Recovery agent ghar pe aa gaya — kya woh legal hai?

Recovery visits are permitted only between 8 AM and 7 PM, only after written notice, and only if you have not asked for written communication in place of visits. The agent cannot enter your home without permission, cannot bring more than two people, cannot threaten or use abusive language, and cannot discuss the loan with neighbours or family. Any of those is a violation you can report to the lender's Grievance Officer, and then escalate to RBI Sachet within 30 days.

Loan app is calling my contacts. Kya kar sakta hu?

Calling your contacts about your loan violates RBI Digital Lending Guidelines §4 (contact-list scraping) and RBI Fair Practices Code §9.3 (third-party contact). Both are cite-able in your complaint. The analyzer on this page flags both automatically when you paste the message. Use the Cybercrime portal too if the contact scraping comes with threats.

Can a recovery agent call my employer or boss?

No. Contacting employers, bosses, colleagues, or HR about your loan is prohibited under RBI Fair Practices Code §9.3. Even if the agent got your office number from a form you filled during the application, using it for recovery is a violation.

Threats of arrest or police case — kya yeh real hai?

Almost always no. A civil loan default is not a criminal matter. The lender can sue you in civil court but cannot get you arrested. Any threat of arrest, jail, or an FIR is itself a criminal offence under BNS §351 (criminal intimidation), which the recovery agent has now committed. This is one of the strongest violations you can document — file Cybercrime alongside your lender complaint.

I gave the app permission to access my contacts — does that mean they can use them?

No. The DPDP Act 2023 requires specific, informed consent for each use of your data. Consent to access during onboarding is not consent to weaponise those contacts for recovery. RBI's 2022 Digital Lending Guidelines were explicit — contact-list use for recovery is prohibited, regardless of onboarding permissions.

Loan-app harassment · Rulebook + complaint draft

Every threat is a rule broken.

Paste any harassment message. We match it to the exact RBI rule or BNS section it violates, draft your complaint, and show you where to file — in under 10 minutes.

Analyze a message Read the rulebook

10 laws that protect you3 places to file30 days RBI response deadline

Step 1 · The analyzer

Paste. See the rules broken.

Every keystroke runs against 10 Indian laws — BNS 2023, the RBI Fair Practices Code, the RBI Digital Lending Guidelines, and the DPDP Act. Everything stays in your browser.

Paste the message

Stays in your browser

0 / 5000

Step 2 · File your complaint

Three places. Real deadlines. Copy-ready draft.

Your draft complaint below is assembled from the rules matched above. Edit, copy, and file with the lender's Grievance Officer today. If there's no response in 30 days, you escalate to RBI Sachet. Criminal threats go to Cybercrime — in parallel, today.

TODAY · File with the lender's Grievance Officer

Your draft complaint is ready

Every RBI-regulated NBFC and bank must have a Grievance Officer whose contact is published in the app and on the KFS. Send this complaint by email; keep the response as evidence. The lender must respond within 30 days.

Complaint draftAssembled from 0 rules · Editable

Deadline for lender: 4 Oct 2026

DAY 31 · Escalate to the RBI Sachet portal

If no response in 30 days — or the response is inadequate

Go to cms.rbi.org.in, choose "Non-Banking Financial Company" (or the relevant category), and attach: your complaint copy, the lender's response (or the fact that they didn't respond), and the evidence.

Open Sachet File by: 5 Oct 2026

Your escalation timeline

File with lender4 Sept (today)
RBI response deadline4 Oct
RBI Sachet portal5 Oct

Optional

Want a severity verdict and all three drafts?

The rulebook above runs entirely on your device. If you want an AI-written verdict, an RBI Sachet draft, a cybercrime draft, and a PDF evidence pack, we send the message to our servers with phone numbers, emails, Aadhaar and PAN auto-redacted first. Cases are anonymous and auto-deleted in 30 days.

Channel

Lender / app name (optional)

Extra context (optional)

I'm 18+ and the evidence is mine to share.I consent to SahiSujhav processing this evidence to generate a verdict (DPDP §6). Phone numbers, emails, Aadhaar and PAN are auto-redacted.

Paste at least 20 characters in the analyzer above first.

Step 3 · The rulebook

10 laws that make loan-app harassment illegal

Every rule below is what a lawyer would cite. Filter by tier — criminal goes to Cybercrime, regulatory goes to RBI, data goes to the DPDP Board.

CriminalBNS §351

Criminal intimidation

Threatening physical harm, third-party visits, or false criminal action is criminal intimidation under §351 of the Bharatiya Nyaya Sanhita 2023 — punishable by up to 2 years imprisonment.

CriminalBNS §356

Defamation

Threats to publicly share your photo, morphed images, or defamatory content with your contacts, colleagues, or on social media is defamation under §356 of the BNS 2023.

RegulatoryRBI FPC §9.1

Off-hours calling

RBI's Fair Practices Code allows recovery calls only between 8:00 AM and 7:00 PM. Calls, SMS, or visits outside these hours are a direct violation.

RegulatoryRBI FPC §9.2

Abusive language

RBI's Fair Practices Code forbids abusive language, intimidation, threats, or muscle-power tactics by recovery agents. A single abusive message qualifies.

RegulatoryRBI FPC §9.3

Contacting third parties

RBI's Fair Practices Code prohibits contacting a borrower's family, relatives, employer, colleagues, or friends about the loan without written consent.

RegulatoryRBI FPC §9.4

Threat of harm

RBI's Fair Practices Code specifically prohibits any threat of physical harm or damage to property by recovery agents. Zero tolerance.

RegulatoryRBI DLG §4

Contact-list scraping

RBI's Digital Lending Guidelines (2022) ban the use of borrower contact lists for recovery. Consent to access is not consent to use for recovery.

RegulatoryRBI DLG §5

Photo / gallery access

RBI's Digital Lending Guidelines forbid accessing borrower photos, gallery, or camera roll for recovery. If they threaten you with your photos, they broke this rule.

RegulatoryRBI DLG §7

Sharing borrower data

RBI's Digital Lending Guidelines prohibit sharing your loan details, phone number, or personal information with anyone other than authorised recovery agents.

DataDPDP §11

Consent violation

The DPDP Act 2023 requires specific, informed consent for every use of your personal data. Using photos, contacts, or location for recovery beyond the original consent is a violation.

// FAQ

Harassment — questions borrowers ask most

: Recovery visits are permitted only between 8 AM and 7 PM, only after written notice, and only if you have not asked for written communication in place of visits. The agent cannot enter your home without permission, cannot bring more than two people, cannot threaten or use abusive language, and cannot discuss the loan with neighbours or family. Any of those is a violation you can report to the lender's Grievance Officer, and then escalate to RBI Sachet within 30 days.

This tool drafts a starting complaint template — not legal advice. For criminal threats, dial 112 or visit your nearest police station. We are not a law firm; consider consulting a lawyer before filing. Everything you paste stays in your browser unless you ask for the AI verdict.

Grievance Officer (DPDP Act 2023, §13): privacy@sahisujhav.in · Response within 7 days.