RBI digital lending guidelines — what has actually changed for collections in 2026
First published in The Compliance Floor on LinkedIn, 21 July 2026. Regulatory positions are as they stood on that date.
If you run a collections floor, the single most useful thing to understand about the current rulebook is that it is now one rulebook. For years, digital lending compliance meant reconciling the 2022 guidelines, the 2023 default-loss-guarantee norms, and a scatter of circulars that each answered a different question. The Reserve Bank of India replaced all of it with the RBI (Digital Lending) Directions, 2025, issued on 8 May 2025 and fully in force through this year. One document now governs the loan from the app a borrower taps to the call your agent makes eighteen months later.
That last part is the change that matters most for anyone who works in recovery, and it is worth stating plainly.
The perimeter now includes you
The older framework was written around origination — who may lend, through which app, on what disclosure. The 2025 Directions extend the regulated perimeter across the entire loan lifecycle, recovery included. Collections is no longer the unregulated tail of a regulated process. It is inside the same rulebook, and the regulated entity — the bank or NBFC whose loan it is — is answerable for what its recovery agents and lending service providers do on every call.
Three consequences of that follow directly into daily operations.
The borrower must know who is calling before you call. Under the 2025 Directions, the regulated entity must communicate the name and contact details of the assigned recovery agent to the borrower — by email or SMS — before recovery contact begins. If the agent handling an account changes, the new name goes out too. A cold call from an unannounced agent is now a process failure the recording will not save you from.
A live grievance freezes recovery. While a borrower’s complaint is open and unresolved, recovery activity on that account must pause. The regulated entity has thirty days to respond before the borrower can escalate to the RBI’s Complaint Management System. This is the requirement that most often trips a floor operationally, because “is there an open grievance on this account” cannot be a flag refreshed once a day — it has to be true at the moment of the call.
The lender owns the agent’s conduct, and the agent’s fee. The regulated entity remains fully responsible for what its lending service providers do. Recovery fees are the lender’s cost to bear — they may not be loaded onto the borrower. The chain of “the agency did it, not us” no longer exists in the Directions.
What moved in 2026
The 2025 Directions are settled. What has actually changed this year is the conduct layer that sits on top of them — and here the honest answer is that it moved twice, so the date many teams have written on a training slide is now wrong.
RBI put out draft recovery-agent conduct directions in February this year — the version we referenced in earlier issues with an indicative 1 July 2026 start. That draft has since been revised. On 20 May 2026 RBI issued a fresh set of draft directions — nine sets covering every category of regulated entity — with comments open to 31 May 2026 and the final framework now proposed to take effect on 1 October 2026. It remains a draft. Nothing in it is enforceable yet. But it is the version your 2026 readiness should be built against, not the February text.
The revised draft keeps the conduct baseline we have covered before — the 8 AM to 7 PM contact window, the agent identifying themselves with full name, agency, and the lender they represent, and the expectation that recovery calls are recorded and retained for RBI inspection. What is new, and what has drawn most of the attention, is a proposed technology-based mechanism allowing a lender to restrict the functionality of a device financed by that specific loan when the borrower defaults. The guardrails are deliberately tight: it applies only to the device the loan paid for, it must be written into the loan agreement, it triggers only after a roughly ninety-day overdue threshold and a two-stage notice, it must keep essential functions — internet access, incoming calls, emergency SOS — available, and functionality restores immediately on payment. It is not, and is not meant to be, a remote “brick the phone” button.
For a call-quality function the device provision is not yet your problem. The two that are: your recorded calls now sit inside a framework that expects them to exist and to be producible, and the conduct your agents show on those calls is what the 1 October framework will be read against.
The readiness check to run now
Four questions, answerable against artefacts you already own:
- Scripts. Does your opening actually deliver the mandated disclosures — agent name, agency, the lender represented — and does it hold within the 8 AM to 7 PM window? Does any agent still say “this is a legal matter” when it is not?
- Contracts. Does your agreement with the lender reflect that the regulated entity owns your conduct and your fee, and that recovery pauses on an open grievance? A contract written to the 2022 world will not survive a 2025 inspection.
- Training. Have you retired the “1 July 2026” date and briefed agents on the actual conduct baseline — pre-contact agent disclosure, the grievance freeze, no third-party contact — as the standard they are already held to?
- Recording retention. Can you produce a specific call, in full, on request — not most calls, the one a borrower disputes? The framework assumes the tape exists. Retention gaps are the cheapest failure to fix now and the most expensive to explain later.
None of these needs a new system. They need the rulebook you are actually governed by to match the one your floor is running on — and in 2026, for a lot of floors, it does not yet.