Mumbai: The Reserve Bank of India (RBI) has introduced a detailed regulatory framework governing when lenders can remotely lock smartphones, tablets and laptops purchased on equated monthly instalments (EMIs). The rules aim to balance lenders’ recovery rights with borrower protection, ensuring that device-locking practices do not lead to harassment or misuse.

The new guidelines will come into effect from January 1, 2027, and form part of the RBI’s revised directions on loan recovery and engagement of recovery agents. This is the first time the central bank has formally regulated the use of technology-enabled recovery tools such as remote device restriction.

Why RBI introduced the new rules

Mumbai: The RBI observed that several banks and regulated entities have begun using remote locking technology to restrict devices financed through loans when borrowers miss repayments.

While such tools help lenders recover dues, concerns have grown over potential misuse, including abrupt device shutdowns, lack of transparency and possible violations of user privacy.

The new framework seeks to:

  • Prevent unfair recovery practices
  • Ensure borrowers are treated fairly
  • Protect access to essential services
  • Safeguard personal data

The guidelines clearly define when and how lenders can restrict devices, along with strict safeguards.

Devices can be locked only in specific cases

Mumbai: The RBI has clarified that lenders can use remote restriction technology only if the loan was taken specifically to purchase that device.

This means:

  • Devices cannot be locked for unrelated loans such as personal or consumer loans
  • Only financed smartphones, tablets or laptops fall under these rules

This provision ensures that borrowers’ existing devices are not misused as recovery tools for unrelated debts.

No immediate lock after missing EMI

Mumbai: One of the key protections for borrowers is the timeline for imposing restrictions.

The RBI has stated that:

  • Devices cannot be locked immediately after a missed EMI
  • The loan account must remain overdue for at least 30 days before restrictions begin

Even after 30 days, lenders are expected to follow a phased approach instead of completely disabling the device at once.

Full lock allowed only after 60 days

Mumbai: The guidelines provide an additional safeguard by delaying full restriction.

  • A complete device lock can be imposed only after 60 days of overdue payments

This gives borrowers extra time to regularise their accounts before losing access to the device entirely.

Essential services must remain functional

Mumbai: Even when a device is restricted, lenders are not allowed to render it completely unusable.

The RBI has mandated that the following services must continue to work:

  • Incoming calls
  • SMS services
  • Emergency functions such as SOS
  • Features necessary for work and employment

This ensures that borrowers remain connected and can continue essential communication despite payment delays.

Lenders barred from accessing personal data

Mumbai: Privacy protection is a major component of the RBI’s framework.

The central bank has strictly prohibited lenders from accessing or misusing personal data stored on the device. This includes:

  • Contacts
  • Photos and videos
  • SMS messages
  • Call logs
  • Location data
  • Any unrelated personal information

Lenders must also ensure compliance with applicable data protection norms while using such technologies.

Borrowers must receive prior notice

Mumbai: Transparency has been made mandatory under the new rules.

The RBI has directed that:

  • Borrowers must be informed about device-locking provisions at the time of loan sanction
  • Advance notice must be given before any restriction is applied

This ensures borrowers are aware of potential actions and get a chance to clear dues before restrictions take effect.

Quick restoration after payment

Mumbai: The RBI has laid down strict timelines for restoring access once dues are cleared.

  • Devices must be unlocked within one hour of payment or settlement

This rule is designed to prevent unnecessary inconvenience after borrowers fulfil their obligations.

Compensation for delay in unlocking

Mumbai: In a strong consumer protection measure, the RBI has introduced compensation provisions.

If lenders fail to restore access within the stipulated time:

  • Borrowers must be compensated ₹250 per hour of delay
  • The compensation is capped at the outstanding loan amount

This is among the rare instances where the RBI has specified a monetary penalty linked to recovery practices.

Borrowers retain key rights

Mumbai: The RBI has also clarified that device-locking mechanisms cannot override borrower rights.

  • Borrowers can still prepay or foreclose loans
  • Lenders cannot impose restrictions beyond permitted limits

This ensures contractual rights remain intact despite the use of recovery technology.

Conclusion

The RBI’s new framework marks a significant step in regulating technology-driven loan recovery practices. By setting clear timelines, protecting privacy and ensuring access to essential services, the central bank has strengthened borrower safeguards while allowing lenders to recover dues in a structured manner.

For millions of Indians purchasing devices on EMI, the message is clear: missing payments may lead to restrictions, but these will now operate within a transparent and regulated system rather than arbitrary enforcement.