Bank Account Frozen Due to a Cyber Crime Complaint? What to Do in India

Discovering that your bank account has been frozen because of a cyber crime complaint can be alarming. You may be unable to withdraw money, make UPI payments, pay salaries or meet business expenses even though no police officer has contacted you and you have never knowingly dealt with a fraudster.

The most important point is this:

a cyber complaint does not automatically prove that the account holder committed fraud.

Your account may have appeared somewhere in the digital money trail after you received a payment in the ordinary course of business, sold goods, provided a service, used a payment gateway or received money from another person whose account was later reported. If your bank account is frozen by a cyber crime complaint, first identify the exact restriction, obtain the law-enforcement reference from the bank, collect proof of the disputed transaction and ask the bank to raise a grievance through the NCRP-CFCFRMS Grievance Redressal Module.

If the restriction is not reviewed or is disproportionate, remedies may also be available before the District or State Grievance Officer, the jurisdictional criminal court or the appropriate High Court.

What should you do immediately if your bank account is frozen? Take these steps in order:

1. Ask the bank whether it has placed a lien on a particular amount, suspended digital banking or imposed a complete debit freeze.

2. Obtain the disputed amount, transaction date, UTR or reference number, NCRP acknowledgement number, name of the police station, and contact details of the Investigating Officer or law-enforcement agency.

3. Preserve your bank statements, invoices, agreements, customer communications, GST records, delivery proof and KYC documents.

4. Give a written representation to the branch and the bank's grievance or nodal officer.

5. Ask the branch to submit your grievance on the Grievance Redressal Module of NCRP-CFCFRMS.

6. Cooperate with verification by the Investigating Officer, preferably through video conference where the applicable procedure permits it.

7. If the grievance is rejected, delayed or the whole account remains blocked for a small identifiable amount, seek a review and obtain advice on approaching the competent court.

8. Do not rely only on telephone conversations. Keep an acknowledgement of every email, letter and document submitted.

Is your account frozen, or is only an amount on hold?

People commonly use the word “freeze” for several different restrictions. The correct remedy depends on what the bank has actually done.

Discovering that your bank account has been frozen because of a cyber crime complaint can be alarming. You may be unable to withdraw money, make UPI payments, pay salaries or meet business expenses, even though no police officer has contacted you and you have never knowingly dealt with a fraudster.

The most important point is this: a cyber complaint does not automatically prove that the account holder committed fraud. Your account may have appeared somewhere in the digital money trail after you received a payment in the ordinary course of business, sold goods, provided a service, used a payment gateway or received money from another person whose account was later reported.

If your bank account is frozen due to a cyber crime complaint, first identify the exact restriction, obtain the law-enforcement reference from the bank, collect proof of the disputed transaction and ask the bank to raise a grievance through the NCRP-CFCFRMS Grievance Redressal Module.

If the restriction is not reviewed or is disproportionate, remedies may also be available before the District or State Grievance Officer, the jurisdictional criminal court or the appropriate High Court.

What should you do immediately if your bank account is frozen?

Take these steps in order:

1. Ask the bank whether it has placed a lien on a particular amount, suspended digital banking or imposed a complete debit freeze.

2. Obtain the disputed amount, transaction date, UTR or reference number, NCRP acknowledgement number, name of the police station and contact details of the Investigating Officer or law-enforcement agency.

3. Preserve your bank statements, invoices, agreements, customer communications, GST records, delivery proof and KYC documents.

4. Give a written representation to the branch and the bank’s grievance or nodal officer.

5. Ask the branch to submit your grievance on the Grievance Redressal Module of NCRP-CFCFRMS.

6. Cooperate with verification by the Investigating Officer, preferably through video conference where the applicable procedure permits it.

7. If the grievance is rejected, delayed or the whole account remains blocked for a small identifiable amount, seek a review and obtain advice on approaching the competent court.

Do not rely only on telephone conversations. Keep an acknowledgement of every email, letter and document submitted.

Is your account frozen, or is only an amount on hold?

People commonly use the word “freeze” for several different restrictions. The correct remedy depends on what the bank has actually done.

Lien or amount on hold

A specified sum is blocked, but the remaining balance may still be usable. You should ask the bank for the exact amount, complaint reference and review through the Grievance Redressal Module.

Suspension of digital banking

UPI, IMPS, NEFT, cards or internet banking may be disabled, while transactions through the branch may still be possible. You can request restoration of digital services while retaining only the reported amount, if necessary.

Debit freeze or account seizure

No outward transaction is permitted from the account. In such cases, you should ask for the legal direction, the provision invoked, whether the seizure was reported to the Magistrate and whether the restriction can be limited to the disputed amount.

Bank-initiated KYC or AML restriction

The bank may have acted under its KYC, anti-money-laundering or risk controls, sometimes alongside a cyber report. You may have to complete KYC or enhanced due diligence while separately addressing any police or NCRP hold.

Under the Ministry of Home Affairs’ 2026 Standard Operating Procedure, when a reported amount is still available, the bank is generally expected to place that amount on hold. Wider suspension or seizure may arise where an account has multiple reports or where lawful directions require it.

The SOP also allows an account holder to ask the bank for the address and contact details of the law-enforcement agency that ordered the action. However, the identity and details of the victim or complainant are not to be disclosed.

Why was an innocent person’s bank account blocked?

Cyber fraud investigations follow the movement of the victim’s money across bank accounts, wallets, payment gateways and merchants.

A victim’s payment may first enter one account and then pass through several others. Banks and police sometimes describe these as “Layer 1”, “Layer 2”, “Layer 3” accounts and so on.

Being described as a Layer 2 or Layer 3 account is not, by itself, a finding of guilt. It ordinarily describes the account’s position in the transaction trail.

A genuine merchant, freelancer, landlord, seller, employee, payment aggregator or business may receive money without knowing that it can be traced back to an earlier cyber fraud.

The relevant questions are:

• What was the disputed transaction?

• Why did you receive the money?

• Did you provide goods, services or value in return?

• Did you know the sender?

• Was the transaction consistent with the normal use of your account?

• Is only the disputed amount blocked, or is the entire account unusable?

• Are you named as an accused or suspect, or is your account only part of the money trail?

This is why transaction-specific evidence is often more useful than a general statement that you are innocent.

Step 1: Obtain the freeze details from your bank

Visit the branch and send an email to the branch manager and the bank’s grievance redressal or nodal officer.

Ask for the following information in writing:

• The nature of the restriction: lien, hold, digital-banking suspension or debit freeze

• The total amount blocked

• The date on which the restriction was imposed

• The disputed transaction, UTR and transaction date

• The NCRP or CFCFRMS acknowledgement or reference number

• The name, address and contact details of the police station or law-enforcement agency

• The name and official contact details of the Investigating Officer, if available

• The statutory provision and direction under which the bank acted

• Whether there are multiple complaints or freeze directions

• Whether the bank has blocked more than the amount specified by the agency

The Indian Cyber Crime Coordination Centre, commonly known as I4C, maintains the technical infrastructure used for cybercrime reporting. It is not itself the investigating agency and does not independently decide whether a particular bank account should be frozen.

The decision is ordinarily taken by the concerned State or Union Territory law-enforcement agency or by the bank under the applicable regulations.

Calling 1930 is essential when reporting a fresh financial cyber fraud as a victim. However, it is not usually a substitute for contacting the bank and the Investigating Officer when your account has been blocked because of somebody else’s complaint.

Step 2: Prepare documents proving that the transaction was genuine

Create one indexed set of documents instead of sending scattered screenshots.

Depending on the transaction, the documents may include:

• PAN, Aadhaar and current KYC records

• The relevant bank statement with the disputed credit marked

• Invoices, purchase orders or contracts

• GST invoices and returns, where applicable

• Proof of delivery of goods or completion of services

• Emails, WhatsApp messages or platform order details

• The sender’s KYC or customer details lawfully available to you

• Payment-gateway settlement reports

• Salary records, loan documents, rent agreements or sale documents

• An explanation of your relationship with the remitter

• Proof of any refund already made

• Documents showing the hardship caused by a blanket freeze, such as salary obligations, EMI defaults, dishonoured cheques or statutory payment deadlines

For a company or merchant, also attach a short note explaining the business model, normal transaction volumes and why the disputed payment did not appear suspicious at the time.

Never fabricate an invoice or create a backdated agreement. A false document can seriously damage an otherwise legitimate case.

Step 3: Use the 2026 NCRP-CFCFRMS grievance process

The Standard Operating Procedure dated 2 January 2026 introduced a structured grievance mechanism for amounts placed on hold and for the suspension or seizure of bank accounts.

Grievance against an amount placed on hold

The account holder should approach the bank branch or another designated branch or office.

After conducting customer due diligence and enhanced due diligence, the bank may submit the grievance, together with the account holder’s documents and explanation, on the Grievance Redressal Module.

The SOP expects the bank to do this as early as possible and no later than seven calendar days after the complaint is made to the bank.

The Investigating Officer should verify the grievance and may call the account holder for verification, preferably by video conference.

If satisfied with the explanation, the officer can direct the bank to remove the hold.

If the officer is not satisfied, the reasons should be recorded and communicated to the account holder by email or SMS.

The prescribed period for the officer’s decision is 15 calendar days after the bank raises the grievance.

If the Investigating Officer does not decide the grievance within 15 calendar days, it is to be automatically notified to the District Grievance Officer.

If you receive an adverse decision, you may file a review request through the designated bank branch within 15 calendar days of receiving the intimation. The District Grievance Officer is expected to decide the review within a further 15 calendar days.

Grievance against a full freeze or suspension of digital banking

The same bank-led grievance route applies where digital banking services have been suspended or the bank account has been seized.

If the verification is satisfactory, the Investigating Officer may direct the bank to restore the account or digital services while keeping only the reported amount on hold.

An adverse decision of the District Grievance Officer concerning continued seizure or suspension may be appealed to the State Grievance Officer within 15 calendar days.

The SOP also recognises that an aggrieved account holder may approach the jurisdictional court at any time.

When submitting your request at the branch, specifically ask for:

Submission of the account holder’s grievance, supporting documents and request for removal of hold or restoration of banking services on the NCRP-CFCFRMS Grievance Redressal Module in accordance with the applicable SOP.

Ask the bank for a complaint number and the date on which it uploaded the grievance. The prescribed timelines become meaningful only when the grievance has actually entered the system.

Does the hold automatically end after 90 days?

Not necessarily. The 90-day provision is often oversimplified online.

Where a hold has been contested through the grievance mechanism and no lawful direction regarding its continuation or removal is received within 90 calendar days from the date on which the bank submitted the grievance, the SOP requires advance intimation to the concerned law-enforcement agency.

The bank may remove the hold after enhanced due diligence and on the account holder’s request if:

• The amount is not required in another case

• No court proceeding concerning release of the amount is pending

• The concerned law-enforcement agency does not seek an extension

• The other procedural requirements are satisfied

An Investigating Officer may request continuation of the hold for up to a further 90 calendar days.

Therefore, the practical step is not to wait silently for 90 days. Raise the formal grievance, retain proof of its submission date and ask the bank for the current order or extension before the period expires.

What if there are multiple cyber complaints or holds from different States?

A single account may be linked to more than one NCRP complaint or to instructions from police stations in different States.

In that situation:

• Ask the bank for a complaint-wise statement of every lien, hold and freeze direction.

• Identify the disputed amount and Investigating Officer for each complaint.

• Submit a common evidence set with a separate transaction explanation for each entry.

• Ask the bank to raise the grievance against every active restriction.

• Do not assume that an NOC from one police station will remove other independent holds.

The 2026 SOP contemplates the separate assignment of multiple holds or directions to the relevant Investigating Officers.

Multi-State cases often take longer because every active restriction must be identified and addressed.

Can the entire bank account be frozen for one disputed payment?

The answer depends on the facts, the direction issued, the account’s history and the law applicable in the relevant jurisdiction.

However, courts have increasingly questioned blanket freezes where the disputed amount is small and identifiable and the account holder is neither an accused nor a suspect.

Section 106 of the Bharatiya Nagarik Suraksha Sanhita, 2023 permits the police to seize property found under circumstances creating suspicion of the commission of an offence. It also requires the seizure to be reported forthwith to the jurisdictional Magistrate.

Section 107 separately provides a court-supervised process for the attachment of property believed to have been derived or obtained from criminal activity.

Under the earlier Section 102 of the Code of Criminal Procedure, the Supreme Court held in State of Maharashtra v. Tapas D. Neogy that a bank account could constitute “property” capable of seizure where it had a direct link with the offence under investigation.

The BNSS now contains the additional attachment mechanism under Section 107.

Recent decisions of the Kerala, Bombay and Delhi High Courts have distinguished seizure under Section 106 from attachment or debit freezing under Section 107.

In January 2026, the Delhi High Court observed that freezing an entire account for an identifiable cyber-fraud amount can be disproportionate where the account holder’s complicity is not shown. The Court directed defreezing of the accounts in the case before it.

At the same time, the 2026 MHA SOP operationally refers to action under Section 106 and other applicable laws.

The precise relationship between Sections 106 and 107 is still developing across jurisdictions. A challenge should therefore focus not only on the section number but also on:

• The absence of recorded or communicated reasons

• Lack of a direct transaction nexus

• Failure to follow the prescribed procedure

• Non-reporting of the seizure to the Magistrate

• Disproportionality between the disputed amount and the restriction

• Indefinite continuation of the freeze

• Absence of material showing the account holder’s involvement

When should you approach a court to unfreeze the bank account?

Court intervention may be considered where:

• The bank or police will not disclose the basic freeze particulars

• The entire account is blocked for a small and identifiable amount

• The account holder is not named as an accused or suspect

• The restriction continues without reasons or periodic review

• The seizure was not reported to the jurisdictional Magistrate

• Legitimate business or salary operations have been paralysed

• The grievance and review mechanism has failed

• Several agencies have issued overlapping directions that cannot be resolved administratively

Depending on the facts and the stage of the case, relief may be sought before the jurisdictional criminal court under the BNSS provisions dealing with custody or disposal of property.

In an appropriate case, relief may also be sought before the relevant High Court under its constitutional jurisdiction.

A court may consider:

• Complete release of the account

• Removal of the debit freeze while retaining a lien on the disputed amount

• Permission to undertake essential business transactions

• Restoration of digital banking facilities

• A direction requiring the investigating agency to decide the representation within a fixed period

Jurisdiction must be assessed carefully, particularly when the bank account is maintained in one State and the cyber complaint or FIR originates in another.

The most convenient court is not always the court that has legal jurisdiction.

Can the RBI Ombudsman unfreeze a cyber crime hold?

The account holder should first complain to the bank in writing.

The RBI’s Integrated Ombudsman mechanism can address certain deficiencies in banking services after the bank rejects the complaint or does not respond within the prescribed period.

However, the RBI’s own framework excludes grievances arising from a bank’s action in compliance with an order of a law-enforcement, statutory or judicial authority.

An RBI complaint may therefore be relevant where the bank has:

• Independently exceeded the police direction

• Blocked more than the amount specified

• Failed to provide basic service information

• Failed to follow its grievance process

• Not responded to the customer’s complaint

It is usually not a replacement for relief from the Investigating Officer, the NCRP-CFCFRMS grievance mechanism or the competent court.

What should you not do after your bank account is frozen?

• Do not ignore an email, notice or verification request from the police.

• Do not give inconsistent explanations to the bank and the Investigating Officer.

• Do not pay a private person merely in exchange for a promise to withdraw the complaint or issue an NOC without legal advice.

• Do not make any unofficial payment to secure unfreezing.

• Do not delete chats, invoices, emails or transaction records.

• Do not threaten bank staff. Insist on written escalation and acknowledgement.

• Do not assume that filing a complaint on social media or calling 1930 will itself remove an existing police restriction.

• Do not travel to a distant police station merely on an informal call without verifying the officer, complaint and purpose.

The SOP prefers video verification where possible, although personal appearance may still be required in an appropriate case.

Frequently asked questions

How long does it take to unfreeze a bank account after a cyber complaint?

There is no single timeline for every case.

Under the 2026 grievance process, the bank is expected to submit an eligible grievance within seven calendar days, and the Investigating Officer is expected to decide it within 15 calendar days.

Delays may occur where there are multiple complaints, inadequate documents, an FIR, a court order or competing claims over the same funds.

Can a bank account be frozen without an FIR?

A reported amount may be placed on hold at the initial NCRP-CFCFRMS stage before a conventional FIR is registered.

A wider or continuing seizure must still have lawful authority and comply with the applicable procedure.

Ask whether the action is:

• A portal-linked hold on a reported amount

• A police seizure direction

• A court order

• A bank’s independent KYC or anti-money-laundering restriction

Does a Layer 2 or Layer 3 freeze mean that I am an accused?

No. The layer usually indicates the account’s position in the movement of funds.

It does not by itself prove knowledge, participation or guilt. You should nevertheless explain the specific credit and provide documents showing the lawful purpose of the transaction.

Can the bank remove the freeze without an NOC from the cyber cell?

The bank will generally not disregard a lawful police or court direction.

However, it can verify whether it has exceeded the instruction, submit your grievance through the prescribed module and seek a direction to remove the hold or restore account operations.

In an appropriate case, a competent court can also direct the bank to restore the account.

Can salary or business expenses be released while the case is investigated?

Relief is fact-specific, but a strong request can be made to restore account operations while retaining only the identifiable disputed amount.

Evidence of salaries, taxes, vendor payments, EMIs and other essential obligations helps demonstrate why a blanket freeze is disproportionate.

What if the cyber police station is in another State?

You can first submit your documents through the bank-led grievance mechanism and request video verification.

If litigation becomes necessary, the correct forum depends on where the direction originated, where the account is maintained and where a material part of the cause of action arose.

Should I return the disputed amount directly to the complainant?

Not without verification and legal advice.

The person contacting you may not be the genuine complainant, other victims may have competing claims, and the money may already be subject to a police or court process.

Any restoration should follow a documented and lawful route.

Practical checklist for your unfreezing request

Before submitting your representation, confirm that it contains:

• Bank account and branch details

• Type and date of restriction

• Disputed amount and UTR

• NCRP acknowledgement, complaint or FIR details available to you

• A chronological explanation of the transaction

• Proof of the source and purpose of the funds

• KYC and business documents

• A request to upload the grievance on the NCRP-CFCFRMS Grievance Redressal Module

• A request to restrict any hold to the identified disputed amount

• A request for restoration of the remaining balance and digital banking services

• Willingness to cooperate through video conference or pursuant to a lawful notice

• An email address and mobile number for written communication

How Apar Law can assist

A bank account freeze caused by a cyber complaint often involves three separate tracks: the bank’s internal nodal team, the Investigating Officer or cyber police station, and the court having jurisdiction.

The correct strategy depends on whether the account is merely lien-marked, fully debit-frozen, reported in multiple complaints or affected by an order from another State.

Apar Law assists individuals, founders, merchants and companies with identifying freeze directions, preparing transaction-backed representations, invoking the NCRP-CFCFRMS grievance process, coordinating with the concerned authorities and seeking proportionate relief before the appropriate court where necessary.

For businesses handling cyber-fraud incidents, read our related guide on Digital Evidence Preservation Policy for Cyber Fraud Investigations.

This article provides general information on Indian law and procedure as reviewed on 14 July 2026. It is not legal advice for any particular account, complaint or investigation. The applicable remedy and forum depend on the freeze communication, transaction trail, agency involved and facts of the case.