No calls before 8 am or after 7 pm: the RBI circular that reins in your lenders recovery agents

A missed EMI does not hand your lender, or the agency it hires, a licence to ring you at 6:30 in the morning, message your employer or shame you in a family WhatsApp group. On 12 August 2022 the Reserve Bank of India (RBI) issued circular RBI/2022-23/108, reference DOR.ORG.REC.65/21.04.158/2022-23, titled "Outsourcing of Financial Services - Responsibilities of regulated entities employing Recovery Agents". Its single most quoted line bars recovery calls before 8:00 a.m. and after 7:00 p.m. This playbook sets out what the circular says, who it binds, how to document a breach and where it sits alongside the statutory recovery routes under the SARFAESI Act, 2002 and the RDDB Act, 1993.

The circular is short (6 numbered paragraphs plus an Annex listing 26 earlier RBI instructions), but it is the most direct statement the RBI has made on the conduct of recovery agents. It does not cancel your debt. What it does is define, in writing, the line between lawful collection and harassment, and it places responsibility for that line on the bank or NBFC itself.

The Statutory Position

The circular opens, in paragraph 1, by restating a principle the RBI has applied "from time to time": the ultimate responsibility for outsourced activities vests with the regulated entity (RE), which is therefore responsible for the actions of its service providers, including recovery agents. In plain terms, a bank cannot defend a harassing call by saying the agency acted on its own. The full text is published on the RBI website at rbi.org.in.

Paragraph 2 records that agents employed by REs "have been deviating from the extant instructions" and lists the conduct that REs must strictly ensure neither they nor their agents resort to. The table below sets out each prohibited act as the circular words it.

Paragraph 3 states that these instructions supplement, and must be read with, the existing RBI guidelines tabulated in the Annex. That Annex runs to 26 entries, beginning with the Guidelines on Fair Practices Code for Lenders dated 5 May 2003 and including the 24 April 2008 instruction on Recovery Agents Engaged by Banks, the 9 November 2017 directions on outsourcing by NBFCs and the 24 June 2020 circular on loans sourced over digital lending platforms. Paragraph 4 then warns that "any violation in this regard by REs will be viewed seriously".

Paragraph 5 defines who is bound. The scope is wide, and it matters because many borrowers assume only banks are covered.

The inclusion of Asset Reconstruction Companies (ARCs) is significant for anyone whose loan has been sold. An ARC that buys your account takes over the recovery, and under paragraph 5 it is equally bound by the 8:00 a.m. to 7:00 p.m. window. The paragraph 6 exclusion for microfinance loans does not mean those borrowers are unprotected; it means their conduct rules sit in the separate Master Direction dated 14 March 2022 rather than in this circular.

It is equally important to be clear about what the circular is not. It is a regulatory instruction from the RBI to the entities it supervises; it is not a section of the SARFAESI Act or the RDDB Act. The statutory recovery routes remain fully available to a lender. A secured creditor can still issue a demand notice and take measures under Section 13(4) of the SARFAESI Act, and a borrower aggrieved by those measures can still appeal to the Debt Recovery Tribunal under Section 17 within 45 days (see the SARFAESI and DRT entries in our glossary on SARFAESI and glossary on the DRT). The circular governs how collection is done, not whether a lawful debt is owed. The bare text of both statutes is available on indiacode.nic.in.

Procedure Step by Step

The circular gives you a standard. Turning a breach of that standard into a remedy depends on evidence and on raising the complaint with the right body in the right order. The sequence below is the one the Oquilia Research Desk recommends for a borrower receiving calls outside the 8:00 a.m. to 7:00 p.m. window, or any of the 8 forms of conduct listed above.

1. Log every contact from day 1. Record the date, time to the minute, calling number, the name the caller gives and the substance of the call. A call at 7:42 p.m. is a breach of paragraph 2; a call at 6:58 p.m. is not. Precision is what makes the log useful.
2. Preserve screenshots and call records. Export your phone's call history for the period and screenshot every SMS, WhatsApp or social media message. Paragraph 2 specifically names "inappropriate messages either on mobile or through social media", so these are direct evidence.
3. Collect statements from third parties. If a relative, referee, friend or employer has been contacted, ask them to note the date, time and content. Intrusion on the privacy of "family members, referees and friends" is item 3 in the table above.
4. Identify the regulated entity. Ask the caller which bank, NBFC or ARC they represent. Under paragraph 1, that entity carries ultimate responsibility, so your complaint is addressed to it, not merely to the agency.
5. File a written complaint with the lender's grievance redress officer. Quote the circular number RBI/2022-23/108 and its date, 12 August 2022, and attach your log. The RBI's 27 January 2021 circular on Strengthening of Grievance Redress Mechanism in Banks, which appears at entry 20 of the Annex, is the framework that complaint enters.
6. Escalate to the RBI if the lender does not resolve it. Unresolved complaints against REs can be escalated through the RBI's complaint management system at cms.rbi.org.in. Attach the same log and the lender's reply, if any.
7. Approach the police for criminal conduct. Threats of violence, physical intimidation or extortion go beyond a regulatory breach; record the incident with dates and lodge a police complaint alongside the RBI route.
8. Keep your repayment strategy separate. A complaint about agent conduct does not pause the loan, interest or any SARFAESI timeline. Run your numbers in parallel using the personal loan EMI calculator or, if you are considering closing the account, the loan foreclosure calculator.

The table below is a simple way to tell, at the moment a call lands, whether the timing alone is a breach. The permitted window is 11 hours (8:00 a.m. to 7:00 p.m.); the remaining 13 hours of each day are off limits for recovery calls.

Note that a call inside the window can still breach the circular. The 8:00 a.m. to 7:00 p.m. rule is only 1 of 8 strands in paragraph 2; an abusive call at noon is still harassment.

Borrower Defences Available

The circular creates defences against conduct; the statutes create defences against recovery action itself. A borrower in default usually needs both, and confusing them is the commonest mistake the desk sees. The table below separates them.

Four practical defences flow from the circular.

First, the timing defence. Any recovery call before 8:00 a.m. or after 7:00 p.m. is a breach on its face, because paragraph 2 of the 12 August 2022 circular names those hours explicitly. You do not need to show that the call was abusive. Your call log, with times to the minute, is the whole case.

Second, the third-party defence. If an agent has contacted your relatives, referees or friends to pressure you, that is "intrusion upon the privacy" under paragraph 2. This defence is strongest when the third parties confirm the date and content in writing within days of the call.

Third, the responsibility defence. Paragraph 1 places "ultimate responsibility" on the RE. When an agency or a lender's front office tells you the agent is independent, quote paragraph 1 and the RBI's 3 November 2006 outsourcing guidelines (entry 2 in the Annex). A complaint addressed to the bank, NBFC or ARC itself cannot be deflected to a contractor.

Fourth, the misrepresentation defence. Paragraph 2 also bars "false and misleading representations". An agent claiming that a warrant has been issued, or that you will be arrested for a civil default, is making a representation you can test by asking for the case number, the court and the date of the order in writing.

What the circular does not give you is a defence to the debt. Your outstanding principal and interest keep running, and a secured lender can still use SARFAESI. If your loan is secured and the lender has moved to take possession, the defence that matters is the Section 17 appeal to the DRT within 45 days; the tribunal may direct a deposit although one is not mandatory under the provision. A borrower juggling several debts can model a consolidation route with the debt consolidation calculator before negotiating, and should keep an eye on how missed payments affect the credit score, because a conduct complaint does not stop credit reporting.

Digital borrowers deserve a specific mention. Entry 19 in the Annex is the RBI's 24 June 2020 circular requiring loans sourced over digital lending platforms to adhere to the Fair Practices Code and outsourcing guidelines. If your loan came through an app, the app's lending partner, which must be an RE, carries the paragraph 1 responsibility. Our digital lending glossary entry explains how to identify that partner.

Recent Tribunal/HC Position

The briefing notes for this playbook rest on the RBI circular itself rather than on a reported tribunal or High Court judgement, and the Oquilia Research Desk does not cite case law it has not verified. The operative regulatory position, as of 26 October 2026, is therefore the text of RBI/2022-23/108 dated 12 August 2022, read with the 26 instructions in its Annex.

Three points about that position are firm. First, paragraph 4 states that any violation "will be viewed seriously", which signals supervisory action against the RE rather than a private damages remedy created by the circular. Second, paragraph 3 makes the circular cumulative: it does not replace the 5 May 2003 Fair Practices Code or the 24 April 2008 recovery-agent instruction but adds to them. Third, paragraph 5 extends the same standard to ARCs, so the sale of your account to an ARC does not reset the rules.

On the tribunal side, the position that governs secured borrowers is statutory. Under Section 17 of the SARFAESI Act, a borrower aggrieved by measures under Section 13(4) may appeal to the DRT within 45 days, and while a pre-deposit is not mandatory, the tribunal may direct one. Conduct breaches by an agent can form part of the factual record before the DRT, but they do not by themselves extinguish the lender's statutory right to recover. Readers who want the full statutory text should consult indiacode.nic.in, and the RBI circular at rbi.org.in.

If a High Court or DRT ruling squarely applying the 8:00 a.m. to 7:00 p.m. rule is placed on the record, the desk will update this playbook with the citation, the bench and the date of the order.

FAQ

Can a recovery agent call me at 7:30 p.m.?

No. Paragraph 2 of RBI circular RBI/2022-23/108 dated 12 August 2022 bars REs and their agents from calling a borrower after 7:00 p.m. for recovery of overdue loans. A 7:30 p.m. call is outside the window and should be logged with the exact time.

Does the rule apply to NBFCs and loan apps, or only banks?

Paragraph 5 applies the circular to all NBFCs, including Housing Finance Companies, as well as commercial banks, co-operative banks, 5 named All-India Financial Institutions and all ARCs. A loan app's lending partner must be an RE, so the rule reaches app-based loans through that partner. Payments Banks are excluded, and microfinance loans are governed by the separate Master Direction of 14 March 2022.

The agency says the bank is not responsible for its behaviour. Is that right?

No. Paragraph 1 of the circular states that ultimate responsibility for outsourced activities vests with the RE, which is responsible for the actions of its service providers, including recovery agents. Address your complaint to the bank, NBFC or ARC and quote paragraph 1.

Can an agent call my parents or my employer?

Paragraph 2 bars acts that intrude upon the privacy of the debtor's family members, referees and friends, and acts intended to humiliate publicly. Contact used to pressure or shame you through those people falls within that prohibition; ask them to note the date, time and content of each call.

If I complain to the RBI, does my EMI or SARFAESI timeline stop?

No. The circular governs collection conduct only. Interest continues, and if your loan is secured, the 45-day limit under Section 17 of the SARFAESI Act for appealing measures under Section 13(4) to the DRT keeps running. Track both tracks separately.

Is calling me 15 times a day allowed if it is between 8 am and 7 pm?

No. Paragraph 2 separately bars "persistently calling the borrower", and its footnote gives calling repeatedly as the example. Timing within the 11-hour window does not cure persistent calling.

What should my complaint letter include?

Quote circular RBI/2022-23/108, reference DOR.ORG.REC.65/21.04.158/2022-23, dated 12 August 2022; list each breach with date and time; name the agency and the RE; and attach screenshots. If the RE does not resolve it, escalate through cms.rbi.org.in.

This playbook is general information prepared by the Oquilia Research Desk from the RBI circular dated 12 August 2022 and the statutory brief for Section 17 of the SARFAESI Act, 2002. It is not legal advice; for a specific dispute, consult an advocate.