Cyber Crime Complaints and Litigation: What to Do If Your Bank Account Is Frozen

Introduction

With India's rapid shift to digital payments, cyber crime has become one of the fastestgrowing challenges for individuals and businesses alike. From UPI scams to phishing and online fraud, cybercriminals are constantly finding new ways to exploit the system.

A common and deeply disruptive outcome of cyber investigations is that innocent account holders find their bank accounts frozen — often without prior notice — because fraudulent money has passed through or been linked to their account. This can cause serious financial hardship and anxiety. However, in most cases a clear understanding of the law, your rights, and the correct legal process can resolve the situation effectively.

Legal Disclaimer: This article is for general informational purposes only and does not constitute legal advice. For advice on your specific situation, please consult a qualified advocate or book legal consultation with our firm.

Why Does a Bank Account Get Frozen After a Cyber Complaint?

When a cyber fraud complaint is lodged, police and cybercrime authorities trace the flow of the fraudulent funds. If those funds have passed through or landed in your account — even unintentionally — the investigating agency can direct your bank to freeze the account to prevent further transfer of money pending investigation.

Common reasons include:

• Suspicion of receiving fraudulent funds, even if the deposit was accidental or made by a third party without your knowledge.

• Money-mule activity, where an account is used, sometimes unknowingly, as a conduit for illegal proceeds.

• An ongoing cyber crime investigation in which your transaction details appear.

• A court’s order or police direction directing the bank to hold funds temporarily.

Legal Provisions for Freezing Bank Accounts

Section 106, Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS) — formerly Section 102, CrPC

This is the primary legal authority for bank account freezing during criminal investigations. Section 106 BNSS replaced Section 102 of the Code of Criminal Procedure, 1973 (CrPC) with effect from 1 July 2024. It empowers a police officer to seize any property — including bank accounts — that is suspected to be connected with the commission of an offence.

Two critical safeguards exist under this provision:

First, Section 106(3) BNSS requires the seizing officer to report the seizure to the jurisdictional Magistrate. Courts have consistently held that this reporting obligation is mandatory and that non-compliance can render the freezing order legally vulnerable.

Second, courts have firmly established that blanket freezing of an entire account is impermissible where suspicion relates only to a specific sum. Any lien or freeze must be confined to the amount alleged to have been fraudulently received.

Information Technology Act, 2000 and Banking/RBI Guidelines

The IT Act governs the underlying cyber offences that trigger the investigation. Banks are also bound by RBI directions to comply with lawful orders from police and regulatory bodies. Banks typically act under legal compulsion rather than at their own discretion.

The MHA/I4C Standard Operating Procedure (SOP) — January 2026

In a significant development for both victims of cyber fraud and innocent account holders caught in investigations, the Ministry of Home Affairs (MHA), through the Indian Cyber

Crime Coordination Centre (I4C), approved a comprehensive Standard Operating Procedure (SOP) for the National Cybercrime Reporting Portal's Cyber Financial Crime Reporting and Management System (CFCFRMS) in January 2026.

The SOP, spanning 99 pages, was introduced to address a recurring challenge flagged by courts and regulators alike: while swift account freezes are essential to stop stolen funds from disappearing, prolonged or indiscriminate freezes had trapped innocent account holders and disrupted legitimate businesses. The full SOP is publicly accessible and can be read here: https://the420.in/wp-content/uploads/2026/01/sop.pdf

Key features and reliefs under the SOP include:

For victims of cyber fraud:

• For small-value frauds where the amount held is below Rs. 50,000, refunds can be processed swiftly without a court order.

• If no court or restoration order exists, banks must lift the hold on such amounts within 90 days, preventing indefinite blocking of funds.

• Two new digital modules are being developed under the NCRP: a Money Restoration Module to fast-track return of defrauded money to victims, and a Grievance Redressal Module featuring a three-tier escalation structure.

For innocent account holders:

• The MHA has directed law enforcement agencies to strictly verify the authenticity of complaints before ordering the freezing of bank accounts, signalling a shift toward a more calibrated approach.

• The SOP provides a comprehensive grievance redressal mechanism for individuals whose accounts or funds have been unnecessarily frozen following cybercrime alerts, prescribing a three-tier escalation structure to ensure time-bound resolution of complaints.

• The SOP lays down a common procedure for banks, NBFCs, payment aggregators, e- commerce platforms, stock-trading apps, and mutual fund houses, ensuring consistency, faster coordination, and reduced ambiguity in handling cyber fraud complaints.

Grievance Redressal Process under the SOP:

• An affected person approaches their bank branch. The bank conducts Customer Due Diligence (CDD) and submits the grievance to CFCFRMS within 7 days.

• The grievance is assigned to the Investigating Officer by the SHO with intimation to the District Grievance Officer.

• State-level Grievance Officers of ADG/IG/DIG rank are designated for escalation. District-level officers of Addl. SP/Dy SP rank handle district-level matters.

• Banks and financial institutions are required to appoint Central and State-level grievance officers who can raise grievances on behalf of affected persons through the NCRP-CFCFRMS platform.

The SOP reflects a broader judicial and regulatory consensus that verification must precede coercive financial action, and that the objective is to stop fraud proceeds without paralysing legitimate financial activity.

Landmark Judgments on Defreezing of Bank Accounts

Indian courts — from the Hon'ble Supreme Court down to various High Courts — have over the past few years developed a robust body of jurisprudence protecting innocent account holders against arbitrary and disproportionate freezing. The following are the most significant decisions:

Hon'ble Supreme Court

State of Maharashtra v. Tapas D. Neogy (1999) 7 SCC 685 The foundational precedent on the subject. The Hon'ble Supreme Court held that bank accounts fall within the phrase "any property" under Section 102 CrPC (now Section 106 BNSS) and can therefore be frozen by investigating agencies. However, the Court simultaneously cautioned that such power is not unbridled and must be exercised strictly in accordance with statutory safeguards. The mandatory reporting to a Magistrate was emphasised as a judicial check on the police power to freeze.

Opto Circuit India Ltd. v. Axis Bank and Others (2021) Supreme (SC) 48 The Hon'ble Supreme Court held that freezing of bank accounts cannot be done in a casual manner and reiterated that such action must be grounded in material linking the account to the offence.

Shento Varghese v. Julfikar Husen (2024 INSC 407) The Hon'ble Supreme Court clarified the meaning of "forthwith" in the context of the mandatory reporting requirement under Section 102(3) CrPC / Section 106(3) BNSS. The Court held that "forthwith" means "as soon as reasonably possible" — prompt but not rigidly instantaneous — and that delayed reporting does not automatically vitiate a freeze unless it causes demonstrable prejudice.

Vivek Varshney and Another v. Union of India and Others (January 2026) The Hon'ble Supreme Court directed a writ petition seeking uniform guidelines for freezing and defreezing of bank accounts during cybercrime investigations to be placed before the Chief Justice of India, noting that a CJI-led Bench was already seized of a suo motu matter examining similar issues. The petition highlighted that there was no uniform SOP governing such freezes, resulting in inconsistent practices, prolonged freezes without time limits, and deprivation of access to funds without due process. The petition urged the Court to formulate a binding rule that balances investigative needs with individual rights, ensuring proportionality and accountability in such coercive actions. This matter remains pending before the Hon'ble Supreme Court, however, the SOP has been formulated which is mentioned above.

Delhi High Court

Pawan Kumar Rai v. Union of India (2024 SCC OnLine Del 8936) A landmark ruling against arbitrary blanket freezes. The Delhi High Court held that freezing an entire bank account over a small disputed amount is disproportionate and violates the right to livelihood

under Article 21. It directed police to use less intrusive measures, such as a lien on the specific disputed amount, instead of paralysing the entire account.

Neelkanth Pharma Logistics Pvt. Ltd. v. Union of India (2025 SCC OnLine Del 1055) The Delhi High Court addressed the issue of blanket freezing of bank accounts in cybercrime cases. The Court remarked that "the possibility of marking a lien on disputed amount, whenever it is identifiable, should be explored as a more appropriate interim measure. Ideally, it should be the first and foremost option." The Court noted a broader issue of indiscriminate bank account freezing by investigating agencies and urged the Ministry of Home Affairs to create a uniform policy. In this case, the petitioner's entire account holding a balance of over Rs.93 crores had been frozen on account of a suspicious credit of Rs.200 — an extreme example of disproportionate action that the Court criticised unequivocally.

Allahabad High Court

Khalsa Medical Store through Proprietor Yashwant Singh v. Reserve Bank of India (2026:AHC-LKO:3701-DB) The Division Bench of Justices Shekhar B. Saraf and Manjive Shukla quashed a freeze notice issued under Sections 94 and 106 BNSS and laid down a comprehensive five-point protocol for future freezes in cyber crime cases. The five principles are:

1. Seizures under Section 106 BNSS require "reasonable belief," not mere suspicion. The provision cannot be used to intervene in civil money disputes or commercial transactions.

2. The Investigating Officer must immediately communicate the freeze request to the Nodal Officer of the concerned bank or Payment System Operator (PSO), including payment aggregators.

3. The freeze request must be accompanied by details of the alleged crime and a copy of the FIR or complaint. Banks and payment system operators are entitled to decline freezing requests that are vague or unsupported by proper documentation.

4. The freeze must specify the exact amount for which a lien is sought. A blanket notice without indicating the amount is illegal and arbitrary.

5. The police must notify the jurisdictional Magistrate within 24 hours of issuing the freeze direction.

Ashish Rawat v. Union of India and Others (2026 SCC OnLine All 2572) Following Khalsa Medical Store, the Allahabad High Court reiterated that investigative powers cannot be exercised in a manner that results in complete deprivation of access to legitimate funds. The Court directed defreezing of the account, allowing only the specific disputed amount to remain under lien.

Madras High Court

Mohammed Saifullah v. Reserve Bank of India (2024 SCC OnLine Mad 5604 /

MANU/TN/5406/2024) The Madras High Court held that account holders must be notified promptly of the reasons for freezing their accounts and a timeline must be provided. Freezing the entire account balance when only a small portion was suspected to be linked to the crime was held to be unjustified. The Court stated that "under the guise of investigation, an order freezing the entire account without quantifying the amount and period cannot be passed. Such an order amounts to a violation of the fundamental rights of trade, business, and livelihood."

Kerala High Court

Dr. Sajir v. Reserve Bank of India (2023 SCC OnLine Ker 9087 / MANU/KE/3854/2023) The Kerala High Court held that the freezing of a bank account must be proportionate and confined only to the specific amounts indicated in police requisitions. This decision established an early and influential precedent on proportionality in cybercrime-related account freezes.

Abdul Basith v. Cyber, Economic and Narcotic Crime (2025 SCC OnLine Ker 83) The Kerala High Court held that unless an account holder was proven to be complicit in a crime, their entire bank account should not be frozen merely because a suspicious transaction was traced to it. This judgment has been widely cited before other High Courts and by the RBI itself in arguing for a uniform national advisory.

Rajasthan High Court

Bindal v. Bank of Baroda (S.B. Civil Writ Petition No. 22577/2025 — Sita Ram v. Bank of Baroda) The Rajasthan High Court directed that only the disputed amount — the amount which was transferred illegally into the petitioner's account — be frozen, while allowing the petitioner to make transactions from the remaining balance. The Court held that freezing the entire account was disproportionate and violated the principle of proportionality, particularly when the account holder was neither an accused nor a suspect.

Gujarat High Court

Bhavna Tradexim LLP v. State of Gujarat (2025 SCC OnLine Guj 1770) The Gujarat High Court found that while the account was frozen at the request of police from another state due to a cyber fraud case, there was no prima facie evidence to link any of the fraudulent transactions to the petitioner's account. Critically, the police also failed to prove that they had reported the freezing of the account to the concerned Magistrate — a mandatory step. Citing both the lack of a direct link to the crime and failure to follow proper procedure, the Court allowed the petition and ordered defreezing.

Mayur Ashokbhai Kikani v. State of Gujarat (2024 SCC OnLine Guj 14705) The Gujarat High Court noted that the investigation was over and the police had no objection to defreezing. The Court found that the lower courts' concerns about evidence destruction were misplaced, as bank statements are admissible evidence and cannot be overwritten. The High Court quashed the lower courts' orders and directed defreezing of the account.

What to Do If Your Bank Account Has Been Frozen

Step 1 — Contact your bank immediately: Ask for the reason and the official reference or acknowledgement number for the freeze — whether it was issued by the cyber crime police, a local police station, or a court order. Request written confirmation and, if possible, a copy of the freeze direction. Under judicial guidance, banks are obligated to inform account holders of the reason, authority, and expected duration of the freeze.

Step 2 — Approach the cyber crime police station : Visit the jurisdictional cyber crime police station with your identity documents and bank statements. Obtain the FIR or complaint number and the name and designation of the investigating officer. Verify whether the freeze order specifies the particular amount for which a lien is sought — if it does not, this itself is a ground for challenge under the Khalsa Medical Store guidelines.

Step 3 — Submit a written representation: File a formal written explanation with supporting documents — proof of the source of funds, transaction records, contract documents, or any other relevant evidence — to demonstrate that your account was not involved in any illegal activity.

Step 4 — Use the MHA/I4C Grievance Redressal Mechanism If your account has been unnecessarily frozen, you may approach your bank branch and ask them to submit a grievance on your behalf through the CFCFRMS platform under the MHA/I4C SOP. The SOP provides a time-bound three-tier escalation mechanism. For amounts below Rs.50,000, release is possible without a court order and in any case banks must review the hold within 90 days.

Step 5 — File an application before the Magistrate Under Sections 497 and 503 of the BNSS (which replaced Sections 451 and 457 of the CrPC respectively), you may approach the jurisdictional Magistrate requesting the release or defreezing of your account, particularly where the funds are legitimate and unconnected to the offence under investigation. This remedy is subject to the facts and the stage of investigation.

Step 6 — File a writ petition in High Court: A cyber law or criminal litigation advocate can draft the appropriate representations to the police, file applications before the Magistrate, or where necessary, file a writ petition before the High Court under Article 226 of the Constitution. Legal representation typically expedites the defreezing process and ensures that all procedural requirements are met correctly.

Preventive Tips to Avoid Account Freezing

• Never share your banking credentials, OTPs, or card details with anyone under any circumstances.

• Scrutinise every incoming transfer from unknown sources and report suspicious deposits to your bank before they become a problem.

• If you receive funds you did not expect, notify your bank immediately in writing and seek legal advice before spending those funds.

• Use only KYC-compliant accounts and maintain clean, well-documented transaction records.

• Verify every online transaction carefully before processing it.