EaseValueWhat Happened?
On August 6, 2026, the Reserve Bank of India (RBI) issued the RBI (Non-Banking Financial Companies – Responsible Business Conduct) Third Amendment Directions, 2026 under reference number RBI/2026-27/230. These directions comprehensively regulate the engagement of recovery agents and recovery agencies by NBFCs for collection and recovery of loan dues. The rules will become effective from January 1, 2027. This is a major regulatory overhaul affecting thousands of NBFCs operating in India and their appointed recovery partners.
Background & Legal Context
These directions are issued under Sections 45JA, 45L, and 45M of the Reserve Bank of India Act, 1934. The RBI regulates NBFCs under this statutory authority to protect borrowers and ensure responsible lending practices. The new amendment replaces earlier instructions scattered across multiple paragraphs and consolidates them into a single comprehensive framework called 'Conduct of NBFCs in Recovery of Loan Dues and Engagement of Recovery Agencies' under Section J of Chapter III.
While Income Tax Act 2025 does not directly regulate NBFC recovery practices, NBFCs themselves are significant taxpayers falling under the purview of corporate income tax. Any non-compliance with these RBI directions can expose NBFCs to:
- Regulatory penalties and fines imposed by RBI
- Compensation obligations to borrowers under these directions
- Potential disallowance of recovery expenses under Income Tax Act 2025 if recovery methods are deemed illegal or improper
- Reputational damage affecting business valuation and tax compliance status
What Does This Mean for You?
If You Work at an NBFC:
Your company must immediately begin compliance preparations for the January 1, 2027 deadline:
- Policy Framework: Your NBFC must create a detailed written policy covering collection and recovery procedures, including trigger points for recovery action, graded escalation matrices, and employee code of conduct (paragraph 100D)
- Recovery Agency Registration: If your NBFC uses external recovery agencies, you must ensure they are formally registered with complete details published on your website within 7 days of engagement or termination (paragraph 100K). This transparency requirement is mandatory
- Mandatory Training: All recovery agents must obtain a certificate from the Indian Institute of Banking and Finance (IIBF) after completing an approved debt recovery training program. If agents are already working without certification, they must obtain it within one year from January 1, 2027 (paragraph 100I). This is a critical compliance milestone
- Call Documentation: Your NBFC must record and preserve all call records (incoming and outgoing) for six months or until sub judice matters are disposed. This includes logging time, duration, and content of all borrower interactions (paragraph 100P)
If You Are a Recovery Agent or Work in Recovery:
Your job functioning is now heavily regulated:
- Time Window Restrictions: You can contact borrowers only between 08:00 hours and 19:00 hours, except when borrower has specifically requested otherwise (paragraph 100Y)
- Harsh Methods Prohibited: You cannot use minatory language, abusive words, threatening calls, social media harassment, excessive calling/messaging, or any form of intimidation. Violating these rules will result in termination and potential legal action (paragraph 100Z)
- Identification Requirements: You must carry and display an official identity card issued by your NBFC or recovery agency, along with an authorization letter and a copy of the notice to the borrower. These documents must contain contact details of your grievance redressal officer (paragraph 100X)
- Professional Conduct: All written communications must be pre-approved by the NBFC, and you must maintain decency and decorum during visits. You must avoid visiting during family bereavement, medical emergencies, or marriage functions (paragraph 100Y)
If You Are a Borrower:
These new rules provide you stronger protection:
- Advance Notification: The NBFC must inform you about the recovery agency at least one day before their first visit, including agency name and contact details
- Technology Device Restrictions: If your loan is for purchasing a mobile device, the NBFC can restrict device functionalities only after your loan becomes 30 days past due and only gradually (not all at once). Essential features like incoming calls, SMS, and emergency SOS cannot be restricted. Full restrictions can only apply after 60 days past due (paragraph 100S-T)
- Compensation Right: If the NBFC wrongfully restricts your device or delays unlocking after you pay, you can claim compensation of ₹250 per hour (capped at the loan amount) under paragraph 100T(6)
- Privacy Protection: Your personal data like contacts, photos, location history, SMS, and call logs cannot be accessed by recovery apps or third-party service providers under any circumstances (paragraph 100U)
- Grievance Redressal: Every recovery communication must contain the name, email, phone, and address of the NBFC's grievance officer whom you can contact (paragraph 100AA)
If You Own or Lead an NBFC:
For financial and tax reporting purposes:
- The compensation payable to borrowers (₹250/hour for device-locking violations) becomes a direct business expense allowable under Income Tax Act 2025, Section 37(1) as it represents ordinary business loss
- Non-compliance penalties imposed by RBI are treated as business expenses but may invite scrutiny during tax audits
- The cost of IIBF training for recovery agents and internal compliance audit mechanisms are allowable deductions
- Any disallowance of recovery expenses by Income Tax Officer due to improper recovery methods can now be appealed citing these RBI directions as proof of compliance attempts
What Should You Do Now?
Immediate Actions (By December 31, 2026):
- For NBFCs: Constitute a compliance team to review and redraft your recovery policy in alignment with all 25 new paragraphs (100D to 100AB). This is not optional—it's mandatory by January 1, 2027
- Audit Recovery Agencies: Conduct due diligence on all engaged recovery agencies. Verify IIBF training certificates for all agents. Update your empanelment list and publish on website
- Technology Review: If your NBFC uses device-locking technology for mobile loans, ensure it is OEM-certified and complies with paragraph 100S(4). Ensure gradual restriction logic and automatic reversal within one hour of payment
- Training Program: Enroll all recovery agents without IIBF certification for training programs immediately. The January 1, 2027 deadline for existing agents is strict
- Call Recording System: Set up call recording and documentation systems that preserve records for six months with detailed metadata
- Grievance Mechanism: Establish a dedicated grievance redressal officer position and ensure contact details are embedded in all recovery communications
- For Recovery Agencies and Agents: Obtain IIBF certification immediately. Study the conduct guidelines thoroughly. Update your identification cards with new NBFC requirements
Quarterly Compliance Review:
- Monitor adherence to time window restrictions (08:00-19:00 hours)
- Review sample call recordings to ensure professional conduct and no harsh methods
- Track compensation claims from borrowers for wrongful restrictions
- Conduct surprise audits of field recovery agents
Key Takeaways
- Effective Date: January 1, 2027 – NBFCs have 5 months to implement comprehensive compliance changes across recovery operations
- Mandatory IIBF Training: All recovery agents must hold IIBF debt recovery certification or obtain it within one year. This is a non-negotiable compliance requirement affecting thousands of recovery professionals
- Technology Restrictions Allowed But Controlled: Device-locking for mobile loans is permitted but only under strict conditions: 30-day wait before restrictions, 60-day wait for full restrictions, mandatory one-hour auto-reversal after payment, and ₹250/hour compensation for violations
- Borrower Protection Enhanced: No access to personal data, prohibition on social media harassment, advance notification of recovery agency details, and formal grievance redressal channels significantly strengthen borrower rights compared to current practice
- Tax & Compliance Impact: NBFC expenses related to IIBF training, compliance infrastructure, and borrower compensation remain allowable deductions under Income Tax Act 2025 Section 37(1) if incurred to comply with regulatory requirements
Need expert help with this? EaseValue CAs in Jaipur — WhatsApp 63677 44602