Truth that Matters. Stories that Impact

Truth that Matters. Stories that Impact

Business

RBI Issues Guidelines on Device Locking and Loan Recovery for EMI Defaults

The Reserve Bank of India (RBI) has issued a regulatory framework governing the conduct of lenders and recovery agents, placing strict limits on when and how digital devices like smartphones, laptops, and tablets can be restricted or locked following loan defaults. The framework, which will take effect on January 1, 2027, establishes that lenders cannot disable any device for defaults on personal, home, or vehicle loans, and permits only gradual, regulated curbs on devices that were directly purchased through the loan in question.

What Happened

Addressing persistent complaints regarding borrower harassment—including abusive language and intimidation on social media—the RBI finalised its norms on the conduct of regulated entities in loan recovery. In 2024, the central bank had instructed lenders to halt the practice of locking borrowers’ mobile phones via pre-installed apps when payments were missed. Following a draft framework released in May that invited public and stakeholder comments, the RBI has now established formal rules that define the boundaries of technology-based loan recovery.

Under the new directives, lenders are barred from using software mechanisms to restrict or disable functionalities on any phone, laptop, or tablet unless the loan was taken specifically to finance that particular device. Even for device-financed loans, restrictions can only be imposed if explicitly stated in the loan agreement, after formal notice is provided, and following a mandatory 30-day grace period.

Key Highlights

  • No Actions for Unrelated Loans: Lenders cannot lock or restrict devices to recover defaults on general personal loans, home loans, or car loans.
  • Strict 30-Day Threshold: Lenders are prohibited from altering device functionality if an EMI is overdue for less than 30 days. A formal notice must be issued during this time.
  • Gradual Implementation: If payments remain unpaid between 30 and 60 days, lenders may introduce gradual restrictions. Full contractual restrictions are only permitted after payments are overdue for more than 60 days.
  • Protected Functionalities: Lenders are strictly prohibited from cutting off incoming or outgoing phone calls, SMS messaging, and Emergency SOS features, or placing any restriction that harms a borrower’s work or employment.
  • Strict Privacy Safeguards: Recovery tools cannot access user data such as contact lists, photographs, call history, location data, or text messages.
  • Certified Software Only: Any device-locking application must be officially certified by the operating system provider or original equipment manufacturer (OEM).
  • Prompt Unlocking Mandate: Lenders must unlock the device within one hour of receiving overdue payments. Delays incur a compensation fee payable to the borrower of Rs 250 per hour, capped at the total loan amount.
  • Agent Restrictions: Only certified recovery agents are permitted to engage with borrowers.

Why This Matters

Financing consumer electronics through EMIs represents a significant portion of lending activity. According to a study by Home Credit Finance, purchasing smartphones and home appliances remained the single largest driver of borrowing in 2025. Given this volume, standardising debt recovery protects consumer privacy while clarifying enforcement practices.

Vivek Iyer, Partner and Financial Services Risk Advisory Leader at Grant Thornton Bharat, explained that from January 1, 2027, missed payments cannot result in a device being shut off without strict adherence to these rules. Iyer noted that restrictions are unenforceable unless expressly written into the loan agreement and advised borrowers to secure agreements from regulated lenders, establish auto-debit arrangements, and preserve formal notices as evidence.

Adhil Shetty, Chief Executive Officer of Bankbazaar.com, noted that the framework clarifies rights for consumers while providing lenders a legal pathway to address genuine defaults. He emphasised that while the rules protect privacy, they do not waive debt obligations, advising consumers to review device-recovery terms and ensure EMIs remain affordable before borrowing. Santosh Agarwal, Chief Executive Officer of Paisabazaar, recommended that borrowers retain all transaction receipts upon settling their dues and immediately confirm that lenders disable any remote recovery technology.

What to Watch Next

The regulatory framework is scheduled to formally take effect on January 1, 2027. Regulated financial entities are expected to align their loan recovery systems, contracts, and technology integrations with the OEM-certified standards and compensation rules mandated by the central bank ahead of that deadline.

Frequently Asked Questions

Can a lender lock a smartphone if a personal or vehicle loan is unpaid?

No. The RBI rules strictly forbid lenders from locking or restricting any mobile phone, laptop, or tablet for dues on personal, home, or car loans. Restrictions can only apply to a device that was directly purchased using that specific loan financing.

When is a lender allowed to begin restricting a financed device?

A lender cannot impose any technical restrictions if the EMI has been overdue for fewer than 30 days. Gradual restrictions are allowed only between 30 and 60 days of non-payment, while full contractual measures may only be enacted after the default exceeds 60 days.

Can lenders view personal photos or contacts on the device?

No. The guidelines explicitly bar lenders from accessing private borrower data, including contacts, call logs, text messages, location history, and media files.

What happens if a lender delays unlocking a device after receiving payment?

Lenders are required to restore full device functionality within one hour of payment receipt. If they fail to do so, they must pay the borrower compensation of Rs 250 per hour of delay, up to the total amount of the loan.

Source: Times of India