RBI Bars Banks From Remotely Locking Borrowers’ Phones and Laptops Under New Loan Recovery Rules
RBI Device Locking Rules: The Reserve Bank of India (RBI) has introduced a new framework governing the use of technology in loan recovery, making it clear that banks and other regulated lenders cannot remotely disable or restrict a borrower’s mobile phone, tablet or laptop simply because of a loan default. The central bank has said such restrictions will be permitted only in limited circumstances and subject to strict safeguards.
Under the revised directions, lenders can remotely restrict access to a device only if the loan was specifically taken to purchase that particular device. Even in such cases, the loan agreement must clearly authorise the use of device restriction technology and explain the complete recovery process that may be followed if the borrower defaults.
The move is aimed at ensuring that technology-based recovery practices remain transparent while protecting borrowers from arbitrary restrictions that could interfere with their daily lives, employment or access to essential communication services.
RBI Clarifies When Banks Can Restrict Borrowers’ Devices
The central bank has drawn a clear distinction between general personal loans and device-financing loans. According to the new framework, lenders will not be allowed to remotely lock or disable phones, tablets or laptops that were not financed through the loan in question.
Where the financed device itself serves as the subject of the loan, any technological restriction can only be imposed if the borrower has agreed to it through the loan contract. The agreement must also specify how and when restrictions may be applied in the event of repayment defaults.
By making these conditions mandatory, the RBI has sought to ensure that borrowers are fully informed about the recovery mechanism before accepting the loan terms.
Key Conditions for Device Restrictions
| Provision | RBI Direction |
|---|---|
| Can banks remotely lock devices after loan default? | No, unless the device itself was financed through the loan. |
| Eligible devices | Only the phone, tablet or laptop purchased using the financed loan. |
| Loan agreement requirement | The agreement must explicitly permit device restrictions and explain the recovery process. |
| General personal loans | Remote locking or disabling of unrelated devices is not permitted. |
Technology-Based Recovery Subject to Strict Safeguards
The RBI’s directions make it clear that lenders cannot use technology-based restrictions as an unrestricted recovery tool. Instead, any such mechanism must operate within a clearly defined regulatory framework that balances loan recovery with consumer protection.
In addition to requiring explicit contractual consent, the framework also requires lenders to follow a structured process before any restriction is applied. These safeguards are intended to prevent sudden or disproportionate action against borrowers while ensuring that recovery measures remain consistent with the terms of the loan.
Borrower Protection Remains a Key Focus
Through the new framework, the RBI has emphasised that borrowers’ access to essential digital services should not be disrupted without due process. The rules introduce greater transparency by requiring lenders to clearly communicate the circumstances under which technological restrictions may be used and the steps involved in restoring full access once dues are cleared.
The detailed framework also introduces timelines, operational safeguards and borrower rights that lenders must follow while using any device restriction technology during the recovery process.
RBI Introduces 30-Day and 60-Day Timeline Before Restrictions Can Be Applied
The Reserve Bank of India has also prescribed a staggered framework that lenders must follow before activating any technological restrictions on financed devices. The rules ensure that borrowers are given sufficient time after a payment default before any limitation on device functionality can be considered.
According to the framework, no restriction can be imposed until a loan account has remained overdue for at least 30 days, even if the borrower has already received a notice regarding the default.
The RBI has gone a step further by prohibiting lenders from imposing the complete set of permitted restrictions until the account has crossed 60 days past due. The central bank has specifically stated that outgoing call blocking cannot be implemented before the 60-day overdue period.
Timeline for Device Restrictions
| Loan Status | Permitted Action |
|---|---|
| Before 30 days overdue | No device restriction allowed. |
| 30 days overdue | Limited restrictions may begin only if permitted under the loan agreement and RBI framework. |
| Before 60 days overdue | Outgoing calls cannot be blocked. |
| Beyond 60 days overdue | Full set of permitted restrictions may be applied, subject to RBI conditions. |
Essential Services Cannot Be Disabled
While permitting limited technological controls in specific cases, the RBI has placed several important safeguards to ensure borrowers continue to have access to essential communication and emergency services.
Regardless of how long a loan remains overdue, lenders are prohibited from disabling certain core functions of a financed device.
- Incoming voice calls must remain available.
- SMS services cannot be blocked.
- Emergency SOS functionality must continue to work at all times.
- Restrictions cannot prevent borrowers from using the device for work or employment purposes.
These protections are intended to ensure that recovery measures do not compromise personal safety, essential communication or an individual’s ability to earn a livelihood.
Banks Must Use Certified Restriction Technology
The RBI has also introduced technical safeguards governing the software used for remote device restrictions. Wherever applicable, lenders must ensure that the restriction technology is certified by the device’s original equipment manufacturer (OEM) or the operating system provider.
In addition, borrowers must be provided with a facility that allows them to check the restriction status of their device at any time. This requirement is aimed at improving transparency and enabling customers to understand whether any technological controls have been activated.
Immediate Restoration Required After Loan Dues Are Cleared
Once a borrower repays the outstanding amount, the RBI has directed lenders to remove all technological restrictions within one hour. The central bank has made timely restoration of device access a mandatory obligation under the new framework.
If a bank fails to restore access within the prescribed time, or if a device is restricted without complying with the RBI’s directions, the borrower will be entitled to compensation.
Compensation for Delay or Wrongful Restriction
| Situation | RBI Requirement |
|---|---|
| Restoration after payment | Within one hour |
| Compensation for delay | ₹250 per hour |
| Compensation for wrongful restriction | ₹250 per hour |
| Maximum compensation | Capped at the total loan amount |
The RBI said these provisions are intended to ensure accountability and encourage lenders to promptly restore full access once borrowers fulfil their repayment obligations.
RBI Directs Banks to Remove Technological Access After Loan Closure
Beyond restoring device functions after outstanding dues are cleared, the Reserve Bank of India has also laid down clear obligations for lenders once a loan is fully repaid. According to the new framework, banks and regulated entities must relinquish any technological access that enables remote restriction of the financed device after the loan has been settled.
The central bank said borrowers should also be informed about the steps required to remove any software or technology that had been installed to facilitate device restrictions during the loan tenure. This measure is intended to ensure that lenders no longer retain control over a customer’s device once the financial obligation has been fulfilled.
Borrowers Can Continue to Prepay Their Loans
The RBI has reiterated that borrowers retain the right to prepay their loans either partially or in full at any stage, in accordance with the applicable terms and conditions. The new framework makes it clear that the availability of device restriction technology does not affect a borrower’s existing repayment rights.
The central bank has also directed lenders to establish a dedicated grievance redressal mechanism to handle complaints related to delayed restoration of device access, wrongful restrictions or other issues arising from the use of technological recovery tools.
Fresh Rules for Recovery Agents and Banks
Alongside the device restriction framework, the RBI has introduced new conduct standards governing the interaction between banks, recovery agents, borrowers and guarantors during the loan recovery process.
The central bank has instructed lenders to maintain a formal policy covering their engagement with recovery agents. Banks must also publish the list of empanelled recovery agents and agencies on their official websites and ensure that those engaged in recovery activities receive appropriate training on professional conduct.
Recovery Agents Must Maintain Decency and Professional Conduct
According to the RBI, both bank employees and recovery agents are required to interact with borrowers and guarantors in a civil manner while maintaining decency and decorum during recovery-related communication and visits.
The directions are aimed at promoting fair recovery practices and ensuring that borrowers are treated respectfully throughout the recovery process.
Restricted Contact Hours Introduced
The RBI has also specified the time window during which lenders and recovery agents may contact borrowers or guarantors.
| Recovery Activity | RBI Rule |
|---|---|
| Permitted contact hours | 8:00 AM to 7:00 PM |
| Contact outside permitted hours | Allowed only if specifically requested or authorised by the borrower or guarantor |
| Borrower’s request to avoid a particular time | Must be honoured under normal circumstances |
The central bank further directed that if a borrower or guarantor requests not to be contacted during a particular time, lenders and recovery agents should ordinarily respect that request.
Key Highlights of the RBI’s New Framework
- Banks cannot remotely lock borrowers’ phones, tablets or laptops unless the financed loan was used to purchase that specific device.
- Device restriction must be clearly authorised in the loan agreement.
- No restriction is allowed before a loan account becomes 30 days overdue.
- Full restrictions cannot be imposed before the account is 60 days past due.
- Incoming calls, SMS and emergency SOS services cannot be disabled.
- Restrictions cannot prevent borrowers from using the device for employment purposes.
- Banks must restore device access within one hour after dues are cleared.
- Borrowers are entitled to compensation of ₹250 per hour for delayed restoration or wrongful restriction, subject to the loan amount cap.
- Recovery agents must follow professional conduct standards and contact borrowers only during prescribed hours unless otherwise authorised.
What the New RBI Directions Mean for Borrowers
The revised framework introduces clearer safeguards around technology-based loan recovery by defining when device restrictions may be used, protecting access to essential services and strengthening borrower rights. It also places greater responsibility on lenders to ensure transparency, timely restoration of access and fair conduct during the recovery process while establishing a structured mechanism for handling customer grievances.
Source: Reserve Bank of India (RBI) directions and regulatory framework.
