All Reserve Bank of India (RBI) regulated financial entities—including commercial banks (e.g., Axis Bank, Kotak Mahindra Bank), Non-Banking Financial Companies (NBFCs like Bajaj Finance), co-operative banks, and Asset Reconstruction Companies (ARCs)—are legally mandated to strictly follow RBI rules and circulars when hiring and managing third-party recovery agents.
In the Indian financial ecosystem, the deployment of third-party collection agencies has long been a source of friction between lenders and borrowers. To bring order and protect consumer rights, the Reserve Bank of India (RBI) has instituted strict regulatory protocols. Lenders frequently contract with third-party recovery agencies to optimize operations; however, the RBI has made it unequivocally clear that outsourcing does not constitute an abdication of responsibility. Under the law, the relationship between a lender and a recovery agency is that of principal and agent.
If an outsourced agency violates the recovery agent code of conduct, the parent bank or NBFC is held directly liable. Regulated entities must ensure that their third-party agents do not resort to intimidation, harassment, or unethical practices. The RBI holds the board of directors and senior management of the bank or NBFC responsible for establishing a robust due diligence process for hiring recovery agents, verifying their backgrounds (including police verification), and monitoring their field behavior.
A common misconception is that only public sector or large private banks are subject to the central bank's directives. In reality, the RBI's guidelines on outsourcing financial services and debt recovery are binding on a broad category of institutions collectively known as Regulated Entities (REs). This list includes:
Any entity that is registered with, licensed by, or regulated under the aegis of the Reserve Bank of India is legally required to follow these exact guidelines. If a digital lending app or local financier claims exemption, it is either operating outside the regulatory framework or in direct violation of the law. You can read more about borrower rights in cases of debt recovery by visiting our comprehensive guide on legal limits of recovery agents in India.
Following an increase in cases of aggressive collection tactics, digital shaming, and agent misconduct, the RBI issued a decisive update via the rbi 2022 23 108 circular on August 12, 2022. This circular reinforced existing guidelines and closed loopholes that some lenders exploited to escape regulatory scrutiny.
Under these directives, recovery agents are bound by strict calling and visiting hours. They are permitted to contact or visit a borrower only between 8:00 AM and 7:00 PM. Any communication—whether a phone call, WhatsApp text, or physical visit to a home or workplace—initiated before 8:00 AM or after 7:00 PM is a direct violation of the circular. Lenders cannot defend late-night calls by claiming the borrower was unreachable during the day; the window is absolute.
The RBI has established a zero-tolerance policy for harassment by recovery agents. The circular explicitly forbids:
If you are facing harassment by third-party collectors, you should know that you have formal channels to seek relief. Read our step-by-step instructions on harassment by third-party collectors to understand your immediate options.
The RBI does not permit financial institutions to send untrained personnel to recover outstanding dues. Any individual employed as a recovery agent must undergo a structured debt recovery agent training program. This program consists of a mandatory 100-hour education course (reduced to 50 hours for graduates) covering legal rights, financial basics, customer psychology, and ethical behavior.
Following this training, agents must pass an examination conducted by the Indian Institute of Banking and Finance to earn their iibf certification. Regulated entities are prohibited from deploying any agent who does not hold a valid certification and a clean police clearance record.
To comply with the regulator, major Indian banks and NBFCs publish their recovery policies online. Understanding how these institutions structure their compliance helps borrowers spot deviations and defend their rights.
When a recovery agent visits your home or workplace, you are not obligated to speak with them unless they prove their identity and authorization. Under RBI rules, you have the right to request:
If the agent fails to provide these documents, you have the right to refuse entry, stop the conversation, and report the encounter as an unauthorized visit by unidentified individuals.
If you face harassment by recovery agents, you do not have to suffer in silence. The legal framework provides multiple layers of protection to help you resolve the situation and report institutions that are violating guidelines set by the central bank.
The first step in addressing harassment is filing a formal complaint with the lender.
If the bank or NBFC fails to resolve your complaint within 30 days, or if you are unsatisfied with their response, you can escalate the matter directly to the Reserve Bank of India. You can submit your complaint online by utilizing the filing a recovery agent complaint online portal.
On the RBI's Complaint Management System (CMS) website (cms.rbi.org.in), upload your call logs showing calls outside the 8:00 AM to 7:00 PM window, screenshots of harassment, and copies of your initial complaint to the bank’s GRO. The RBI Ombudsman has the authority to penalize banks, suspend recovery agencies, and award compensation to borrowers for mental harassment. If you need details on how to format this, check our guide on filing an violating guidelines set by the central bank.
Navigating debt collection rules and documenting violations can be challenging when dealing with financial stress. To simplify this process, specialized legal tools and advocacy services are available.
To address this challenge, AMA Legal Solutions developed the AMA Connect app (also known as the AMA Legal Solutions app). This mobile application serves as a dedicated digital assistant for borrowers facing recovery challenges, acting as your digital shield against recovery harassment.
The AMA Connect app enables users to:
Instead of dealing with aggressive agent calls directly, you can leverage AMA Connect to route all legal communications through professional advocates, draft and send formal replies to bank legal notices, negotiate a lawful, affordable Debt Settlement directly with senior banking officials, and log, document, and report harassment violations directly to regulatory authorities. The AMA Legal Solutions App ensures that you are never left to fight large financial institutions alone, restoring your peace of mind while establishing a clear, legal path to financial recovery.
| Directive Domain | Allowed Practices (Legal Standards) | Prohibited Practices (Harassment Indicators) | Legal Reference / Authority |
|---|---|---|---|
| Calling & Visiting Hours | Contacts only between 8:00 AM and 7:00 PM. | Calls or visits before 8:00 AM, after 7:00 PM, or late-night calls. | RBI August 12, 2022 Circular |
| Privacy Boundaries | Contacting only the primary borrower, co-borrower, or guarantor. | Calling family, friends, references, or neighbors to discuss the debt. | RBI Code of Conduct |
| Agent Credentials | Must carry valid employee ID, bank authorization letter, and IIBF certificate. | Deploying agents without ID, authorization letters, or training certificates. | RBI Outsourcing Guidelines |
| Communication Tone | Professional, polite, and clear communication regarding outstanding dues. | Using abusive language, shouting, physical intimidation, or threats. | RBI Fair Practices Code |
| Due Diligence | Lenders must perform pre-employment police verification for all recovery agents. | Hiring individuals with criminal records or without background checks. | RBI Board-approved policies |
"I can’t thank enough to the team of AMA legal solutions, because of them, my life became easy, and I didn’t have to deal with the harassment calls and certainly helped me to close my loans with a complete legal support and guidance."
— Surendra Rao
"The Ama legal Solutions staffs demonstrated exceptional professionalism, clarity, and dedication throughout the process. Their team is responsive, knowledgeable, and handles the matter with great attention to detail. I truly appreciate their timely support and effective guidance, and I would recommend their services."
— Imlitoshi Sangtam
All Regulated Entities (REs) under the Reserve Bank of India, including commercial banks (such as Axis Bank and Kotak Mahindra Bank), NBFCs (like Bajaj Finserv), Co-operative banks, Asset Reconstruction Companies (ARCs), and All India Financial Institutions, are legally bound to follow RBI rules for hiring and managing recovery agents.
According to the RBI/2022-23/108 circular, recovery agents are strictly permitted to contact or visit a borrower only between 8:00 AM and 7:00 PM. Any call or physical visit outside this window constitutes a regulatory violation.
No, banks and NBFCs cannot escape liability. The RBI guidelines state that lenders are fully responsible for the actions of their outsourced service providers. If a recovery agent violates the code of conduct, the lender is held legally accountable.
Under RBI guidelines, recovery agents must undergo a mandatory 100-hour or 50-hour debt recovery agent training course and clear the exam conducted by the Indian Institute of Banking and Finance to earn their IIBF certification, alongside passing a police verification check.
A borrower can first submit a written complaint to the lender's Grievance Redressal Officer. If the lender fails to resolve the issue within 30 days, the borrower can escalate the matter online through the RBI's Complaint Management System (CMS) at cms.rbi.org.in.
Connect immediately with expert loan settlement attorneys who specialize in protecting borrowers from abusive banking recovery agents.
Dial Now: +91-8700343611Request Secure CallbackOur loan settlement services are available across all states and union territories in India