RBI Fair Practices Code for recovery agents: training mandate, no-call hours, and the harassment escalation route

A late-evening WhatsApp call, a photograph of a borrower's neighbours circulated on a society group, a "field visit" team posted outside an office at 7:50 PM. These are everyday conduct that the Reserve Bank of India has been policing since the 2007 Supreme Court ruling in ICICI Bank Ltd. v. Prakash Kaur (2007) 2 SCC 711, which held that a bank cannot use musclemen and gunda elements to recover dues. The Court called the practice a "blot" on banking. Almost two decades later, the framework has hardened into binding directions whose violations now carry a no-fee complaint route under the Reserve Bank — Integrated Ombudsman Scheme 2021.

This playbook walks through the four documents that bind every recovery agent in India today, the procedure to convert harassment into a documented breach, the defences available where a recovery action threatens a security interest, and the line of judgements from 2007 to 2024 that gives the borrower's complaint its teeth. Every numeric claim is sourced from RBI master directions, the Banking Ombudsman framework, or the relevant Supreme Court judgement.

The Statutory Position

The conduct of recovery agents is governed by four overlapping instruments, each issued under Section 35A of the Banking Regulation Act 1949 and Sections 45JA and 45L of the Reserve Bank of India Act 1934.

The first is the RBI Circular DBR.No.Leg.BC.21/09.07.005/2017-18 dated 24-Aug-2017, which makes the bank or NBFC vicariously liable for every act and omission of the recovery agent it engages, whether in-house or outsourced. The principal lender cannot hide behind the agent.

The second is the RBI Master Direction on Outsourcing of Financial Services dated 03-Nov-2017, which extends the same accountability to outsourced collection arrangements. A regulated entity must maintain a list of approved agents and ensure none is engaged on a contingency model that incentivises coercion.

The third is the RBI Circular RBI/2022-23/108 dated 12-Aug-2022 on the regulatory framework for digital lending, which puts a disclosure mandate on app-based lenders — the names of recovery agents engaged by the Lending Service Provider must be published, and the borrower must be notified before any field visit.

The fourth, and most consolidated, is the Reserve Bank of India (Recovery of Loans by Regulated Entities) Directions, 2024 issued on 07-Aug-2024. This direction restates the call-window, prohibits intimidation, requires that all conversations be capable of being recorded, and gives the Banking Ombudsman explicit jurisdiction.

The call window of 8:00 AM to 7:00 PM, the 50-hour certification requirement, and the prohibition on contact with third parties (employer, neighbours, family members other than the joint borrower or guarantor) form the operative core. Each has a corresponding entry in the Integrated Ombudsman Scheme 2021 as a separately complainable head.

Outside the RBI universe, three statutes provide the criminal-side overlay. Section 506 of the Indian Penal Code 1860 (now Section 351 of the Bharatiya Nyaya Sanhita 2023, in force from 01-Jul-2024) deals with criminal intimidation; threats of harm to person, property, or reputation attract up to two years' imprisonment. Section 503 of the IPC, which defines criminal intimidation, has been carried into the Sanhita. Section 423 of the IPC penalises fraudulent execution of a deed of transfer — relevant when an agent procures a settlement signature under duress.

Procedure Step by Step

The procedure assumes the borrower has had at least one contact with a recovery agent that the borrower considers in breach of the code. It is designed to convert the experience into a documented file capable of withstanding scrutiny at the Banking Ombudsman, and, if necessary, at the Debts Recovery Tribunal under Section 17 of the SARFAESI Act 2002.

1. Note the contact. Within 24 hours, record the date, the time to the minute, the phone number used, the name the agent gave, the language used, and any specific threat or third-party contact. A WhatsApp screenshot, a recorded call (legally permissible when the recording party is on the line), or a co-witness affidavit will become the foundational exhibit.

1. Demand the agent's RBI-mandated identification. Under the RBI Recovery Directions 2024, the agent must, on request, disclose the lender's name, the agent's own name, the agent's IIBF certificate number, and a contact number for the lender's recovery cell. Refusal is itself a complainable head.

1. Send a written grievance to the lender's nodal officer within 7 days. Use registered post or the lender's internal grievance portal. Every regulated entity is required, under the Master Direction on Outsourcing, to publish a nodal officer's contact on its website. The lender has 30 days to dispose of the complaint.

1. Escalate to the Reserve Bank — Integrated Ombudsman. If the lender does not reply within 30 days, replies unsatisfactorily, or rejects the grievance, the borrower can file Form A at cms.rbi.org.in without paying a fee. The Ombudsman can direct compensation up to Rs 20 lakh for the act complained of, and an additional Rs 1 lakh for loss of time, expenses, and mental agony.

1. Where there is a security interest, file Section 17 SARFAESI in parallel. If the recovery action has crossed into possession or sale of a secured asset, the borrower has 45 days from the date of the impugned measure to apply to the Debts Recovery Tribunal under Section 17 of the SARFAESI Act. The DRT can stay possession on terms.

1. For digital lenders, file a parallel complaint with the Sachet portal (sachet.rbi.org.in). The portal is the RBI's supervisory funnel for digital lending breaches and operates independently of the Ombudsman route.

1. Where the agent has threatened or assaulted, file an FIR. The local police station is required to register the FIR under BNS Section 351, Section 308 (extortion), or — if a coerced settlement signature has been obtained — Section 318 (cheating). A copy of the FIR strengthens the Ombudsman file.

1. Calculate the financial impact. Use the foreclosure calculator and the debt consolidation calculator to model what a properly structured restructuring would have cost, and how the harassment-driven settlement compares. The differential is admissible as a measure of loss.

Strict adherence to the 7-day and 30-day windows is what converts the file from a complaint of grievance into a complaint of breach. The Ombudsman dismisses a meaningful share of cases on the ground that the lender was not given the statutory 30 days to respond — a procedural defeat the borrower can avoid by dating the first written escalation.

Borrower Defences Available

Beyond the procedural route, the borrower has substantive defences that can be raised before the Ombudsman and in any subsequent civil or DRT proceeding.

The first defence is the vicarious liability rule. The borrower does not have to prove that the bank knew of the agent's conduct. The 24-Aug-2017 Circular fixes liability on the lender, and the burden is on the bank to show that adequate training and supervision were in place.

The second defence is the certification gap. If the agent did not hold the mandatory IIBF 50-hour Debt Recovery Agent certification, the entire engagement is irregular. The Indian Institute of Banking and Finance maintains a verification facility for certificate numbers, and a single written ask to the lender can confirm the engagement letter.

The third defence is the third-party contact prohibition. The RBI directions allow contact only with the borrower, the joint borrower, and the guarantor. Any call to the employer's HR department, the borrower's neighbours, a school principal, or a parent who is not on the loan documentation is a separate breach. Each instance is a separate Ombudsman head.

The fourth defence is the coerced settlement defence. If a one-time settlement (OTS) letter has been signed under threat of immediate possession, of disclosure to the employer, or of physical harm, the borrower can move to set aside the settlement on grounds of coercion under Section 15 of the Indian Contract Act 1872, read with Section 423 IPC. The Section 17 SARFAESI application is the natural forum where the asset is secured.

A fifth defence — often overlooked — is the proportionality argument. The Supreme Court in ICICI Bank Ltd. v. Prakash Kaur (2007) 2 SCC 711 observed that recovery must be tempered by civility and proportionality. Where the outstanding is small — say, under Rs 5 lakh — but the agent has crossed into intimidation, the Ombudsman has consistently weighed the disproportion between the dues and the conduct when fixing compensation.

The sixth, and most underused, is the bank's failure to respond defence. The Integrated Ombudsman Scheme 2021 explicitly treats a non-response within 30 days as a deemed breach, even if the underlying conduct is contested. A borrower who has documented the 30-day lapse is, on the face of the file, entitled to an order.

Recent Tribunal/HC Position

The line of authority begins with the Supreme Court but has been carried forward by State Consumer Disputes Redressal Commissions, Banking Ombudsman annual reports, and a series of high court orders.

The foundational ruling is ICICI Bank Ltd. v. Prakash Kaur (2007) 2 SCC 711, where the Supreme Court, speaking through Justice S. B. Sinha, held that the practice of using "musclemen" to recover a vehicle was illegal, regardless of the contractual hypothecation. Even where the bank has a contractual right to repossess, the right must be exercised through the legal process. The judgement is reported on indiankanoon.org and is the touchstone for every subsequent order on the subject.

The Sardar Trilok Singh & Ors v. Satya Deo Tripathi AIR 1979 SC 850 judgement, predating SARFAESI, had already established that recovery by force constitutes a separate criminal offence, irrespective of the underlying debt. The 2007 ICICI Bank ruling explicitly relied on this proposition. Together, the two rulings frame the modern Ombudsman complaint: the existence of a debt does not legitimise the manner of its collection.

In the Banking Ombudsman Annual Report for FY 2022-23 published by the RBI, recovery-related complaints accounted for a meaningful share of volume across the twenty-two Ombudsman offices. The aggregate compensation directions issued under this head are reflected in the pattern of "non-observance of fair practices code" awards that the report attributes to the redressal mechanism.

High court orders in the post-2017 period have reinforced two propositions. The first is that a bank cannot rely on a settlement signed at the borrower's doorstep when the field visit was outside the 8:00 AM to 7:00 PM window. The second is that the existence of an outstanding non-performing asset does not dilute the borrower's right to dignity in the recovery process; the two operate on parallel tracks, with the bank's recovery rights being subject to the conduct code.

The RBI's Master Direction on Recovery of Loans dated 07-Aug-2024 is best read as a consolidation of this jurisprudence. It does not invent new rights; it codifies the existing protections that the courts had read into the older circulars. The codification matters because the Ombudsman, who is not a court, can now proceed on the four corners of a single direction without having to trace each rule to a separate circular.

A practical note on jurisdiction. The Ombudsman covers all scheduled commercial banks, all NBFCs with deposits or with asset size above the threshold set in the Scheme, and non-bank credit card issuers. The order of the Ombudsman is binding on the regulated entity. The borrower retains the right to approach the consumer forum or the DRT in parallel where the cause of action falls in those forums, though duplication of relief is not permitted.

FAQ

Can a recovery agent call me on a Sunday?

The 8:00 AM to 7:00 PM window in the RBI Recovery Directions 2024 applies to all days. There is no separate exemption for working days, public holidays, or Sundays. A call at any time outside this window is a breach. A call inside the window is not, by itself, a breach, but the cumulative volume and tone may still amount to harassment.

What is the cost of filing a Banking Ombudsman complaint?

The Reserve Bank — Integrated Ombudsman Scheme 2021 is free. There is no filing fee, no representation fee, and no requirement to engage a lawyer. The borrower can file Form A online at cms.rbi.org.in or by post. The Ombudsman is bound to dispose of the complaint within a reasonable time, typically a few months, depending on the complexity of the file.

What if the loan is from a digital lending app?

The RBI Circular RBI/2022-23/108 dated 12-Aug-2022 requires every digital lender to publish the list of recovery agents on its website and within the app. If the agent contacting the borrower is not on that list, the lender is in breach. Apart from the Ombudsman, a parallel complaint can be filed with sachet.rbi.org.in, the RBI's supervisory funnel for digital lending breaches.

Can my employer be contacted by the recovery agent?

No. The RBI Recovery Directions 2024 and the 24-Aug-2017 Circular restrict contact to the borrower, the joint borrower, and the guarantor. A call to the employer, the HR department, the borrower's manager, or any colleague is a breach of the code, regardless of whether the call was framed as "informational" or "verification". Each call is a separate complainable head.

Does signing an OTS letter at home close my options?

Not necessarily. A one-time settlement signed under threat, intimidation, or coercion can be set aside under Section 15 of the Indian Contract Act 1872. Where the agent has also threatened harm to person, property, or reputation, the conduct is independently penal under BNS Section 351. The civil set-aside and the criminal complaint can proceed in parallel.

How do I verify whether the agent holds the 50-hour certification?

The Indian Institute of Banking and Finance (IIBF) is the principal certifier under the RBI framework. The borrower can ask the agent for the certificate number. The lender, when escalated to, is obliged to disclose the engagement letter and the certificate number. The EMI on the underlying loan is unaffected by these protections — the borrower remains liable for the debt; the protections regulate only the manner of recovery.

Can a police FIR be refused for a recovery agent threat?

The offences under BNS Section 351 (criminal intimidation) and Section 308 (extortion) are cognisable, which means the police station is bound to register the FIR. If registration is refused, the borrower can move the Superintendent of Police under Section 173(4) of the Bharatiya Nagarik Suraksha Sanhita 2023 and, if still refused, the jurisdictional Magistrate under Section 175(3) of the BNSS. Refusal to register is itself a ground for inquiry by the Magistrate.