Menu
Borrower rights · Updated October 2026
Between late 2024 and 2027, the RBI and the government have rewritten almost every rule that governs how you borrow: what a lender must show you before you sign, what it can charge, how it may recover, how fast your credit report updates, what it can do with your data and where you can complain. Here is the whole picture on one page, in plain language.
Most borrowing problems we see don’t start with a bad loan. They start with a loan the borrower didn’t fully understand: a processing fee that turned a “13% loan” into a 20% one, a foreclosure charge discovered on the day of closing, a recovery call at 10 pm, a credit report that still shows a loan closed months ago. In nearly every case, a rule already existed that would have protected them. They just didn’t know it.
The rules are also changing fast. The RBI has consolidated its digital lending framework, banned prepayment fees on more loans, tightened credit-reporting timelines twice, replaced its Ombudsman Scheme, and issued new conduct rules for recovery agents that take effect in January 2027. India’s data protection law is being phased in through 2027. This page brings it together, and each item links to a detailed guide.
This is general information about RBI rules for regulated lenders (banks and NBFCs), as of October 2026. It is not legal advice. Unregistered apps and lenders don’t follow these rules, which is why the first right is to know who you are borrowing from.
Dates are when each rule took or takes effect, except May 2025 and November 2025, which are issue and notification dates. Sources are listed at the end of this page.
Use this before you borrow, and keep it handy while you repay.
A Key Fact Statement with the APR, every fee, the amount you’ll receive and the repayment schedule, valid for at least three working days on loans of seven days or more. A fee that isn’t in the KFS can’t be charged without your explicit consent.
The KFS and the app must name the bank or NBFC. Check any app against the RBI’s directory of digital lending apps.
Every digital loan comes with a cooling-off period of at least one day, during which you can exit by repaying the principal and proportionate APR. See the cooling-off period guide.
Lending apps may collect only the data they need, with your consent, and may not access your contacts, call logs or media files. Your rights under the data protection law are covered in your data in a loan application.
Under the RBI’s fair practices code, lenders are expected to tell you the main reasons for rejecting your application. Here is how to ask, in loan rejected: your right to know why.
No prepayment or foreclosure fee on floating-rate loans to individuals for non-business use; on fixed-rate loans, only a charge disclosed upfront. Details in prepayment and foreclosure rights.
Calls only between 8 am and 7 pm, no threats or shaming, no pressure on family or colleagues; from 2027, notice before visits and ID on every agent. See recovery agents and the RBI’s 2026 rules.
Lenders now report as on the 9th, 16th, 23rd and month-end. Errors must be fixed, with ₹100 a day compensation if a complaint runs past 30 days. See weekly credit reporting.
Every regulated lender must have a grievance redressal officer, named in your KFS and on its website. If it doesn’t resolve your complaint within 30 days, you can escalate.
If the lender doesn’t resolve your complaint, the RBI Ombudsman can, at no cost to you. See how to complain about a lender.
A right you don’t know about is a right you can’t use. Save this page before you sign your next loan.
The RBI’s Digital Lending Directions, 2025 add protections specific to online and app-based loans from regulated lenders:
The loan is paid into your bank account and you repay into the lender’s account. No pass-through accounts of an app or agent.
Only data needed for the loan, with your explicit consent. You can refuse, revoke consent or ask for deletion as the lender’s policy allows.
Platforms working with several lenders must show every matching offer, with the lender’s name, APR and a link to the KFS, without nudging you to one.
Your credit limit can’t be raised unless you ask for it.
No named lender, no KFS, a request for contacts or gallery access, an advance “file charge”, repayment to a personal UPI ID, or 7-day loans with heavy deductions. These point to an illegal app. Read our guide to fake loan apps and report threats on 1930 or cybercrime.gov.in.
Under the Reserve Bank – Integrated Ombudsman Scheme, 2026, in force since 1 July 2026, the Ombudsman can award up to ₹30 lakh for consequential loss and up to ₹3 lakh for loss of time, expenses and harassment, in addition to the disputed amount. The scheme covers banks and most larger NBFCs; the RBI portal guides you on whether and how your lender is covered. The RBI contact centre on 14448 can help with status updates. For ready wording, see our borrower complaint letter templates.
| Problem | Rule that helps | Where to go first |
|---|---|---|
| Fee you never agreed to | KFS: undisclosed charges not allowed | Lender’s grievance officer |
| Harassing recovery calls | Recovery agent rules | Lender; police for threats |
| Wrong entry on credit report | Credit information rules, ₹100/day compensation | Credit bureau dispute plus lender |
| Charged for prepaying | Prepayment directions, 2025 | Lender, citing your KFS |
| App misusing your contacts | Digital lending rules, data protection law | Lender; 1930 if threatened |
| Lender not replying | 30-day rule | RBI Ombudsman at cms.rbi.org.in |
Rights work best when you hold up your end too. None of these rules cancel a loan or excuse missed EMIs, and lenders keep every legal remedy for genuine defaults.
Read a KFS line by line, and why APR beats the headline rate, with a worked example.
What agents can and can’t do today and from 1 January 2027, and what to do if they cross the line.
When lenders can charge for early repayment, the maths of prepaying, and closing a loan cleanly.
Why your CIBIL report now updates four times a month, and how to use it in your favour.
The 2026 escalation guide: grievance officer, RBI Ombudsman, timelines and what to include.
What lenders may collect, and your rights under India’s data protection law.
How to exit a digital loan you regret, and what it costs.
How to find out the reasons and fix them before you apply again.
Seven ready-to-use formats for the most common borrower problems.
Omozing is the digital lending brand of Aparampaar Finance, an RBI-registered NBFC. Our personal loans for salaried people start from 11% a year, with a processing fee of 3%–7% plus GST. Your exact rate, every fee, the APR and the repayment schedule are in your Key Fact Statement before you sign. Money goes straight to your own bank account, we never ask for upfront fees before approval, and our grievance redressal process is published on our website. If loan-app debt is the problem, SmartSwitch replaces several app loans with one EMI.
Omozing personal loans for salaried people: up to ₹25 lakh, credit scores from 600, two documents, and a Key Fact Statement with your APR before you sign.
With an RBI-regulated lender you have the right to a Key Fact Statement before signing, a cooling-off period on digital loans, fair and non-abusive recovery, prepayment without fees on floating-rate personal-use loans, accurate credit reporting, the reasons for rejection, and a free complaint route to the lender and then the RBI Ombudsman.
They apply to banks and NBFCs regulated by the RBI and to apps that lend on their behalf. Unregistered apps ignore them, so check that an app names its regulated lender and appears in the RBI’s directory of digital lending apps before you borrow.
Not on a floating-rate loan to an individual for a non-business purpose. On a fixed-rate loan, a lender may charge only what was disclosed in the KFS and loan agreement, calculated on the amount prepaid, for loans sanctioned from 1 January 2026.
Only between 8 am and 7 pm. They may not threaten, abuse or shame you, or harass your family and colleagues. Further rules on notice, ID and recorded calls take effect on 1 January 2027.
First complain to the lender’s grievance officer. If there is no reply within 30 days, or you are not satisfied, file a complaint at cms.rbi.org.in within 90 days. The RBI Ombudsman process is free.
Under the Integrated Ombudsman Scheme, 2026, up to ₹30 lakh for consequential loss and up to ₹3 lakh for loss of time, expenses, harassment and mental anguish, in addition to the disputed amount.
The DPDP Rules were notified on 13 November 2025 and are being phased in. The core duties on consent and handling of personal data apply from 13 May 2027. RBI digital lending rules on data already apply today.
Sources: RBI circular on Key Facts Statement, 15 April 2024; RBI (Digital Lending) Directions, 2025, 8 May 2025; RBI (Pre-payment Charges on Loans) Directions, 2025, 2 July 2025; RBI circular on frequency of credit information reporting, 8 August 2024, and Credit Information Reporting Amendment Directions, 2025, 4 December 2025 (effective 1 July 2026); RBI compensation framework for credit information, 26 October 2023; RBI circular on recovery agents, 12 August 2022, and Responsible Business Conduct amendment directions, 6 August 2026 (effective 1 January 2027); Reserve Bank – Integrated Ombudsman Scheme, 2026 and RBI FAQs (effective 1 July 2026); Digital Personal Data Protection Rules, 2025, notified 13 November 2025; RBI Fair Practices Code for NBFCs. Rules as of October 2026; check rbi.org.in before acting. This is general information, not legal advice.
Omozing is the digital lending brand of Aparampaar Finance Private Limited, an RBI-registered non-deposit-taking NBFC based in Bengaluru. Loans are subject to credit assessment; approval is not guaranteed. See our regulatory disclosures and grievance redressal process.