Can a cyber cell freeze my entire bank account for one UPI credit?

The police power under Section 106 BNSS (formerly Section 102 CrPC) extends to the account as 'property', but the Kerala High Court has repeatedly held that the freeze should be confined to the disputed amount. In Dr. Sajeer v. Reserve Bank of India, WP(C) No. 12960 of 2023, the Court directed banks to limit freezes to the amount mentioned in the police requisition, leaving the rest of the account operable. If your whole account is blocked for a small credit, you can seek a lien-limited freeze through a representation, a Magistrate application or a writ petition.

How do I find out which police station froze my bank account?

Ask your branch, in writing, for the freezing authority's name, the requisition or reference number, the date and the amount covered. The bank acts only on a written requisition or an NCRP/CFCFRMS instruction, so this record exists. Most freezes trace back to a complaint on cybercrime.gov.in or the 1930 helpline, and the acknowledgment number in the bank's records identifies the investigating cyber cell, which is often in another State.

How long does a cyber cell freeze on a bank account last?

Section 106 BNSS sets no expiry date, which is why freezes drag on unless the account holder acts. The seizure must be reported forthwith to the jurisdictional Magistrate under Section 106(3), and the account holder can apply to that Magistrate for release under Section 503 BNSS (formerly Section 457 CrPC). In Dr. Sajeer, the Kerala High Court also directed police to tell banks within a fixed period whether continued freezing was necessary, refusing to let freezes run indefinitely by default.

Can I file a writ petition in the Kerala High Court if the cyber cell that froze my account is in another State?

Yes, in most cases. Under Article 226(2) of the Constitution, a High Court can act where the cause of action arises wholly or in part within its territory, and your account and branch being in Kerala normally supplies that part of the cause of action. The Kerala High Court has entertained a long line of such petitions and has typically ordered de-freezing of the account subject to a lien over the disputed amount.

What documents do I need to get a frozen account released?

The core set is: the bank's written confirmation of the freeze with the requisition reference, your account statement highlighting the disputed credit, proof of the underlying transaction (invoice, delivery record, chat or listing for a sale), your KYC documents, and copies of any correspondence with the investigating officer. For a Magistrate application or writ petition, an affidavit explaining the transaction and an undertaking to keep the disputed amount available are usually added.

Bank Account Frozen by a Cyber Cell: The Complete Kerala Guide

Q: Will I be arrested because fraud money reached my account?

Receiving a traced credit does not by itself make you an offender. Cheating under Section 318(4) BNS (formerly Section 420 IPC) and the IT Act offences all require dishonest intention or knowledge, which an innocent merchant or seller lacks. Respond to any police notice, supply your invoices and transaction records, and take legal advice promptly if you are summoned; ignoring the investigation is what converts an innocent recipient into a suspect on paper.

If a cyber cell has frozen your bank account in Kerala, the freeze is almost always an investigative step under Section 106 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (formerly Section 102 CrPC), triggered by a cyber fraud complaint filed somewhere in India — not a finding of guilt against you. It can be challenged, and there are three escalating remedies: a written representation to the investigating officer, an application to the jurisdictional Magistrate under Section 503 BNSS (formerly Section 457 CrPC), and a writ petition before the High Court of Kerala under Article 226. The Kerala High Court has repeatedly held that freezing should be confined to the disputed amount, so the practical goal in most cases is a lien over that amount with the rest of the account released. This guide walks through why freezes happen, what to do in the first week, and how each remedy works.

Why has a cyber cell frozen my bank account?

Almost every freeze of this kind begins with a complaint on the National Cybercrime Reporting Portal (NCRP) or the 1930 cyber fraud helpline. A victim anywhere in India reports that money was taken from them — a fake trading app, a UPI scam, a phishing link.

The complaint enters the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), run by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs. The system traces the money hop by hop: from the victim’s account to a first-layer account, then onward as the fraudster splits and moves the funds. The Government has described this reporting chain and its fund-blocking function in official releases.

Every account the money touches — layer one, layer two, sometimes layer five — gets flagged. The investigating cyber cell, often in a different State, then sends your bank a requisition to freeze the account. The bank complies, usually without notice to you, and you discover the freeze when a payment bounces or the app shows a hold.

The key point: the freezing police station acted on a money trail, not on any assessment of you. Your account may be in the chain only because a stranger paid you with tainted money for a perfectly genuine sale.

What law allows the police to freeze a bank account?

The power comes from Section 106 BNSS (formerly Section 102 CrPC), which lets any police officer seize property “alleged or suspected to have been stolen” or found in circumstances creating suspicion of an offence. The Supreme Court settled in State of Maharashtra v. Tapas D. Neogy (1999) that a bank account is “property” for this purpose, so a freeze instruction to the bank is a valid mode of seizure — provided the account has a direct link to the offence under investigation.

Two statutory safeguards matter to you:

Report to the Magistrate. Section 106(3) BNSS requires the officer to report the seizure “forthwith” to the Magistrate having jurisdiction. A freeze that was never reported is procedurally vulnerable.
Attachment needs a court order. Where the police claim the money is proceeds of crime and want it attached or forfeited, Section 107 BNSS requires an application to the Magistrate, a 14-day show-cause notice to the account holder, and a judicial order. In Headstar Global Pvt. Ltd. v. State of Kerala, Crl.M.C. No. 3740 of 2025 (2025:KER:39285, 17 June 2025), the Kerala High Court quashed a debit freeze, holding that police cannot unilaterally freeze a third-party account on a proceeds-of-crime theory; they must follow the Section 107 route through the Magistrate.

The distinction is practical, not academic. If the police letter to your bank reads like an attachment of proceeds of crime rather than a seizure of suspect property, Headstar Global gives you a direct ground of challenge.

Banks can also freeze suspected money-mule accounts on their own under their anti-money-laundering obligations, without any police requisition. For those bank-initiated freezes, the Kerala High Court in Ajith P.R. v. Union of India, WP(C) No. 48300 of 2025 (judgment dated 14 July 2026), laid down guidelines: the bank must notify the customer by SMS or email, give written reasons by registered post within three working days, allow one month for an explanation, and either unfreeze or lodge a complaint with the Station House Officer for registration of an FIR. If your freeze came from the bank rather than the police, that timeline is your first lever.

What is the difference between a full freeze, a debit freeze and a lien?

The words on the bank’s noting decide how much of your money is actually blocked, so get the exact term in writing.

Restriction	What it means	Typical source
Full freeze	No debits or credits; account is dead	Broad police requisition, older bank practice
Debit freeze	Credits come in, nothing goes out	Standard cyber cell requisition wording
Lien / hold on a specific amount	Only the disputed sum is blocked; the balance operates normally	Court-directed practice; increasingly the Kerala norm

The Kerala High Court has pushed practice firmly toward the third option. In Dr. Sajeer v. Reserve Bank of India, WP(C) No. 12960 of 2023 (orders reported on IndianKanoon; final judgment reported at 2024 (1) KLT 826), Justice Devan Ramachandran asked why traders’ entire accounts should stay frozen when the police requisition itself named the exact suspect credit, and directed banks to confine the freeze to the amounts mentioned in the requisitions, with the police to confirm within a fixed period whether continuation was needed.

That principle now runs through Kerala practice. As recently as Kunnamangalam Co-operative Rural Bank Ltd. v. Inspector of Police (2026:KER:15537, 2 March 2026), the Court held that police requisitions must not paralyse banking operations and confined the lien to the specific fraud-linked amount, leaving the co-operative bank’s pooled mirror account otherwise operational.

Why do innocent people end up with frozen accounts?

Because the money trail is mechanical. CFCFRMS flags every account the money passes through, and the system cannot distinguish a mule account from a genuine merchant. In practice, the people caught most often are:

Small merchants and shopkeepers paid by UPI for real goods — the buyer paid with defrauded money.
Secondhand sellers on OLX, Facebook Marketplace or Instagram who received payment from a stranger.
Salary and family accounts that received a transfer traceable, several hops back, to a fraud.
Businesses with high UPI volume, where one tainted credit of a few thousand rupees freezes an account holding lakhs.

In practice, I see freezes where the disputed credit is under ₹5,000 and the blocked balance is a hundred times that. That mismatch — a small tainted credit paralysing an entire account — is precisely the disproportionality the Kerala High Court has been correcting since Dr. Sajeer. Being flagged does not make you an accused; most account holders in the chain are never named in the FIR at all.

What should I do first after discovering the freeze?

Resist the urge to argue at the branch counter. Work through these steps in the first week:

Get the freeze details in writing from the branch. Ask for: the name and address of the freezing authority, the requisition or reference number, the date of the freeze, the amount covered, and whether it is a full freeze, debit freeze or lien. Banks sometimes resist; a short written request citing the account holder’s right to know why their property is restrained usually works.
Note the NCRP acknowledgment number. The bank’s instruction typically quotes an NCRP/CFCFRMS acknowledgment number. That number identifies the underlying complaint and the investigating cyber cell.
Check whether an FIR exists. If the requisition names an FIR or Crime Number, obtain a copy — FIRs are public documents available from the police station or the State police website.
Preserve your side of the transaction. Invoices, delivery proof, order screenshots, chat records, the buyer’s number — everything that shows the credit was genuine consideration.
Do not ignore police contact. If the investigating officer calls or issues a notice under Section 179 BNSS (formerly Section 160 CrPC) or Section 94 BNSS (formerly Section 91 CrPC), respond, on record. Cooperation, documented in writing, is later your best evidence of bona fides.
Do not “test” the account with repeated transfers, and do not route business funds through friends’ accounts in the meantime — both look bad in an investigation file.

If your loss runs the other way — money was taken from you — the reporting steps are different; see how to file a UPI fraud complaint and recover funds.

How do I get the investigating officer to lift the freeze?

The first remedy is a written representation to the investigating officer of the cyber cell that issued the requisition — often in another State. It costs little, and even when it fails, it builds the record that every later forum will read.

A representation that actually gets acted on has five parts:

Identification of the freeze: account number, bank, requisition reference, NCRP acknowledgment number, date.
The transaction story: who paid you, why, and when — told in three or four sentences, with the credit matched to an invoice or sale.
Documents: account statement highlighting the credit, invoice or delivery proof, KYC, GST registration if a business.
The specific request: restrict the freeze to the disputed amount (name the figure) and release the balance; or lift the freeze entirely if the credit is explained.
An undertaking to keep the disputed amount available and to cooperate with the investigation.

Send it by email and registered post to the investigating officer, with a copy to the district cyber cell and to your bank’s nodal officer. Ask the bank, in writing, to seek the police’s confirmation on whether continued freezing is required — the Dr. Sajeer directions expect exactly that dialogue between bank and police.

Give this route two to four weeks. If the officer is unresponsive — common with out-of-state cyber cells handling thousands of flagged accounts — escalate rather than wait.

Can a Magistrate order release of the frozen amount?

Yes. This is the standard statutory remedy, and it flows from the seizure-reporting requirement.

Section 503 BNSS (formerly Section 457 CrPC) applies where property seized by police is not produced before a court during inquiry or trial — the exact position of a frozen account. The Magistrate to whom the seizure was reported may order delivery of the property “to the person entitled to the possession thereof”, on conditions.
Section 497 BNSS (formerly Section 451 CrPC) applies once the property is before a court during inquiry or trial, and allows interim custody orders on similar logic.

The application goes to the Magistrate having jurisdiction over the investigating police station — which, for an out-of-state freeze, means a court in that State, not in Kerala. That is the route’s main practical burden: engaging counsel where the FIR is registered, filing through them, and attending if required (courts increasingly permit appearance through counsel alone for such applications).

A Section 503 application typically annexes the same documents as the representation, plus an affidavit of ownership of the account and the funds. Relief commonly comes with conditions: a bond, an undertaking to produce the amount if directed, or continuation of a lien over the disputed sum.

Use this route when the investigating State is accessible and the FIR is identifiable. When it is not — or when the freeze itself is procedurally bad — Kerala account holders have a better forum at home.

When should I move the Kerala High Court under Article 226?

This is the remedy specific to Kerala that most general guides miss. The High Court of Kerala, sitting at Ernakulam, has developed a consistent body of orders on cyber-cell freezes, and for many account holders it is the fastest effective forum.

Jurisdiction. Under Article 226(2) of the Constitution, a High Court may exercise writ jurisdiction where the cause of action arises “wholly or in part” within its territory, even if the authority being challenged sits outside it. Your bank account is maintained at a branch in Kerala; the freeze operates on you in Kerala; the bank implementing it is in Kerala. That part of the cause of action ordinarily grounds the Kerala High Court’s jurisdiction even where the freezing cyber cell is in Gujarat, Rajasthan or Delhi. The bank and the out-of-state investigating officer are both made respondents.

Grounds. The petitions that succeed usually plead one or more of:

Disproportionality — the entire account is frozen though the requisition names a small specific credit (Dr. Sajeer).
No Section 106(3) report — the seizure was never reported forthwith to the jurisdictional Magistrate.
Wrong provision — the freeze is really an attachment of alleged proceeds of crime, which required the Section 107 BNSS procedure before a Magistrate (Headstar Global).
Unresponsive investigation — representations acknowledged by no one, no FIR details forthcoming, freeze continuing indefinitely without review.

The relief pattern. The Kerala High Court’s characteristic order is not a simple quashing. It de-freezes the account subject to a lien over the disputed amount — the investigation’s interest in the traced money is preserved, and the account holder’s business survives. Dr. Sajeer set the template; Kunnamangalam Co-operative Rural Bank (2026) applied it down to the rupee, restricting the lien to the documented fraud-linked sum. Where the freeze is procedurally unsustainable, as in Headstar Global, the Court lifts it entirely and leaves the police to the Section 107 route.

A note on form: Headstar Global was a Crl.M.C. under Section 528 BNSS (formerly Section 482 CrPC, the High Court’s inherent powers), while Dr. Sajeer and the co-operative bank line were writ petitions under Article 226. Which vehicle fits depends on whether the challenge targets the freeze order and Magistrate proceedings (Crl.M.C.) or the ongoing administrative restraint on the account (writ). An advocate can assess which applies to a given freeze. For what filing a writ actually involves — pleadings, interim orders, timelines — see how a writ petition works in the Kerala High Court.

How long does each route take, and what should I expect?

Timelines vary with the court’s board and the police response, but the realistic ranges in current practice are:

Route	Realistic timeline	Typical outcome
Representation to investigating officer	2–6 weeks, often no response	Lien-limiting or release if the cell is responsive
Section 503 BNSS application (out-of-state Magistrate)	1–3 months including engagement of local counsel	Conditional release; bond or undertaking
Article 226 writ / Crl.M.C., Kerala High Court	Admission and interim orders within days to weeks; disposal commonly 1–3 months	De-freeze with lien over disputed amount

Three expectations worth setting honestly. First, the disputed amount itself usually stays blocked until the investigation or trial resolves — courts protect the victim’s traceable money. Second, no forum will move without your documents; the account statement and transaction proof do more work than any legal argument. Third, if a second complaint flags the same account later, the cycle can restart — which is why the prevention practices below matter.

What documents should I have ready?

One set, assembled once, serves all three routes:

Bank’s written confirmation of the freeze, with requisition reference and NCRP acknowledgment number.
Account statement for the relevant period, disputed credit highlighted.
Proof of the underlying transaction: invoice, bill, delivery record, courier receipt, marketplace listing, chat with the payer.
KYC documents for the account; GST registration and business proof if applicable.
Copy of the FIR, if identifiable.
All correspondence with the investigating officer and the bank, with proof of dispatch.
A short sworn statement of the transaction story — drafted once, reused in the representation, the Section 503 application and the writ affidavit.

Will I be arrested because fraud money reached my account?

An innocent recipient is rarely arrested, and the law is on your side on principle. Cheating under Section 318(4) BNS (formerly Section 420 IPC) requires dishonest inducement; the Information Technology Act, 2000 offences of identity theft (Section 66C) and cheating by personation using a computer resource (Section 66D) target the fraudster, not the merchant who was paid. What creates risk is conduct after the freeze: ignoring notices, giving inconsistent accounts, or letting your account be used again. A working overview of the IT Act offences is at IT Act offences explained, and the broader defence-side practice is described at cyber crime practice.

If you knowingly rented out your account or passed on funds for a commission, the analysis changes entirely — that is money-mule conduct, and it is prosecuted. Take legal advice promptly before responding to any notice in that situation.

How can businesses receiving UPI payments reduce the risk?

No practice eliminates the risk of a tainted credit, but these reduce both the odds and the damage:

Separate accounts. Keep UPI collections in a dedicated current account, distinct from the account holding working capital and salary payments. A freeze then stops one stream, not the business.
Invoice everything. A credit you can match to a numbered invoice within minutes is a credit you can get released. Cash-style anonymous UPI receipts are the hardest to defend.
Know your buyer on high-value sales. For secondhand sales and large orders from strangers, keep the chat, the listing and the buyer’s number.
Act inside the bank’s window. After Ajith P.R., a bank freezing on its own must give you written reasons within three working days and a month to explain. Answer within that month, with documents — silence converts a reviewable freeze into an FIR.
Sweep balances. Regular transfers to a non-collection account limit how much a future freeze can trap.
Report your own losses fast. If your business is ever the victim, report on cybercrime.gov.in or 1930 immediately — the same CFCFRMS chain that froze your account is what recovers money when you are on the other side of it.