Bank account frozen after cyber fraud: what to do

A failed UPI payment or “debit not allowed” message does not tell you why an account is restricted. The bank may have applied a limited lien, a debit freeze, a KYC restriction or another hold. Your first task is to obtain the exact restriction and the authority behind it, not to pay an agent who promises instant unfreezing.

If you live abroad, also see the NRI frozen-account guide. If you need to lock your own account after spotting fraud, use the self-freeze process rather than this page.

Do not assume every restriction is a police freeze under one section. The written bank response should identify the real basis.

Search phrases such as bank account freeze by cyber crime often mix four different tools. The remedy changes with the label.

A lien of ₹18,000 on a salary account is not the same as a whole-account debit freeze. Banks sometimes over-restrict because they cannot safely separate disputed credits from clean funds. Your written request can ask the bank to convert a full debit freeze into a partial lien matching the identified UTR, if the instruction actually names only that amount. See also debit freeze and cybercrime lien removal and account freeze and unfreeze.

The National Cyber Crime Reporting Portal's public notice explains that I4C is not an investigating agency, does not conduct investigations and does not put a lien or freeze on a bank account. Complaints reported through NCRP are handled by the relevant State or Union Territory law-enforcement agency.

Police power can include seizure of property under section 106 of the Bharatiya Nagarik Suraksha Sanhita, 2023, where the statutory conditions are met. That provision also requires the seizure to be reported forthwith to the jurisdictional Magistrate. The precise source of a bank restriction can instead be a court order, another statutory authority or the bank's own regulatory obligations, so request the actual particulars before citing section 106.

The Ministry of Home Affairs has also referred to a Standard Operating Procedure issued on 2 January 2026 for unfreezing bank accounts linked to cybercrime complaints. Application in an individual case remains with the competent investigating and judicial authorities.

A typical trail, in plain language: a victim reports a UPI fraud on 1930 or NCRP; the payment hops through several accounts in minutes; banks on the path receive an alert or a later police communication; every stop, including a person who only received a “refund”, rent, OLX sale or loan repayment, can get a hold. The system freezes first and sorts later. That is why a clean salary account can fail at the ATM the same evening.

In the first 30 minutes, screenshot the exact app error, search SMS and email for “lien”, “freeze”, “hold”, “NCRP” or “cyber”, and call the number printed on the card. Ask three questions: debit freeze, credit freeze or lien; the reference number; which authority requested it. Write the answers down. Do not move remaining funds in a panic and do not click an “unfreeze in one hour” link.

Then send a short written request to the branch and the bank's official grievance channel. Ask for:

1. account number shown only in masked form in ordinary email;
2. date and time the restriction was applied;
3. whether it is a lien, partial hold, debit freeze or full restriction;
4. amount under lien, if any;
5. transaction or UTR associated with the complaint;
6. NCRP acknowledgement, FIR or other reference available to the bank;
7. name, police station, State or Union Territory and contact details of the investigating officer;
8. date and reference of the police, court or authority communication;
9. the bank's own complaint number and escalation officer.

The bank may lawfully withhold some investigative material. Ask for the usable particulars required to contact the competent agency rather than demanding confidential complainant data.

Keep one folder. You will reuse it for the bank, the investigating officer and any later Ombudsman or court filing:

• PAN and Aadhaar (share copies through official channels, not Telegram);
• passbook first page or account-opening proof;
• last six months’ statement, with the disputed credit highlighted;
• salary slips, Form 16 or ITR acknowledgement if this is a salary or business account;
• freeze SMS / email and failed-transaction screenshots;
• sale, rent, invoice or chat history that explains the credit;
• UPI history export from the official app;
• any police, cyber-cell or tax communication already received.

Do not manufacture an invoice, backdate a contract or delete chats.

Create one table for the disputed credit:

If you rented the account, forwarded money for commission, sold crypto peer-to-peer or allowed another person to operate the account, disclose the facts to your lawyer before making a statement. Innocent pass-through patterns we see repeatedly include an OLX sale paid with stolen funds, rent collected for an owner, a “friend’s salary” parked in your account, a P2P crypto INR credit, or a work-from-home job that used your account as a mule. Write the true story on day one.

There is no universal online unfreeze button. “How to unfreeze bank account online” searches mostly surface bank KYC self-service or scam pages. A cybercrime lien is lifted when the authority that requested it communicates a review, reduction or release, and the bank then acts on that communication.

Work this sequence without skipping:

1. 1. Get the restriction in writing from the bank (type, amount, UTR, authority, officer).
2. 2. Identify the investigating unit. If the bank cannot name it, ask again in writing and use the bank grievance channel. A PSU bank PIO can be asked for the non-exempt particulars; a private bank is not an RTI public authority.
3. 3. Send the officer a dated representation (format below) with indexed evidence. Ask for: (a) confirmation that your account is the one meant; (b) limitation of the hold to the traceable amount if a whole-account freeze is in place; © written communication of any release to the bank.
4. 4. Keep using the bank’s grievance numbers for service failures (no written reason, no officer particulars, ignoring a release letter). That is separate from asking the officer to decide the criminal file.
5. 5. If the officer is silent, the amount frozen is far larger than the UTR, or salary / pension is blocked, take the Magistrate / court path described below rather than paying a consultant.

Do not file ten complaints on ten portals. Do not try to close the frozen account. Do not “park” the balance with a relative — that account can take a follow-up lien.

Once the bank identifies the agency and officer, send a factual representation that includes:

• your name, contact details and masked account number;
• the bank's restriction date and reference;
• the NCRP, FIR or police reference, if known;
• the exact disputed transaction and your explanation;
• indexed supporting documents;
• the hardship caused by a whole-account restriction, if relevant;
• a request to review whether the lien can be limited to the traceable amount or released based on the evidence;
• a request for written communication of the decision to the bank.

There is no universal form or guaranteed unfreeze period. A polite complete record is more useful than repeated calls with no acknowledgement.

Searches for bank account freeze by cyber crime application format and letter format need a factual letter, not a paid PDF.

To,
The Investigating Officer,
[Police station / Cyber Crime Police Station / unit named by the bank]
[District], [State]

Subject: Representation for review / limitation / release of
lien or debit freeze on account [last 4 digits],
bank reference [number], NCRP / FIR [if known].

Respected Sir/Madam,

I am [name], resident of [address]. My bank has restricted
account [last 4 digits] from [date]. The bank states the
restriction is linked to [NCRP / FIR / UTR], amount ₹[x].

The credit of ₹[amount] on [date/time], UTR [number], was
received from [name / VPA / account] towards [sale / rent /
repayment / salary / other]. I enclose statement highlights,
invoice or chat, identity proof and a chronology.

I request:
1. Confirmation that this account is the intended account;
2. Review of the evidence and, if appropriate, limitation of
   the hold to the identified amount rather than the whole
   account;
3. Written communication of any release or reduction to
   [bank branch / email], copied to me.

I am available for statement or further documents at
[mobile / email]. I have not paid any intermediary.

Yours faithfully,
[Name, date, signature]

Send it by a trackable method and keep the proof of delivery. Copy the branch grievance email so the bank can match a later release letter.

Section 106 BNSS requires a seizure of property to be reported forthwith to the jurisdictional Magistrate. That is one reason a Magistrate application appears in freeze cases: the court supervising the investigation can be asked to examine whether a whole-account restraint is still justified, whether the hold can be limited to the traced sum, or whether salary / pension credits should be usable.

Consider independent legal advice when:

• the investigating officer cannot be identified despite written requests;
• the whole account remains blocked while the complaint concerns a smaller amount;
• salary, pension or ordinary business receipts are affected;
• the investigating agency is in another State;
• the officer rejects the representation or does not decide it;
• criminal allegations, summons or a notice are involved.

Practical Magistrate path, in outline:

1. collect the bank’s written restriction, your representation, proof of delivery, statements and identity;
2. identify the court that has jurisdiction over the police station named in the freeze (not a random district copied from the internet);
3. file through a local advocate if the facts are contested, or as advised for a simple limitation request;
4. ask for relief that matches the record: inspection of the seizure report, limitation of the lien, or release of undisputed credits — not a generic “quash everything” template.

The appropriate forum and relief depend on who issued the direction, the police case, the bank record and local jurisdiction. A generic online petition copied from another case can make the situation worse. High Court writs are a last resort for a freeze that is clearly without legal basis, not a day-one shortcut.

Use the bank's grievance system for service failures such as refusing to disclose the available reference, not acknowledging your representation, or mishandling a release communication. Escalate in order: branch manager → state nodal officer → principal nodal officer → bank’s internal ombudsman where applicable → RBI Integrated Ombudsman. If the bank rejects the complaint, gives an unsatisfactory response, or does not reply within 30 days, the Ombudsman may provide a cost-free complaint route for deficiency in service.

The Ombudsman does not replace the investigating officer or Magistrate and cannot automatically cancel a lawful police or court freeze. Frame the complaint around the regulated entity's service failure, not as a request to decide the criminal investigation. See the banking Ombudsman guide.

If your own money was taken, call 1930 promptly, file on NCRP, notify the bank and preserve the acknowledgement and transaction evidence. A freeze or lien may help preserve traceable funds, but reporting does not guarantee recovery. Follow the UPI fraud response guide and the 1930 reporting script. Related methods: AEPS fraud, debit-card fraud, UPI Autopay mandate fraud.

• paying an “unfreeze consultant” who asks for cash or crypto;
• sending identity documents to a number not independently linked to the bank or police;
• repeatedly moving funds after learning of a complaint;
• filing an RBI complaint as if it can overrule a police instruction;
• assuming the branch manager personally ordered the freeze;
• quoting an invented “layer one” rule or universal release timeline;
• using RTI as a substitute for a representation, legal remedy or bank grievance;
• publishing the complainant's personal data online;
• trying to close the frozen account or opening a mule-style replacement to “hide” the PAN.

A freeze is a hold, not a confiscation. The bank cannot keep the money as its own. If a court later directs return of a traced amount to a victim, you are entitled to a written particular of that debit. Interest on the remaining balance follows the account’s usual terms once the restriction lifts.

I4C's current public notice says it is not an investigating agency and does not lien or freeze accounts. State or Union Territory law-enforcement agencies investigate NCRP complaints, while banks may also act under their regulatory processes.

Do not assume that. The investigating agency and bank act on the facts, transaction trail, evidence and applicable law. Ask for the exact instruction affecting your account.

Ask in writing for the reference, police unit, officer and transaction particulars available for follow-up. Some complainant or investigation details may be protected, but the bank should route your grievance and provide usable information where permitted.

There is no universal statutory promise covering every cybercrime freeze. Timing depends on the investigating officer, evidence, scope of the hold and any court process. KYC freezes are often shorter once documents are accepted; police-linked debit freezes last as long as the investigation communication remains in force.

That is a fact-specific issue. Obtain the written scope and seek review from the investigating officer. Legal advice may be needed where a whole-account restriction appears disproportionate to the identified transaction.

Not automatically. The Ombudsman addresses qualifying deficiency in service by a regulated entity. It does not replace the police, Magistrate or court controlling an investigative restraint.

The RTI Act generally applies to public authorities, not every private bank as such. First use the bank grievance, investigating agency representation and appropriate legal route. RTI may be useful for non-exempt records held by a relevant public authority. The citizen RTI playbook explains the limits, including section 8(1)(h) for ongoing investigation.

Do not use another account to evade an official restriction or move disputed funds. Keep ordinary finances documented and obtain advice if the restriction disrupts essential receipts or payments. A new account with the same PAN may itself be queried.

The freeze itself is not a CIBIL event. Bounced EMIs and failed auto-debits are. Write to lenders before the bounce with the freeze SMS and ask for a short grace, rather than waiting for a default to post.

No lawful fee applies for complying with a police or court direction. A staff demand for “facilitation” is a vigilance matter, not a service charge.

• Bank freeze and fraud process overview
• Cybercrime debit freeze and lien removal
• Account freeze and unfreeze
• Bank account freeze recovery
• RBI Ombudsman complaint guide
• UPI fraud recovery steps
• 1930 financial-fraud script
• Online payment fraud response
• SIM-swap fraud recovery
• NRI account frozen: KYC / NRE / NRO
• Scam-response help centre
• RTI Wiki home

• National Cyber Crime Reporting Portal public notice on investigation and account freezes
• Ministry of Home Affairs: Bharatiya Nagarik Suraksha Sanhita, 2023, including section 106
• Ministry of Home Affairs parliamentary answer on cybercrime account-freeze SOP
• RBI Complaint Management System
• RBI Integrated Ombudsman Scheme
• National Cyber Crime Reporting Portal FAQ