RBI Fair Practices Code: Recovery agent timings, conduct, and accountability rules

The Reserve Bank of India tightened the rules on loan recovery agents with its circular of 12 August 2022, and the message to lenders was blunt: a borrower in default is still a borrower with rights. With the policy repo rate held at 5.25% at the Monetary Policy Committee meeting of 8 April 2026, floating-rate EMIs remain elevated, more instalments are slipping, and more accounts are being handed to third-party recovery agencies. The single most useful fact a stressed borrower can carry is the contact window the law permits: an empanelled agent may reach you only between 8 AM and 7 PM, local time.

This playbook sets out exactly what a recovery agent may and may not do under the RBI Fair Practices Code, why the lender — not the agency — remains accountable for that conduct under the 2022 outsourcing guidelines, and the three-tier complaint route that ends, free of cost, at the RBI Ombudsman under the Reserve Bank-Integrated Ombudsman Scheme, 2021. Every rule below traces to a specific RBI direction or a reported judgement; where a fact could not be sourced, it has been omitted.

If your account has already slipped into default, model your exit before you negotiate. Our foreclosure calculator shows the lump sum needed to close the loan, while the loan eligibility calculator helps you judge whether a balance transfer is even open to you once a default is reported. Knowing the number on 31 March, before the agent calls, changes the entire conversation.

The Statutory Position

RBI's authority to police recovery conduct is not improvised. It flows from Section 35A of the Banking Regulation Act, 1949, which empowers the Reserve Bank to issue binding directions to every banking company, and from Chapter IIIB of the Reserve Bank of India Act, 1934, which extends the same directive power over non-banking financial companies. A bank or NBFC that breaches the recovery-conduct rules is therefore breaching a statutory direction, not merely a best-practice guideline issued in 2022.

The operative instrument is the Fair Practices Code, embedded in RBI's Master Directions for banks and NBFCs and reinforced by the circular dated 12 August 2022, "Outsourcing of Financial Services - Responsibilities of regulated entities employing Recovery Agents." That circular fixed the lawful contact window at 8 AM to 7 PM, barred the use of threatening, abusive or intimidating language, and prohibited any attempt to publicly shame a defaulter. Crucially, it made the lender accountable for the agent's behaviour: outsourcing the call does not outsource the liability.

It helps to separate two tracks that borrowers routinely confuse. Secured-asset enforcement — a demand under Section 13(2) and possession under Section 13(4) of the SARFAESI Act, 2002 — is a formal legal process with its own appeal route to the Debt Recovery Tribunal. The conduct of a recovery agent who telephones, visits or messages you is governed separately by the Fair Practices Code. A lender may lawfully invoke SARFAESI on a secured loan and still be liable if its agent crosses the 7 PM line or threatens your family.

The table below maps the regulatory architecture so you can cite the right instrument when you complain.

A recovery agency must be formally empanelled by the lender before it can act, and the borrower is entitled to know the agency's identity. An agent who refuses to identify the bank or NBFC he represents is already outside the 12 August 2022 framework, and that refusal is itself a documentable breach.

The accountability rule has a structural reason. RBI's outsourcing guidelines proceed on the principle that a regulated entity cannot contract out of its regulatory obligations: when a bank or NBFC delegates collection to a third party, the conduct standards of the Fair Practices Code travel with the work. This is why the 12 August 2022 circular speaks of the "responsibilities of regulated entities" rather than of agencies — the duty is fixed on the lender, and the 30-day grievance clock under RB-IOS, 2021, runs against the lender, not the contractor. For a borrower, this collapses a tangle of intermediaries into a single accountable defendant.

Procedure Step by Step

Lawful recovery follows a sequence, and so should your response. The steps below describe what an agent must do — and what you should record at each stage to build a complaint that survives scrutiny.

1. Empanelment and notification. The lender must engage only an agency it has empanelled, and the borrower should ordinarily be told that the account has been assigned for recovery. Note the date of the first contact and the name of the person calling.

1. Contact within the 8 AM to 7 PM window. Any call, visit or message outside 8 AM to 7 PM, local time, is a per-se breach of the 12 August 2022 circular. Log the exact time of every contact; a single 9:40 PM call is independently actionable.

1. No coercion, no public shaming. The agent may not use threatening or abusive language, may not call your neighbours, relatives or employer to embarrass you, and may not publicise the default. Each of these is separately prohibited under the Fair Practices Code.

1. No more than reasonable contact. Persistent, repeated calls designed to harass rather than communicate fall foul of the conduct rules. Keep your call log; a screenshot showing 14 calls in one hour is evidence, not anecdote.

1. Written escalation to the lender's nodal officer. Send a dated written complaint to the lender's grievance redressal or nodal officer. This is the mandatory first tier and starts the 30-day clock running.

1. Escalation to the RBI Ombudsman after 30 days. If the lender does not resolve the complaint within 30 days, or rejects it, you may approach the RBI Ombudsman under RB-IOS, 2021, at no cost.

Throughout, your evidence file is everything. Date-stamped call logs, voice recordings where lawful, photographs of an after-hours visit, and copies of every written communication convert a "your word against theirs" dispute into a documented breach of a 2022 RBI direction.

Borrower Defences Available

A default does not strip you of remedies; it changes which ones apply. The first and cheapest defence is the complaint architecture itself. Tier one is the lender's nodal officer, who has 30 days to resolve the grievance. Tier two, if that 30-day window lapses without a fair resolution, is the RBI Ombudsman under the Reserve Bank-Integrated Ombudsman Scheme, 2021, which costs the borrower nothing to invoke and covers banks and large NBFCs alike.

Beyond grievance redress, conduct that crosses into threats or force attracts the general criminal law. Since 1 July 2024, the Bharatiya Nyaya Sanhita, 2023, which replaced the Indian Penal Code, 1860, supplies the offences of criminal intimidation and assault that a borrower can invoke through an FIR where a recovery agent uses or threatens violence. A regulatory complaint and a police complaint are not mutually exclusive; the 12 August 2022 circular and the criminal statute operate on parallel tracks.

For the underlying debt itself, the most constructive defence is often a negotiated exit rather than litigation. Banks operate board-approved compromise settlement policies framed under RBI's "Framework for Compromise Settlements and Technical Write-offs" dated 8 June 2023. A one-time settlement (OTS) closes the account for an agreed lump sum, but borrowers should understand the trade-off before signing: a settled account is reported to the credit bureaus and will mark your credit score for years. Run the home loan EMI calculator against the proposed settlement to confirm the lump sum genuinely beats continuing to service the loan.

The remedy ladder below summarises the route, forum, timeline and cost.

Note the distinction in tier four: a borrower aggrieved by possession action under Section 13(4) of the SARFAESI Act, 2002, has a separate statutory remedy — a securitisation application to the DRT under Section 17, ordinarily within 45 days. That is a defence against the enforcement, not against the agent's conduct, and we cover the possession stage in detail in our note, "When the Bank Takes Possession Under SARFAESI Section 13(4)."

Timing discipline is the borrower's strongest practical lever. Each tier in the ladder has its own clock: the lender's 30-day window under RB-IOS, 2021, the 45-day SARFAESI Section 17 limitation, and the immediate availability of an FIR under the Bharatiya Nyaya Sanhita, 2023. Missing a limitation date can forfeit a remedy that the law otherwise hands you for free, so the prudent step is to date every complaint in writing and retain proof of dispatch. A borrower who writes to the nodal officer on day one and diarises day 31 has preserved every escalation the framework offers; a borrower who relies on telephone assurances has preserved none.

Recent Tribunal/HC Position

The judicial benchmark on recovery-agent conduct remains the Supreme Court of India's decision in ICICI Bank Ltd. v. Prakash Kaur (2007), reported at indiankanoon.org/doc/1714280. The Court strongly deprecated the practice of banks deploying musclemen and recovery goons to seize assets and recover dues, holding that recovery of loans or seizure of hypothecated property must be effected only through lawful means and due legal process, not through hired strong-arm tactics. The judgement predates the 2022 circular by 15 years, yet it is the doctrinal foundation on which RBI's later conduct rules rest.

That principle has hardened into regulatory text. Where the Supreme Court in 2007 condemned coercive recovery as a matter of common law and constitutional propriety, RBI's 12 August 2022 circular converted the same principle into an enforceable direction with a specific 8 AM to 7 PM window and an express bar on intimidation. A borrower today therefore stands on two pillars at once: a 2007 Supreme Court holding that coercive recovery is unlawful, and a 2022 RBI direction that makes the lender accountable for every breach by its agent.

The practical takeaway from the case law is that courts treat the lender as the principal. An agency engaged by a bank acts on the bank's behalf, and the bank cannot disown liability by pointing to the contractor. That is precisely the accountability the 2022 outsourcing guidelines codified, and it is why the first formal complaint should always be addressed to the lender's nodal officer, on the record, within the 30-day framework.

FAQ

What are the lawful hours a recovery agent can contact me?

Under RBI's circular of 12 August 2022, a recovery agent may contact a borrower only between 8 AM and 7 PM, local time. Any call, message or visit outside that window is a breach of an RBI direction and should be logged with its exact timestamp for your complaint to the lender's nodal officer.

Can a recovery agent visit my home or call my relatives and employer?

No. The Fair Practices Code prohibits agents from visiting or calling neighbours, relatives or your employer to embarrass you, and bars any public shaming of a defaulter. An agent who does so breaches the conduct rules, and the lender remains accountable under the 2022 outsourcing guidelines.

Who is responsible if the agent misbehaves — the agency or the bank?

The lender. RBI's 2022 outsourcing guidelines make the bank or NBFC accountable for the conduct of any recovery agency it has empanelled. This mirrors the Supreme Court's position in ICICI Bank Ltd. v. Prakash Kaur (2007), which treated the lender as the principal responsible for its agents.

How do I complain, and how long does it take?

Send a dated written complaint to the lender's nodal or grievance officer first. The lender has 30 days to resolve it. If it is not resolved or is rejected within those 30 days, you may escalate to the RBI Ombudsman under the Reserve Bank-Integrated Ombudsman Scheme, 2021, free of cost.

Does a recovery agent's harassment cancel my loan or my default?

No. The conduct rules govern how recovery is pursued, not whether the debt is owed. A harassment complaint under the 12 August 2022 circular runs separately from the underlying liability, which you address through repayment, a one-time settlement, or a SARFAESI Section 17 challenge at the DRT where possession is taken.

Is a one-time settlement a good idea?

It depends on the numbers. Banks frame OTS offers under RBI's "Framework for Compromise Settlements and Technical Write-offs" dated 8 June 2023. A settlement closes the account for an agreed lump sum but is reported to credit bureaus and dents your credit score for years, so compare the settlement against the foreclosure figure before signing.

Can I file a police complaint as well as an RBI complaint?

Yes. Where a recovery agent threatens or uses violence, the criminal-intimidation and assault provisions of the Bharatiya Nyaya Sanhita, 2023 — in force since 1 July 2024 — allow you to lodge an FIR. The regulatory complaint to RBI and the criminal complaint to the police operate on parallel, independent tracks.