Your Bank Account Got Frozen in a Cybercrime Case, Now What?

 

You woke up, tried to pay a bill or transfer money, and your bank app said your account was frozen. You called the bank. They told you the Cyber Cell had flagged your account in connection with a fraud complaint. You have no idea what they are talking about. You have not done anything wrong.

This situation is happening to thousands of people across India right now. In Lucknow, in Kanpur, in Varanasi, in Noida,  ordinary people, small business owners, freelancers, shopkeepers, even salaried professionals are finding their accounts locked without any warning, without any letter, and without any explanation.

This guide explains what happened, why it happened, what the law actually says about it, and what your options are.


Why Your Account Got Frozen

When someone is cheated online,  through a UPI scam, a fake investment app, a phishing link, or an online job fraud, the first thing the cybercrime police or the national portal does is try to follow the money. The victim calls 1930 (India’s national cybercrime helpline) or files a complaint on cybercrime.gov.in. The system traces where the money went.

Here is the problem. Money in these scams rarely stays in one place. It moves fast,  from the victim’s account to Account A, then to Account B, then to Account C, maybe split across five more accounts, sometimes within minutes.

If Account B was yours,  even if you received that money innocently, say as a payment for goods you sold, freelance work you did, or a P2P transfer from a contact, your account gets flagged. The cyber cell sends a direction to your bank. The bank freezes the account, sometimes the entire account, sometimes just puts a hold on funds. You find out when you try to transact.

The Delhi High Court described exactly this situation when it observed: “In such types of cyber-crimes, if any fraudster cheats a complainant and with the help of cheated money, when such fraudster buys something using such money, the police, chasing such money-trail, directs freezing the bank accounts of all concerned and in the process, many innocent recipients have to bear the brunt, for no fault of theirs.”

You were not the fraudster. You were just in the money trail. That is enough to get your account frozen.


How Common Is This Problem?

More common than most people realise. India registered 28.15 lakh cybercrime complaints in 2025 alone, a 24 per cent increase from the previous year. Each of those complaints can trigger a money-trace that touches multiple bank accounts. The cybercrime investigation ecosystem is under enormous pressure, and the result is a large number of accounts getting frozen across the country.

The Rajasthan High Court observed in 2025 that “the unwarranted freezing of bank accounts by investigating authorities in a mechanical manner has emerged as a growing concern confronting Indian businesses and corporate entities.”

Courts across India,  the Allahabad High Court, Delhi High Court, Bombay High Court, Kerala High Court, and Madras High Court, have all passed judgments in 2024 and 2025 on this exact problem. That is not a coincidence. It is a reflection of how widespread and serious the issue has become.


What Law Governs This

Before July 1, 2024, the law governing seizure of property during criminal investigation was Section 102 of the Code of Criminal Procedure, 1973 (CrPC). From July 1, 2024, the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS) came into force and replaced the CrPC. The key provisions now are Section 106 and Section 107 of the BNSS.

Understanding the difference between these two sections is crucial,  because that difference is exactly what multiple High Courts have been using to protect innocent account holders.

Section 106 BNSS | Seizure of Property

Section 106 of the BNSS is the successor to Section 102 CrPC and allows police or investigating agencies to seize property,  including assets suspected to be stolen or involved in an offence,  for the purpose of preserving evidence.

The key word is “seize for evidence.” Section 106 does not say the police can freeze your entire bank account and lock you out of your own money indefinitely. The seizure is meant to preserve evidence, and the police must report it to the Magistrate promptly after doing so.

Section 107 BNSS | Attachment of Property

Under Section 107 BNSS, a police officer investigating a crime has to approach a jurisdictional Magistrate to seek attachment of any property believed to be derived directly or indirectly from a criminal activity or the commission of an offence.

In other words: if the police want to truly attach your property (including your bank account funds) as proceeds of crime, they cannot do it on their own. They must go to a Magistrate, explain the case, and get an order. This is a judicial check on police power.

The Critical Distinction Courts Are Enforcing

The Delhi High Court held clearly: “Section 106 of the BNSS empowers the police only to seize property for evidentiary purposes and does not confer any authority to attach or debit-freeze bank accounts. Attachment or freezing of bank accounts, being measures directed at securing alleged proceeds of crime, can be undertaken only under Section 107 of the BNSS and strictly upon orders of a competent Magistrate, after following the prescribed procedural safeguards.”

What does this mean in plain language?

Police cannot fully freeze,  debit-freeze your bank account just by sending a letter to your bank under Section 106. If they want to do that, they need a Magistrate’s order under Section 107. They are skipping that step in a large number of cases. Courts are now saying: that is illegal.


What the Allahabad High Court Has Said

The Allahabad High Court has directly dealt with this issue and its ruling matters for everyone in Uttar Pradesh.

In a significant judgment, the Allahabad High Court held that police may seize or freeze property, including bank accounts, under Section 106 of the BNSS without prior notice to the affected person, as that provision permits immediate action in respect of property suspected to be stolen or linked to an offence and requires reporting to the jurisdictional Magistrate after seizure. However, distinguishing this power from attachment under Section 107, the Court directed banks to place a lien only on the disputed amount and restore operation of the accounts.

This is an important nuance. The Allahabad High Court said:

  1. Police can act quickly and without prior notice under Section 106  because cybercrime money moves fast, and delay defeats the purpose.
  2. But the freeze cannot be blanket. Banks should place a lien only on the specific disputed amount, not freeze the entire account.
  3. The rest of your account should be accessible to you.

Similarly, in Khalsa Medical Store v Reserve Bank of India (2025), the Allahabad High Court required investigators to promptly notify the bank of full details of the alleged offence, allowed banks to reject unsupported requests, and reaffirmed that blanket freezes were arbitrary and illegal.


The Difference Between a “Full Freeze” and a “Lien”

This distinction matters enormously to you practically.

Full Freeze / Debit Freeze: You cannot transact at all. Your account is completely locked. You cannot withdraw, transfer, or pay bills. This is what many people are experiencing, and this is what courts are saying cannot be done arbitrarily.

Lien on Specific Amount: Only the amount linked to the alleged fraud is held. Say the disputed transaction was Rs 10,000,  a lien of Rs 10,000 is placed. The rest of your account balance remains accessible to you. This is the legally correct approach for disputed amounts.

The Bombay High Court noted that FAQ 21 of the Management System (issued by the cybercrime coordination body) itself clarifies that banks or other intermediaries are empowered only to place the disputed amount under lien and are not authorised to impose a debit freeze on accounts. Nevertheless, in many cases, banks proceeded to fully freeze accounts.

The banks are not always following their own guidelines. If your entire account has been frozen over a small disputed amount, you have grounds to raise this.


What Happens in Practice

Here is what usually happens when an account gets frozen through the cybercrime complaint system:

Step 1: A fraud victim files a complaint on cybercrime.gov.in or calls 1930.

Step 2: The system, in coordination with banks and payment gateways, follows the digital footprint of the fraudulent transaction. The moment a complaint is filed, an automated system is triggered to trace the flow of stolen money.

Step 3: The Cyber Cell issues a direction to the bank, often under Section 106 BNSS, to freeze the flagged account. The bank complies, sometimes freezing the entire account rather than just placing a lien on the disputed amount.

Step 4: You, the account holder, find out when a transaction fails. The bank tells you the account has been frozen on Cyber Cell instructions.

Step 5: You must now approach the Cyber Cell, demonstrate your innocence, and request an NOC (No Objection Certificate) for the bank to restore your account.

You were given no notice. No hearing. No opportunity to explain yourself before the freeze happened. The courts have acknowledged this is uncomfortable,  but allowed it because in cybercrime cases, money disappears in minutes if accounts are not frozen quickly. The safeguard, though, is that the process to lift the freeze for innocent parties must be quick and fair.


What Should You Do If Your Account Gets Frozen

Step 1.  Get the Details in Writing from Your Bank

Go to your bank branch immediately. Ask them:

  • Under what law and by which authority was the freeze order issued?
  • What is the complaint number or FIR number associated with the freeze?
  • What is the name and contact of the investigating officer or Cyber Cell that issued the instruction?
  • Was this a full debit freeze or a lien on a specific amount?

Banks are required to tell you why your account has been frozen. If they refuse to give you this information, escalate to the Bank’s Grievance Cell and the Banking Ombudsman.

Step 2.  Gather Your Transaction Documents

Pull together:

  • Your complete bank statement for the period covering the flagged transaction
  • Proof of the legitimate source of the payment,  invoices, work orders, WhatsApp conversations, UPI receipts, contracts, anything that explains why someone sent you that money
  • Your KYC documents (Aadhaar, PAN)
  • Any earlier correspondence with the party who sent you the money

The goal is to show clearly that you received money for a legitimate reason and had no knowledge of any fraud.

Step 3.  File a Representation with the Cyber Cell

Write a formal letter to the Cyber Cell that issued the freeze order. Explain who you are, what transaction is being disputed, why that transaction was legitimate, and request the issuance of a No Objection Certificate (NOC) so the bank can restore your account.

An NOC issued to the bank usually results in unfreezing. If your account is caught up in complex money-laundering cases with filed FIRs or multiple jurisdictions involved, it will take an indeterminate period.

Keep a copy of your representation with acknowledgment. Follow up every 7-10 days.

Step 4. Register a Complaint if You Are the Fraud Victim

If the freeze happened because someone used your account as a mule without your knowledge, you may yourself be a victim of fraud. Any suspicious transaction should be reported immediately to the 1930 helpline to prevent further complications. Filing your own complaint establishes that you are a victim, not a perpetrator, which changes how the Cyber Cell treats your case.

Step 5. Approach the Magistrate Under Section 451/457 CrPC (Now Section 503/505 BNSS)

Under the new BNSS framework, if property including bank account funds has been seized by police, you can approach the Magistrate with an application for restoration of those funds. This is a formal legal remedy that courts process, and it compels the investigating agency to explain the basis for continuing the freeze.

Step 6. High Court Writ Petition

If cyber police delay or deny relief, you may approach the District Court or High Court under Article 226 of the Constitution for unfreezing.

Before the Allahabad High Court (Lucknow Bench), a writ petition under Article 226 can be filed asking the court to direct the Cyber Cell and the bank to either lift the freeze or place only a specific lien on the disputed amount. Courts have been receptive to such petitions, particularly where:

  • The account holder is not directly accused of any crime
  • The freeze has been blanket rather than limited to the disputed amount
  • The Cyber Cell has not communicated the basis of the freeze
  • There has been undue delay in processing the innocence representation

What Courts Have Said About How Long a Freeze Can Last

Courts have made clear that indefinite freezing without review is not acceptable.

Indian courts have consistently held that prolonged freezing of bank accounts without justification causes undue hardship and must be reviewed promptly.

The Rajasthan High Court has ruled that accounts cannot be frozen arbitrarily without proper evidence linking the account holder to cybercrime. Courts have ordered de-freezing in cases where the investigating agency could not demonstrate active evidence of the account holder’s involvement.

If your account has been frozen for several months with no update, no FIR, and no communication from the Cyber Cell, this is a circumstance that courts take seriously.


When Your Account Was Used Without You Knowing

One of the most troubling patterns in cybercrime investigations is the “mule account” problem. Fraudsters recruit or deceive people,  sometimes students, daily wage workers, or small-time businesspeople, into sharing their account credentials or UPI details in exchange for a small “rent.” The fraudsters then use these accounts to park and move fraud proceeds.

But sometimes accounts are used without the holder’s knowledge at all. A SIM card issued in your name, a bank account opened on forged documents, or credentials stolen through phishing  your account can end up in a fraud chain without you ever knowing it.

If this has happened to you, you are simultaneously a victim of identity fraud and being treated as a suspect. You need to:

  • File a complaint yourself about the misuse of your identity
  • Produce evidence that you did not operate the account during the relevant period (for example, you were in a different city, the transactions happened at odd hours you were clearly not awake, or the account was operated from IP addresses or devices not yours)
  • Request the Cyber Cell to examine the digital evidence  account login locations, device IDs  which will support your case

 Why This Is Not Just a Nuisance

For a salaried person, a frozen account means delayed salary access, missed EMIs, penalty on bills. Stressful, but recoverable.

For a small business owner, a trader, or a freelancer, a frozen account can be catastrophic. Supplier payments fail. Staff salaries cannot be processed. A business that runs on digital collections stops entirely.

The Delhi High Court dealt with a case where a logistics company’s bank account with a withdrawable balance of over Rs 93 crore was frozen over an innocuous entry of Rs 200, and expressed concern with investigating agencies freezing the bank accounts of innocent traders while probing cybercrimes.

A frozen account over Rs 200 brought an Rs 93 crore business to a standstill. The courts recognise this is disproportionate. The principle of proportionality  that the harm caused by the freeze should not be greater than the harm it is trying to prevent  is increasingly being applied by courts reviewing these orders.


What You Should Know About the 1930 Helpline and cybercrime.gov.in

Helpline 1930 is India’s national financial cybercrime helpline, operated by the Ministry of Home Affairs. If you are a fraud victim, calling 1930 immediately after the fraud gives authorities the best chance to freeze the money before it moves further.

cybercrime.gov.in is the National Cyber Crime Reporting Portal where written complaints can be filed, tracked, and escalated.

Both of these are the first point of contact for victims reporting fraud and also for innocent account holders trying to get their accounts released. If your account is frozen, the Cyber Cell handling your matter is typically reachable through these channels.

The I4C (Indian Cyber Crime Coordination Centre), which operates under the Ministry of Home Affairs, updated its standard operating procedures in 2026 to build in clearer processes for innocent parties. Whether those procedures are being followed consistently is something courts continue to monitor.


Frequently Asked Questions

Can the police freeze my account without an FIR?

Yes, in cybercrime investigations. A complaint on cybercrime.gov.in or the 1930 helpline is sufficient to trigger a freeze direction under Section 106 BNSS. An FIR is not always needed at the preliminary stage of freezing.

Can the police freeze my entire account balance?

Legally, the courts have said no  or at least, not without a Magistrate’s order. Under Section 106 BNSS, seizure is for evidentiary purposes. A debit freeze of the full account requires an attachment order from a Magistrate under Section 107 BNSS. However, in practice, many accounts are being fully frozen. You have the right to challenge a blanket freeze.

How long does it take to unfreeze an account?

It varies considerably. Straightforward cases where the account holder’s innocence is clear and the Cyber Cell has no ongoing investigation can resolve in 2-6 weeks with proper documentation. Complex multi-jurisdictional cases or those involving a formal FIR can take longer and may need legal intervention.

What if the Cyber Cell does not respond to my representation?

Follow up formally in writing. If responses are not forthcoming, you can approach the court. Courts have been willing to direct Cyber Cells to respond and take action within defined timelines.

My account was frozen because of a UPI payment I received for genuine work. What do I do?

This is one of the most common situations. The key is documentation. Produce evidence of the work done, the invoice or agreement, and any communication with the person who paid you. This demonstrates that the payment was legitimate and that you had no knowledge that the money had a fraudulent origin.

Does being an innocent account holder in a freeze affect my CIBIL score?

A freeze itself is not a loan default and should not directly affect your credit score. However, if the freeze causes you to miss EMI payments because you cannot access funds, those missed payments will affect your credit history. This is an additional reason courts take prolonged freezes seriously.


Royal Litigators is a law firm based in Gomti Nagar, Lucknow, practising before the Allahabad High Court (Lucknow Bench), District Courts across Uttar Pradesh, and the Supreme Court of India.

Office: 5/171, Vipul Khand, Gomti Nagar, Lucknow — 226010 | Phone: 8004800100


Disclaimer: This article is for general information and legal awareness only. The laws cited are accurate as of June 2026. Every case depends on its specific facts and circumstances. This does not constitute legal advice. For advice specific to your situation, please consult a qualified advocate.

Leave a Comment

Your email address will not be published. Required fields are marked *