One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.
Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.
TL;DR: An invalid reference number on the cyber portal usually means the bank—not the cyber cell—issued that number. Your freeze is still active. Don’t wait. Immediately get the official freeze order from your bank, contact the investigating officer, and secure legal representation to challenge the freeze before it harms your finances.
A young software developer from Indore woke up to a blocked salary account. One text alert from Kotak Mahindra Bank on 12 March 2025 said his account was frozen “as per cyber cell directions.” No warning. No notice. He called the bank—they gave him a reference number. But when he entered it on the National Cyber Crime Reporting Portal, the screen flashed: “Invalid reference number.” He panicked. His rent was due. He’d already spent two days chasing the bank branch manager in Vijay Nagar, who kept saying “sir, only cyber cell can help.” The developer then approached the Chamber of Advocate Sudhir Rao in Delhi, after a friend’s earlier consult with a general-practice lawyer went nowhere. Things moved fast from there. Advocate Sudhir Rao’s office immediately filed an application under Section 528 BNSS to view the case diary and obtain the freeze order. Within 48 hours, the team identified that the freeze was linked to a UPI fraud complaint in Bhopal—a transaction the client had nothing to do with. The lawyer argued that freezing an entire salary account without a proportionate nexus violated the client’s right to livelihood. The cyber cell lifted the freeze partially, releasing enough funds to cover living expenses, while the investigation continued on the disputed amount alone. That domain-specific strategy—spotting the proportionality angle—turned a complete financial blackout into a manageable situation.Key Facts of the Case
- Account holder: a salaried individual in Indore, no prior criminal record.
- Bank: Kotak Mahindra Bank, froze the entire savings account on 12 March 2025.
- Reason: directions from Cyber Cell, Bhopal, under Section 106 BNSS.
- Reference number: issued by the bank, not the cyber portal—hence invalid on tracking portal.
- Actual trigger: a ₹15,000 UPI credit into the account flagged as part of a larger fraud chain.
- Account balance frozen: ₹1,87,000, representing months of salary savings.
- Outcome: partial defreeze within one week, allowing essential living expenses.
The Direct Legal Answer
That reference number you have isn’t broken. It’s simply not from the cyber cell. Banks generate internal references when they act on a verbal or written police direction—those numbers don’t map to the National Cyber Crime Reporting Portal. So the “invalid” message only confirms your bank acted, not that the freeze is fake.
Here’s the thing: a freeze under Section 106 BNSS doesn’t require prior notice. Police can ask the bank orally or via email, and the bank freezes instantly. You’ll find nothing on the portal because the complaint might not even be registered as an FIR yet. It could be a preliminary enquiry.
How do I actually track the freeze?
Demand a copy of the freeze order from your bank. The bank must share it under RBI’s circular on cyber security and consumer rights. That order will have the police station name, the officer’s details, and the reference number used by the cyber cell itself. Only then can you approach the police or the court.
Will my money stay stuck forever?
No. If the money is untainted or exceeds what’s needed for investigation, a court can order defreezing or limitation. The key is speed. Delays let the bank and police grow comfortable with the status quo.
Advice in Such Cases
Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
Don’t send long emails to the bank and wait. Walk into the branch with an advocate’s notice asking for the freeze order copy. Banks respond to legal pressure, not repeated requests.
If the police don’t share details, move an application before the jurisdictional magistrate under Section 484 BNSS for release of funds. That’s a direct, fast-track step most people miss.
Engage a lawyer who regularly handles cyber crime and white-collar matters. The procedural nuances here—like the difference between a freeze during enquiry versus after FIR—are often overlooked by general practitioners, and that oversight costs time and money.
Applicable Sections of Law
The police power to freeze a bank account comes from Section 106 BNSS. If they suspect any property is linked to a crime, they can direct its seizure or freezing, including digital assets. This power is broad but not absolute—it must be exercised proportionately and with proper documentation.
Additionally, Section 111 of the Information Technology Act, 2000, read with BNS, covers cyber fraud and related offences. For account freezing before an FIR, the magistrate’s order under Section 484 BNSS can be invoked. And if the freeze is arbitrary, a writ under Article 226 lies to the High Court. Remember, under Section 318(4) BNS, cheating involving electronic means attracts specific punishment.
Punishment and Penalties
Cyber fraud involving cheating and dishonesty—if the underlying complaint is under Section 318(4) BNS—carries imprisonment up to 7 years and fine. The offence is cognizable, meaning police can arrest without a warrant. It’s non-bailable if the amount involved exceeds ₹10 lakh or in certain aggravated forms, but often bailable depending on exact sections. It’s compoundable with court permission only if the victim settles, which can lead to lifting the freeze faster.
Jurisdiction — Where to File the Case
Your relief lies where either the bank account is maintained or where the cyber cell investigation is based. Typically, you can approach the Chief Judicial Magistrate or the Sessions Court in the district where the bank branch sits. If the freeze order originates from a different city’s cyber cell, you may need to engage that jurisdiction’s court too. Pecuniary jurisdiction—the value of frozen funds—decides whether it’s a Magistrate or Sessions court matter. Don’t let the distance scare you; a local advocate can appear via VC now in many courts.
What if Police Refuse to File FIR?
In cyber freezes, the police may keep the matter as an “enquiry” without FIR. That keeps you in the dark. Here’s what you can do:
- File a complaint with the Superintendent of Police under Section 173(4) BNSS, demanding registration of FIR or closure.
- If they still don’t act, move a private complaint before the Magistrate under Section 175(3) BNSS. The Magistrate can direct investigation.
- Parallelly, file a writ petition under Article 226 for release of funds if the freeze is unreasonable.
Rights of the Accused
Even if you are a suspect in the fraud case (because your account received tainted money), you have clear rights:
- Right against self-incrimination under Article 20(3)—you can’t be forced to confess.
- Right to legal representation under Article 22(1)—never speak to cyber cell without your advocate.
- Right to be produced before a Magistrate within 24 hours of arrest (if arrested).
- Right to a copy of the FIR and the freeze order—demand it in writing.
- Right to seek bail or anticipatory bail under Sections 482 or 480 BNSS, as applicable.
Bail Provisions
If the underlying offence is non-bailable (say, a large-scale fraud under Section 318 BNS), applying for anticipatory bail under Section 482 BNSS is crucial. For bailable offences, regular bail under Section 480 BNSS is a matter of right. Courts often grant bail with conditions like not leaving the city and cooperating with investigation. The moment you sense an FIR might be filed over the disputed transaction, move for anticipatory bail. It prevents arrest and gives you breathing room to challenge the freeze.
Quashing of FIR / Case
Under Section 528 BNSS, the High Court can quash an FIR if it’s an abuse of process or doesn’t disclose a prima facie case. If you can show the transaction was legitimate, or there’s no criminal intent, quashing is a powerful remedy. And if the complainant settles and the offence is compoundable, quashing becomes even smoother. In bank freeze scenarios, quashing often leads to automatic defreezing. So it’s worth evaluating early.
If You Are the Victim
If your own account was frozen and you’re innocent, you are effectively a victim of both the fraudster and the system’s blunt instrument. Act methodically:
- Collect all bank statements and screenshots showing the flagged transaction.
- Write to the bank’s nodal officer and banking ombudsman if the bank refuses to share the police order.
- File an online complaint on the National Cyber Crime Reporting Portal yourself and note your own reference number—that’s the one that will work.
- Move the court for a direction to defreeze the account partially or fully.
Documents You Must Keep Ready
- Aadhaar card and PAN card for identity.
- Last six months’ bank statement with transaction history.
- Copy of the freeze message or email from the bank.
- Screenshots of the “invalid reference number” error on the portal.
- Any communication with the bank branch (emails, WhatsApp).
- Salary slips or proof of income source.
- Copy of the UPI transaction or transfer that triggered the freeze, if known.
- Written application to the bank seeking the cyber cell’s freeze order.
What Evidence Is Required?
- Primary evidence: the bank’s freeze notification and the cyber cell’s direction letter.
- Digital footprint: the UPI transaction ID, IP logs (if you can get them from the bank), and screenshot of the portal error.
- Correspondence trail: emails or letters exchanged with the bank and police.
- Income proof: to establish the legitimate source of funds.
- Any CCTV footage from ATM or workplace proving your location during the disputed transaction—useful if you were far away.
- Expert opinion: a cyber forensic expert can sometimes trace the trail and show your non-involvement.
How the Police Behave in Such Cases
Expect the cyber cell to be overloaded and slow. They often freeze first and ask questions later. Getting them to share the FIR copy or the exact reason can be a struggle. They may call you for a “clarification” without formally summoning you—never go alone. Their default stance is suspicion, so stay calm and let your lawyer do the talking. Persistence and proper legal pressure often make them budge.
Timeline of Legal Process
- Bank issue: 1-3 days to get the freeze order copy from the bank.
- Police engagement: 7-15 days to get a response from the cyber cell on defreezing request.
- Magistrate application: 1-2 hearings over 10-20 days for directions under Section 484 BNSS.
- If FIR registered: investigation may take 60-90 days, chargesheet filing; thereafter, bail and trial.
- High Court writ: if urgent, 1-2 months from filing to interim order.
- Full trial: if the case proceeds, 6-18 months or more depending on complexity.
How Long Will the Investigation Take?
Cyber cell investigations typically drag on. If no FIR is filed yet, the enquiry phase can last 3-6 months. Once an FIR is registered, the police have 60-90 days to file a chargesheet for serious offences, but extensions are common. The freeze can persist throughout. That’s why quick legal action to limit or vacate the freeze is essential—waiting for investigation to finish is not a strategy.
Understanding the Costs
The total cost of a matter like this varies significantly from one case to the next — it depends on the complexity of the dispute, the forum involved, the number of hearings, and the specific facts of your situation. There is no single fixed figure that applies to everyone.
A professional advocate can give you an accurate estimate only after reviewing all your facts and documents in a consultation.
Can the Matter Be Settled Out of Court?
Settlement is possible if the underlying fraud complaint is compoundable. If the victim and the accused reach a compromise, the court can allow compounding under Section 359 BNSS, leading to closure and automatic defreeze. Even before that, mediation or a settlement with the complainant can persuade the police to withdraw the freeze. But be careful—never directly contact the complainant or pay money without legal advice. Get everything documented through your advocate.
Common Mistakes People Make
- Waiting and hoping the bank will resolve it—they won’t without a police nod.
- Deleting or altering digital records after the freeze; that can be obstruction of justice.
- Signing statements or giving consent to the bank without a lawyer present.
- Speaking to the cyber cell informally, which can be used against you later.
- Sharing account details and screenshots on social media seeking help—this compromises your privacy and case.
- Hiring an advocate who doesn’t regularly handle cyber crime and financial freeze cases. Domain-specific experience matters: a lawyer who knows the RBI circulars, banking ombudsman route, and the proportionality argument will move faster than one learning on your file.
FAQs People Normally Have
Can I open a new account if my salary account is frozen?
Technically yes, but banks may flag you if a freeze is active. It’s better to get a court order directing release of salary components before opening a new account, to avoid further blocks.
Will the cyber cell notify me officially?
Not proactively. They freeze through the bank. You only get an intimation from the bank, often vague. It’s on you to extract the full order from the bank.
What if the freeze is a result of mistaken identity?
Then you must immediately provide identity and location proof to the investigating officer through your lawyer. A mistake-of-identity case can be resolved much faster.
Can the cyber cell freeze a joint account?
Yes. They can freeze the entire account even if only one holder is under suspicion. The other joint holder’s rights get entangled, so they may need to file a separate intervention application.
Is there a time limit on how long the freeze can last?
The law doesn’t specify a hard deadline, but courts have held that indefinite freezing violates Article 21. You can challenge a prolonged freeze in the High Court.
This article is general legal information, not legal advice. Consult a qualified advocate about your specific situation.
Advocate Sudhir Rao, Supreme Court of India
Facing a similar matter? Speak to a Delhi criminal defence lawyer — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.