The Ministry of Home Affairs approved a new Standard Operating Procedure for cyber financial frauds in January 2026. It runs to around 99 pages and is meant to govern how investigating officers and banks handle freezes raised through the National Cybercrime Reporting Portal (NCRP) and the linked Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS). For an affected account holder, the document does two things at once: it improves the position considerably, and it leaves several familiar problems untouched. This page is the SOP explained without the bureaucratic register.
The framework before 2026
Before this SOP, a cyber-fraud complaint on the 1930 helpline or NCRP would routinely produce a freeze covering the entire account, regardless of the disputed amount. A complaint of Rs. 500 could disable a salary account holding several lakhs. There was no statutory timeline for review and no documented administrative ladder for the customer to climb before reaching a magistrate. The investigation could remain "active" while the customer's working capital sat immobilised.
The new SOP corrects some of this. It is not legislation. It does not change the powers of investigating officers under the Bharatiya Nagarik Suraksha Sanhita or any other statute. It is the formal articulation of how those powers are to be exercised in this specific class of cases.
What the SOP gets right
Lien on the disputed amount, not the full account
The headline change. Where the money can be traced to a specific sum, the bank is to mark a lien on that sum alone. The remaining balance stays operable. Full-account freeze is now positioned as the exception, deployed only where the account itself is the subject of investigation or where lien-marking is not technically feasible.
This matters most for small businesses and salaried customers whose entire month sits in a single account. The earlier default treated a Rs. 5,000 fraud and a Rs. 50,000 fraud the same way. The SOP separates them.
The 90-day rule for low-value matters
For frauds below Rs. 50,000, the SOP contemplates two things. Refunds can be processed without a court order if the transaction trail can be verified, and banks are required to lift the freeze within 90 days if no judicial extension is in place. This is the first time a fixed time-bound release obligation has been articulated in this domain.
The threshold matters. Below it, the SOP runs on its own administrative track. Above it, the case is back in the general criminal-procedure framework with no SOP-side timeline.
Grievance redressal officers
A District-level officer of the rank of Additional or Deputy Superintendent of Police is now the first-line grievance redressal point. Complaints that go unanswered for 15 days escalate automatically to a District Grievance Redressal Officer. A State-level officer of DG or IG rank sits above the District officer. For the first time, an aggrieved account holder has a documented escalation ladder before the magistrate's court is the only available remedy.
Recognition of the innocent-beneficiary problem
The SOP acknowledges, in passing, what practitioners had been pointing at for years: that the NCRP fund-flow tracing system flags every account in the chain. If the victim's money moves through Layer 1 → Layer 2 → Layer 3 and you happen to be the holder of the Layer 3 account, you can be frozen even though you have nothing to do with the underlying fraud. The SOP does not eliminate this, but it directs investigating officers to assess proximity and intent before recommending a full freeze. There is a separate guide on Layer-N freezes for innocent beneficiaries.
Where the SOP runs into the ground
It has no statutory force
SOPs are administrative instructions to government officers. They are not amendments to statute. A bank that receives a lien instruction drafted in a pre-SOP form, or a freeze instruction from a state where the SOP has not yet percolated to the district level, will act on it. The SOP is improving compliance, but unevenly, and the practical lag between the SOP's existence and its bank-counter operationalisation is where most current litigation is generated.
No prior intimation to the account holder
The SOP improves what happens after a complaint is filed with the grievance officer. It does not change the fact that the customer learns about the freeze through a failed transaction. There is no prior notice, no opportunity to respond, and no contemporaneous explanation of the basis. Whatever one thinks about whether such notice is feasible in active investigations, the structural position — that the account holder is treated as a third party to a process that directly affects property rights — is left untouched.
Inter-state cases are still hard
The cyber-fraud complaint is usually registered where the complainant resides. The lien lands on an account that may be held in a different state. The magistrate competent to entertain an unfreezing application sits in the state of the account. The investigating officer who issued the lien is in the state of the complaint. The District Grievance Officer is in one of the two. The customer is left navigating two parallel procedural geographies. The SOP improves grievance redressal within a state, not across them.
This is the single most common pattern in matters that reach Delhi-based counsel: freeze instructions from Andhra Pradesh, Telangana, Gujarat, or Karnataka on accounts of Delhi customers. A separate guide on inter-state freezes covers the procedural specifics.
No timeline above Rs. 50,000
The 90-day rule applies below the threshold. Above it, the SOP relies on the general criminal-procedure framework, in which the lien continues until investigation is completed or a court orders otherwise. There is no obligation to revisit the lien at fixed intervals, even where the account holder is plainly not the suspected fraudster. Working capital can remain immobilised for months. A bail-style time limit, perhaps with periodic judicial review at six and twelve months, would be a sensible structural addition.
Bank communication obligations are minimal
A large share of the daily harm in these matters arises not from the police action but from bank communication. Customers learn about freezes through inconsistent SMS messages. Branches cannot identify which authority instructed the action. Written representations to nodal officers go unanswered. The SOP places obligations on enforcement agencies and largely leaves the bank's customer-facing duties to the RBI framework. A uniform 48-hour written communication requirement, identifying the issuing authority and disputed amount, would do more than most of what the SOP currently contemplates.
How courts have been reading the SOP
The High Courts had not waited for an SOP to begin the corrective work. Through 2024 and 2025, a small but increasing body of orders held that account-level freezes for small disputed sums were disproportionate and constitutionally vulnerable. The arguments draw on the proportionality limb of Article 14, the procedural due-process content of Article 21 since Maneka Gandhi, and the administrative-law principle that an action which inflicts substantial third-party harm must be supported by reasons proportionate to that harm.
The MHA SOP points in the direction those orders already pointed. In writ proceedings filed since January 2026, the SOP has begun appearing as the State's own articulation of the standard. Departures from it — a full-account freeze on a Rs. 5,000 disputed sum, a freeze that has crossed the 90-day window without judicial extension, a freeze imposed without a traceable instruction — are now framed as admissions against interest by the State, not merely complaints by the customer.
What courts have not yet done, and where the next significant development is likely, is the articulation of a positive standard on what must be served on an account holder, in what form, within what time, before a lien instruction is acted on by a bank. The digital-arrest suo motu proceedings before the Supreme Court suggest the higher judiciary is willing to lay down such standards in adjacent contexts.
What this means in practice
For an account holder dealing with a freeze in 2026, three short observations.
First, the SOP belongs in the first paragraph of every representation, every application, and every writ petition. It is the State's own statement of the standard. Read the unfreeze playbook for the step-by-step.
Second, document collection has changed. Ask the bank in writing for the reference number, the issuing authority, the disputed amount, and the date of instruction, with explicit reference to the SOP and the bank's obligation to share that information. Where the bank refuses or delays, that refusal becomes a ground in the unfreezing application.
Third, the magistrate's court is not always the right forum. For materially disproportionate freezes — full-account where only a small amount is disputed, freezes past the 90-day window in low-value matters, freezes without a traceable instruction — the writ jurisdiction has produced faster and cleaner orders.
Frequently asked questions
What is the MHA SOP 2026 on bank account freeze?
A Standard Operating Procedure issued by the Ministry of Home Affairs in January 2026 directing investigating officers and banks on the handling of cyber-fraud freezes through NCRP and CFCFRMS. The headline reforms are lien-only restriction, a 90-day release window for low-value matters, and District and State grievance officers.
Does the SOP override the BNSS or PMLA?
No. The SOP is an executive instruction. The underlying powers and remedies remain statutory. Departures from the SOP are litigable as evidence of arbitrary action.
What is the 90-day rule?
Banks are required to lift the freeze within 90 days for frauds below Rs. 50,000 if no judicial order extending the hold is in place.
Who is the District Grievance Redressal Officer?
An officer of the rank of Additional or Deputy Superintendent of Police designated in each district. Complaints that go unanswered for 15 days escalate to this officer; the State-level officer is of DG or IG rank.
Can the SOP be cited in a writ petition?
Yes. As the State's own articulation of the standard, the SOP supports arbitrariness and disproportionality challenges under Articles 14 and 21 where it has been materially departed from.
Need to assess a freeze against the new SOP?
Share the freeze communication, the disputed amount, and the issuing state for a structured review of the SOP-compliant route forward.