Bank Account Frozen Due to a Cyber Crime Complaint? What to Do in India

Discovering that your bank account has been frozen due to a cyber crime complaint can be alarming. You may find yourself unable to withdraw money, make UPI payments, pay salaries, or meet business expenses. This can happen even if no police officer has contacted you and you have never knowingly dealt with a fraudster.

The most important point is this:

A cyber complaint does not automatically prove that the account holder committed fraud.

Your account might have been flagged due to a payment received in the ordinary course of business, a sale of goods, or a service provided. It could also be linked to another person whose account was reported. If your bank account is frozen because of a cyber crime complaint, here’s what you should do:

1. Identify the exact restriction.

2. Obtain the law-enforcement reference from the bank.

3. Collect proof of the disputed transaction.

4. Ask the bank to raise a grievance through the NCRP-CFCFRMS Grievance Redressal Module.

   
   

If the restriction is not reviewed or seems disproportionate, remedies may be available before the District or State Grievance Officer, the jurisdictional criminal court, or the appropriate High Court.

Immediate Steps to Take if Your Bank Account is Frozen

If you find yourself in this situation, follow these steps in order:

1. Clarify the Situation: Ask the bank whether it has placed a lien on a particular amount, suspended digital banking, or imposed a complete debit freeze.

2. Gather Information: Obtain details such as the disputed amount, transaction date, UTR or reference number, NCRP acknowledgement number, the name of the police station, and contact details of the Investigating Officer or law-enforcement agency.

3. Preserve Documentation: Keep your bank statements, invoices, agreements, customer communications, GST records, delivery proof, and KYC documents safe.

4. Submit a Written Representation: Provide a written representation to the branch and the bank's grievance or nodal officer.

5. Utilize the Grievance Redressal Module: Request the branch to submit your grievance on the Grievance Redressal Module of NCRP-CFCFRMS.

6. Cooperate with Investigations: Be ready to cooperate with verification by the Investigating Officer, preferably through video conference if permitted.

7. Seek Legal Advice: If your grievance is rejected or delayed, or if your account remains blocked for a small identifiable amount, seek a review and legal advice on approaching the competent court.

8. Document Everything: Don’t rely solely on phone conversations. Keep a record of every email, letter, and document you submit.

   
   

Understanding the Nature of the Freeze

Is your account frozen, or is only an amount on hold? People often use the term “freeze” to describe different restrictions. The correct remedy depends on what the bank has actually done.

Lien or Amount on Hold

In this case, a specified sum is blocked, but the remaining balance may still be usable. You should ask the bank for the exact amount, complaint reference, and review through the Grievance Redressal Module.

Suspension of Digital Banking

If UPI, IMPS, NEFT, cards, or internet banking are disabled, transactions through the branch may still be possible. You can request the restoration of digital services while retaining only the reported amount if necessary.

Debit Freeze or Account Seizure

No outward transaction is permitted from the account. In such cases, ask for the legal direction, the provision invoked, and whether the seizure was reported to the Magistrate.

Bank-Initiated KYC or AML Restriction

The bank may have acted under its KYC, anti-money-laundering, or risk controls, sometimes alongside a cyber report. You may need to complete KYC or enhanced due diligence while separately addressing any police or NCRP hold.

Under the Ministry of Home Affairs’ 2026 Standard Operating Procedure, when a reported amount is still available, the bank is generally expected to place that amount on hold. Wider suspension or seizure may arise where an account has multiple reports or where lawful directions require it.

Why Was an Innocent Person’s Bank Account Blocked?

Cyber fraud investigations often trace the movement of a victim’s money across various accounts, wallets, payment gateways, and merchants. A victim’s payment may first enter one account and then pass through several others. Banks and police sometimes refer to these as “Layer 1”, “Layer 2”, “Layer 3” accounts, and so on.

Being categorized as a Layer 2 or Layer 3 account does not imply guilt. It merely describes the account's position in the transaction trail. A genuine merchant, freelancer, landlord, seller, employee, payment aggregator, or business may receive money without knowing it can be traced back to earlier cyber fraud.

Key Questions to Consider

• What was the disputed transaction?

• Why did you receive the money?

• Did you provide goods, services, or value in return?

• Did you know the sender?

• Was the transaction consistent with the normal use of your account?

• Is only the disputed amount blocked, or is the entire account unusable?

• Are you named as an accused or suspect, or is your account only part of the money trail?

  
  

This is why transaction-specific evidence is often more useful than a general statement of innocence.

Step 1: Obtain the Freeze Details from Your Bank

Visit the branch and send an email to the branch manager and the bank’s grievance redressal or nodal officer. Ask for the following information in writing:

• The nature of the restriction: lien, hold, digital-banking suspension, or debit freeze.

• The total amount blocked.

• The date on which the restriction was imposed.

• The disputed transaction, UTR, and transaction date.

• The NCRP or CFCFRMS acknowledgement or reference number.

• The name, address, and contact details of the police station or law-enforcement agency.

• The name and official contact details of the Investigating Officer, if available.

• The statutory provision and direction under which the bank acted.

• Whether there are multiple complaints or freeze directions.

• Whether the bank has blocked more than the amount specified by the agency.

  
  

The Indian Cyber Crime Coordination Centre, commonly known as I4C, maintains the technical infrastructure used for cybercrime reporting. It does not independently decide whether a particular bank account should be frozen. The decision is usually made by the concerned State or Union Territory law-enforcement agency or by the bank under applicable regulations.

Step 2: Prepare Documents Proving That the Transaction Was Genuine

Create one indexed set of documents instead of sending scattered screenshots. Depending on the transaction, the documents may include:

• PAN, Aadhaar, and current KYC records.

• The relevant bank statement with the disputed credit marked.

• Invoices, purchase orders, or contracts.

• GST invoices and returns, where applicable.

• Proof of delivery of goods or completion of services.

• Emails, WhatsApp messages, or platform order details.

• The sender’s KYC or customer details lawfully available to you.

• Payment-gateway settlement reports.

• Salary records, loan documents, rent agreements, or sale documents.

• An explanation of your relationship with the remitter.

• Proof of any refund already made.

• Documents showing the hardship caused by a blanket freeze, such as salary obligations, EMI defaults, dishonoured cheques, or statutory payment deadlines.

  
  

For a company or merchant, also attach a short note explaining the business model, normal transaction volumes, and why the disputed payment did not appear suspicious at the time. Never fabricate an invoice or create a backdated agreement. A false document can seriously damage an otherwise legitimate case.

Step 3: Use the 2026 NCRP-CFCFRMS Grievance Process

The Standard Operating Procedure dated 2 January 2026 introduced a structured grievance mechanism for amounts placed on hold and for the suspension or seizure of bank accounts.

Grievance Against an Amount Placed on Hold

The account holder should approach the bank branch or another designated branch or office. After conducting customer due diligence and enhanced due diligence, the bank may submit the grievance, together with the account holder’s documents and explanation, on the Grievance Redressal Module. The SOP expects the bank to do this as early as possible and no later than seven calendar days after the complaint is made to the bank.

The Investigating Officer should verify the grievance and may call the account holder for verification, preferably by video conference. If satisfied with the explanation, the officer can direct the bank to remove the hold. If the officer is not satisfied, the reasons should be recorded and communicated to the account holder by email or SMS. The prescribed period for the officer’s decision is 15 calendar days after the bank raises the grievance.

If the Investigating Officer does not decide the grievance within 15 calendar days, it is to be automatically notified to the District Grievance Officer. If you receive an adverse decision, you may file a review request through the designated bank branch within 15 calendar days of receiving the intimation. The District Grievance Officer is expected to decide the review within a further 15 calendar days.

Grievance Against a Full Freeze or Suspension of Digital Banking

The same bank-led grievance route applies where digital banking services have been suspended or the bank account has been seized. If the verification is satisfactory, the Investigating Officer may direct the bank to restore the account or digital services while keeping only the reported amount on hold. An adverse decision of the District Grievance Officer concerning continued seizure or suspension may be appealed to the State Grievance Officer within 15 calendar days.

The SOP also recognizes that an aggrieved account holder may approach the jurisdictional court at any time. When submitting your request at the branch, specifically ask for:

Submission of the account holder’s grievance, supporting documents, and request for removal of hold or restoration of banking services on the NCRP-CFCFRMS Grievance Redressal Module in accordance with the applicable SOP.

Ask the bank for a complaint number and the date on which it uploaded the grievance. The prescribed timelines become meaningful only when the grievance has actually entered the system.

Does the Hold Automatically End After 90 Days?

Not necessarily. The 90-day provision is often oversimplified online. Where a hold has been contested through the grievance mechanism and no lawful direction regarding its continuation or removal is received within 90 calendar days from the date on which the bank submitted the grievance, the SOP requires advance intimation to the concerned law-enforcement agency.

The bank may remove the hold after enhanced due diligence and on the account holder’s request if:

• The amount is not required in another case.

• No court proceeding concerning the release of the amount is pending.

• The concerned law-enforcement agency does not seek an extension.

• The other procedural requirements are satisfied.

  
  

An Investigating Officer may request the continuation of the hold for up to a further 90 calendar days. Therefore, the practical step is not to wait silently for 90 days. Raise the formal grievance, retain proof of its submission date, and ask the bank for the current order or extension before the period expires.

What If There Are Multiple Cyber Complaints or Holds from Different States?

A single account may be linked to more than one NCRP complaint or to instructions from police stations in different States. In that situation:

• Ask the bank for a complaint-wise statement of every lien, hold, and freeze direction.

• Identify the disputed amount and Investigating Officer for each complaint.

• Submit a common evidence set with a separate transaction explanation for each entry.

• Ask the bank to raise the grievance against every active restriction.

• Do not assume that an NOC from one police station will remove other independent holds.

  
  

The 2026 SOP contemplates the separate assignment of multiple holds or directions to the relevant Investigating Officers. Multi-State cases often take longer because every active restriction must be identified and addressed.

Can the Entire Bank Account Be Frozen for One Disputed Payment?

The answer depends on the facts, the direction issued, the account’s history, and the law applicable in the relevant jurisdiction. However, courts have increasingly questioned blanket freezes where the disputed amount is small and identifiable, and the account holder is neither an accused nor a suspect.

Section 106 of the Bharatiya Nagarik Suraksha Sanhita, 2023 permits the police to seize property found under circumstances creating suspicion of the commission of an offence. It also requires the seizure to be reported forthwith to the jurisdictional Magistrate. Section 107 separately provides a court-supervised process for the attachment of property believed to have been derived or obtained from criminal activity.

Recent decisions of the Kerala, Bombay, and Delhi High Courts have distinguished seizure under Section 106 from attachment or debit freezing under Section 107. In January 2026, the Delhi High Court observed that freezing an entire account for an identifiable cyber-fraud amount can be disproportionate where the account holder’s complicity is not shown. The Court directed defreezing of the accounts in the case before it.

At the same time, the 2026 MHA SOP operationally refers to action under Section 106 and other applicable laws. The precise relationship between Sections 106 and 107 is still developing across jurisdictions. A challenge should therefore focus not only on the section number but also on:

• The absence of recorded or communicated reasons.

• Lack of a direct transaction nexus.

• Failure to follow the prescribed procedure.

• Non-reporting of the seizure to the Magistrate.

• Disproportionality between the disputed amount and the restriction.

• Indefinite continuation of the freeze.

• Absence of material showing the account holder’s involvement.

  
  

When Should You Approach a Court to Unfreeze the Bank Account?

Consider court intervention when:

• The bank or police will not disclose the basic freeze particulars.

• The entire account is blocked for a small and identifiable amount.

• The account holder is not named as an accused or suspect.

• The restriction continues without reasons or periodic review.

• The seizure was not reported to the jurisdictional Magistrate.

• Legitimate business or salary operations have been paralyzed.

• The grievance and review mechanism has failed.

• Several agencies have issued overlapping directions that cannot be resolved administratively.

  
  

Depending on the facts and the stage of the case, relief may be sought before the jurisdictional criminal court under the BNSS provisions dealing with custody or disposal of property. In an appropriate case, relief may also be sought before the relevant High Court under its constitutional jurisdiction.

A court may consider:

• Complete release of the account.

• Removal of the debit freeze while retaining a lien on the disputed amount.

• Permission to undertake essential business transactions.

• Restoration of digital banking facilities.

• A direction requiring the investigating agency to decide the representation within a fixed period.

  
  

Jurisdiction must be assessed carefully, particularly when the bank account is maintained in one State and the cyber complaint or FIR originates in another. The most convenient court is not always the one that has legal jurisdiction.

Can the RBI Ombudsman Unfreeze a Cyber Crime Hold?

The account holder should first complain to the bank in writing. The RBI’s Integrated Ombudsman mechanism can address certain deficiencies in banking services after the bank rejects the complaint or does not respond within the prescribed period. However, the RBI’s own framework excludes grievances arising from a bank’s action in compliance with an order of a law-enforcement, statutory, or judicial authority.

An RBI complaint may therefore be relevant where the bank has:

• Independently exceeded the police direction.

• Blocked more than the amount specified.

• Failed to provide basic service information.

• Failed to follow its grievance process.

• Not responded to the customer’s complaint.

  
  

It is usually not a replacement for relief from the Investigating Officer, the NCRP-CFCFRMS grievance mechanism, or the competent court.

What Should You Not Do After Your Bank Account is Frozen?

• Do not ignore an email, notice, or verification request from the police.

• Do not give inconsistent explanations to the bank and the Investigating Officer.

• Do not pay a private person merely in exchange for a promise to withdraw the complaint or issue an NOC without legal advice.

• Do not make any unofficial payment to secure unfreezing.

• Do not delete chats, invoices, emails, or transaction records.

• Do not threaten bank staff. Insist on written escalation and acknowledgment.

• Do not assume that filing a complaint on social media or calling 1930 will itself remove an existing police restriction.

• Do not travel to a distant police station merely on an informal call without verifying the officer, complaint, and purpose.

  
  

The SOP prefers video verification where possible, although personal appearance may still be required in an appropriate case.

Frequently Asked Questions

How Long Does It Take to Unfreeze a Bank Account After a Cyber Complaint?

There is no single timeline for every case. Under the 2026 grievance process, the bank is expected to submit an eligible grievance within seven calendar days, and the Investigating Officer is expected to decide it within 15 calendar days. Delays may occur where there are multiple complaints, inadequate documents, an FIR, a court order, or competing claims over the same funds.

Can a Bank Account Be Frozen Without an FIR?

A reported amount may be placed on hold at the initial NCRP-CFCFRMS stage before a conventional FIR is registered. A wider or continuing seizure must still have lawful authority and comply with the applicable procedure. Ask whether the action is:

• A portal-linked hold on a reported amount.

• A police seizure direction.

• A court order.

• A bank’s independent KYC or anti-money-laundering restriction.

  
  

Does a Layer 2 or Layer 3 Freeze Mean That I Am an Accused?

No. The layer usually indicates the account’s position in the movement of funds. It does not by itself prove knowledge, participation, or guilt. You should nevertheless explain the specific credit and provide documents showing the lawful purpose of the transaction.

Can the Bank Remove the Freeze Without an NOC from the Cyber Cell?

The bank will generally not disregard a lawful police or court direction. However, it can verify whether it has exceeded the instruction, submit your grievance through the prescribed module, and seek a direction to remove the hold or restore account operations. In an appropriate case, a competent court can also direct the bank to restore the account.

Can Salary or Business Expenses Be Released While the Case is Investigated?

Relief is fact-specific, but a strong request can be made to restore account operations while retaining only the identifiable disputed amount. Evidence of salaries, taxes, vendor payments, EMIs, and other essential obligations helps demonstrate why a blanket freeze is disproportionate.

What If the Cyber Police Station is in Another State?

You can first submit your documents through the bank-led grievance mechanism and request video verification. If litigation becomes necessary, the correct forum depends on where the direction originated, where the account is maintained, and where a material part of the cause of action arose.

Should I Return the Disputed Amount Directly to the Complainant?

Not without verification and legal advice. The person contacting you may not be the genuine complainant, other victims may have competing claims, and the money may already be subject to a police or court process. Any restoration should follow a documented and lawful route.

Practical Checklist for Your Unfreezing Request

Before submitting your representation, confirm that it contains:

• Bank account and branch details.

• Type and date of restriction.

• Disputed amount and UTR.

• NCRP acknowledgement, complaint, or FIR details available to you.

• A chronological explanation of the transaction.

• Proof of the source and purpose of the funds.

• KYC and business documents.

• A request to upload the grievance on the NCRP-CFCFRMS Grievance Redressal Module.

• A request to restrict any hold to the identified disputed amount.

• A request for restoration of the remaining balance and digital banking services.

• Willingness to cooperate through video conference or pursuant to a lawful notice.

• An email address and mobile number for written communication.

  
  

How Apar Law Can Assist

A bank account freeze caused by a cyber complaint often involves three separate tracks: the bank’s internal nodal team, the Investigating Officer or cyber police station, and the court having jurisdiction. The correct strategy depends on whether the account is merely lien-marked, fully debit-frozen, reported in multiple complaints, or affected by an order from another State.

Apar Law assists individuals, founders, merchants, and companies with identifying freeze directions, preparing transaction-backed representations, invoking the NCRP-CFCFRMS grievance process, coordinating with the concerned authorities, and seeking proportionate relief before the appropriate court where necessary.

For businesses handling cyber-fraud incidents, read our related guide on Digital Evidence Preservation Policy for Cyber Fraud Investigations.

This article provides general information on Indian law and procedure as reviewed on 14 July 2026. It is not legal advice for any particular account, complaint, or investigation. The applicable remedy and forum depend on the freeze communication, transaction trail, agency involved, and facts of the case.