Bank Account Frozen by Cyber Crime Order and Then by EDD Team — What You Can Do

One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.

Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.

Rohan Gupta, a software professional based in Bengaluru, woke up one morning in early April 2025 to find that his HDFC Bank savings account had been completely frozen. A freeze order had been issued by the Rajasthan Cyber Crime unit following a complaint lodged through the national cybercrime helpline 1930. A lien of ₹7,850 had been marked on his account, and he could neither send, receive, nor withdraw any money.

Rohan managed to trace the complainant, a gentleman named Arvind Nair from Jaipur, who confirmed that he had transferred the money to the wrong account by mistake. Arvind agreed to withdraw the complaint once he received his money back. Rohan's cousin, who lived in Jaipur, visited the Rajasthan Cyber Crime Police Station in Ajmer on his behalf around 12 April 2025. He submitted the unfreeze form, obtained a signed withdrawal letter from Arvind, and returned the money in cash before the police officers present. The police assured them the account would be unfrozen within two working days.

A week passed. Nothing changed. The police officer, when contacted, said the process was done and asked Rohan to contact the bank. After a second visit by the complainant himself, the complaint was formally closed around 22 April 2025, and HDFC Bank received the unfreeze order within four days. But then a second freeze hit — this time from the bank's own Enhanced Due Diligence (EDD) team. Rohan visited the branch more than ten times. He submitted written requests, house photographs, videos of his residence — everything the branch manager asked for. The bank kept deflecting, saying first the Cyber Crime freeze was the issue, and then blaming the EDD team.

Rohan had already tried handling this himself and then with a general civil lawyer who was unfamiliar with the procedural overlap between cybercrime freezes and internal bank compliance holds. When he approached Advocate Sudhir Rao, the matter was handled with a structured legal approach: a formal demand notice to the bank's nodal officer, a complaint to the Banking Ombudsman under the Reserve Bank of India's Integrated Ombudsman Scheme, and a concurrent consumer complaint before the District Consumer Disputes Redressal Commission. The bank, facing formal legal proceedings, unfroze the account and provided a written explanation within three weeks.

Advice in Such Cases

Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.

File a Complaint with the RBI Banking Ombudsman: If the bank refuses to unfreeze your account even after the Cyber Crime unfreeze order has been issued, file a formal complaint under the RBI Integrated Ombudsman Scheme. This puts direct regulatory pressure on the bank and forces a documented response within a defined timeline. And here's the thing — branch managers don't always tell you this option exists.

Send a Formal Legal Notice to the Bank's Nodal Officer: Don't rely only on branch visits and verbal follow-ups. A written legal notice sent by an advocate to the bank's regional nodal officer creates a paper trail and signals that you're prepared to escalate. Banks respond far more quickly to formal notices than to repeated branch visits. Ten polite visits, in my experience, accomplish less than one well-drafted notice on an advocate's letterhead.

Document Everything: Keep copies of every submission — unfreeze forms, withdrawal letters from the complainant, photographs submitted to the bank, email correspondence, and visit logs. This documentation becomes critical evidence in consumer complaints and Ombudsman proceedings. Frankly, without this paper trail, you're fighting blind.

Cases involving a cybercrime freeze followed by an internal EDD freeze sit at the intersection of criminal procedure, banking regulation, and consumer law. It's a specialised area that general practitioners may not be fully familiar with. Engaging an advocate who regularly handles such banking and cyber matters tends to produce significantly faster and more effective outcomes.

Applicable Sections of Law

This matter is mixed in nature — it has a criminal dimension (the cybercrime complaint and freeze) as well as a civil/regulatory dimension (the bank's internal EDD freeze and the consumer's right to banking services). The following provisions are directly applicable:

• Section 61, Information Technology Act, 2000: Jurisdiction of courts in matters involving IT-related offences and orders — relevant to challenging freeze orders issued under cybercrime proceedings.
• Section 67, Information Technology Act, 2000: Relates to powers of police and authorities in cybercrime investigations, including the authority to issue freeze directions to banks.
• Section 2(1)(o), Consumer Protection Act, 2019: Defines "deficiency in service" — a bank's unjustified refusal to unfreeze an account after lawful directions have been complied with squarely falls within this definition.
• Section 35, Consumer Protection Act, 2019: Provides the right to file a consumer complaint before the District Consumer Disputes Redressal Commission for deficiency in banking services.
• RBI Integrated Ombudsman Scheme, 2021: Provides a regulatory grievance redressal mechanism directly against banks for service failures, including account freezes without adequate justification.

Punishment and Penalties

This section isn't applicable to the civil and regulatory aspects of this matter. But if the original cybercrime complaint had escalated into a criminal case, the following would apply. Fraudulent transfer-related offences under Section 318 BNS (cheating) carry imprisonment up to seven years and a fine. Section 111 BNS (organised crime proceeds) may apply in serious cyber fraud cases. These are cognizable, non-bailable, and non-compoundable offences in their aggravated forms. Since the complainant in this case confirmed it was a mistaken transfer and withdrew the complaint, no criminal liability arose against Rohan.

Jurisdiction — Where to File the Case

For the consumer complaint against the bank, jurisdiction lies before the District Consumer Disputes Redressal Commission at the place where the bank branch is located or where the complainant resides, as per Section 34 of the Consumer Protection Act, 2019. For complaints involving cybercrime freeze orders, the jurisdictional Cyber Crime Police Station that issued the freeze order (here, in Ajmer, Rajasthan) holds territorial jurisdiction. The RBI Banking Ombudsman covers the region where the bank's branch is located. Now, before you act, get this forum question right — choosing the wrong one from the outset costs you weeks and invites procedural objections you simply don't need.

What if Police Refuse to File FIR?

If the cybercrime police refuse to close the complaint or act on the unfreeze request despite compliance, the following steps apply:

• Approach the Superintendent of Police (Cyber Crime) under Section 173(4) BNSS with a written application setting out the facts and the steps already completed.
• File a private complaint before the jurisdictional Judicial Magistrate under Section 175(3) BNSS if the SP also fails to act.
• File a writ petition before the High Court under Article 226 of the Constitution seeking a mandamus directing the police to close the complaint and issue the unfreeze order.
• Simultaneously, escalate to the Director General of Police (Cyber Crime Cell) of the relevant state through a written representation with supporting documents.

Rights of the Accused

Where a person's account is frozen on the basis of a cybercrime complaint and the police seek to question the account holder, the following rights apply:

• Right against self-incrimination under Article 20(3) of the Constitution — you cannot be compelled to be a witness against yourself.
• Right to legal representation at all stages under Article 22 of the Constitution.
• Right to be produced before a Magistrate within 24 hours of arrest under Article 22(2) and Section 58 BNSS.
• Right to receive a copy of the FIR and to be informed of the grounds of any arrest under Section 47 BNSS.
• Right to silence during questioning — any statement made to police is not admissible as evidence against you under Section 23 of the Bharatiya Sakshya Adhiniyam, 2023.

Bail Provisions

Simple enough when the facts are clean. If the cyber crime complaint escalates and the account holder is arrested, bail provisions under BNSS apply. For offences under Section 318 BNS (cheating), which is bailable in its simpler form, bail can be sought as a matter of right under Section 480 BNSS. For non-bailable variants involving organised fraud, an application under Section 483 BNSS before the Sessions Court is appropriate. Anticipatory bail under Section 482 BNSS is advisable if there's a real apprehension of arrest, and in my view, don't wait until the last moment to file it. Typical conditions include surrender of passport, regular appearance before the investigating officer, and a personal bond with surety.

Quashing of FIR / Case

Where the complainant has withdrawn the complaint and the dispute has been settled, quashing of the FIR or complaint before the High Court under Section 528 BNSS is a viable and often the most effective remedy. The Supreme Court in Gian Singh v. State of Punjab, 2012 held that the High Court can quash criminal proceedings in cases involving disputes of a personal nature where the parties have arrived at a genuine settlement. And in B.S. Joshi v. State of Haryana, 2003, the Court affirmed that settlement between parties in cases arising from civil/commercial disputes is a strong ground for quashing. This route brings finality and avoids prolonged proceedings.

If You Are the Victim

Your account is frozen. Here's what you do, step by step:

• Obtain the full freeze order in writing from the bank, including the authority that issued it and the date of issue — this is your starting point for any legal challenge.
• If the Cyber Crime freeze has been lifted, get written confirmation from the Cyber Crime Police Station and submit it formally to the bank's nodal officer by registered post, not just to the branch manager.
• File a complaint with the RBI Banking Ombudsman online at cms.rbi.org.in if the bank does not act within 30 days of your written complaint to them.
• File a consumer complaint before the District Consumer Disputes Redressal Commission under Section 35 of the Consumer Protection Act, 2019 claiming deficiency of service and compensation for financial loss and mental harassment.
• Consult an advocate who handles banking and cybercrime matters before taking any irreversible step or signing any document the bank asks you to sign during this process.

Documents You Must Keep Ready

• Aadhaar card and PAN card (originals and self-attested copies)
• Bank account statement for at least the past six months
• Copy of the freeze order received from the bank or Cyber Crime unit
• Unfreeze form submitted to the Cyber Crime Police Station (stamped copy)
• Written withdrawal letter / NOC from the complainant
• Acknowledgment receipt of cash returned to the complainant before police officers
• All email correspondence with the bank, including responses from the nodal office
• Photographs and videos submitted to the bank's EDD team
• Written complaint submitted to the branch and any acknowledgment received

What Evidence Is Required?

• Primary documentary evidence: The original freeze order, the Cyber Crime unfreeze order, and the bank's written communication are the core documents — they establish the sequence of events and the bank's default.
• Bank account statements showing the lien amount and the period of freeze.
• The complainant's signed withdrawal letter and the police station's acknowledgment of complaint closure.
• Email trail between you and the bank's branch manager and nodal office, showing repeated requests and inadequate responses.
• Photographs and videos submitted to the EDD team, with timestamps — these establish that you complied with every request made by the bank.
• Call records or written records of every branch visit — dates, names of bank officials met, and what was communicated.
• Any financial loss evidence — bills, payment failure screenshots, or salary credit failures — to support a compensation claim before the Consumer Commission.

How the Police Behave in Such Cases

Cyber Crime police stations, particularly in smaller district headquarters, are often understaffed and deal with a high volume of complaints routed through the 1930 helpline. Make no mistake — the freeze is issued swiftly, but the unfreeze process is slower and requires physical follow-up. Officers may verbally confirm that the process is complete without actually uploading the closure on the system. Relying on verbal assurances is a common trap. Always get written confirmation and a system-generated closure letter. And here's the thing: once the complaint is formally closed on the portal, the bank has no legal basis to maintain the Cyber Crime freeze. Insisting on documented closure, politely but firmly, is non-negotiable.

Timeline of Legal Process

• Week 1-2: Obtain freeze order details; contact complainant; arrange for unfreeze form submission and money return before the Cyber Crime Police Station.
• Week 2-4: Follow up with police for written complaint closure; obtain system-generated closure letter.
• Week 4-5: Submit cyber crime closure letter to bank's nodal officer by registered post; give bank a formal 30-day period to act.
• Week 5-6: If no response, send a formal legal notice through an advocate to the bank's nodal officer and simultaneously file a complaint with the RBI Banking Ombudsman.
• Week 6-10: If still unresolved, file a consumer complaint before the District

Facing a similar matter? Speak to a criminal lawyer in Delhi — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.