What did the Rajasthan High Court decide about frozen bank accounts?

The Rajasthan High Court has laid down important safeguards governing the freezing, debit-freezing, lien marking, holding and seizure of bank accounts in cyber financial crime investigations in the State of Rajasthan.

The central principle is one of proportionality:

If the disputed cyber-fraud amount is identifiable, the ordinary course should be to place a lien or hold on that disputed amount, rather than freeze the entire bank account.

The Court expressly directed that an identifiable disputed amount should ordinarily be protected without unnecessarily preventing the account holder from operating the remaining legitimate balance.
This is particularly important where, for example, an account contains several lakh rupees but the alleged disputed transaction is only a few hundred or a few thousand rupees.

Why is this judgment important?

Cyber fraud investigations frequently involve multiple bank accounts and rapid movement of funds. A genuine cyber-fraud investigation may therefore require immediate action to prevent the suspected proceeds from being withdrawn or transferred.

However, the Court recognised that a complete bank-account freeze can have serious consequences.

A bank account is not merely a place where money is stored. It is often essential for:

• receiving salary;
• receiving business payments;
• paying employees;
• paying suppliers and creditors;
• paying taxes and statutory dues;
• meeting household expenses;
• paying rent and utilities; and
• conducting day-to-day business.

The Court therefore observed that a complete freeze can have immediate and serious civil and financial consequences and must satisfy the requirements of legality, rationality, reasonableness, non-arbitrariness and proportionality.

Can the police freeze an entire bank account because of a cyber crime complaint?

Not automatically.

The Rajasthan High Court has clarified that the mere existence of a suspected cyber-fraud transaction does not, by itself, justify an indefinite blanket debit freeze.

Before imposing or continuing a restraint, the Investigating Officer must have material demonstrating a prima facie nexus between the particular account or transaction and the offence under investigation.

The Court further held that expressions such as:

• “suspicious transaction”;
• “mule account”;
• “Layer-1 account”; or
• “cyber fraud transaction”

cannot, by themselves, constitute sufficient reasons for indefinitely immobilising an entire bank account. Such terminology may justify investigation, but it cannot replace the underlying material supporting the suspicion.

Therefore, the important question is not merely whether an account has received a suspicious transaction. The authorities must consider:

1. Is there lawful authority for the restraint?
2. Is there objective material connecting the account or transaction with the alleged offence?
3. What particular transaction and amount needs to be protected?
4. Is freezing the entire account actually necessary and proportionate?

These four requirements were specifically identified by the Court.

What happens if only a small amount is disputed?

This is one of the most significant aspects of the judgment.

The Court gave an illustrative example where an alleged cyber-fraud amount is ₹500 while the bank account contains ₹5 lakh.

According to the Court, the investigative objective would ordinarily be achieved by preserving the disputed ₹500 rather than depriving the account holder of access to the remaining ₹4,99,500.

Accordingly, where the disputed amount is identifiable, the normal approach should be:

Disputed amount → lien/hold

rather than:

Disputed amount → complete debit freeze of the entire account.

This distinction is fundamental because a lien or hold over the disputed amount preserves the subject matter of the investigation while allowing the account holder to use legitimate funds.

When can the entire bank account still be frozen?

The judgment does not say that a complete bank-account freeze is never permissible.

A wider restraint may be justified in exceptional circumstances.

The Court identified examples including situations where:

• the account appears to be a deliberately operated mule account;
• there are repeated suspicious credits and onward transfers;
• the account holder is a named accused;
• there is material showing conscious participation;
• the entire balance is reasonably suspected to be proceeds of crime;
• multiple linked transactions make segregation impracticable; or
• allowing the account to operate would demonstrably defeat the investigation.

Even in such cases, the reasons for adopting the more restrictive measure should be recorded in writing and the restraint should be periodically reviewed.

Thus, the judgment does not create an absolute right to operate every bank account during an investigation. Instead, it requires the restriction to be legally justified, evidence-based and proportionate.

What information should a police freezing communication contain?

The Rajasthan High Court has also addressed another major problem: account holders often do not know why their bank account has been frozen.

The Court directed that, subject to legitimate investigative confidentiality, communications issued by police or investigating agencies to banks should contain sufficient particulars to identify the account, transaction and nature of the restraint.

As far as legally permissible, such communication should specify:

1. Name and designation of the Investigating Officer;
2. Police station or investigating agency and contact particulars;
3. FIR/crime/NCRP/CFCFRMS reference number, wherever available;
4. Legal provision under which the action is taken;
5. Account number and bank details;
6. Transaction ID/UTR and date of transaction, wherever available;
7. Disputed amount or the basis for freezing the entire account; and
8. Whether the action constitutes a hold/lien, suspension of digital banking facilities, seizure or a request for judicial attachment.

This is an important safeguard against vague communications merely stating that an account is “under investigation”.

Can a bank convert a transaction-specific hold into a complete freeze?

The Rajasthan High Court has said that a bank should not mechanically do so.

If the investigating agency identifies a particular suspected transaction but does not require the entire account to be restricted, the bank should not automatically transform that request into an indefinite blanket debit freeze.

The Court directed that, where a communication merely identifies a suspected transaction without specifying the disputed amount, the bank should ordinarily seek clarification through its designated nodal officer rather than mechanically imposing a blanket freeze.

This principle is particularly significant for individuals and businesses whose accounts contain legitimate funds unrelated to the alleged cyber fraud.

Section 106 BNSS and freezing of bank accounts

The judgment examines Section 106 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (BNSS).

The Court noted that Section 106 substantially corresponds to the former Section 102 CrPC and empowers a police officer to seize property suspected to be connected with an offence.

Importantly, where action constitutes seizure under Section 106 BNSS, Section 106(3) requires the police officer to forthwith report the seizure to the competent Magistrate.

The Rajasthan High Court therefore made an important distinction between an investigative seizure and a judicially supervised attachment.

A bank cannot simply become a substitute for the statutory judicial process.

What does Section 107 BNSS mean for frozen bank accounts?

Section 107 BNSS deals with attachment, forfeiture or restoration of property derived or obtained, directly or indirectly, as a result of criminal activity or an offence.

The Court explained that Section 107 contemplates an application by the Investigating Officer, with the approval of the Superintendent of Police or Commissioner of Police, before the competent Court or Magistrate.

The Magistrate is required to apply judicial mind and ordinarily issue notice and provide an opportunity of hearing before attachment, although an interim ex parte order can be passed in an emergent case where notice could defeat the object of attachment.

The Court therefore made a crucial distinction:

Seizure under Section 106 BNSS ≠ Attachment under Section 107 BNSS.

The investigating agency cannot simply use terms such as “freeze”, “debit freeze”, “lien” or “seizure” to achieve what is, in substance, an indefinite attachment without following the statutory procedure.

What if there is no FIR against the account holder?

The absence of an FIR against the account holder does not automatically make every investigative action illegal.

The Court recognised the reality of cyber-fraud money trails: an innocent intermediary account may sometimes receive suspected proceeds without the account holder’s knowledge.

However, the absence of an FIR also cannot become a justification for an indefinite freeze.

There must be objective material establishing a reasonable and proximate nexus between the account or transaction and the alleged offence, and the extent and duration of the restraint must be reasonably necessary.

The Court specifically held that an unverified or vague communication cannot be the sole basis for indefinitely freezing the entire bank account where there is no identifiable investigation, complaint, transaction or material showing a prima facie connection with an offence.

What if the cyber crime investigation is being conducted in another State?

This is another important protection for account holders in Rajasthan.

The Court recognised that cyber financial crimes frequently involve inter-State investigations. A Rajasthan resident may therefore have his account frozen because of an investigation being conducted by police in another State.

The Court directed that, where the restraint is imposed solely pursuant to an investigation outside Rajasthan, the Rajasthan authorities and bank should communicate with the requisitioning agency and obtain the necessary clarification.

The citizen should not ordinarily be required to travel to another State merely to discover why his bank account has been frozen.

In simple terms:

Inter-State cyber investigation is permissible; unnecessary inter-State hardship to an innocent account holder is not.

What is the CFCFRMS grievance mechanism?

The judgment gives considerable importance to the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS) and the Standard Operating Procedure dated 2 January 2026.

The Court noted that the SOP establishes a structured mechanism dealing with matters including:

• putting amounts on hold;
• suspension of digital banking services;
• seizure of accounts;
• restoration of money; and
• grievance redressal.

Under Clause 10.1 of the SOP, an affected account holder can approach the bank. The bank is required to undertake the prescribed customer due diligence and, where justified, submit the grievance through the CFCFRMS Grievance Redressal Module.

The judgment records that the SOP contemplates submission by the bank at the earliest and not beyond seven calendar days from the grievance, followed by verification by the concerned Investigating Officer/police officer.

The High Court directed the respondents to scrupulously follow the SOP and held that prescribed procedures and time limits are binding unless a competent Court directs otherwise.

What happens when the investigation is over?

A bank account should not remain frozen simply because the original cyber crime investigation once existed.

The Court specifically addressed cases where:

• investigation has concluded;
• a closure report has been filed;
• the account holder has been exonerated; or
• the Investigating Officer concludes that continuation of the restraint is no longer necessary.

In such circumstances, the Investigating Officer should communicate the decision to the bank forthwith and update the relevant CFCFRMS/NCRP record wherever applicable. The bank should then remove the police-directed restraint expeditiously, subject to any independent lawful restriction unrelated to the concluded investigation.

The judgment therefore rejects the idea that a freeze can continue indefinitely merely because an investigation once existed.

What are the 14 major principles laid down by the Rajasthan High Court?

The Court has laid down a comprehensive framework for bank-account freezing in cyber financial crime investigations in Rajasthan.

The key principles include:

1. No indefinite blanket freeze based on vague communication

A bank account cannot be subjected to an indefinite blanket debit freeze merely because of a vague, unverified or cryptic communication.

2. Prima facie nexus is necessary

The Investigating Officer must identify material showing a prima facie connection between the particular account or transaction and the alleged offence.

3. Identifiable amount should ordinarily be protected by lien/hold

Where the disputed amount is identifiable, the ordinary course is to preserve that amount rather than freeze the entire account.

4. Wider freeze requires reasons

If the entire account needs to be frozen, specific reasons must be recorded.

5. Section 106 BNSS must be followed

Where the action constitutes seizure, the statutory requirement of reporting the seizure to the competent Magistrate must be complied with.

6. Section 107 BNSS applies to attachment

Where the authorities seek attachment of proceeds of crime, the procedure under Section 107 BNSS must be followed.

7. Freeze cannot continue indefinitely

A continuing restraint must be periodically reviewed.

8. No connection means withdrawal of restraint

If investigation shows that the account holder has no connection with the offence and the disputed amount is not required, the restraint should be withdrawn forthwith.

9. Conclusion of investigation requires prompt defreezing

Closure, exoneration or cessation of investigative necessity should lead to appropriate defreezing instructions without avoidable delay.

10. Communications must contain relevant particulars

The bank should receive sufficient information regarding the case, account, transaction, amount and legal basis.

11. Banks should not mechanically impose blanket freezes

A transaction-specific request should not automatically become a complete account freeze.

12. Independent bank restrictions remain separate

KYC, AML, fraud-risk and other regulatory restrictions imposed independently by a bank remain governed by applicable law and RBI directions.

13. Grievances cannot be left unattended

The Clause 10 CFCFRMS grievance mechanism must be followed, including where the underlying cyber complaint originates in another State.

14. Electronic verification should ordinarily be preferred

Where practicable, verification of an account holder’s grievance should be undertaken through electronic means or video conferencing. Personal appearance should not ordinarily be insisted upon unless genuinely necessary and reasons are recorded.

What relief can a person seek if his bank account is frozen?

A person whose bank account has been frozen in connection with a cyber crime investigation should first determine what kind of restraint has actually been imposed.

It is important to distinguish between:

• transaction-specific hold;
• lien on a specified amount;
• debit freeze;
• complete account freeze;
• seizure under Section 106 BNSS;
• attachment under Section 107 BNSS; and
• an independent bank restriction based on KYC, AML or fraud-risk considerations.

The Rajasthan High Court has specifically directed authorities and banks to maintain this distinction.

Depending upon the facts, an affected account holder may seek:

1. identification of the FIR/NCRP/CFCFRMS reference;
2. details of the disputed transaction and UTR;
3. identification of the disputed amount;
4. conversion of a blanket freeze into a limited lien/hold;
5. removal of the debit freeze;
6. restoration of operation of the undisputed balance;
7. processing of the grievance under the CFCFRMS mechanism;
8. appropriate communication from the Investigating Officer;
9. compliance with Section 106 BNSS where seizure is alleged; or
10. judicial relief where the restraint is arbitrary, disproportionate or otherwise contrary to law.

The appropriate remedy will depend upon the nature of the freeze, the investigating agency involved, the transaction trail and the documents available.

What should you do if your bank account is frozen because of a cyber fraud?

If your bank account has suddenly become inoperative, do not assume that the only option is to wait for the police investigation to finish.

A practical first step is to obtain, in writing, the nature and basis of the restriction.

You should try to identify:

• the bank’s freeze/lien communication;
• the name of the investigating agency;
• the Investigating Officer;
• FIR or crime number;
• NCRP/CFCFRMS reference;
• transaction ID/UTR;
• date of the disputed transaction;
• amount allegedly involved;
• whether the restriction concerns a particular amount or the entire account;
• whether the action is pursuant to Section 106 BNSS, Section 107 BNSS, or another legal basis; and
• whether the restriction has been imposed independently by the bank under KYC/AML/fraud-risk requirements.

The Rajasthan High Court judgment makes clear that these distinctions matter.

Where the disputed amount is identifiable and there is no material justifying a wider freeze, the Court has directed that the account should ordinarily be allowed to operate subject to a lien/hold over the disputed amount.

Can a frozen bank account be challenged before the Rajasthan High Court?

Yes, in an appropriate case, constitutional/judicial remedies may be available.

The present judgment itself arose from writ petitions filed by individuals, proprietorship concerns, firms, companies and other account holders challenging restrictions imposed on their bank accounts in cyber financial fraud investigations.

However, whether a particular person should approach the High Court, first pursue the CFCFRMS grievance mechanism, approach the concerned investigating agency/bank, or seek another remedy depends upon the facts and the legal nature of the restraint.

A properly prepared challenge should ordinarily address the source of power, factual nexus, disputed amount, proportionality, duration of restraint, statutory compliance and procedural safeguards.

Rajasthan High Court’s message to banks and investigating agencies

The judgment strikes a careful balance.

The Court did not hold that cyber crime investigations should be weakened or that banks must ignore lawful directions.

On the contrary, the Court recognised that cyber financial crime requires rapid intervention because money can move through multiple accounts and disappear quickly. Immediate preservation of suspected proceeds can therefore be legitimate and necessary.

What the Court rejected is the transformation of an urgent investigative measure into an indefinite and disproportionate deprivation without subsequent application of mind and statutory compliance.

The judgment therefore seeks to establish a balanced framework:

Protect the victim. Preserve the suspected proceeds. But do not punish an innocent account holder before guilt is established.

Rajasthan Police and RBI directed to implement safeguards

The judgment goes beyond the individual writ petitions.

The Rajasthan High Court directed the Director General of Police, Rajasthan and the competent Cyber Crime authorities to issue a comprehensive General Circular/Standing Order incorporating the principles laid down by the Court. The circular is to be circulated among police and cyber-crime officers dealing with NCRP/CFCFRMS complaints and cyber financial investigations.

The Court also directed the designation of a senior State-level officer to monitor complaints concerning prolonged or disproportionate bank-account freezes.

The monitoring mechanism is expected to maintain appropriate data concerning:

• accounts frozen;
• amounts placed on hold;
• grievances received;
• grievances resolved; and
• cases where complete freezes were converted into transaction-specific liens.

The Court further directed the Reserve Bank of India to issue an appropriate circular/advisory requiring banks to conduct training and sensitisation of officials dealing with cyber fraud, account freezes, lien marking and CFCFRMS/NCRP matters.

Key takeaway for bank account holders

The Rajasthan High Court’s judgment establishes an important principle for cyber-fraud-related bank account freezes:

A suspected cyber-fraud transaction does not automatically justify freezing the entire bank account indefinitely.

Where the disputed amount is identifiable, the ordinary approach should be to preserve that amount through a lien or hold, while allowing the account holder to operate the remaining undisputed balance, unless specific material justifies a wider restraint.

The restraint must have lawful authority, a prima facie factual nexus with the alleged offence, a rational connection to the amount or property sought to be protected, and must remain proportionate to the investigative necessity.

The Court has also made these safeguards applicable as general directions for similarly situated cyber financial crime cases within Rajasthan, subject to any contrary order of a competent Court in an individual case.

Frequently Asked Questions

Can the police freeze my entire bank account for a ₹500 cyber fraud transaction?

Not ordinarily merely because a ₹500 transaction is under investigation. If the disputed amount is identifiable and there is no material justifying a wider restraint, the Rajasthan High Court has said that the ordinary course should be to preserve the disputed amount through a lien or hold rather than freeze the entire account.

Can my bank account be frozen even if I am not an accused?

The absence of an FIR against you does not automatically prohibit preliminary investigation or preservation of suspected funds. However, there must be objective material establishing a reasonable and proximate nexus between your account/transaction and the alleged offence, and the restraint must be necessary and proportionate.

Can a bank freeze my entire account merely on a police letter?

A vague or cryptic communication cannot justify an indefinite blanket debit freeze. Police communications should, as far as legally permissible, identify the investigating officer, case/reference, legal provision, transaction, disputed amount and nature of the proposed restraint.

What is the difference between a lien and a debit freeze?

A lien/hold can be limited to the disputed amount, allowing the account holder to operate the remaining legitimate balance. A debit freeze can prevent operation of the account more broadly. The Rajasthan High Court has indicated that, where the disputed amount is identifiable, the former should ordinarily be preferred unless wider restraint is justified.

What if the investigation is completed but my account is still frozen?

If the investigation has concluded, a closure report has been filed, you have been exonerated, or the Investigating Officer no longer considers the account/funds necessary, the necessary defreezing communication should be issued to the bank without avoidable delay.

What if the cyber complaint is from another State?

The Rajasthan High Court has directed Rajasthan authorities and banks to communicate with the requisitioning agency and obtain clarification rather than requiring the citizen to travel to another State merely to find out why the account has been frozen.

Is there a remedy if the bank refuses to defreeze my account?

The appropriate remedy depends upon the nature and legal basis of the restraint. The CFCFRMS grievance mechanism may be relevant, and judicial remedies may also be available in appropriate cases. The Rajasthan High Court has specifically directed banks and investigating agencies to follow the prescribed grievance mechanism and has provided safeguards against disproportionate or indefinite restraints. Civil Writ Petition may be filed with the help of High Court Lawyer in Jaipur

Conclusion

The Rajasthan High Court’s judgment dated 20 August 2026 represents an important development in the law concerning cyber crime bank account freezing in Rajasthan.

The Court has recognised the urgent need to combat cyber financial fraud while simultaneously protecting innocent citizens, businesses and firms from disproportionate financial restrictions.

The emerging rule is clear: investigation may be swift, but financial restraint must remain lawful, evidence-based, proportionate and subject to review.

Where a specific amount is allegedly connected with cyber fraud, the law does not ordinarily require the entire financial life of an account holder to be paralysed. A targeted lien or hold may adequately protect the investigation while allowing legitimate funds to remain accessible.

For persons facing a bank account freeze, debit freeze, lien or hold arising from a cyber crime complaint, the nature of the restraint, the disputed transaction, the statutory authority, the CFCFRMS/SOP procedure and the proportionality of the restriction should all be examined carefully and a writ then may be filed in Jaipur High Court with the help of High Court Advocate in Jaipur, for unfreezing of the bank account located in Jaipur or Rajasthan

By Bhuvnesh Kumar Goyal
High Court Advocate in Jaipur

Read the complete order here