The message usually arrives on a Tuesday afternoon. A UPI payment fails. Then a card declines. You call the bank and are told, without much detail, that a debit freeze has been placed on your account “on instructions from the cyber cell.”
Nobody called you. Nobody sent a notice. You have no idea which cyber cell, in which state, or why.
If this has happened to you, the first useful thing to know is that you are not unusual. Tens of thousands of accounts across India are frozen this way every month, and a large share of them belong to people who never committed a fraud. The second useful thing is that there is a defined path out.
Why an innocent account gets frozen
Reporting online fraud in India runs through a single channel. The victim files a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in or calls the cyber crime helpline 1930, ideally within the first hour, which the police call the golden hour because that is when the money can still be intercepted. That complaint feeds into the Citizen Financial Cyber Fraud Reporting and Management System, which traces the stolen money as it moves.
Fraudsters do not keep money in one place. They move it through layers of accounts, usually within minutes. Your account may be the second, third, or fourth stop in that chain, and the system flags every account in the trail without distinguishing between the fraudster and someone who simply received a payment.
The everyday situations that get people caught:
You sold something on OLX or Facebook Marketplace and the buyer paid with money that turned out to be stolen. You accepted a P2P crypto trade on Binance or WazirX. You are a freelancer who received payment from an overseas client through an informal channel. You run a small shop and someone paid by UPI. Somebody lent you money and that person’s funds were tainted.
In each of these, you did nothing wrong. The money still passed through your account, and the system does not know the difference.
Full freeze versus lien: know which one you have
This distinction decides how bad your situation is, and banks are often vague about it.
A lien marks a specific amount, usually the disputed transaction value, and leaves the rest of your balance usable. If Rs 25,000 came in from a flagged source and you have Rs 3 lakh in the account, only Rs 25,000 should be blocked.
A full debit freeze blocks the entire account. Salary credits go in, nothing comes out. Standing instructions fail, EMIs bounce, and the knock-on damage starts within days.
Courts have been increasingly unhappy about the second one. The Kerala, Bombay, and Delhi High Courts have all held in recent judgments that a complete debit freeze amounts to an attachment of property, which cannot be done on a police email under Section 106 BNSS alone and needs a magistrate’s order under Section 107. If your entire account is blocked over a Rs 15,000 transaction, that disproportionality is itself an argument.
Step one: find out who froze it and why
You cannot fight what you cannot identify. Write to your bank, in writing, and ask for four specific things.
The freeze reference number or the communication under which the freeze was placed. The name and address of the police station or cyber cell that issued it. The NCRP acknowledgement number of the underlying complaint. The exact amount and transaction under dispute, with date.
Banks frequently stall on this. Two things help. Escalate to the bank’s Nodal Officer and Principal Nodal Officer, whose contact details are published on every bank website under the RBI grievance framework. And file a complaint with the RBI Ombudsman through cms.rbi.org.in if you get nothing in fifteen days. A pending Ombudsman complaint tends to produce faster answers than a phone call ever will.
You can also file an RTI application with the concerned police station once you know which one it is, asking for the status of the complaint and whether your account features in it.
Step two: build your innocence file
This is the part that decides your outcome, and it is entirely within your control.
Assemble the complete money trail for the disputed credit. Bank statement showing the credit. The invoice, order confirmation, chat, or agreement that explains why the payment was made. Screenshots of the conversation with the payer, including their name and number. The delivery proof, if you sold goods. Your own KYC documents. Your income tax returns and GST filings if you are running a business, because they establish that your account is a genuine commercial account, not a mule.
The single most persuasive thing you can produce is a coherent explanation of why that money came to you, backed by a document generated before the freeze. Anything created afterwards carries less weight.
Step three: representation to the investigating officer
Once you know the police station, send a written representation to the investigating officer with your innocence file attached. Copy the SHO and the DCP Cyber. Send it by registered post and by email, and keep proof of both.
The representation should be short. Who you are, what you do, how the disputed credit arose, what documents prove it, and a specific request: lift the freeze, or in the alternative, restrict the lien to the disputed amount only.
In many cases this resolves it. Investigating officers deal with large volumes of these and a well-documented file that clearly shows a legitimate transaction is often released without further escalation.
Step four: going to court
If the representation goes unanswered, there are two routes.
An application before the jurisdictional Magistrate under Section 457 CrPC, now Section 503 BNSS, for release of property. Where the freeze was placed under Section 106 BNSS, the police were required to report it to the magistrate within a short window, and the magistrate has power over what happens next.
A writ petition under Article 226 before the High Court. This is the stronger option where the freeze has continued for months without a chargesheet, where the freeze is grossly disproportionate to the disputed sum, or where multiple states have flagged the same account and there is no single forum to approach. High Courts have been granting relief in these matters with reasonable regularity, particularly where the account holder is clearly a downstream recipient rather than a suspect.
A cyber crime lawyer will usually attempt the representation route first, because it is faster and cheaper, and escalate only if the police do not respond within a reasonable time.
The 90-day point
Under the standard operating procedure now followed for NCRP-driven freezes, where the disputed amount is small and no judicial order has been passed, banks are expected to lift the freeze at the 90-day mark from the original instruction. This is not automatic in practice. You will usually need to write to the bank citing the timeline. But it is a useful lever, and worth diarising the date from the day the freeze started.
What not to do
Do not transfer money out through another account the moment you sense trouble. It converts a defensible position into evidence of concealment.
Do not ignore it and open a new account elsewhere. The flag follows your PAN and Aadhaar, and a second frozen account is much harder to explain than the first.
Do not pay anyone who contacts you offering to “get it unfrozen through contacts.” This is now its own cottage industry preying on people in exactly your position.
Do not delete the chat history with the person who sent you the money. That conversation is frequently the best evidence you have.
How to avoid it next time
For P2P crypto trades, use only escrow within the exchange and keep every trade ID. For high-value sales to strangers, take payment through a traceable channel with an invoice. Keep a paper trail for every large credit from an unfamiliar source, even personal ones. If you run a business, keep your business account separate from your personal savings account, so a freeze on one does not take out your rent and school fees at the same time.
Frequently asked questions
Q1. How long does it take to unfreeze a bank account?
Where documentation is complete and the police respond, two to six weeks. Where court intervention is needed, two to four months. Cases with multiple state complaints take longest, because each has to be cleared separately.
Q2. Can my account be frozen without any notice to me?
Yes. The freeze is directed at the bank, not at you, and there is no statutory requirement to inform the account holder first. This is one of the grounds on which the practice is being challenged.
Q3. My salary is credited to this account. Can I get partial access?
Courts and banks do allow partial operation in hardship cases, particularly where the disputed sum is small compared to the balance. Ask specifically for this in your representation.
Q4. Multiple states have flagged my account. What now?
Each complaint must be addressed separately, but a single writ petition before the High Court can seek consolidated relief. This is the situation where a cyber crime lawyer is genuinely necessary.
Q4. Will this show up on my credit record?
The freeze itself does not. Bounced EMIs and failed standing instructions caused by the freeze will, which is why acting quickly matters.
A frozen account is solvable, but it gets harder the longer it sits. If your account has been blocked because of a cyber fraud complaint, speak to a cyber crime lawyer at Delhi Legal to get your representation drafted and, if needed, taken to court.