One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.
Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.
Rohan Gupta, a salaried professional based in Indore, found himself in a deeply frustrating situation around the third week of February 2025. Rs. 32,300 appeared in his HDFC Bank savings account out of nowhere — credited from a completely unknown source. He hadn't requested this money, didn't know the sender, and was immediately suspicious. When someone called from an unfamiliar number claiming to be the rightful owner and asking him to transfer the funds back, Rohan sensibly refused, telling the caller to approach HDFC Bank directly if the transfer was genuine.
What followed was worse. His bank placed a lien of Rs. 32,300 on his account within two days. Then, days later, a second lien of an identical amount was applied — this time by the Cyber Crime wing of the local police. Rohan received a generic email with contact details for the Cyber Crime unit, but calls went unanswered, emails received no reply, and HDFC Bank told him plainly that only Cyber Crime could lift the second lien. He was stuck. His own funds were frozen for no fault of his own.
Rohan had already tried resolving this himself — writing repeated emails, visiting the bank branch, even approaching the local police station — without any movement. He then approached Advocate Sudhir Rao, who specialises in cyber law and financial fraud matters. Through a structured legal approach combining a formal written complaint under Section 173(4) BNSS to the Superintendent of Police, simultaneous correspondence to the Nodal Officer of HDFC Bank under RBI guidelines, and a representation to the Cyber Crime portal, the lien was reviewed, the account was unfrozen, and Rohan was formally communicated his clearance within a few weeks. The specialised handling made a clear difference where earlier general attempts had not.
Advice in Such Cases
Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
Frankly, most people underestimate this step. File a Written Complaint Immediately: Don't just call. A written complaint to the bank's Nodal Officer and to the Cyber Crime portal at cybercrime.gov.in creates a formal record. Verbal follow-ups rarely produce results in these matters.
Do Not Transfer Any Amount: If someone calls claiming ownership of the credited money, don't transfer anything — with or without the bank's verbal assurance. Any transfer on your part, before formal legal clearance, can create liability under Sections 317 or 318 of the Bharatiya Nyaya Sanhita.
Engage an Advocate with Cyber Law and Banking Experience: This type of matter sits at the intersection of cyber crime law, RBI banking regulations, and criminal procedure. Now, before you act, understand this — procedural and evidentiary nuances here are frequently missed by general practitioners. An advocate who regularly handles cyber fraud and banking disputes will know which authority to approach first, in what sequence, and with what documentation, and that typically produces faster resolution.
Applicable Sections of Law
This case type is primarily criminal in character, involving cyber crime, wrongful freezing linked to fraud investigation, and financial fraud mechanisms. The applicable provisions are:
- Section 318 BNS — Cheating: Relevant when the unknown sender is using the bank transfer as part of a scam, including the "accidental transfer" refund scam.
- Section 316 BNS — Criminal breach of trust: Applicable if the money is held by the innocent account holder and pressure is exerted to misappropriate it.
- Section 111 BNS — Organised crime / criminal conspiracy: Applicable when the transfer is traced to a larger fraud network operating across multiple victims.
- Section 66C and Section 66D of the Information Technology Act, 2000 — Identity theft and cheating by personation using computer resources: Directly applicable where the scam involves digital payment infrastructure.
- Section 173(4) BNSS — Complaint to Superintendent of Police where police fail to act on a cognizable offence report.
And here's the thing — these provisions don't operate in isolation. In a typical case like Rohan's, you're dealing with at least three overlapping legal frameworks simultaneously, which is exactly why getting this wrong early can cost you weeks.
Punishment and Penalties
- Section 318 BNS (Cheating): Imprisonment up to three years, or fine, or both. Cognizable and bailable for basic cheating; non-bailable where the cheating involves dishonest inducement causing delivery of property.
- Section 316 BNS (Criminal Breach of Trust): Imprisonment up to three years, or fine, or both. Cognizable and non-bailable in aggravated forms.
- Section 66C IT Act: Imprisonment up to three years and fine up to Rs. 1 lakh. Cognizable.
- Section 66D IT Act: Imprisonment up to three years and fine up to Rs. 1 lakh. Cognizable.
- Offences under BNS relating to organised fraud networks are non-compoundable.
Jurisdiction — Where to File the Case
Cyber crime complaints are filed at the jurisdictional Cyber Crime Police Station or through the national portal at cybercrime.gov.in. Under Section 175(3) BNSS, a private complaint can also be filed before the Judicial Magistrate of First Class in the area where the offence was committed or where its effects were felt — which, in banking fraud cases, includes the location of the victim's bank account.
And here's the thing — jurisdiction in cyber fraud matters is not restricted to a single city. The Supreme Court in Sajan Abraham v. State of Kerala, 2001, affirmed that offences involving electronic transactions can be prosecuted from the place where the transaction was received. This matters when the fraudster is in a different state entirely.
What if Police Refuse to File FIR?
Police inaction is common in cases where the victim is not the accused but the account has already been flagged. If your complaint is ignored:
- Submit a written complaint to the Superintendent of Police under Section 173(4) BNSS, clearly documenting dates of earlier attempts and non-response.
- File a private complaint directly before the Judicial Magistrate of First Class under Section 175(3) BNSS if the SP does not act within a reasonable time.
- Approach the High Court under Article 226 of the Constitution for a writ of mandamus directing the police to register and investigate.
- Document every attempt — emails, WhatsApp messages, visit records — as evidence of prior non-response. As held in Lalita Kumari v. Government of UP, 2014, registration of FIR is mandatory where a cognizable offence is disclosed.
Rights of the Accused
While the victim here is the account holder, it's worth knowing these rights in case authorities attempt to treat the innocent account holder as a suspect:
- Right against self-incrimination under Article 20(3) of the Constitution — you cannot be compelled to be a witness against yourself.
- Right to legal representation under Article 22 of the Constitution — you are entitled to consult an advocate of your choice at every stage.
- Right to be produced before a Magistrate within 24 hours of arrest under Article 22(2) and Section 57 BNSS.
- Right to receive a copy of the FIR and to be informed of the grounds of any detention or arrest.
- Right to bail for bailable offences as a matter of right under Section 478 BNSS.
Bail Provisions
If, in a worst-case scenario, the account holder is wrongly arrayed as an accused:
- For bailable offences under Section 318 BNS, bail is available as of right at the police station itself under Section 478 BNSS.
- For non-bailable offences, a regular bail application is filed before the Sessions Court under Section 483 BNSS.
- Anticipatory bail under Section 482 BNSS is the right instrument where there is apprehension of arrest before actual custody — typically filed in the Sessions Court.
- Bail conditions usually involve surrendering the passport, periodic reporting, and not tampering with evidence or witnesses.
- A strong bail strategy here would highlight that the applicant is a victim of an accidental or fraudulent transfer and cooperated with authorities from the outset.
Quashing of FIR / Case
If an FIR is registered against the innocent account holder for wrongful retention of the credited funds:
- The High Court holds inherent powers under Section 528 BNSS to quash proceedings where no prima facie offence is made out against the petitioner.
- Grounds for quashing include: no mens rea (criminal intent) established, account holder's proactive refusal to transfer money, and documented cooperation with authorities.
- In State of Haryana v. Bhajan Lal, 1992, the Supreme Court laid out specific categories where quashing is appropriate — including where the allegations do not constitute a cognizable offence even if taken at face value.
- Quashing is a viable and effective strategy where the innocent account holder has clear documentary proof of non-participation in the fraud.
If You Are the Victim
Make no mistake — receiving unsolicited money into your account and having it frozen without explanation is a genuinely harmful situation. Here's what to do right away:
- Do not transfer the credited amount to anyone, under any circumstances, until formal clearance from both the bank and Cyber Crime authorities.
- File a written complaint immediately at cybercrime.gov.in, with screenshots of the transaction, the unknown caller's number, and all bank communications.
- Send a registered post or email to the bank's Nodal Officer under RBI's Banking Ombudsman Scheme 2021, requesting written clarification on both liens and the authority behind each.
- If the Cyber Crime unit is unresponsive beyond 7 to 10 working days, escalate to the Superintendent of Police in writing under Section 173(4) BNSS.
- Keep a written log of every call made, every email sent, and the bank's responses — these form the evidentiary backbone of your complaint.
Documents You Must Keep Ready
- Aadhaar card and PAN card (identity proof)
- Bank account statements showing the credited transaction and both lien entries
- Screenshots of the unknown caller's number and any chat or message if contact was made digitally
- All emails received from the bank and Cyber Crime authorities
- Written records of calls made to Cyber Crime helpline with date, time, and call duration
- Copies of complaints filed at cybercrime.gov.in (acknowledgement numbers)
- Bank passbook or net banking screenshots showing account freeze
- Any written communication from the bank branch regarding the lien
What Evidence Is Required?
- Bank transaction records: Primary evidence showing the unsolicited credit and both lien entries, with exact timestamps.
- Call logs: Records of the unknown caller's number — printable from your mobile service provider on application.
- Email trail: All correspondence with the bank's Nodal Officer, branch, and Cyber Crime unit.
- Cyber Crime portal acknowledgement: Complaint registration number and status from cybercrime.gov.in.
- Witness statement: If any family member or colleague was present when the suspicious call was received.
- Bank's internal communication: Obtainable through an RTI application if the bank withholds the basis for the lien.
- WhatsApp or SMS screenshots: If the unknown person contacted via messaging platforms.
How the Police Behave in Such Cases
Cyber Crime units are often overloaded. In practice, they prioritise cases with higher monetary value or where an FIR has already been registered by another complainant. An innocent account holder whose account is merely flagged may find themselves deprioritised entirely.
Officers may ask you to "wait for the investigation to complete" without giving any timeline. Written complaints tend to get better traction than phone calls. And here's why that matters — once a written record exists, non-response becomes official inaction, which is actionable under Section 173(4) BNSS and through the High Court if required.
Timeline of Legal Process
- Day 1-3: File complaint on cybercrime.gov.in and send written email to bank's Nodal Officer. Estimated time for acknowledgement: 24 to 72 hours.
- Week 1-2: Follow up in writing if no response. Begin drafting formal complaint to SP under Section 173(4) BNSS.
- Week 2-4: SP complaint filed. SP has discretion to direct registration of FIR or refer to Cyber Crime investigation.
- Month 1-3: If FIR is registered, investigation begins. Chargesheet must be filed within 60 days for non-bailable offences under Section 193 BNSS.
Advocate Sudhir Rao, Supreme Court of India