RBI Guidelines for Personal Loan: New Rules & Borrower Rights (2025–26)

Sanam was thrilled when her personal loan was approved online in minutes. But when she checked the repayment schedule, she found processing fees, insurance premiums, and a penalty clause buried in fine print - all of which she had never agreed to. Stories like Sanam’s were common before the Reserve Bank of India stepped in.

On May 8, 2025, the RBI issued the Reserve Bank of India (Digital Lending) Directions - the most comprehensive overhaul of personal lending norms in over a decade. Whether you are applying through a bank, an NBFC, or a digital lending app, these new RBI guidelines for personal loan applicants directly determine how your loan is offered, priced, and serviced.

This guide breaks down every key change, what it means for you as a borrower, and what to look for before signing on the dotted line.

What Are the New RBI Guidelines for Personal Loans?

The RBI rules for personal loans introduced in 2025 target three persistent problems in the Indian lending ecosystem: hidden costs, predatory digital lending practices, and lack of borrower awareness. The new framework applies to all regulated entities (REs) - including banks, NBFCs and their Lending Service Provider (LSP) partners.

Effective January 1, 2026 (with registration deadlines as early as June 15, 2025), these RBI guidelines for personal loan apps ensure that every borrower receives a fair, transparent, and legally protected credit experience.

Key Fact Statement (KFS): No More Hidden Charges

The single most impactful change under the new RBI guidelines for personal loans is the mandatory Key Fact Statement (KFS). Before any loan agreement is signed, lenders must provide a standardised, one-page document disclosing:

• Annual Percentage Rate (APR): Annual Percentage Rate (APR) - the total cost of credit including interest, fees, and charges
• Loan amount, tenure, and EMI: Loan amount, tenure, and EMI schedule
• All applicable charges: All applicable charges: processing fees, penal interest, foreclosure terms
• Grievance contact: Contact details of the grievance redressal nodal officer

The KFS gives you an 'apples-to-apples' comparison framework across lenders, which was practically impossible before.

RBI Guidelines for Personal Loan Apps: What's Changed for Digital Borrowers

India's digital lending market has exploded - and so has the number of unauthorized lending apps. The new RBI guidelines for personal loan apps introduce a robust compliance architecture:

Mandatory App Registration

All Digital Lending Applications (DLAs) must be registered on the RBI's Centralised Information Management System (CIMS) portal by June 15, 2025. Any app not listed on the RBI's public directory of verified DLAs is considered unauthorized. Before using any lending app, verify it at rbi.org.in.

Direct Fund Transfers Only

Loan disbursals and repayments must flow directly between the borrower's bank account and the lender's account. No intermediary - not even an LSP - can handle your money. This eliminates a major source of fraud.

Data Privacy Protections

Lenders must obtain granular, opt-in consent before accessing your phone's contacts, camera, or location. Data must be stored within India and cannot be transferred to overseas third parties without explicit approval.

Ban on Dark Patterns

Deceptive UI designs - pre-checked boxes, misleading pop-ups, or interfaces that push you toward specific high-cost products - are now explicitly prohibited. All loan offers must be presented in a clear, neutral, and unbiased manner.

RBI Rules on Multiple Loan Providers and Lending Marketplaces

Aggregator platforms and loan marketplaces must now operate with full transparency. Under the new RBI rules for personal loans:

• Full partner disclosure: LSPs must disclose the full list of lending partners (regulated entities) they work with
• Consistent algorithms: Matching algorithms must be applied consistently - no undisclosed favouritism toward high-commission lenders
• Full option visibility: Even lenders who do not match your profile must be disclosed, so you see the broadest possible range of options
• Algorithm audit trail: Any changes to loan-matching algorithms must be documented and auditable

This directly addresses a practice where borrowers were shown only a curated list of lenders - often based on commercial arrangements, not borrower benefit.

Your Rights as a Borrower Under the New RBI Guidelines

Cooling-Off Period

Borrowers now have a mandatory reflection window of at least 24 hours (up to 3 days for longer-tenure loans) after the KFS is shared. During this period, you can cancel the loan by repaying only the principal disbursed plus the proportionate APR - no penalty.

No Automatic Credit Limit Increases

Lenders cannot increase your credit limit without receiving an explicit, documented request from you. This protects borrowers from being pushed into higher indebtedness without their knowledge.

Zero Prepayment Penalty on Floating-Rate Loans

If your personal loan carries a floating interest rate, lenders cannot charge you a foreclosure or prepayment penalty. You can repay early and save on interest without any financial punishment.

Regulated Recovery Practices

Recovery agents can only contact you between 7:00 AM and 7:00 PM. Intimidation, harassment, or contact with family members is strictly prohibited. Lenders must designate a nodal grievance officer whose details appear in your KFS.

What Regulated Lenders Must Do Differently

Banks and NBFCs operating in personal lending must comply with the following operational mandates:

• CIMS Registration: Register all DLAs on CIMS by June 15, 2025
• Real-time credit bureau reporting: Report all lending activity to Credit Information Companies (CICs like CIBIL) in real time
• Direct fund flows: Ensure all fund flows are direct - no pass-through via LSPs or intermediaries
• Multilingual KFS: Provide the KFS in the borrower's preferred language before contract execution
• Algorithm documentation: Maintain transparent audit logs for all matching algorithm changes

Hero FinCorp, as a regulated NBFC under RBI oversight, complies fully with these directives. Our borrowers receive a KFS before every loan disbursement, and all funds move directly to and from your bank account.

How to Borrow Smartly Under the New RBI Framework

• Know your score: Check your credit score - a CIBIL score of 725 or above qualifies you for Hero FinCorp's personal loans at interest rates starting from 18% p.a.
• Verify the app: Verify the lender's DLA listing on the RBI's public directory before applying through any app
• Read the KFS: Always read the KFS in full - compare the APR, not just the headline interest rate
• Use the cooling-off period: Use the cooling-off period if you feel uncertain - you have at least 24 hours to reconsider
• Report violations: Report any violations - lenders flouting RBI rules can be reported to the RBI Ombudsman at cms.rbi.org.in

Conclusion

The 2025 RBI guidelines for personal loans represent a fundamental shift in how credit is offered and experienced in India. From mandatory cost disclosure through the KFS to regulated recovery practices and banned dark patterns, every rule is designed with one goal: putting borrowers in control.

For those seeking transparent, compliant financial support, Hero FinCorp offers personal loans of up to ₹5,00,000 at interest rates starting from 18% p.a., with flexible tenures from 12 to 36 months. Our processes are fully aligned with RBI's new personal loan framework - because we believe that responsible lending and borrower protection go hand in hand.

Frequently Asked Questions

What are the new RBI guidelines for personal loans in 2025?

The RBI issued the Digital Lending Directions on May 8, 2025, effective January 1, 2026. Key changes include mandatory Key Fact Statements (KFS), real-time credit bureau reporting, direct fund transfers, a public DLA directory, and a regulated cooling-off period for borrowers.

Which RBI guidelines apply specifically to personal loan apps?

All Digital Lending Applications (DLAs) must register on RBI's CIMS portal by June 15, 2025. Apps must comply with data localisation norms, ban dark UI patterns, and ensure only direct fund transfers. Unregistered apps are considered unauthorized under the new framework.

Can a lender increase my credit limit without asking me?

No. Under the new RBI rules for personal loans, credit limit increases require an explicit request from the borrower. Automatic enhancements are prohibited.

Is there a penalty for prepaying a personal loan?

For floating-rate personal loans, the RBI prohibits prepayment or foreclosure penalties. You can repay early without any additional charges.

How do the new RBI guidelines protect against digital loan fraud?

The RBI now maintains a live public directory of all verified DLAs. Any lending app not registered on CIMS by June 15, 2025, is unauthorized. Additionally, direct fund transfer mandates prevent intermediaries from mishandling your money.

What is the cooling-off period under the new RBI personal loan rules?

After receiving the KFS, borrowers have at least 24 hours (up to 3 days for long-tenure loans) to reconsider. If you choose to exit within this window, you pay only the principal plus proportionate APR - no penalty charges.

Disclaimer: The information provided in this blog post is intended for informational purposes only. The content is based on research and opinions available at the time of writing. While we strive to ensure accuracy, we do not claim to be exhaustive or definitive. Readers are advised to independently verify any details mentioned here, such as specifications, features, and availability, before making any decisions. Hero FinCorp does not take responsibility for any discrepancies, inaccuracies, or changes that may occur after the publication of this blog. The choice to rely on the information presented herein is at the reader's discretion, and we recommend consulting official sources and experts for the most up-to-date and accurate information about the featured products.