Cyber-police lien on your bank account after a P2P crypto trade

Reviewed on: 2026-07-03.

Rahul sold 0.05 Bitcoin on a peer-to-peer (P2P) platform. The buyer sent him Rs 2,40,000 by UPI, Rahul released the crypto, and the deal looked done. Two days later his ATM card was declined. The bank said a “cyber lien” had been placed on his account by a police cyber cell in another state, because the buyer's UPI was funded by stolen money. Rahul had done nothing wrong, but his money was locked and his rent cheque bounced.

If this has happened to you, you are not alone. Lakhs of innocent P2P crypto sellers get swept up this way every year. The good news: in 2025 and 2026 three High Courts ruled that the police cannot freeze your whole account on a mere phone call. This page explains, in plain words, the law, the court orders, and the exact steps to unfreeze your money.

This is a companion page to the full primary guide: Cyber-police lien after a P2P crypto trade. Read that first for the source-of-funds file and the overall strategy. This page focuses on the legal levers that force the police and the bank to act.

## How a P2P crypto sale turns into a cyber lien

  1. A fraud victim is cheated online and reports it on the National Cyber Crime Reporting Portal (cybercrime.gov.in) or the 1930 helpline. Both are run by the Indian Cybercrime Coordination Centre (I4C) under the Ministry of Home Affairs.
  2. The 1930 helpline and the portal feed into the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), which links 85-plus banks to the cybercrime backend.
  3. The police trace the money trail. Because fraudsters move stolen money through many accounts, the trail often passes through an innocent P2P seller's account (like Rahul's).
  4. The cyber cell emails or calls your bank asking it to “put a lien” or “mark a debit-freeze”. Many banks comply without asking questions.

So the freeze is triggered by a fraud victim's report, not by anything you did. Police often overreach, and banks over-comply. The courts have now drawn a clear line.

## The law: what police can and cannot do under the BNSS

The old Criminal Procedure Code (CrPC, 1973) was replaced on 1 July 2024 by the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS, Act 46 of 2023). This is the procedural law under which cyber-police account freezes now operate.

Two sections matter, and the difference between them is the heart of your case:

  1. Section 106 BNSS (which replaced old Section 102 CrPC) lets the police seize property as evidence during an investigation. It is a limited, evidence-preservation power.
  2. Section 107 BNSS is the power to attach or freeze property to secure the proceeds of crime. This can be done only on the order of a competent Magistrate - not unilaterally by the police.

In plain words: the police can ask the bank to hold a specific amount that is linked to the suspect transaction, as evidence. But to freeze your account or attach your money, they must go to a Magistrate first and get an order. A phone call or email from a cyber cell is not enough.

## The 2025-2026 court orders that protect you

Three High Court judgments have turned this 106-versus-107 rule into a shield for innocent account holders. Quote these in your complaint and your writ petition.

1. Kerala High Court - Headstar Global Pvt. Ltd. v. State of Kerala, Crl.M.C. No. 3740 of 2025 (2025:KER:39285), decided 2 June 2025 by Justice V.G. Arun.

The Court held that a bank account can be attached or frozen under Section 107 BNSS only on a Magistrate's order. A unilateral police debit-freeze is not permitted. The freeze was quashed, and the police were given the liberty to approach the Magistrate under Section 107 BNSS if they still wanted to proceed.

2. Delhi High Court - Malabar Gold and Diamond Ltd. v. Union of India, 2026 SCC OnLine Del 297, decided 16 January 2026 by Justice Purushaindra Kumar Kaurav.

The Court held that Section 106 BNSS empowers police only to seize property for evidentiary purposes and does not give authority to attach or debit-freeze bank accounts. Attachment or freezing can be done only under Section 107 BNSS and strictly on a Magistrate's order. The Court ruled that blanket freezing of accounts of persons who are neither accused nor suspects is arbitrary, disproportionate, and violates Articles 19(1)(g) and 21 of the Constitution (your right to trade and your right to livelihood).

3. Allahabad High Court (Lucknow Bench, Division Bench) - Khalsa Medical Store thru. Prop. Yashwant Singh v. Reserve Bank of India, Writ-C No. 12211 of 2025 (2026:AHC-LKO:3701-DB), decided 19 January 2026.

A two-judge Bench laid down five principles that every cyber cell and bank must follow:

  1. (a) A Section 106 seizure needs a reasonable belief, not mere suspicion.
  2. (b) The bank's nodal officer must be given a copy of the FIR or complaint, and may decline a freeze request that arrives without one.
  3. © A Section 106 lien may be only on a specific amount. Police can never ask the bank to block the entire account.
  4. (d) Intimation of the action must be sent to the jurisdictional Judicial Magistrate within 24 hours. If this is not done, the action is void.
  5. (e) A bank that freezes an account without following proper procedure is personally liable for civil and criminal consequences.

The blanket freeze in that case was quashed and the account was ordered to be defrozen.

These three orders mean that, if you are an innocent P2P seller whose whole account was frozen by a police email, you have strong legal grounds.

## Step-by-step: how to unfreeze your account

### Step 1 - Get the facts from your bank

Go to your home branch in person and ask, in writing:

  1. Which police station / cyber cell requested the freeze?
  2. On what date, and under which section of law?
  3. Is the freeze on a specific amount or on the whole account?
  4. Was a copy of the FIR or complaint given to the bank?

Take a stamped receiving. If the branch refuses to answer, file a grievance with the bank's Nodal Officer and then with the Banking Ombudsman at the RBI. The Allahabad HC ruling is clear: the bank must have the FIR copy, and a bank that freezes without procedure is liable.

### Step 2 - Collect proof that the trade was genuine

Build a short source-of-funds file (the full list is in the primary guide):

  1. Screenshots of the P2P order, the chat with the buyer, and the UPI credit.
  2. The exchange's trade statement showing the crypto was sold and released.
  3. Your KYC and the buyer's name as shown on the platform.
  4. Bank statement showing the credit and the freeze.
  5. Proof of your lawful source of the crypto (purchase receipts, salary, savings).

This shows you are a genuine trader, not a suspect. The Delhi HC order protects people who are “neither accused nor suspects”.

### Step 3 - Write to the Investigating Officer (IO) of the cyber cell

Send a one-page written representation to the IO of the cyber cell that ordered the freeze. State:

  1. You are an innocent P2P seller, not an accused or a suspect.
  2. The freeze is on the whole account, which is not permitted under Section 106 BNSS (Allahabad HC, principle ©).
  3. No Magistrate's order under Section 107 BNSS has been produced, so the freeze is not valid (Kerala HC, Delhi HC).
  4. Attach your source-of-funds file.
  5. Ask the IO to release the freeze or approach the Magistrate under Section 107 BNSS within 7 days.

Send it by registered post with acknowledgment due (RPAD) and keep the receipt. Email a copy to the cyber cell and mark a copy to the Superintendent of Police (Cyber) of that district.

If you need the FIR details, see How to get a certified copy of the FIR, chargesheet or closure report. The Allahabad HC principle (b) lets the bank demand the FIR copy too.

### Step 4 - File a writ petition in the High Court

If the IO does not act within 7 to 10 days, file a writ petition under Article 226 in the High Court that has jurisdiction over your bank account (or the High Court of the state where the cyber cell sits).

Ask the Court for:

  1. Quashing of the freeze as illegal, because no Magistrate's order under Section 107 BNSS was produced.
  2. A declaration that the blanket freeze violates your Articles 19(1)(g) and 21 rights (Delhi HC, Malabar Gold).
  3. A direction to the police to follow Section 106 / 107 BNSS strictly, including the 24-hour Magistrate intimation (Allahabad HC, principle (d)).
  4. Compensation if the freeze caused real loss (a bounced rent cheque, an EMI default).

A criminal lawyer can draft and file this in a day. These petitions are usually heard within a week or two, and the three judgments above make a ready-made case.

### Step 5 - Use RTI to force proof out of the police

If the police are silent or the bank is vague, use the Right to Information Act to extract the paper trail. File RTI applications with:

  1. The police station / cyber cell: ask for the section of law under which the freeze was ordered, the date the Magistrate was informed, and a copy of any Magistrate's order under Section 107 BNSS.
  2. Your bank: ask for the exact freeze request received from the police, the date it was actioned, and whether the FIR copy was on record.

If the police admit there is no Magistrate's order, that admission is your evidence in the writ petition. For how to file RTI online, see How to file RTI online. For the broader cybercrime-freeze problem (not just crypto), see Bank account debit-freeze and cybercrime lien removal, which covers the same BNSS framework for any frozen account.

## The escalation ladder at a glance 

1. **Bank branch** -> Nodal Officer -> RBI Banking Ombudsman.
2. **Investigating Officer, cyber cell** (written representation + source-of-funds file, by RPAD).
3. **Superintendent of Police (Cyber)** of the district.
4. **High Court writ petition** under Article 226.
5. **RTI applications** to police and bank, to extract proof for the court.

Give the bank and the IO 7 days each, then move up.

## Common mistakes to avoid

  1. Do not ignore the freeze. A lien can sit for months. Act in writing.
  2. Do not fight with the bank staff. They often must obey the police email. Escalate in writing instead.
  3. Do not admit to anything you did not do. Selling crypto lawfully is not a crime.
  4. Do not pay any “agent” who promises to get the freeze lifted - a common scam on top of a freeze.
  5. Do not file the writ before sending a written representation to the IO. Courts like to see that you tried the simpler route first.

## Related pages

## Sources of the law and judgments cited

—

*This page explains the law as laid down by the courts cited above. It is not a substitute for a lawyer. If your account is frozen, act quickly and in writing at every step.*

If this guide helped you, download the RTI Playbook - a step-by-step handbook for using the Right to Information Act to force government departments to act, including ready-to-use application templates.

This work is free and kept ad-light by readers. If it saved you time or money, [donate to support RTI Wiki](https://righttoinformation.wiki/donate) so we can keep publishing honest, verified legal guides.

Cyber police lien on P2P crypto trade bank account: How to unfreeze and defend yourself (2026)

  1. Step 1: Why does cyber police freeze your bank account for P2P crypto trades? (a) Under BNS 2023 and IT Act, cyber police can freeze accounts suspected of receiving “proceeds of crime”, (b) P2P crypto trades on exchanges like Binance, WazirX, Kucoin often involve receiving funds from unknown parties — if any sender is under investigation, your account gets lien, © common scenario: (i) you sell crypto via P2P, (ii) buyer sends UPI/bank transfer, (iii) buyer's account is flagged in another cyber complaint, (iv) your account gets lien as “beneficiary of proceeds of crime”, (d) legal basis: BNSS 2023 Section 106 (proceeds of crime), IT Act Section 66, CrPC Section 102 (police power to seize property).
  2. Step 2: Authority comparison table. (a) Cyber police: (i) jurisdiction: city/district cyber cell, (ii) power: freeze account under CrPC 102, (iii) contact: local cyber police station, (b) Bank: (i) jurisdiction: your branch, (ii) power: execute lien on police request, (iii) contact: branch manager or RBI ombudsman, © Court: (i) jurisdiction: sessions court or high court, (ii) power: order defreezing, (iii) contact: file writ petition or discharge application, (d) Exchange: (i) jurisdiction: crypto exchange support, (ii) power: provide trade records, (iii) contact: exchange compliance team.
  3. Step 3: How to check why your account is frozen. (a) Step 1: Contact bank — ask for lien details, cyber police station reference, complaint number, (b) Step 2: Contact cyber police — get copy of FIR/complaint and reason for lien, © Step 3: Collect evidence — P2P trade screenshots, exchange order ID, UPI/bank transfer proof, KYC details of buyer.
  4. Step 4: How to unfreeze your account. (a) Step 1: File representation with cyber police with all trade evidence, (b) Step 2: Submit proof that you are a legitimate trader — exchange records, KYC, trade history, © Step 3: Request defreezing of account or release of funds not connected to crime, (d) Step 4: If no response in 30 days: file writ petition in High Court under Article 226, (e) Step 5: If wrongfully lien: claim damages for wrongful seizure.
  5. Step 5: How to file RTI for account lien. (a) Cyber police and bank are public authorities under RTI Act, (b) RTI application can ask: (i) “Provide the reason for account lien on account [number] including: FIR number, complaint details, frozen amount, investigating officer name, status of investigation”, (ii) “Provide the status of representation dated [date] for defreezing of account [number]”, © application fee Rs 10.
  6. Step 6: E-E-A-T signals. (a) Sources: cybercrime.gov.in, rbi.org.in, pib.gov.in, (b) Last reviewed: July 2026, © Author: RTI Wiki Editorial Team.
  7. Step 7: Practical tips. (a) always screenshot P2P trade details and buyer info, (b) keep exchange order IDs and trade history, © file representation within 7 days of lien, (d) file RTI for lien reason if police doesn't respond, (e) file writ petition if no action in 30 days, (f) Example: A trader's account was lien by cyber police for Rs 5 lakh due to a P2P trade; collected exchange records and buyer KYC; filed representation; account defrozen in 21 days.

See Cyber Police Lien P2P Crypto and Crypto Scam Recovery and Middle Class Traps and NRI Parents Emergency.

, , , , , , , , , ,