Bank Account Frozen After Filing Cyber Complaint Against Illegal Loan App — What You Can Do

One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.

Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.

Rohan Gupta, a salaried professional based in Pune, first encountered the problem in early October 2025. He'd downloaded a short-term lending application somewhat carelessly, borrowed a small amount, repaid it fully and on time within the same week. He assumed that was the end of it. It wasn't.

Over the following fortnight, the app's agents began transferring small sums directly into his Kotak Mahindra Bank savings account, each transfer accompanied by an auto-generated loan agreement he had never consented to. When Rohan eventually used part of those funds, the harassment began — threatening calls at odd hours, messages to his family contacts, social media defamation. Alarmed, he filed a detailed cyber crime complaint with the National Cyber Crime Reporting Portal on 18 October 2025, attaching screenshots, call recordings, and bank statements.

Deeply frustrating result. His bank account, linked to a branch in Chandigarh where he'd originally opened it as a student, was frozen by the Chandigarh cyber cell — even though he was living in Pune. Attempts to reach the designated station through calls and WhatsApp went unanswered for weeks. He'd tried approaching a local general practitioner advocate in Pune, but that effort produced no traction; the advocate was simply unfamiliar with the cross-jurisdictional freezing mechanism and multi-state cyber complaint process.

When Rohan approached Advocate Sudhir Rao, the matter was addressed through a structured legal strategy: a formal representation to the Chandigarh Police Superintendent under Section 173(4) BNSS, a simultaneous application to the relevant Magistrate for de-freezing on grounds that the account holder was the complainant (not the accused), and a notice to the bank. The account was operational again within a matter of weeks, and the predatory loan app's operators came under formal scrutiny.

Advice in Such Cases

Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.

Don't ignore the freeze order. It's a legal event, not a bank glitch. Get the freezing order number and the name of the police station that initiated it — your bank's nodal officer is required to provide this under RBI guidelines. And here's the thing: most people waste two or three weeks assuming it'll sort itself out. It won't.

Preserve every digital record immediately. Screenshots of the loan app, all transaction SMS alerts, WhatsApp messages from recovery agents, call logs, and any emails from the app company must be preserved in original format. Courts and police both require primary digital evidence in cyber matters. Don't transfer, edit, or screenshot-of-screenshot anything.

Engage an advocate with domain-specific experience. Cyber crime cases involving cross-state account freezing, illegal loan apps, and harassment under IT laws require procedural precision that a general practice advocate may not be fully familiar with. The choice of forum, the framing of the application for de-freezing, and the approach to the cyber cell all differ significantly from routine criminal matters. Frankly, this isn't the area to economise on legal counsel.

Applicable Sections of Law

Several provisions apply when a person is victimised by an illegal loan app that also results in wrongful account freezing:

• Section 318 BNS — Cheating and dishonestly inducing delivery of property. Applies to operators who disburse unsolicited loans to create a fraudulent liability.
• Section 351 BNS — Criminal intimidation. Applies to recovery agents who threaten borrowers or their family members.
• Section 66C and 66D of the Information Technology Act, 2000 — Identity theft and cheating by personation using computer resources, directly applicable to loan apps that create unauthorised loan agreements using stored personal data.
• Section 173(4) BNSS — Allows a complainant to approach the Superintendent of Police if the local police are unresponsive, triggering a mandatory supervisory inquiry.

Punishment and Penalties

• Section 318 BNS (Cheating): Imprisonment up to 3 years, or fine, or both. Where the cheating involves inducing delivery of property, imprisonment may extend to 7 years with fine.
• Section 351 BNS (Criminal Intimidation): Imprisonment up to 2 years, or fine, or both; up to 7 years if the threat is of death or grievous hurt.
• Section 66D IT Act: Imprisonment up to 3 years and fine up to Rs. 1,00,000.
• Nature of offences: Section 318 BNS is cognizable and non-bailable in its aggravated form. Section 351 BNS is cognizable. IT Act offences are cognizable and non-bailable.
• These offences are generally non-compoundable without court permission.

Jurisdiction — Where to File the Case

Jurisdiction in cyber matters is deliberately broad. Under Section 175 BNSS read with the IT Act, a complaint may be filed at the cyber crime police station of the city where the victim resides, where the fraud occurred, or where the offending server is located. For account freezing specifically, the court having jurisdiction is the Magistrate's court in the city of the police station that issued the freezing instruction. In Rohan's case, that meant Chandigarh. Now, before you act — the RBI Ombudsman also has jurisdiction over grievances related to wrongful account freezing by banks. Getting jurisdiction right is critical. A complaint filed in the wrong city loses time and can be dismissed on technical grounds, and I've seen that happen more times than I'd like to admit.

What if Police Refuse to File FIR?

Cyber cells in India are often overwhelmed. Unresponsiveness is common. Here's what you can do if the police refuse or simply don't act:

• File a written complaint with the Superintendent of Police under Section 173(4) BNSS, citing the specific dates on which your earlier complaints were ignored.
• File a private complaint before the Judicial Magistrate of First Class under Section 175(3) BNSS — the Magistrate can then direct the police to register an FIR and investigate.
• Approach the respective High Court by way of a writ petition under Article 226 of the Constitution if all other routes fail — courts have consistently directed police action in cyber fraud matters, as affirmed in Lalita Kumari v. Government of UP, 2014 (Supreme Court).
• File a complaint with the Cyber Crime Portal (cybercrime.gov.in) if not already done, and escalate by emailing the state nodal officer with your complaint reference number.

Rights of the Accused

And here's the thing — this section matters even if you are the complainant, because in some account-freezing situations, a person may find themselves being treated as a suspect rather than a victim.

• Right against self-incrimination under Article 20(3) of the Constitution — you cannot be compelled to be a witness against yourself.
• Right to legal representation under Article 22(1) — you are entitled to consult and be defended by an advocate of your choice at every stage.
• Right to be produced before a Magistrate within 24 hours of arrest under Article 22(2) and Section 58 BNSS.
• Right to a copy of the FIR free of cost under Section 173(2) BNSS.
• Right to know grounds of arrest under Article 22(1) — police must communicate this clearly and in a language the person understands.

Bail Provisions

If you're arrested in connection with a cyber loan app matter — whether as an operator or as a mistakenly implicated victim — bail provisions under BNSS apply. Don't wait until arrest to think about this:

• Most offences under Section 318 and 351 BNS in this context are bailable in their basic form, meaning bail can be claimed as of right from the police station itself.
• For non-bailable charges under the IT Act, regular bail under Section 480 BNSS can be sought before the Magistrate.
• Anticipatory bail under Section 482 BNSS is advisable if you have reason to believe arrest is imminent — file it before the Sessions Court.
• Typical bail conditions include surrender of passport, periodic appearance at the police station, and a surety bond.
• Bail strategy should be planned before arrest, not after. That's why early consultation with a domain-experienced advocate matters.

Quashing of FIR / Case

Where an FIR has been lodged against a person who is actually the victim — a situation not uncommon in loan app disputes where operators file counter-complaints — quashing becomes a viable remedy.

• The High Court exercises inherent powers under Section 528 BNSS to quash an FIR.
• Grounds include: no prima facie cognizable offence disclosed, abuse of process of court, FIR filed as a counter-blast to the genuine complaint, or the offence being compoundable and parties having settled.
• The Supreme Court's guidelines in State of Haryana v. Bhajan Lal, 1992 remain the controlling standard for when quashing is appropriate.
• Quashing is typically pursued when continuing with the case would cause manifest injustice and the initial FIR does not disclose a genuine offence.

If You Are the Victim

Act fast. Every day of delay hurts your case.

• File a complaint immediately at cybercrime.gov.in and note the complaint reference number — this timestamp protects your legal standing.
• Write to your bank's nodal officer by registered post demanding full details of the freezing instruction, including the name of the police station and the order number.
• Don't withdraw your original cyber complaint out of frustration — that can be used against you and weakens your legal position considerably.
• Approach a Magistrate for a direction to the bank to de-freeze the account pending investigation, supported by an affidavit establishing that you are the complainant and not the accused.
• Simultaneously file a complaint with the RBI Ombudsman if the bank fails to respond within 30 days of your written request.

Documents You Must Keep Ready

• Aadhaar card and PAN card (originals and self-attested copies)
• All bank account statements showing the unsolicited loan credits and your original repayment
• Screenshots of the loan app, loan agreement generated without consent, and all app communications
• Call recordings and call logs from recovery agent harassment
• WhatsApp message threads with recovery agents, exported with timestamps
• Acknowledgement receipt or reference number from cybercrime.gov.in
• Bank's written communication (or deliberate silence) regarding the freeze order
• Any earlier legal notices sent to the loan app company or its agents

What Evidence Is Required?

• Primary digital evidence: Original screenshots, unedited call recordings, and app-generated loan documents stored on the original device — courts prefer evidence in its native, unaltered form per Section 63 of the Bharatiya Sakshya Adhiniyam, 2023.
• Bank statements showing the unsolicited credit entries and your prior repayment — these establish that the subsequent "loans" were not consensual.
• Communication records (WhatsApp, SMS, email) from recovery agents containing threats or defamatory content.
• Certified copy of the freezing order obtained from the bank or police station.
• Affidavit from the account holder confirming the sequence of events and the absence of any outstanding genuine dues.
• Play Store or App Store download record of the loan app, establishing your interaction history with the platform.

How the Police Behave in Such Cases

Make no mistake — cyber cells are often understaffed and treat account-related complaints as lower priority than violent crimes. In cross-state matters (where the freeze originates from a different city than where you live), police tend to pass responsibility between jurisdictions. Weeks can go by without a single acknowledgement. Officers at local police stations frequently claim they lack jurisdiction over cyber matters and redirect victims to the cyber cell, which may itself be unresponsive. Phone calls achieve almost nothing. Persistence through written communication tends to produce results — and documented escalation to the SP level typically forces a response that phone-chasing never does.

Timeline of Legal Process

• Step 1 — Cyber complaint filing (Day 1): Online complaint at cybercrime.gov.in or at the cyber crime police station. Reference number generated immediately.
• Step 2 — Bank communication (Week 1): Written request to bank nodal officer for freeze order details. Response expected within 7–15 working days under RBI norms.
• Step 3 — FIR registration (Week 2–4): If police are unresponsive, approach SP under Section 173(4) BNSS or Magistrate under Section 175(3) BNSS.
• Step 4 — De-freezing application (Week 3–6): Application before the Magistrate of the freezing jurisdiction. Hearing and order may take 2–4 weeks after filing.

Facing a similar matter? Speak to a criminal lawyer in Delhi — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.