Account frozen because a payment you received was fraud-linked? Read this first

Reviewed on: 2026-06-12.

Aarti, a freelance designer in Hyderabad, finished a logo project in April and was paid Rs 35,000 by her client over IMPS. In May her debits started failing. The branch told her a cyber cell had flagged the client's account: the client had collected money from a scam victim in Surat, and Aarti's Rs 35,000 was one hop of that money. A complaint on the National Cybercrime Reporting Portal had triggered a freeze request to her bank, and the bank had complied, as it must when police act under Section 102 CrPC, now Section 106 of the BNSS.

Aarti is what investigators call a first-layer receiver: she took money directly from the flagged account. She is not accused of anything, but her position needs more careful handling than someone three hops down the chain, because the officer's first question is whether she knew the payer. Her way out is to show a genuine, documented reason for the payment. Most first-layer receivers with clean paper get released. The bank, though, can do nothing for her on its own.

When a victim reports on cybercrime.gov.in or calls 1930, the portal and the cyber cell trace where the money went. Every account the money touched can be flagged, layer by layer. Being flagged is not an allegation. It is a hold on funds pending the officer's check. Three facts follow:

• The investigating officer owns the decision to release. Not the branch, not the bank's head office, not the RBI.
• Your task is evidence, not argument: connect the flagged credit to a real transaction with dated documents.
• Time matters. Files that reach the officer early, complete and tidy, get decided early.

For the one flagged credit, assemble:

1. The statement page with the credit highlighted: date, amount, sender name or UPI ID, UTR.
2. Proof of why you were paid: invoice, work contract, delivery proof, chat where the deal was struck, listing if it was a sale.
3. Proof of your side of the bargain: the delivered work files, courier receipt, or handover record.
4. A one-page signed note: who paid you, for what, how you met, and that you had no knowledge of the payer's dealings.
5. Your ID proof.

If you ran any part of the deal on WhatsApp, export the chat with the date stamps. Informal proof is still proof.

Write to the branch asking for the freeze amount, the date, the requesting cyber cell, and the NCRP acknowledgement or FIR number. Banks vary in what they reveal. Take what you get, and fill the gaps by calling 1930 with your account number or checking with the cyber cell of the complainant's district once you know it. If the bank refuses everything, the sibling guide on a bank refusing lien-order details covers the squeeze, including the RTI route when the bank is public-sector. Private banks are outside the RTI Act, so with them the pressure points are the nodal officer and the RBI Ombudsman at cms.rbi.org.in for the bank's conduct only. No RBI complaint lifts a police hold.

Send a written representation, by email plus registered post, stating that you are a bona fide receiver, describing the transaction, enclosing the file, and asking for release of the hold, or at minimum its restriction to the flagged Rs amount. Offer to appear or answer questions. Ask for a dated acknowledgement. A cooperative, documented receiver moves out of the suspect column quickly; a silent account holder stays in it.

If weeks pass without movement, escalate in writing to the cyber cell's senior officer, and then consider the jurisdictional court through a lawyer. Courts entertain applications for release of frozen amounts where the source is shown to be genuine, and for limiting an over-wide freeze. Treat the court as a normal next step, not a last resort, when the held amount is significant.

• You may be asked to give a statement. That is routine. Take your file, answer factually, and do not speculate about the payer.
• The victim may seek refund of the flagged amount. Courts sometimes order the flagged sum restored to the victim while releasing the rest of the account. If you gave genuine value for the money, say so with proof, because that fact weighs against ordering the refund out of your pocket.
• Do not contact the payer to “sort it out”. Anything that looks like coordination with the flagged account hurts you. Route everything through the officer.

Police are public authorities, so an RTI asking for the action-taken status of your representation, or confirmation that a freeze instruction exists for your account, is maintainable. Expect partial refusals under Section 8(1)(h) of the RTI Act while the investigation runs; that exemption covers information that would impede the process of investigation. Appeal wrong refusals under Section 19. With a public-sector bank, RTI can fetch the freeze instruction copy and date. Use the online RTI portal for central authorities and bank PIOs. RTI builds your record; it does not unfreeze anything.

Receiving money in good faith for genuine work or goods is not an offence. The hold is precautionary. Your exposure rises only if the record suggests you knew about the fraud, which is why a clean documented story given early matters so much.

Not on your own. Any restoration of the flagged amount should happen through the officer or the court, on record. A private “refund” leaves you out of pocket with the freeze still in place.

No. Give your documents to the investigating officer, not the payer. The payer's account is the flagged one; coordination with him can be read against you.

Yes. Ask the bank in writing whether the police instruction specified the amount. Ask the officer, in your representation, to limit the hold to the flagged amount. Over-wide freezes are the most commonly corrected part of these cases.

Not at the first stage. Written representation by email and post, with follow-up, is the standard opening. Travel or a local lawyer in that state comes only if the matter does not move. The distant-state problem is covered in detail in the rent and business payment freeze guide.

Mechanically the same, but business receivers usually face layered transactions and bigger working-capital damage. That variant, with its own table and example, is the sibling guide linked above.

• Debit freeze vs lien: which hold you have
• Frozen over a rent or business payment
• KYC freeze despite submitted documents
• All practical guides | How to file RTI online

Download the fraud-linked payment release checklist (PDF).

1. Step 1: What to do when bank account is frozen due to cyber complaint? (a) Account frozen: (i) bank freezes account based on cyber complaint — cybercrime notice, (ii) typically under Section 91 CrPC / BSA 2023 / Cyber Crime, (iii) account holder gets no prior notice, (b) common scenarios: (i) account wrongly linked to fraud, (ii) received funds from suspect account, (iii) identity theft — fraudster used account, (iv) mistaken identity, (v) genuine business transaction flagged, © rights: (i) account holder has right to know reason — RTI + bank, (ii) right to hearing — submit proof of legitimate transaction, (iii) right to unfreeze if no wrongdoing, (d) authority: Bank + Cyber Crime Cell + Court, (e) law: BSA 2023 + IT Act 2000 + BNS 2023 + CrPC Section 91.
2. Step 2: Comparison table — account frozen scenarios. (a) Wrongly linked: (i) issue: account wrongly linked to fraud, (ii) remedy: submit proof to bank + cyber cell, (iii) timeline: 15-30 days, (iv) escalation: Court, (v) example: wrongly linked; submitted proof; unfrozen in 20 days, (b) Received suspect funds: (i) issue: received funds from flagged account, (ii) remedy: explain transaction + return funds, (iii) timeline: 15-30 days, (iv) escalation: Court, (v) example: received UPI from unknown; explained; returned; unfrozen, © Identity theft: (i) issue: fraudster used account, (ii) remedy: file police complaint + inform bank, (iii) timeline: 30-60 days, (iv) escalation: Court, (v) example: identity theft; filed complaint; account unfrozen, (d) Mistaken identity: (i) issue: wrong account frozen, (ii) remedy: submit KYC + identity proof, (iii) timeline: 7-15 days, (iv) escalation: Bank HQ + Court, (v) example: mistaken; submitted KYC; unfrozen, (e) Genuine transaction: (i) issue: legitimate transaction flagged, (ii) remedy: submit invoice/contract + proof, (iii) timeline: 15-30 days, (iv) escalation: Court, (v) example: business payment flagged; submitted invoice; unfrozen. (Note: Account frozen — submit proof to bank + cyber cell. File RTI for reason. Approach court if not unfrozen.)
3. Step 3: How to unfreeze bank account. (a) Step 1: Contact bank — get freeze reason in writing, (b) Step 2: File RTI with cyber cell for complaint details, © Step 3: Submit proof of legitimate transaction to bank + cyber cell, (d) Step 4: File police complaint if identity theft, (e) Step 5: Approach court — Section 91 CrPC quashing, (f) Step 6: File writ petition in High Court if all fail.
4. Step 4: E-E-A-T signals. (a) Sources: cybercrime.gov.in, rbi.gov.in, pib.gov.in, (b) Last reviewed: July 2026, © Author: RTI Wiki Editorial Team.
5. Step 5: Practical tips. (a) get freeze reason in writing from bank, (b) RTI with cyber cell — effective, © submit proof of legitimate transaction, (d) court approach if bank doesn't unfreeze, (e) Example: A businessman's account was frozen due to wrong cyber link; submitted invoices; filed RTI; unfrozen in 20 days.
6. Step 6: Key provisions. (a) BSA 2023: account freeze, (b) IT Act 2000: cyber crime, © Section 91 CrPC: notice, (d) BNS 2023: fraud, (e) RTI: file with cyber cell.

See Bank Account Frozen and RTI for Ignored Complaint and How to File RTI.