RBI’s New Loan Recovery Directions Take Effect January 1, 2027. Is Your Collections Stack Ready?

 The new framework raises the bar on recovery conduct, agent governance, documentation and technology-led controls. For lenders, the bigger question is whether compliance lives only in policy documents, or inside the collections architecture itself.

The next phase of collections compliance is not simply about changing what recovery agents can or cannot do.

It is about whether the collections operating model itself can enforce those rules.

The Reserve Bank of India’s final directions on loan recovery and recovery-agent conduct are scheduled to take effect from January 1, 2027. The framework places greater emphasis on how regulated entities communicate with borrowers, govern recovery agencies, document interactions and deploy technology during the recovery process.

For banks, NBFCs and other regulated lenders, this creates a clear question:

Is the collections stack ready to make compliance operational at scale?

1. Recovery contact now has clearer boundaries

Recovery-related calls and visits must ordinarily take place between 8:00 AM and 7:00 PM.

Contact outside this window requires an express request or authorisation from the borrower or guarantor.

At an operational level, this raises an important distinction.

It is one thing to tell an agent not to call after 7 PM.

It is another for the system to prevent that call from being made.

For large collections teams, compliance cannot depend entirely on individual memory, manual supervision or post-event audits. Calling windows, borrower preferences and agent permissions increasingly need to be enforced at the workflow level.

2. Recovery agency governance becomes more structured

The directions place stronger responsibility on regulated entities for how recovery agencies and agents are appointed, trained, monitored and governed.

This includes requirements around due diligence, antecedent verification, training and appropriate certification.

Regulated entities are also expected to maintain updated information on recovery agencies and communicate relevant agency details to borrowers before certain recovery activities begin.

This means vendor governance can no longer operate separately from collections governance.

A lender should be able to answer, at any point:

• Which agency is handling a borrower?

• Which agent is authorised?

• Is the agent appropriately trained and certified?

• When was the assignment made?

• What actions has the agent already taken?

If these answers sit across spreadsheets, emails and disconnected systems, operational risk increases.

3. Documentation becomes central to compliance

One of the most significant shifts is the growing importance of the audit trail.

Recovery interactions increasingly need to be documented in a structured and retrievable manner. This includes the timing and frequency of calls and, where applicable, records of communication.

The practical question therefore changes from:

Did the agent follow the policy?

to:

Can the lender demonstrate that the policy was followed?

That distinction matters.

A compliant action that cannot be reconstructed, verified or retrieved later can still create regulatory and reputational exposure.

At scale, disconnected diallers, manually maintained agency reports and fragmented communication systems make this significantly harder.

4. Incentives cannot encourage aggressive recovery behaviour

Collections teams naturally operate against targets.

But target structures and agency incentives cannot be designed in a way that encourages harsh, coercive or inappropriate recovery practices.

This makes incentive design a governance issue, not merely a commercial one.

Lenders may need to examine whether collection targets indirectly reward behaviour that conflicts with borrower-protection principles.

A strong collections model should therefore measure more than recovery rates.

It should also account for conduct, adherence, complaints, escalation quality and borrower experience.

5. Device-based recovery comes with strict safeguards

The framework also introduces guardrails around technologies that restrict the functionality of financed mobile devices.

Such mechanisms cannot be treated as unrestricted recovery tools.

Their use is tied to specific conditions, including the nature of the financed device, contractual disclosure, delinquency thresholds and borrower safeguards.

Essential functionality such as incoming communication and emergency access must remain protected.

The framework also places restrictions on the use of borrower data and device permissions.

The broader message is clear.

Technology may support recovery, but it cannot override borrower rights.

That principle is likely to become increasingly important as lenders adopt more automated and digitally enabled recovery models.

A Five-Question Readiness Audit for Lenders

Before the new framework takes effect, collections leaders should be able to answer five questions clearly.

1. Can our platform enforce communication rules automatically?

Can the system control calling windows, channel permissions, borrower preferences and agent access without relying entirely on human intervention?

2. Do we have a complete audit trail for every borrower interaction?

Calls, messages, payment links, agency assignments, visits, promises to pay and escalations should be traceable from one operating view.

3. Can we govern internal teams and external agencies from the same control layer?

Authorisation, allocation, certification, performance and compliance exceptions should not exist in isolated systems.

4. Can our workflows adapt to borrower circumstances?

Collections cannot be treated as one identical journey for every borrower.

Systems should be capable of supporting differentiated escalation paths, communication strategies and treatment based on borrower status and repayment behaviour.

5. If a regulator asked for evidence tomorrow, how quickly could we produce it?

This may be the most useful question of all.

If compliance evidence has to be manually reconstructed from emails, spreadsheets, agency reports and separate technology platforms, the operating model is already carrying unnecessary risk.

From Circular-Response Compliance to Compliance by Architecture

Regulatory change has traditionally followed a familiar internal process.

A circular arrives.

Compliance interprets it.

SOPs are updated.

Teams are trained.

Agencies are informed.

New checklists are introduced.

All of that remains necessary.

But it is no longer sufficient.

When regulation governs communication timing, agent identity, borrower preferences, interaction records, escalation pathways and technology-enabled recovery, compliance increasingly needs to exist inside the operating architecture itself.

A well-designed collections platform can prevent an unauthorised interaction.

It can maintain a complete communication history.

It can control escalation logic.

It can govern agency access.

It can record what happened, when it happened and who initiated it.

That is fundamentally different from identifying a violation after a borrower complaint has already occurred.

The Real Opportunity

The transition to the new framework should not be treated only as a compliance exercise.

It is also an opportunity to modernise how collections operations are designed.

The most mature lenders will move away from compliance that depends primarily on circulars, training documents and manual supervision.

They will build compliance directly into the workflow.

Because the strongest collections operation is not simply the one that recovers more.

It is the one that can recover at scale while keeping every interaction controlled, traceable and borrower-aware.