A recovery-conduct evidence file covering lender identity, assigned agent, call timing, threats, third-party disclosure, payments and escalation.
Default does not authorise threats, public shaming, contact-list misuse or payment to an agent’s personal account.
RBI expects regulated entities and their recovery agents to avoid intimidation, harassment and intrusion into the privacy of borrowers.
The lender remains accountable for outsourced recovery conduct.
Borrowers should distinguish legitimate repayment communication from threats, impersonation or unlawful third-party disclosure.
All payments should go through the lender’s authorised channel and be supported by a receipt and loan-account update.
| Check | What to examine |
|---|---|
| Lender | Bank/NBFC and loan account. |
| Agent | Name, agency, authorisation and contact. |
| Conduct | Time, frequency, language and third-party disclosure. |
| Payment | Official beneficiary and settlement authority. |
| Complaint | Lender grievance, police/cybercrime and RBI CMS. |
An agent threatens to message the borrower’s colleagues and asks for a ‘settlement’ to a personal UPI ID. The borrower should preserve the messages, verify the agent with the lender and refuse the unofficial payment route.
Do not delete abusive communication after blocking the number. Export the complete chat and preserve call logs.
Continue addressing the underlying debt through the lender. A conduct complaint does not erase the loan.
Identify the regulated entity, transaction or loan account, date, amount, contractual document and exact failure. Review lender, agent and conduct together. A failed transaction, authorised mistake, unauthorised fraud, merchant dispute, credit-report error and lawful account freeze require different remedies.
Record the event, alert, discovery, first report, complaint number, response and financial impact in date order. Attach only the documents that prove each step. Phone calls can stop urgent harm, but a written acknowledgement creates the escalation record.
Start with the bank, card issuer, lender, credit institution, app or other regulated entity responsible for the service. Use cybercrime or law-enforcement channels for suspected fraud. Use RBI CMS only after the regulated entity process satisfies the Scheme’s timing or rejection condition and the issue is within Ombudsman scope.
Before treating the case as closed, verify the actual bank statement, loan ledger, credit report, account status or merchant refund rather than relying only on a ticket message. Record who confirmed the financial outcome, the date, remaining open amount and the next escalation deadline. This final check prevents a complaint from being marked resolved while the money, lien, overdue status or credit record remains unchanged.
Banking disputes are resolved through classification, speed, written evidence and the correct escalation route. No legitimate bank, regulator or recovery process requires disclosure of an OTP, UPI PIN or remote-control access.
Use the current official instrument, portal or regulator publication before acting. This panel separates the category authority from page-specific references.