Recovery Agent Harassing You? RBI Rules That Limit What Loan Recovery Agents Can Do

When a loan turns into a non-performing asset after 90 days of missed payments, most borrowers brace for phone calls. What they do not expect is abuse, doorstep threats, or a stranger claiming the right to seize a vehicle in the street. Yet recovery-agent harassment remains one of the most common grievances in Indian retail lending, which is precisely why the Reserve Bank of India issued a binding code as early as 24 April 2008. This playbook sets out exactly what a recovery agent may and may not do, the statute that empowers the RBI to say so, and the escalation route that actually works.

The core misunderstanding is that a defaulting borrower forfeits their rights. They do not. A loan default is a civil liability, not a criminal offence, and the RBI's Fair Practices framework treats aggressive recovery as a serious supervisory failure of the lender, not merely a lapse by an outsourced agency. Understanding the RBI circular DBOD.No.Leg.BC.75/09.07.005/2007-08 (RBI/2007-2008/296) is the difference between paying under duress and negotiating from a position of statutory protection.

The Statutory Position

The RBI's authority to regulate recovery conduct flows from Section 35A of the Banking Regulation Act, 1949, which empowers it to issue binding directions to banks in the public interest. Using that power, the RBI issued its consolidated guidelines on the engagement of recovery agents through circular DBOD.No.Leg.BC.75/09.07.005/2007-08 dated 24 April 2008, and this remains the anchor instrument governing agent behaviour across all scheduled commercial banks and, by extension of the Fair Practices Code, non-banking financial companies.

The 2008 circular imposes a duty on the lender, not just the agent. Banks must ensure that the contracts they sign with recovery agencies do not "induce adoption of uncivilised, unlawful and questionable behaviour or recovery process." In other words, a bank cannot outsource its way out of liability; if an agent misbehaves, the RBI holds the bank accountable. The circular also requires that recovery agents complete a certificate course with a minimum of 100 hours of training and obtain certification from the Indian Institute of Banking and Finance (IIBF) before they are deployed against borrowers.

Recovery of a secured debt itself is governed by a separate statute, the Securitisation and Reconstruction of Financial Assets and Enforcement of Security Interest Act, 2002, better known as SARFAESI, whose full text is published on India Code. Under Section 13(2) of that Act, a lender must first serve a 60-day demand notice before it can enforce security. Only after that period, under Section 13(4), can the bank take possession of the secured asset. For unsecured debts above Rs 20 lakh, recovery is routed through the Debts Recovery Tribunal under the Recovery of Debts and Bankruptcy Act, 1993 (RDDB Act). Note the crucial distinction: a recovery agent chasing an overdue personal loan has no statutory power of seizure at all. Powers of possession belong to the secured creditor exercising SARFAESI, not to a call-centre agent.

The 2008 circular further requires agents to be trained on the appropriate hours of calling and on the privacy of customer information. The RBI reinforced this in August 2022 by directing regulated entities that recovery agents must not contact borrowers before 8:00 a.m. or after 7:00 p.m. A call at 10 p.m., a message to your employer, or a visit on a public holiday is therefore a breach of RBI direction, independent of any threat or abuse.

The same 2008 discipline extends to non-banking financial companies through the RBI's Fair Practices Code for NBFCs, so a borrower dealing with a housing finance company or a consumer-durable lender enjoys the identical protections. This matters because a large share of retail default cases sit with NBFCs rather than banks, and agents sometimes claim, wrongly, that the 24 April 2008 norms bind only scheduled commercial banks. They do not. Whether the debt is a secured loan backed by a mortgage or an unsecured consumer advance, the conduct rules travel with the lender's regulatory status, and every regulated entity remains answerable to the RBI for the acts of the agency it appoints.

Procedure Step by Step

If you are facing recovery pressure, follow this sequence rather than reacting to each call. Every step below corresponds to a specific right created by the 2008 circular or the SARFAESI timeline.

1. Demand the agent's authorisation. The 2008 circular requires that the bank inform the borrower of the details of the recovery agency when it forwards a default case. The agent must carry a copy of the notice and an authorisation letter from the bank along with an identity card. If the person at your door cannot produce all three, they have no standing to recover anything.
2. Verify the notice against Section 13(2). If the loan is secured, the bank must have served a written 60-day demand notice. Recovery action taken before day 61 is premature under SARFAESI.
3. Log every contact. Record the date, time, phone number, and content of each call. A single call after 7:00 p.m. is documentary proof of an RBI breach, valuable later before the Ombudsman.
4. Send a written objection to the branch. Under Section 13(3A) of SARFAESI, a secured borrower may make a representation against the 60-day notice, and the bank must respond with reasons within 15 days. Use this window to raise both the debt dispute and the harassment.
5. Escalate to the bank's Nodal Grievance Officer. Give the bank 30 days to resolve the complaint in writing before moving upward.
6. File with the RBI Ombudsman. If unresolved after 30 days, lodge a complaint under the Reserve Bank - Integrated Ombudsman Scheme, 2021 through the RBI's Complaint Management System.

Borrower Defences Available

A borrower has both preventive rights (things an agent cannot do) and remedial rights (forums where breaches are punished). The table below summarises the conduct rules that the 2008 circular and its August 2022 reinforcement place on every recovery agent.

Beyond RBI conduct rules, a borrower whose secured asset is being enforced has a statutory appeal. Under Section 17 of SARFAESI, any person aggrieved by a Section 13(4) measure may approach the Debts Recovery Tribunal within 45 days of the action. If the DRT rules against the borrower, Section 18 allows an appeal to the Debts Recovery Appellate Tribunal, but the second proviso to Section 18(1) requires the borrower to deposit 50 per cent of the debt claimed, a figure the Appellate Tribunal may, for reasons recorded, reduce to not less than 25 per cent. Borrowers weighing whether to fight or settle should model the cost of clearing the account using a foreclosure calculator before committing to a deposit of that size.

Harassment itself attracts criminal and civil remedies that sit outside banking law. Threats amount to criminal intimidation under Section 503 read with Section 506 of the Indian Penal Code, now recodified in the Bharatiya Nyaya Sanhita, 2023, which came into force on 1 July 2024. Forcible entry into a home is house-trespass, and publicising a borrower's default to neighbours or employers can be defamation. A borrower may lodge a police complaint or First Information Report independently of any RBI proceeding. Where multiple loans have become unmanageable, consolidating them into a single serviceable liability, which a debt consolidation calculator can quantify, is often a stronger long-term defence than fighting each agent individually.

It also helps to know what a lender genuinely gains from lawful recovery versus harassment. A bank that breaches the 2008 code risks the RBI barring it from engaging recovery agents in a defined area, so the institution has a strong supervisory incentive to keep its agents compliant once a borrower raises a documented complaint. That asymmetry is the borrower's leverage: a single dated log of a 9:30 p.m. call, sent to the Nodal Officer with a 30-day deadline, converts a one-sided pressure campaign into a compliance risk the bank must manage. Borrowers should therefore treat every breach not as an insult to absorb but as evidence to file.

For loans sourced through apps, the same protections apply. The RBI's Digital Lending Guidelines of September 2022 require that recovery through a digital lending app follow the identical Fair Practices Code, meaning an app-based agent is bound by the 8:00 a.m. to 7:00 p.m. window and the identity-verification rules just as a bank agent is.

Recent Tribunal/HC Position

The judicial baseline for recovery-agent conduct was set by the Supreme Court in ICICI Bank Ltd. v. Prakash Kaur, reported at (2007) 2 SCC 711. The Court deprecated the practice of banks recovering loans through musclemen and hired recovery agents, holding that recovery through the use of force is not part of the law of the land and that a secured creditor must take recourse to the procedure prescribed by law rather than self-help through strong-arm tactics. It is this judgement that prompted the RBI to consolidate its recovery-agent norms into the 24 April 2008 circular a year later.

The principle that a lender remains vicariously accountable for the acts of its outsourced agents has since hardened into settled supervisory practice. The RBI's 2008 circular expressly warns that where a bank fails to control its recovery agents, the RBI may consider imposing a ban on the bank engaging recovery agents in a particular area, either jurisdictional or functional, for a limited period. That supervisory sanction, not merely a borrower's individual complaint, is what gives the code its teeth.

The table below maps the SARFAESI enforcement and appeal timeline that a secured borrower can invoke when self-help crosses into unlawful seizure.

A borrower who believes the outstanding figure itself is inflated, a frequent trigger for disputes, can sanity-check the lender's numbers with an EMI-to-interest-rate calculator before accepting any settlement figure a recovery agent quotes over the phone.

FAQ

Can a recovery agent seize my car or two-wheeler on the spot?

Not in the street and not by force. Under the Supreme Court's ruling in ICICI Bank Ltd. v. Prakash Kaur (2007) 2 SCC 711, forcible repossession through musclemen is unlawful. A secured asset can only be taken through the SARFAESI Section 13(4) route, after a 60-day notice under Section 13(2), and typically with the assistance of the District Magistrate under Section 14. A call-centre agent has no such power.

What documents must a recovery agent show me?

The 2008 RBI circular requires the agent to carry three things: a copy of the notice, an authorisation letter from the bank, and an identity card. The bank must also have separately informed you of the recovery agency's details when it forwarded your default case. If any of these is missing, you are entitled to refuse to deal with the agent.

At what hours can a recovery agent legally contact me?

Recovery agents must not contact borrowers before 8:00 a.m. or after 7:00 p.m., per the RBI's August 2022 direction to regulated entities, which reinforced the 2008 requirement that agents be trained on appropriate calling hours. Any call outside that window, or contact with your relatives or employer to shame you, is a breach you can document and report.

How do I complain about harassment, and is there a fee?

First give the bank's Nodal Grievance Officer 30 days in writing. If unresolved, file free of cost under the Reserve Bank - Integrated Ombudsman Scheme, 2021 through the RBI Complaint Management System at cms.rbi.org.in. There is no fee for an Ombudsman complaint. For threats or trespass, a police complaint under the Bharatiya Nyaya Sanhita, 2023 can run in parallel.

Does missing an EMI make me a criminal?

No. A loan default is a civil liability. The only situation that attracts criminal liability is a dishonoured cheque under Section 138 of the Negotiable Instruments Act, 1881, and even that requires a formal notice and a 15-day cure period. Recovery agents who threaten arrest for non-payment of an ordinary EMI are misrepresenting the law.

Can I still negotiate a settlement while disputing harassment?

Yes, and the two are separate tracks. You can lodge an Ombudsman or police complaint about conduct while simultaneously negotiating a one-time settlement under the RBI's 2023 compromise-settlement framework. Keeping a clean paper trail of your repayment offers also protects your credit score position if the dispute later reaches the DRT.