Bank Account Frozen or Lien Marked After a Cyber Complaint: How to Get It Released, Step by Step

The first sign is usually a failed payment. A UPI transfer bounces, a cheque is returned, and the bank's app shows a "lien" against part of the balance, or the branch says the account is "debit frozen" on police instructions. Often the account holder has done nothing more than receive money: a customer's payment, a buyer's transfer in a peer-to-peer crypto trade, a payout from a gaming site, or money sent by mistake. Somewhere upstream, someone reported a cyber fraud, the money was traced through one account after another, and yours was on the trail. This guide explains, from the government's own documents, what has happened, who can lift it, the time limits they are bound by since January 2026, which papers to give, and what to do when nothing moves.

Written on 31 October 2026. The procedure described is the Ministry of Home Affairs' Standard Operating Procedure for the National Cybercrime Reporting Portal (NCRP) and its Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), dated 2 January 2026, as circulated by the commodity exchange NCDEX to its members on 24 March 2026. Figures are from the Ministry's replies in Parliament, published by PIB. Court rulings are cited from the Delhi High Court's own order and, where marked, from law reports. This is general information, not legal advice on a particular case.

First, find out which restriction you have

"Frozen" is used loosely for four different things. They have different legal bases and different exits, so the first job is to know which one applies.

A fifth kind, attachment by a Magistrate under section 107 BNSS, comes from a court order rather than a police notice, and is lifted only by the court. Restraints by the Enforcement Directorate, the income tax department or GST officers follow their own laws and are outside this guide.

Why an innocent account ends up with a lien

The national system is built for speed. When a victim calls 1930 or files on cybercrime.gov.in, the police push the complaint to CFCFRMS, and every bank that received the money is asked to hold it. The procedure says this continues "till the complete money trail is established". The first account to receive the victim's money is the "first layer"; money then often moves to a second and third account within minutes. Each of these can end up with a hold, whether its holder is a fraudster, a hired mule, or someone paid in good faith for something real.

• A payment for real goods or services. A trader is paid by a customer who turns out to be using stolen money. In the Delhi High Court's case of 16 January 2026, a jewellery company had ₹80.1 lakh held across two banks because one of its customers was accused of fraud; the court noted that no complicity had been shown and ordered the accounts released.
• A peer-to-peer crypto sale. The procedure tells crypto exchanges, where stolen money was used to buy crypto peer to peer, to hold the crypto with the buyer and ask the seller's bank to hold the matching amount. A seller who was paid with a victim's money gets a lien even if the trade itself was genuine.
• Online money games and betting. Since the Promotion and Regulation of Online Gaming Act, 2025, no bank or payment firm may process payments for online money games (section 7), and doing so is a cognizable, non-bailable offence. Accounts used to collect stakes or pass on winnings for such platforms can be restrained in an investigation. The Act's penalties are aimed at those who offer, advertise or process money games, not at players.
• Money received by mistake. If someone sends money to the wrong account and then reports it as fraud, your bank can be asked to hold it. The quick exit is to tell your bank in writing that you agree to the return of that exact amount.
• A rented or "borrowed" account. Offers to pay you for the use of your account, UPI ID or SIM are how mule accounts are recruited. Up to 30 June 2026, 32.08 lakh first-layer mule accounts had been shared with banks through the Suspect Registry, and transactions worth ₹25,698 crore had been declined.

What the numbers say

The gap between ₹9,079 crore held and ₹206 crore returned is the heart of the problem. Money sits under lien for long periods, owned in part by victims waiting for it and in part by account holders who did nothing wrong. Only about one complaint in thirty became an FIR. The grievance and money-restoration modules working since April 2026 are meant to speed up both sides.

Step 1: get the facts from your bank, in writing

Write to your branch, or use the bank's grievance channel, and ask for:

1. the kind of restriction (hold on an amount, suspension of digital banking, or seizure of the account) and the date it was placed;
2. the amount held, and the transaction it relates to;
3. the police station or agency that asked for it, with the officer's contact details;
4. the NCRP acknowledgement number (14 digits, starting with 2 for a portal complaint and 3 for a 1930 call) and the FIR number, if there is one.

The procedure lets your bank give you the police agency's address and contact details, and it records that the Financial Intelligence Unit's circular of 2 June 2025 treats this as not amounting to "tipping off" a suspect. The bank will not give you the complainant's details. Do not rely on phone calls from people claiming to be police: confirm any name and number through your bank.

Step 2: file a grievance through your bank

Since April 2026, grievances about holds and freezes ordered through the portal go through a Grievance Redressal Module, and the procedure sets a time limit for every stage. You start at your bank branch, not at the police station.

The 90-day review. For a hold on an amount that you have contested through this route, if no lawful direction on continuing it comes within 90 days of the grievance, the bank must remind the police 15 days before the 90 days end. If the money is not needed in another case, no court petition is pending and the police have not asked for more time, the bank is to remove the hold on your request and on the police's instructions. The police can extend the hold by up to 90 more days.

Three points that help. You should not ordinarily be asked to appear in person; the procedure prefers a video call unless an FIR has been registered and your presence is unavoidable. If you are a senior citizen, have a disability or a terminal illness and cannot reach the branch, someone else can raise the grievance for you. And if the frozen account belongs to the victim of the fraud, frozen as a precaution, the bank is to release it on the victim's own request.

If a refund notice comes. When the victim applies for the held money, the police officer must send you a notice and give you up to 15 days to explain the transaction. If you do not respond, that is recorded and the money can be released to the victim against an indemnity bond, with a report to the court. You can contest in writing within 15 days of the refund, but it is far better to answer the notice.

Documents to keep ready

Give copies, keep originals, and get an acknowledgement for everything you hand over.

Step 3: when the grievance route fails, the courts

Section 106(3) BNSS requires a police officer who seizes property, a bank balance included, to report the seizure to the Magistrate "forthwith". That report is what lets the court supervise. Two routes are commonly used:

• The Magistrate. Where a seizure has been reported, section 503 BNSS lets the Magistrate order the property released to the person entitled to it. Section 497 allows custody orders while a case is pending. Victims use the same provisions to get held money back.
• The High Court. A writ petition is the route most account holders have taken where whole accounts are frozen without an FIR, a stated amount or a report to the Magistrate.

What the courts have said is not uniform:

Which line applies depends on the High Court with jurisdiction over your case. Across all of them, the safe ground for an account holder is the same: an amount that is identified, an FIR or complaint number that is stated, a report to the Magistrate, and a restraint no wider than the money in question.

Where RBI fits in

• The Banking Ombudsman cannot lift a police hold. Under RBI's Integrated Ombudsman Scheme, 2026, in force from 1 July 2026, a grievance about action a bank took in compliance with an order of a law-enforcing, statutory or judicial authority is not maintainable. A bank's own hold, for example for incomplete KYC, can usually go through the bank's grievance process and then to the Ombudsman.
• Time limits on a bank's own holds are coming. On 4 August 2026 the Supreme Court directed RBI to issue a procedure for temporary debit holds on suspected mule accounts. RBI's draft, amending its KYC Directions, would apply from 1 April 2027; it is not final yet. A bank that places such a hold must tell you at once, with reasons and an officer to contact, and give you 20 days to explain. It must decide within 10 days of your explanation, or 30 days from the hold if you send none. If it continues the hold, it reports to the police through the portal, and must lift it on the 31st day if no instruction to continue arrives. Without such an instruction, a hold can last no more than 60 days. Holds on a whole account are to be a last resort.

What not to do

• Do not pay "agents" who promise to remove a lien for a fee. The grievance route costs nothing, and the module records every step.
• Do not ignore a police notice or a bank's request for an explanation; silence is recorded against you.
• Do not lend, rent or sell your account, UPI ID or SIM, however small the payment offered.
• Do not argue with the victim or the complainant; your route is through the bank, the police and the court.

A checklist

1. Ask the bank in writing what kind of restriction it is, the amount, the date, the police agency and the complaint number.
2. File a grievance at the branch with your explanation and documents; note the date, because the 7-day and 15-day clocks run from it.
3. Join the police officer's video verification, with your papers to hand.
4. If 15 days pass with no decision, or the decision goes against you, ask the branch to take it to the district grievance officer, and then to the State officer for a seized account.
5. If the hold on an amount was contested and 90 days have passed without a lawful direction, ask the bank to act under the review rule.
6. If nothing moves, take advice on an application before the Magistrate or a writ petition before the High Court.
7. If the money reached you by mistake, agree in writing to the return of that amount.

Frequently Asked Questions

What is a lien on a bank account in a cyber-crime case? A hold on a specific amount, placed by the bank on instructions sent by police through the national cybercrime portal, because that amount was reported as coming from a cyber fraud. The rest of the balance can still be used.

How do I remove a lien marked by the cyber cell? Complain at your bank branch with your explanation and documents. The bank must file the grievance on the portal's Grievance Redressal Module within 7 days, and the police officer must decide within 15. You can then go to the district grievance officer and, for a seized account, the State grievance officer, and to a court at any stage.

How long can a bank keep a lien on my account? There is no fixed limit on a police-ordered hold. Under the Ministry of Home Affairs' procedure, a hold you have contested comes up for removal 90 days after your grievance if no lawful direction to continue it has been given, unless the police extend it by up to 90 days or a court is dealing with it. RBI's draft rules would cap a bank's own hold at 60 days without police instructions, from 1 April 2027.

Can police freeze my whole bank account for a small disputed amount? The Delhi, Bombay, Kerala, Allahabad and Rajasthan High Courts have said a whole account should not be frozen over a small identifiable amount where the holder is not shown to be involved. The Karnataka High Court has held that police may debit-freeze an account under section 106 BNSS if they report it to the Magistrate. Which view applies depends on your State.

Which documents do I need to unfreeze my account? The bank's letter about the hold, your KYC documents, the account statement, a signed explanation, and proof of the transaction itself: an invoice, delivery proof, crypto trade record, rent agreement or salary slip, as the case may be.

Can I complain to the RBI Ombudsman about a frozen account? Not where the bank froze it on a police or court order; the Integrated Ombudsman Scheme, 2026 treats such grievances as not maintainable. A freeze the bank placed on its own, for example for KYC, can go to the Ombudsman after the bank's own grievance process.

I received money by mistake and my account is on hold. What should I do? Tell your bank in writing that you agree to the return of that exact amount to the sender, and ask it to report that through the portal. Keep a copy.

Will I be arrested if my account received fraud money? Receiving money is not by itself proof of an offence; the procedure tells officers to consider that an account may have been used without its holder's knowledge. Answer notices, give your explanation with documents, and take legal advice if you are named in an FIR.

This guide explains public procedures and court rulings. It is not legal advice; for a frozen account in your own case, consult an advocate, particularly before filing in court.