent conduct. A written complaint to the branch and the nodal officer, sent by email so it is timestamped, is the anchor document for everything that follows.

The Ombudsman. If the bank does not resolve the complaint within 30 days, or rejects it, the borrower can approach the RBI's integrated Ombudsman under the Reserve Bank - Integrated Ombudsman Scheme, 2021, at no fee. Harassment by recovery agents is a listed ground of complaint, and the scheme has been the single-window forum since it consolidated three earlier schemes on 12 November 2021.

Criminal law runs in parallel. Threats, assault, or forcible entry are not merely regulatory breaches; they are offences. A borrower can lodge a First Information Report for criminal intimidation or trespass, and the Prakash Kaur court in 2007 pointedly observed that recovery "could be done only through legal means", leaving agents personally exposed. Filing an FIR does not waive the loan, and the debt survives, but the agent's conduct becomes a separate matter.

The DRT appeal under Section 17. Where the bank has actually taken a measure under Section 13(4), such as taking possession or issuing a sale notice, the borrower may file a securitisation application before the Debt Recovery Tribunal under Section 17 of the SARFAESI Act, 2002, within 45 days of the measure. Contrary to a common fear, there is no mandatory pre-deposit to file a Section 17 application; the pre-deposit of 50 per cent (reducible to 25 per cent) bites only at the next stage, an appeal to the Debt Recovery Appellate Tribunal under Section 18. The DRT can restore possession to the borrower if the enforcement was procedurally defective.

One-time settlement. For a borrower with a genuine inability to pay, a one-time settlement (OTS) closes the account for a negotiated lump sum, usually pitched around the outstanding principal with part of the interest waived. An OTS should always be recorded in a written settlement letter that states the account is "settled" and specifies whether it is reported to the credit bureaux as "settled" rather than "closed", because the two labels affect a credit score differently. Before signing, model the alternative of clearing the dues in full using the foreclosure calculator, and if several loans are involved, test whether a single debt-consolidation facility lowers the monthly outflow enough to avoid default in the first place. A borrower already tagged adversely should also read our note on the 15-day representation right against a wilful-defaulter classification, decided in SBI v Jah Developers in 2019.

Recent Tribunal/HC Position

The governing authority remains Manager, ICICI Bank Ltd v Prakash Kaur & Ors, decided by a Supreme Court bench of Dr A.R. Lakshmanan and Altamas Kabir on 26 February 2007 and reported at (2007) 2 SCC 711 and AIR 2007 SC 1349. The facts were stark: agents acting for the bank had seized a vehicle by force, and the Court used the case to lay down a general principle for the industry.

The Court's language has not softened in the years since. It held that "the recovery of loans or seizure of vehicles could be done only through legal means" and that "the Banks cannot employ goondas to take possession by force." It went further, describing the outsourced-agent model of collection as "the modernised version of Shylock's pound of flesh", and it recommended that recovery agents be licensed and brought under RBI oversight, that banks build in-house recovery departments staffed by trained personnel, and that smaller disputes be routed to Lok Adalats rather than to musclemen. The RBI's 24 April 2008 circular, with its 100-hour IIBF course and its ban power, is the direct regulatory descendant of those 2007 recommendations.

The practical lesson for a borrower in 2026 is that the burden of lawful conduct sits squarely on the bank. A lender cannot outsource its way out of liability; the 1 July 2010 Master Circular makes the bank answerable for its agent, and the Prakash Kaur judgement makes coercive possession actionable. When those two documents are read together, an agent who arrives without an authorisation letter, refuses to name the agency, and threatens force is not enforcing a debt. They are handing the borrower a ready-made complaint to the Ombudsman and, where possession has been taken, a Section 17 application to the DRT.

FAQ

Can a recovery agent seize my car or lock my house?

No. Under Section 13(4) and Section 14 of the SARFAESI Act, 2002, only the bank's authorised officer or the District Magistrate may take possession of secured property. The Supreme Court held in Prakash Kaur (26 February 2007) that "the Banks cannot employ goondas to take possession by force", so an agent who seizes an asset is acting unlawfully and can face a police complaint.

What documents must a recovery agent show me at my door?

Three, per the RBI Master Circular dated 1 July 2010: a copy of the bank's notice, the bank's authorisation letter naming the agent, and a photo identity card. If any of the three is missing you are entitled to decline to deal with that person, and the bank must have already told you, in writing, the name of the recovery agency under the 24 April 2008 circular.

Is there a time restriction on when agents can contact me?

Yes. The 1 July 2010 Master Circular bars contact at odd hours and requires collection to stay civil. Repeated calls late at night, calls to your workplace or relatives to shame you, or any threat of force fall outside the circular and can be reported to the bank's nodal officer and then to the RBI Ombudsman under the 2021 scheme.

Do I have to deposit money before challenging the bank at the DRT?

No, not to file. A securitisation application under Section 17 of the SARFAESI Act, 2002, filed within 45 days of a Section 13(4) measure, carries no mandatory pre-deposit. The pre-deposit of 50 per cent, which the tribunal may reduce to 25 per cent, applies only to a later appeal under Section 18 before the Appellate Tribunal.

Can the RBI actually punish a bank for agent harassment?

Yes. The 24 April 2008 circular expressly allows the RBI to "consider imposing a ban on a bank from engaging recovery agents in a particular area, either jurisdictional or functional, for a limited period", and to extend that period or area where breaches persist. This is a live supervisory power, not a dead letter.

Does a one-time settlement hurt my credit score?

It can. An OTS closes the account for a negotiated lump sum, but if the bank reports it to the credit bureaux as "settled" rather than "closed", future lenders read that as a partial default. Insist that the written settlement letter states the reporting label, and compare the cost of settling against clearing the dues in full using the foreclosure calculator before you agree.

What is the single most useful thing to do the moment harassment starts?

Put it in writing. Email the branch manager and the bank's nodal grievance officer the same day, naming the agent, the time, and the conduct, and keep any recordings or messages. That timestamped complaint is what unlocks the RBI Ombudsman route after 30 days and supports both an FIR and, if possession follows, a Section 17 DRT application within the 45-day window.