Your Rights as a Borrower
Can an agent call your family, employer or neighbours? The privacy rule
Recovery agents are not allowed to call your family, employer, neighbours or phone contacts to shame or pressure you. This guide explains the RBI privacy rule, the DPDP Act, and the calm steps to stop third-party contact.
Few things feel more violating than learning that a recovery agent has called your mother, your boss, or a neighbour to talk about your loan. The phone calls to you are stressful enough; when strangers start contacting the people in your life, the shame and panic can feel overwhelming. Please take a breath. What is happening to you is not only deeply unfair — in most cases it is against the rules. Your loan is a private matter between you and your lender, and the law in India says so.
This article explains, in plain language, the privacy rule that protects you, why contacting your family or employer is not permitted recovery, and the calm, documented steps you can take to make it stop. The goal is not to help anyone avoid a real debt. The goal is to protect your dignity and your privacy, which no amount of borrowing signs away.
The rule: your loan is private
The Reserve Bank of India's Fair Practices Code requires lenders, and the agents acting for them, to recover dues with due regard to the borrower's privacy. This is a foundational standard, not a footnote. It means the relationship is strictly between you and the lender. Your friends, relatives, colleagues, employer and neighbours are not parties to your loan, and they have no obligation in it.
There is one narrow, legitimate exception that often gets twisted. If you listed someone as a reference or guarantor when you took the loan, the lender may contact that specific person in a limited, respectful way. But even a reference may not be harassed, abused, or repeatedly called to shame you. And contacting random people from your phone's contact list — people you never named — is never legitimate recovery. It is a privacy violation, plain and simple.
Why calling your contacts is harassment, not recovery
When an agent calls your sister or your manager, the purpose is almost never to "collect" money from them — they do not owe anything. The purpose is to embarrass you, to spread your private financial difficulty, and to apply social pressure through fear of humiliation. RBI's framework recognises this for what it is: a coercive pressure tactic dressed up as recovery.
This is why the privacy rule exists. Legitimate follow-up means contacting you, the borrower, within permitted hours, in a respectful manner. The moment recovery spills over to third parties for the purpose of shaming you, it has crossed from fair business into harassment. The lender remains fully responsible for this conduct, even if a third-party agency or tele-caller actually made the calls — under the Fair Practices Code and the Digital Lending Directions, the regulated lender owns the behaviour of everyone recovering on its behalf.
How loan apps get your contacts — and why it is often not allowed
Many borrowers ask: how did they even get my family's number? Usually the answer lies in app permissions. When some loan apps are installed, they ask for access to your contacts, photos, location and files. Once granted, an app can copy your entire phonebook. Later, if you fall behind, those numbers are used to pressure you.
The RBI Digital Lending Directions address this directly. A lending app is expected to collect only the data it genuinely needs for the loan, with your clear consent, and not to access your full contact list, photo gallery or media. Blanket harvesting of your contacts is contrary to these directions. Beyond the RBI framework, misusing your personal data can engage the Digital Personal Data Protection Act, 2023 (DPDP Act), which governs how organisations may collect, store and use your personal data, and gives you rights over that data. Using your contacts to shame you is exactly the kind of misuse these protections are designed to prevent. You can read more in our guide on how loan apps misuse your data.
What counts as a violation
So you can recognise and record it, here are the behaviours that cross the line:
- Calling your family, friends, neighbours or employer to discuss your loan, demand payment, or shame you.
- Messaging your phone contacts individually or in groups about your debt.
- Posting on social media or threatening to "tell everyone" about your default.
- Sending a contact a doctored or real image of you alongside debt allegations — a tactic that can also raise serious issues under the BNS and the DPDP Act.
- Repeatedly contacting a reference or guarantor in an abusive, threatening or persistent way.
If any of this is happening to you, you are not over-reacting. These are recognised wrongs with clear remedies.
Quietly build your record
The single most useful thing you can do is gather calm evidence. You do not need to confront the agent. You simply document.
- Keep a log of each third-party contact: the date, time, who was contacted, and what was said.
- Ask the contacted person — gently — to forward you any screenshots of messages or note the time of the call.
- Save screenshots of any messages sent to you or to others, with timestamps visible.
- Keep a record of the app permissions you were asked to grant, if you can.
A private, secure place to keep all this matters when you are stressed and your privacy already feels invaded. You can store your call logs, screenshots and notes safely using the document locker, so it is organised if you later need to complain.
How to make it stop — step by step
You have a clear, free, escalating path.
1. Write to the lender's grievance officer first. Send a short written complaint (email is fine) stating that the lender or its agents have contacted third parties in violation of the RBI Fair Practices Code privacy requirement, listing the dates and people involved. Ask them to stop immediately and confirm in writing. Keep a copy.
2. Verify who you are dealing with. Confirm the lender is genuinely RBI-registered and that whoever is contacting your circle is connected to your loan. You can cross-check before responding using our lender check tool. Impersonators sometimes pose as agents, so this protects you twice.
3. Escalate to the RBI Ombudsman. If the lender does not resolve your complaint within 30 days, or rejects it, approach the RBI Ombudsman under the Reserve Bank – Integrated Ombudsman Scheme (RB-IOS). File online at cms.rbi.org.in. There is no fee.
4. Use the Sachet portal. RBI's Sachet portal (sachet.rbi.org.in) lets you report unfair recovery and unauthorised practices directly to the regulator.
5. For data misuse, threats or cyber-harassment. Where contacts are being messaged, your data is being misused, or there are threats, report to the police, and for online or app-based harassment use the cybercrime helpline 1930 and cybercrime.gov.in. If the harassment targets a woman, the National Commission for Women (NCW) can also be approached.
If you cannot afford a lawyer
You do not need to hire anyone to assert your privacy rights — the routes above are built for borrowers to use directly, free of cost. If your situation is more serious and you need legal help but cannot afford it, India's free legal aid system exists for precisely this. Under the Legal Services Authorities framework, the National Legal Services Authority (NALSA), State Legal Services Authorities (SLSA) and District Legal Services Authorities (DLSA) provide free legal assistance to eligible people. Learn how to approach them through our free legal aid guide.
A calm closing thought
Your debt is yours to manage; it is not your family's burden to be shamed with, nor your employer's business to be told. The privacy rule in the Fair Practices Code, reinforced by the Digital Lending Directions and the DPDP Act, draws a firm line around your personal life. Calling your contacts to humiliate you is not a sign of your weakness — it is a sign that the agent has run out of legitimate options. Document calmly, complain in writing, escalate if needed, and let the rules restore your privacy.
For more borrower-rights explainers, our blog has further guides on recovery harassment, calling hours and how to respond to pressure tactics.
This is general information, not legal advice. Rules and procedures can change, and your situation may have specific facts that matter. For advice on your own case, consider free legal aid through NALSA/DLSA or a qualified professional.