If your bank account is frozen in a cyber-fraud case, act in this order: start with the bank, not the police station. Ask your branch and the bank's nodal grievance officer in writing for the freeze reference, the issuing authority and the disputed amount, and ask the bank to run its own due diligence on the credit. Stations are increasingly declining to deal with account holders directly on release. If the bank stonewalls, escalate by CPGRAMS against the bank, then by legal notice, and only then to the magistrate or the High Court. The faster the paper record is built, the faster the account reopens.
Scope and jurisdiction at a glance
- Who can seek release
- The account holder, in their own name. Where the account belongs to a company or firm, an authorised signatory or director applies on its behalf. In most freeze cases the account holder is not an accused — the account has been flagged as a downstream recipient of disputed funds.
- Who ordered the freeze
- A police cyber cell or investigating officer, acting through the National Cybercrime Reporting Portal. The bank executes the instruction and cannot lift it on its own, which is why a request addressed only to the branch usually fails unless a parallel grievance record exists.
- What to establish first
- Whether the restriction is a full freeze, a debit freeze or a lien on a specified sum — these are three different restrictions with three different remedies. Ask the bank in writing for the freeze reference number, the issuing authority, the date of instruction and the disputed amount.
- Where to start
- With the bank rather than the police. Since July 2026 police stations have been declining to issue release confirmations to individual account holders and directing them back to the bank. The first step is a written request to the branch and to the bank's nodal grievance officer, asking for Enhanced Due Diligence on the disputed credit.
- The escalation sequence
- The order matters, because each step builds the record the next one relies on:
- A written request to the branch and the bank's nodal grievance officer.
- A CPGRAMS complaint to the Department of Financial Services, filed against the bank.
- The District Grievance Redressal Officer, an officer of Additional or Deputy SP rank, at the 15-day mark.
- A legal notice where the bank has an answer but will not act on it.
- A court application, once refusals are documented.
- The 90-day rule
- Where the disputed sum is below ₹50,000 and no judicial order extends the hold, the bank is required to release the funds at day 90. This threshold does not depend on the investigating officer agreeing to anything.
- Which court
- A case-property application before the Magistrate where the freeze operates as a seizure under Section 106 of the BNSS, or a writ petition before the High Court under Article 226 where the action is materially disproportionate, spans multiple States, or rests on no traceable instruction.
Police stations are increasingly declining to deal directly with account holders on release. The practice now reported across several units is that a station will not issue an NOC or a release confirmation to an individual customer, and will point them to the bank instead. Requests routed through the investigating officer, which used to be the standard path, are being returned.
The sequence that works now:
- The bank first. A written request to your branch and to the bank's nodal grievance officer, asking the bank to run its own Enhanced Due Diligence on the disputed credit and to record a grievance reference. Ask for the freeze reference, the issuing authority, the disputed amount and whether the restriction is a lien, a debit freeze or a full freeze.
- CPGRAMS against the bank if the branch stonewalls or the grievance is closed without reasons — filed against the bank through the Department of Financial Services, not against the police. This is the step most people skip, and it is the one that produces a written answer.
- A legal notice where the bank has an answer but will not act on it, or where a lien exceeds the disputed sum.
- Court only after that record exists. A magistrate or writ court reads a documented refusal very differently from a first approach.
If the disputed credits relate to a gaming, betting or gambling platform, do not run this yourself. The exposure there is different in kind — the questions reach the source of funds and your own position, not just the freeze — and a written representation made without advice can be difficult to walk back. Take a consultation first.
Related published commentary: For the policy critique behind this guide, see Vikram Singh Kushwaha's LiveLaw article, Problem With CFCFRMS: Reading MHA's New Account-Freeze SOP.
Not sure where your freeze stands? Get a free preliminary read
Before calling anyone, answer two quick questions about your freeze or lien and get a preliminary read on your legal position — whether it is a freeze or a lien, who ordered it, and the likely route. No payment, no sign-up.
Short answer. If your bank account is frozen in a cyber-fraud investigation, first identify whether the instruction came from the bank, police, NCRP portal, or a court order. Preserve the bank message, complaint number, transaction trail, KYC documents, and proof of legitimate funds. The remedy usually involves a written representation to the investigating officer, follow-up with the bank, and, where the freeze continues without proper justification, an application before the magistrate or High Court.
Don't want to draft this yourself? The ₹499 self-help pack has a ready-to-adapt version of this application/representation, plus a reply-to-notice format and checklist.
A frozen bank account often comes without context. The customer discovers the problem only when a transfer fails, the branch says the account is on debit freeze, or the bank shares a brief email saying the account has been marked in connection with a cyber fraud complaint. By that stage, salary, business receivables, rent payments, and day-to-day obligations may already be affected.
The first thing to understand is that not every freeze has the same legal basis. Sometimes the communication originates from a cyber police station in another State. Sometimes it comes through the bank's nodal team after a complaint on the national cyber reporting system. In other cases, only a tagged amount is blocked rather than the entire account. Strategy depends on identifying who issued the instruction, what amount is in question, and what stage the investigation has reached.
Bank-account freezes, NCRP liens, cyber-cell representation and recovery — how these matters are actually run, what the engagement involves, and what it costs.
Cyber law & digital disputes →What changed in 2026: the new MHA SOP
The Ministry of Home Affairs issued a fresh Standard Operating Procedure for cyber financial frauds in January 2026, working through the Indian Cyber Crime Coordination Centre (I4C) and the National Cybercrime Reporting Portal (NCRP). It is not legislation, but it is the formal articulation of how investigating officers and banks are now expected to handle account freezes. The relevant changes for an affected account holder are:
- Lien on the disputed amount only. Where money can be traced to a specific sum, only that sum is to be held under a lien. Full-account freeze is positioned as the exception, not the default.
- 90-day rule for low-value matters. Where the disputed sum is below Rs. 50,000 and there is no judicial order extending the hold, the bank is required to release the funds within 90 days.
- Grievance redressal ladder. A District Grievance Redressal Officer is now meant to respond within 15 days; an unanswered representation escalates automatically. A State-level officer sits above the District officer.
- Bank-side obligations. Banks are expected to identify the issuing authority and the disputed amount when the customer asks. In practice, branch staff are still catching up.
- Parallel banking-side grievance. A complaint through the Centralised Public Grievance Redress and Monitoring System (CPGRAMS), addressed to the Department of Financial Services, is a separate administrative route that has been producing unfreezing outcomes where the bank's conduct is the immediate problem. More on this route on the grievance officer page.
The SOP improves the position considerably. It does not resolve everything. A separate guide sets out what the SOP gets right, where it leaves the customer exposed, and how courts have been reading it in the early months of 2026. For the immediate steps an account holder should take, the framework below still applies.
Step 1: Collect the exact freeze communication
Ask the bank for the written basis of the restriction. You need the complaint or reference number, the police station or investigating unit, the date of the instruction, and clarity on whether the whole account is frozen or only a lien amount is marked. Without that paper trail, it is difficult to decide whether the next step is a representation to the investigating agency, a request through the bank's nodal officer, or court proceedings.
Step 2: Build a clean transaction narrative
Most account-freeze matters turn on tracing. The account holder should prepare a short chronology showing when the disputed amount came in, from whom, against what underlying transaction, and where the money moved afterwards. Supporting documents can include invoices, contracts, emails, WhatsApp exchanges, account statements, GST records, salary slips, or delivery proofs. The point is to show whether the credit was a legitimate commercial or personal receipt, whether the account holder was a direct beneficiary, and whether the account holder had knowledge of any alleged fraud.
Step 3: Move quickly before the freeze hardens into prolonged disruption
Delay makes these matters harder. The longer the account remains inactive, the greater the prejudice to the customer and the easier it becomes for the investigation to proceed without hearing the affected account holder. Early engagement can sometimes result in clarification, partial defreezing, or segregation of only the disputed amount. Even when immediate release is not possible, putting a documented response on record matters later if judicial intervention becomes necessary.
The bank-side shortcut: an EDD grievance raised by your own branch
Before — or alongside — any representation of your own, ask the branch manager or operations head to raise an enhanced-due-diligence (EDD) / elaborative grievance on the NCRP portal on your behalf. Under the 2026 SOP, the bank can verify its own customer's KYC and profile and submit a positive report directly to the cyber cell through the portal.
- The filing generates a trackable grievance ID (GR-prefixed) — you are no longer chasing an unanswered email.
- The portal status moves nodal officer → investigating officer → resolved; the IO acts on the bank's verification rather than your word alone.
- On resolution, show it to the branch: the debit freeze is lifted, with a lien retained only on the disputed amount.
This route works best for a single clean account with an identifiable disputed sum and a responsive branch — typically 20–30 days, at no cost. A field report of it working end to end is here. If the branch declines to file, or the IO does not act within the SOP timelines, continue with the representation and grievance-ladder route in this guide — the record you build is what a court application stands on later.
Step 4: Identify the right forum and remedy
There is no single universal remedy. Depending on the facts, the route may involve a detailed representation to the investigating officer, communication with the bank's cyber or nodal team, an application before the competent criminal court, or proceedings before the High Court where the action is arbitrary, disproportionate, or unsupported by proper procedure. In some cases, the issue is not whether the police can investigate, but whether freezing the whole account instead of the allegedly traced sum is excessive.
The precise legal route also depends on geography. Account holders are often confronted with instructions from authorities outside Delhi even though the account and customer are based in Delhi. That creates a procedural burden, and one of the first tasks is working out where the cause of action substantially arises and where relief can be sought most effectively.
Step 5: Do not send incomplete or inconsistent explanations
Many people worsen the situation by making hurried statements to the bank or police without first organizing the documents. If the explanation changes later, credibility becomes a problem. A better approach is to prepare one coherent factual account, supported by records, and ensure the same narrative is reflected consistently in all representations and pleadings.
Documents that usually matter
- Full bank statement for the relevant period, not only the debit-freeze screenshot.
- Freeze email, branch communication, or nodal officer response.
- Underlying invoice, contract, purchase order, or salary/employment document.
- Identity documents and proof of account ownership.
- A short chronology explaining the source and movement of funds.
In bank-freeze and cyber-fraud matters, Vikram Singh Kushwaha has worked with transaction records, cyber complaints, and institutional correspondence to build a practical path toward lawful defreezing.
The work often turns on sequencing: preserving the evidentiary record, identifying the correct investigating authority, and moving quickly enough to prevent avoidable business or personal disruption.
Frequently asked questions about cyber account freezes
What should I do first if my bank account is frozen after a cyber fraud complaint?
Preserve the bank communication, avoid inconsistent explanations, collect the account statement and transaction documents, and identify whether the freeze came from a bank, cyber cell, NCRP complaint, or police notice.
Can a whole bank account be frozen for one disputed transaction?
The answer depends on the police direction and the transaction trail. In many cases, the legal issue is whether freezing the entire account is proportionate when the disputed amount is identifiable.
Can a Delhi account holder respond to a cyber freeze from another State?
Yes, but the forum and response strategy depend on where the account is maintained, where the freeze instruction originated, the investigating agency involved, and where the cause of action substantially arises.
Account frozen or lien-marked in a cyber-fraud matter and need to act now? The Bank Account Freeze Self-Help Pack gives you the ready-to-edit letters, replies and checklist for exactly this situation — drafted by Advocate Kushwaha and delivered instantly.
Get the Bank Account Freeze pack — ₹499Need to assess a bank-account freeze urgently?
A 30-minute consultation with the advocate — send the freeze communication and documents in advance, get a clear read on the route and the next step by the end of the call. ₹1,500, paid online. A document review with a written note is available at ₹3,500.
Book a consultation — ₹1,500When the SOP route stalls, see how a cyber crime lawyer in Delhi approaches bank-freeze release petitions before Delhi courts.