Bank account frozen by cyber police? What to do if you received tainted money without knowing

AI-generated editorial illustration by CyberShitty. Not a photograph or a document from the organisations named.

Innocent people get caught when scam money passes through their account, often after a P2P crypto sale or a payment for work. How to find out who froze it, use the free grievance route, and cite High Court rulings against blanket freezes.

01 / Why an innocent account gets frozen

When a fraud victim reports on 1930 or cybercrime.gov.in, police trace the money from account to account and ask each bank on the trail to hold it. The Home Ministry's SOP of 2 January 2026 says money can be held at any layer. A draft RBI direction defines a mule account as one used "knowingly or unknowingly" to receive or move fraud proceeds.

So you can be caught up even if you did nothing wrong. It happens when a buyer in a peer-to-peer crypto trade paid you with stolen money, or when a client, tenant or customer paid you from a fraud. The SOP tells investigating officers to consider that an account may have been used without the holder's knowledge or consent.

02 / Lien or debit freeze: know which you have

A lien blocks a specific amount, and you can still use the rest of your balance. A debit freeze blocks the whole account. Several High Courts have pushed back on blanket freezes:

• Delhi HC (Neelkanth Pharma Logistics v. Union of India, 20 February 2025): an account with about ₹93.5 crore had been frozen over a suspect credit of ₹200. The court said a lien on the disputed amount should ideally be "the first and foremost option".
• Bombay HC (Nagpur bench): only the disputed amount can be placed under lien. The court held that Section 106 BNSS does not permit a debit freeze of the whole account, and that attachment needs a Magistrate's order under Section 107.
• Allahabad HC (Khalsa Medical Store v. RBI): police may seek a lien on a specific amount but may not ask a bank to block an entire account. The jurisdictional Magistrate must be told within 24 hours.
• Rajasthan HC (Justice Sameer Jain): a freeze can be imposed without prior notice, but it must be proportionate and reviewed from time to time. The court asked petitioners to use the SOP's grievance route first.

How courts apply these rulings depends on the facts, so consider consulting a lawyer if a large amount is involved.

03 / Find out who froze it

Ask your bank in writing for:

• the police station and state that sent the order;
• the NCRP acknowledgement number or case reference;
• the amount involved;
• whether it is a lien or a full debit freeze.

The SOP says the bank may give you the contact details of the police unit that ordered the action. It cites a Financial Intelligence Unit clarification of 2 June 2025 that sharing this is not a "tip-off". The bank will not give you the victim's details.

04 / Use the free Grievance Redressal Module

The SOP sets up an online grievance route that you enter through your bank branch:

• Branch: visit your branch with your explanation and documents. After due diligence, the bank should file your grievance on the portal within 7 days.
• Investigating officer: the IO verifies it, preferably by video call, and should decide within 15 days. If satisfied, the IO tells the bank to lift the hold.
• District Grievance Officer (Additional SP or DSP): gets the case automatically if the IO does not act in time, or you can ask for a review within 15 days of a refusal.
• State Grievance Officer (ADG, IG or DIG): hears an appeal against a seizure or suspension that is continued.
• 90-day rule: if no lawful direction to continue a contested hold arrives within 90 days, the bank should start removing it. Police can extend a hold by up to 90 days.
• Court: you can go to court at any stage.

On 4 August 2026 the Supreme Court recorded that the module covered 1,23,590 branches of 69 banks. It said people should ordinarily be encouraged to use it first, without losing any other legal remedy.

05 / Build your explanation

• Records of the P2P trade: order IDs, exchange chats and the buyer's profile.
• Invoices, contracts or emails for work or goods you supplied.
• Bank statements showing your normal pattern of transactions.
• ITR or GST records if the payment was business income.

If the IO sends you a notice, reply within the time given. The SOP allows up to 15 days.

06 / What's changing: RBI's draft SOP

After the Supreme Court's order, RBI published draft KYC Amendment Directions, 2026. Comments close on 2 October, and the proposed start date is 1 April 2027. Under the draft:

• banks would hold the specific suspect amount, and hold a whole account only as a last resort;
• you would get 20 days to explain, and the bank would decide within 10 days of your reply;
• a hold could not normally last beyond 60 days unless the police say otherwise.

These are proposals, not rules yet.

07 / Warnings and checklist

• Get the police unit, reference number and amount from your bank in writing.
• File a grievance through your branch and keep the receipt.
• If the whole account is frozen, ask for a lien on the disputed amount only.
• Do not pay "agents", and do not send money to strangers to "settle" the case.
• Never let others use your account. Knowingly lending it for payments can expose you to criminal charges.