Missed your phone EMI? RBI lays down strict rules on when lenders can lock your device

RBI has laid down when banks can restrict phones, tablets and laptops bought on loan. The rules bar access to personal data and require rapid restoration after payment.

In Short

• RBI regulates remote locking of financed devices from Jan 1, 2027
• Partial restrictions start after 30 days overdue, full lock after 60 days
• Essential services like calls and SOS must remain active during lock

Buying a smartphone on EMI has become common, but so has another practice, which is lenders remotely locking devices when borrowers miss repayments.

The Reserve Bank of India (RBI) has now stepped in to regulate this growing practice, issuing detailed rules on when banks and regulated entities can remotely restrict financed smartphones, tablets or laptops, what services must continue to work even after a device is locked, and when borrowers must be compensated if lenders fail to restore access after dues are cleared.

The new framework, which comes into effect from January 1, 2027, is part of the RBI's revised directions on the conduct of regulated entities in recovery of loans and engagement of recovery agents. It marks the first time the central bank has laid down a comprehensive regulatory framework governing technology-enabled recovery tools.

WHY HAS RBI INTRODUCED THESE RULES?

The RBI noted that several regulated entities have started using technology-based recovery mechanisms that allow financed devices to be remotely restricted when borrowers default on loan repayments.

While recognising that lenders have a legitimate right to recover dues, the regulator has sought to ensure that such technology does not become a tool for harassment or unfair recovery.

Accordingly, the RBI has laid down a detailed set of safeguards covering when device restrictions can be imposed, what features must remain functional, what notices borrowers must receive, and how quickly devices must be restored once dues are cleared.

CAN BANKS LOCK ANY DEVICE?

No.

The RBI has made it clear that remote restriction technology can only be used when the loan has been taken specifically to finance that device.

In other words, if you have taken a personal loan, consumer loan or any other loan not directly linked to purchasing a smartphone, tablet or laptop, the lender cannot remotely disable your existing device as part of the recovery process.

One of the biggest borrower safeguards is the timeline prescribed by the RBI.

The regulator has said lenders cannot remotely restrict a financed device immediately after an EMI is missed.

Instead, device restrictions can begin only after the loan account remains overdue for at least 30 days.

Even then, the RBI expects lenders to adopt a phased approach rather than completely disabling the device from day one.

FULL DEVICE LOCK ONLY AFTER 60 DAYS

The RBI has introduced another important protection.

A complete restriction of the device can be imposed only after the loan remains overdue for 60 days.

This means borrowers get an additional window after the initial restriction before lenders can impose a full lock on the financed device.

WHAT MUST CONTINUE TO WORK?

Even when restrictions are imposed, the RBI has prohibited lenders from rendering the device completely unusable.

The regulator has specifically directed that certain essential services must remain available to borrowers.

These include:

• Incoming phone calls.
• SMS services.
• Emergency communication such as SOS functions.
• Features necessary for work and employment.

The objective is to ensure borrowers are not left completely disconnected because of delayed loan repayments.

BANKS CANNOT ACCESS YOUR PERSONAL DATA

Privacy forms another important pillar of the RBI's framework.

The regulator has directed that recovery technology should not allow lenders to access or misuse borrowers' personal information.

Specifically, lenders cannot access:

• Contact lists.
• Photographs.
• Videos.
• SMS messages.
• Call logs.
• Location history.
• Any other personal data unrelated to loan recovery.

The RBI has also asked banks to ensure that any technology used for restricting devices complies with applicable data protection requirements.

BORROWERS MUST RECEIVE ADVANCE NOTICE

Before any restriction is imposed, borrowers must be informed.

The RBI has directed regulated entities to clearly disclose the possibility of remote device restriction at the time of sanctioning the loan.

Borrowers must also receive advance communication before any restriction is activated, giving them an opportunity to regularise the loan account.

The central bank has also emphasised that the terms governing remote restriction should be transparent and clearly communicated rather than buried in lengthy loan agreements.

DEVICE MUST BE RESTORED QUICKLY AFTER PAYMENT

The RBI has also laid down strict timelines for restoring access.

Once the borrower clears the overdue amount or regularises the loan account, the lender must remove the restriction without unnecessary delay.

The regulator has directed that devices should ordinarily be restored within one hour of payment or settlement, ensuring borrowers are not inconvenienced after clearing their dues.

BANKS MAY HAVE TO PAY COMPENSATION

Perhaps the strongest consumer protection in the new framework relates to compensation.

If a lender fails to remove restrictions from the financed device within the prescribed timeline despite the borrower clearing the dues, it will have to compensate the borrower.

The RBI has fixed the compensation at Rs 250 for every hour of delay beyond the stipulated restoration period.

The compensation, however, will be capped at the amount of the outstanding loan.

This is among the few instances where the regulator has prescribed a specific monetary compensation linked to technology-based recovery practices.

BORROWERS CAN STILL PREPAY THEIR LOANS

The RBI has also clarified that the use of remote restriction technology should not interfere with a borrower's contractual rights.

Borrowers will continue to have the right to prepay or foreclose the loan, subject to the applicable terms and conditions.

Similarly, lenders cannot use device-locking technology to impose restrictions beyond what has been specifically permitted under the RBI's framework.

WHAT THIS MEANS FOR BORROWERS

The new framework attempts to strike a balance between lenders' right to recover dues and borrowers' right to fair treatment.

For lenders, technology-enabled recovery remains a legitimate option. But the RBI has made it clear that such tools cannot be used indiscriminately or in a manner that compromises a borrower's ability to communicate, work or access essential services.

For millions of Indians purchasing smartphones on EMI, the message is equally clear: missing repayments may still result in restrictions, but those restrictions will now operate within a well-defined regulatory framework instead of being left entirely to lenders' discretion.

- Ends