A lien marked on your bank account after a cyber complaint freezes only the disputed amount, not necessarily the whole balance. To get it removed, ask the bank in writing for the instruction behind the lien and its reference number, and send a representation with proof that the funds are legitimate. Address it to the branch and the bank's nodal grievance officer — release queries put to the police station are now generally sent back to the bank. If the lien exceeds the disputed sum or survives it, escalate by CPGRAMS against the bank, then by legal notice, then to the court.
Police stations are increasingly declining to deal directly with account holders on release. The practice now reported across several units is that a station will not issue an NOC or a release confirmation to an individual customer, and will point them to the bank instead. Requests routed through the investigating officer, which used to be the standard path, are being returned.
The sequence that works now:
- The bank first. A written request to your branch and to the bank's nodal grievance officer, asking the bank to run its own Enhanced Due Diligence on the disputed credit and to record a grievance reference. Ask for the freeze reference, the issuing authority, the disputed amount and whether the restriction is a lien, a debit freeze or a full freeze.
- CPGRAMS against the bank if the branch stonewalls or the grievance is closed without reasons — filed against the bank through the Department of Financial Services, not against the police. This is the step most people skip, and it is the one that produces a written answer.
- A legal notice where the bank has an answer but will not act on it, or where a lien exceeds the disputed sum.
- Court only after that record exists. A magistrate or writ court reads a documented refusal very differently from a first approach.
If the disputed credits relate to a gaming, betting or gambling platform, do not run this yourself. The exposure there is different in kind — the questions reach the source of funds and your own position, not just the freeze — and a written representation made without advice can be difficult to walk back. Take a consultation first.
Not sure where your freeze stands? Get a free preliminary read
Before calling anyone, answer two quick questions about your freeze or lien and get a preliminary read on your legal position — whether it is a freeze or a lien, who ordered it, and the likely route. No payment, no sign-up.
A bank lien is a hold the bank places on a specified sum in the account. The account remains operable for the rest of the balance, but the marked amount cannot be withdrawn or transferred until the lien is lifted. In cyber-fraud cases, the lien is usually instructed by a police authority or pushed automatically through the National Cybercrime Reporting Portal. The customer learns about it when a transaction fails, the balance shows a "hold" tag, or the bank shares a brief email referencing the lien amount.
This page covers what a bank lien means, the 2026 reframing that pushes lien-marking as the default instead of full-account freezing, and how to get the lien removed across HDFC, ICICI, Axis, Kotak and other scheduled banks. For the broader framework, the freeze pillar sets the context.
Bank-account freezes, NCRP liens, cyber-cell representation and recovery — how these matters are actually run, what the engagement involves, and what it costs.
Cyber law & digital disputes →Lien meaning in banking
In banking law, a lien is the bank's right to retain specified funds against a defined obligation. Conventionally, banks have used liens for their own dues (loan defaults, recovery proceedings, KYC-related holds) and to comply with statutory directions (tax authorities, court orders, attachment notices). In recent years a new category has dominated: liens instructed by police authorities under the cyber-fraud framework. The legal basis is usually Section 106 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (formerly Section 102 CrPC) and the procedural framework around the National Cybercrime Reporting Portal.
What changed in 2026
Until early 2026, a cyber-fraud complaint of Rs. 5,000 could land a freeze on an account holding several lakhs. The Ministry of Home Affairs's January 2026 Standard Operating Procedure pushed lien-on-the-disputed-amount as the default. The earlier full-account freeze is positioned as the exception. The change matters because most affected account holders are downstream beneficiaries, not the original suspect; the disputed sum is identifiable; and the rest of the balance is unrelated to the investigation.
Compliance is improving but uneven. Where the instructing officer or the bank's back-office is still operating on pre-SOP forms, full-account freezes continue to appear. The SOP can be cited in representations as the State's own articulation of the correct standard. A separate guide explains the SOP framework.
Why your lien exists — the three common origins
1. Direct first-layer lien. The disputed money came directly into your account from a complainant who has now filed an NCRP complaint. The lien usually matches the disputed sum.
2. Downstream beneficiary lien. The money moved through several accounts before reaching yours. You may not have any relationship with the original complainant. The lien is placed because the fund-flow tracing system flagged your account in the chain. A separate guide deals specifically with Layer 2/3/5 freezes.
3. Repeat-flag lien. Your account has been flagged in multiple complaints, possibly because it is a business account with high transaction volume. The lien may be larger and the bank may also suspend digital banking pending review.
How HDFC, ICICI, Axis, Kotak and others handle the lien
The legal framework is uniform. What differs is the bank's customer-facing process: the nodal officer email, the format of the written instruction shared with the customer, the speed of response. As a general guide:
- HDFC Bank. Liens marked through the central operations team. The nodal officer or the cyber response cell will share the issuing-authority details on a written request. Lien removal requires the instructing officer's written release.
- ICICI Bank. Similar process; the branch usually directs the customer to the cyber response unit. Written requests by email tend to receive faster responses than counter inquiries.
- Axis Bank. Lien information visible in net banking as a "hold" or "earmarked" amount. The branch can provide the underlying instruction on a written request.
- Kotak Mahindra Bank. Lien shown as a debit-freeze category in the account. The bank's terminology distinguishes between "no freeze" (normal), "debit freeze" (lien on a portion) and full freeze; verify which one applies.
- State Bank of India, Punjab National Bank and other public-sector banks. Liens take longer to communicate. The customer-service route is slower than the cyber-response route. Direct written requests to the nodal officer produce better outcomes than branch follow-ups.
In every case, the bank cannot lift a police-instructed lien on its own. The bank's role is to share the issuing-authority details and to act on the release instruction when it comes. The remedy is with the issuing officer, the grievance officer, or the court.
How to remove a lien marked by cyber crime — the structured route
- Get the written instruction. Email the bank's nodal officer with explicit reference to the MHA SOP 2026 and request: (a) issuing authority, (b) reference number, (c) disputed amount, (d) date of instruction.
- Build the underlying-transaction record. Invoice or contract, GST or e-way bill where applicable, delivery or service proof, account statement showing the credit and the consideration flowing the other way, KYC documents.
- File a written representation with the investigating officer. Cite the SOP. Where the chain is long and the disputed sum is identifiable, request a lien-only restriction limited to that sum. Attach the documentary record. The 15-day clock starts here.
- Escalate to the District Grievance Redressal Officer at day 15. The SOP designates an officer of Additional or Deputy SP rank. A separate guide covers the structure.
- Apply the 90-day rule below Rs. 50,000. Banks are required to release the funds at day 90 where no court order extends the hold. The 90-day rule is covered separately.
- Court intervention where the lien is materially disproportionate. A case-property application before the magistrate where the lien flows from a Section 106 BNSS seizure, or a writ petition before the High Court where the action is arbitrary, inter-state, or unsupported by procedure.
The bank-side shortcut: an EDD grievance raised by your own branch
Before — or alongside — any representation of your own, ask the branch manager or operations head to raise an enhanced-due-diligence (EDD) / elaborative grievance on the NCRP portal on your behalf. Under the 2026 SOP, the bank can verify its own customer's KYC and profile and submit a positive report directly to the cyber cell through the portal.
- The filing generates a trackable grievance ID (GR-prefixed) — you are no longer chasing an unanswered email.
- The portal status moves nodal officer → investigating officer → resolved; the IO acts on the bank's verification rather than your word alone.
- On resolution, show it to the branch: the debit freeze is lifted, with a lien retained only on the disputed amount.
This route works best for a single clean account with an identifiable disputed sum and a responsive branch — typically 20–30 days, at no cost. A field report of it working end to end is here. If the branch declines to file, or the IO does not act within the SOP timelines, continue with the representation and grievance-ladder route in this guide — the record you build is what a court application stands on later.
Common mistakes
- Asking the branch and accepting "we cannot help" — branches are not equipped, the nodal officer is the right route.
- Treating the brief SMS or email as the full instruction; the substantive instruction sits with the bank's central operations team and is shareable on written request.
- Filing a representation without the underlying-transaction record. The representation without documents reads as a denial; with documents it reads as a defence.
- Waiting beyond the 15-day window without filing with the District officer.
- Conflating the original fraud complainant with the affected account holder. They are different parties.
Frequently asked questions
What does lien marked on a bank account mean?
A bank lien is a hold on a specified sum in the account. The rest of the balance remains operable; only the marked amount cannot be withdrawn until the lien is lifted.
Why has a lien been marked on my account after a cyber complaint?
NCRP traces the disputed money through successive accounts. Each receiving account in the chain can be flagged. The bank holding such an account is instructed to mark a lien on the disputed sum.
What is the difference between lien and freeze?
Freeze restricts the entire account; lien restricts only a specified sum. The MHA SOP 2026 directs lien-only as the default where the disputed amount is identifiable.
How do I remove a lien marked by cyber crime?
Get the written instruction from the bank, build the underlying-transaction record, file a representation with the investigating officer citing the SOP, escalate to the District officer at day 15, apply the 90-day rule if applicable, and move to court for disproportionate or inter-state freezes.
Don't want to draft this yourself? The ₹499 self-help pack has a ready-to-adapt version of this application/representation, plus a reply-to-notice format and checklist.
Why is the lien on HDFC, ICICI, Axis or Kotak handled differently?
The legal framework is uniform across banks. What differs is the customer-facing process — the nodal officer email, the format of the written instruction, response speed. The substantive remedy and the SOP framework are identical.
How long does a lien stay on the account?
Until the investigating officer lifts the instruction, a court orders release, or the 90-day rule applies. Clean representations with documentary support typically produce release in 2 to 8 weeks; cross-state or contested matters take longer.
Lien marked on your account and not lifting?
A 30-minute consultation with the advocate — send the freeze communication and documents in advance, get a clear read on the route and the next step by the end of the call. ₹1,500, paid online. A document review with a written note is available at ₹3,500.
Book a consultation — ₹1,500If the lien is not lifting despite representations, see how a cyber crime lawyer in Delhi approaches NCRP lien removal, nodal-officer escalation and account-release petitions.
Account frozen or lien-marked in a cyber-fraud matter and need to act now? The Bank Account Freeze Self-Help Pack gives you the ready-to-edit letters, replies and checklist for exactly this situation — drafted by Advocate Kushwaha and delivered instantly.
Get the Bank Account Freeze pack — ₹499