Bank Account Lien Marked for P2P Fraud — What to Do When Your Savings Are Frozen

One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.

Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.

Rohan Tiwari, a 21-year-old engineering student from Nagpur, was preparing seriously for a competitive banking exam when the trouble started. A college acquaintance had referred him to a mobile application that promised commissions for routing payments through his account. Rohan participated for a few weeks before realising the app was connected to illegal online gaming transactions. He stopped immediately. But the damage was already in motion.

Around 8 April 2025, Rohan received an SMS from his Canara Bank account informing him that a lien of Rs. 2,500 had been placed on his balance. A second lien of Rs. 600 appeared on his Paytm Payments Bank account shortly after. Both freezes were linked to cybercrime complaints filed by nodal officers from different states — one from Madhya Pradesh and another from Rajasthan — through the national NCRP portal. The lien references traced back to Layer 3 and Layer 4 flagging under the cyber fraud tracking system operated by the Ministry of Home Affairs.

Panicking, Rohan tried calling the nodal officers listed in the NCRP reference details. One call went unanswered. The other officer asked him to appear in person at a police station hundreds of kilometres away. As a student living with his family, with a background verification round approaching for his exam preparation, he couldn't afford a criminal flag on his record. A family contact suggested approaching Advocate Sudhir Rao, who handles cybercrime and financial fraud matters regularly. Earlier, Rohan had consulted a general civil lawyer who had no familiarity with the NCRP process or how to communicate formally with nodal cyber cells — that approach produced no outcome at all. Once the matter was taken up with domain-specific legal support, a formal legal notice was drafted to the respective bank branches, accompanied by a representation to the nodal cyber cells through proper written channels. The lien on the Paytm account was removed within three weeks, and the Canara Bank lien was contested through a written application to the bank's grievance officer citing relevant RBI circulars on disputed holds. The matter moved significantly faster once the correct procedure was followed.

Advice in Such Cases

Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.

Do not call the nodal officer repeatedly: Repeated calls without a written record can work against you. Any communication with nodal cyber cells should go through a formal written representation. Verbal calls leave no trail and are easy to ignore. And frankly, they often just irritate officers who are already handling a high volume of complaints.

Write to your bank's grievance officer formally: A written complaint to the bank citing the specific transaction reference, the NCRP complaint number, and requesting clarity on the lien duration is far more effective than a branch visit. Banks are required under RBI guidelines to respond within a defined period.

Don't wait it out: Many students assume the lien will auto-release once the police inquiry is closed. That doesn't always happen. Active follow-up through proper legal channels is needed. Now, before you act, understand this — cybercrime and digital financial fraud matters carry procedural and evidentiary nuances, account freeze timelines, NCRP layer classifications, inter-state police coordination, that advocates who regularly handle such matters are far more familiar with than general practitioners.

Applicable Sections of Law

This matter is primarily criminal in nature, involving alleged facilitation of fraud through a payment platform.

• Section 318 BNS — Cheating and dishonest inducement: applicable where funds were routed through the account under a misleading premise.
• Section 316 BNS — Criminal breach of trust: relevant if the account holder is alleged to have knowingly facilitated the transaction chain.
• Section 111 BNS — Organised crime: may be invoked in multi-layer P2P fraud networks where the accused is linked to a larger syndicate.
• Section 66C and 66D of the Information Technology Act, 2000 — Identity theft and cheating by personation using computer resources: these provisions are often applied alongside BNS sections in cybercrime fraud cases involving payment apps.

Punishment and Penalties

• Section 318 BNS (Cheating): Imprisonment up to 3 years, or fine, or both. Cognizable, bailable, and compoundable with court permission.
• Section 316 BNS (Criminal Breach of Trust): Imprisonment up to 3 years and fine. Cognizable and non-bailable in aggravated forms.
• Section 111 BNS (Organised Crime): Imprisonment not less than 5 years, extendable to life imprisonment, with fine up to Rs. 10 lakh. Non-cognizable in some sub-categories but generally treated as non-bailable and non-compoundable.
• IT Act Section 66C / 66D: Imprisonment up to 3 years and fine up to Rs. 1 lakh. Cognizable and non-bailable.

Jurisdiction — Where to File the Case

Jurisdiction isn't always obvious in cybercrime matters. Under Section 23 of the IT Act read with the BNSS, a complaint can be filed at the cyber crime police station in the city where the victim resides, where the transaction originated, or where the accused accessed the system. For lien-related grievances specifically, you start with the bank's internal grievance redressal mechanism, escalating to the Banking Ombudsman under RBI's Integrated Ombudsman Scheme if that goes nowhere. If an FIR has been registered, the jurisdictional Magistrate's court in the district where the offence was committed handles the criminal aspect. Choosing the right jurisdiction early avoids wasted time and procedural objections later — and that choice alone can determine how fast your matter moves.

What if Police Refuse to File FIR?

If the local cyber crime police station declines to register your complaint, you don't have to just accept that. There are clear statutory options under the BNSS.

• Submit a written complaint to the Superintendent of Police under Section 173(4) BNSS, who is empowered to direct registration of an FIR.
• File a private complaint directly before the concerned Judicial Magistrate under Section 175(3) BNSS, which allows the Magistrate to direct police to investigate.
• Approach the High Court through a writ petition under Article 226 of the Constitution for directions to police, if both previous steps fail.
• File a complaint on the National Cybercrime Reporting Portal (cybercrime.gov.in) and retain your complaint acknowledgement number as evidence of your proactive approach.

Rights of the Accused

If you're being treated as a suspect rather than a victim in a P2P fraud matter, your rights under the Constitution and BNSS are clear.

• Right against self-incrimination under Article 20(3) of the Constitution — you cannot be compelled to be a witness against yourself.
• Right to legal representation under Article 22 — you're entitled to consult and be defended by an advocate of your choice from the moment of arrest.
• Right to be produced before a Magistrate within 24 hours of arrest under Section 58 BNSS.
• Right to a copy of the FIR and grounds of arrest under Section 179 BNSS.
• Right to inform a relative or friend of your arrest, as upheld in D.K. Basu v. State of West Bengal, 1997.

Bail Provisions

The nature of bail depends on the specific section invoked. And here's the thing — the difference between a bailable and non-bailable charge in these cases isn't just procedural, it changes your entire situation overnight.

• For Section 318 BNS (ordinary cheating), the offence is bailable and bail may be obtained from the police station itself.
• For Section 111 BNS (organised crime), the offence is non-bailable and bail must be sought from the Sessions Court or High Court.
• Anticipatory bail under Section 482 BNSS is advisable where an arrest is apprehended but has not yet occurred — this is particularly relevant for students who receive police notices without formal FIR registration.
• Regular bail under Section 480 BNSS applies once arrested. Courts typically consider the accused's age, background, ties to the community, and cooperation with investigation when setting bail conditions.

Quashing of FIR / Case

Where an FIR has been registered against a person who was an unwitting participant in a P2P fraud network, quashing is a legitimate and often viable remedy.

• The High Court holds inherent powers under Section 528 BNSS to quash an FIR where continuation of proceedings would amount to an abuse of process.
• Grounds relevant here: absence of criminal intent (mens rea), no direct overt act by the accused, and the accused being a passive conduit rather than an organiser, as discussed in State of Haryana v. Bhajan Lal, 1992.
• Where the offence is compoundable and the original complainant is willing to settle, the court may permit compounding and consequently quash proceedings.
• Quashing petitions must be supported by clear documentary evidence that the accused was not part of the criminal conspiracy.

If You Are the Victim

And here's the thing — many people in P2P fraud situations are simultaneously victims (of deception by the app operator) and accused (in the eyes of investigating police). Here's what to do if your account was misused without full knowledge.

• File a complaint immediately on cybercrime.gov.in and retain your acknowledgement number and complaint ID.
• Write a detailed factual account to your bank's nodal officer explaining how your account was used, attaching all relevant transaction records.
• Do not delete any messages, app data, chat logs, or payment screenshots — these are your primary evidence.
• Request your bank in writing to provide you a copy of the lien order or the NCRP reference under which the hold was placed.
• Approach a lawyer who handles cybercrime matters before responding to any police summons or notice.

Documents You Must Keep Ready

• Aadhaar card and PAN card (identity proof for all submissions)
• Bank account statements for the full period during which the lien-related transactions occurred
• Screenshots or records of all transactions through the app in question
• SMS and email notifications from the bank regarding the lien
• NCRP complaint acknowledgement (if you filed one) or NCRP reference number received via SMS
• Copies of any written communication made to the bank or police nodal officers
• Screenshots of the app, referral messages, and any communication with the person who introduced you to the app
• Proof of student status (college ID card, fee receipt) — relevant to establish background and absence of criminal motive

What Evidence Is Required?

• Transaction records: Bank statements and UPI transaction logs that map the money flow through your account — primary evidence.
• App data: Screenshots of the app interface, commission structures shown, referral messages — establishes what representations were made to you.
• Communication records: WhatsApp or SMS messages from the person who referred the app, showing the inducement.
• NCRP reference details: The layer classification, IFSC codes, and nodal officer details mentioned in the bank's lien notice — critical for tracing the complaint origin.
• Bank's freeze notice: The SMS or letter from the bank placing the lien, which becomes primary documentary evidence in any grievance or court proceeding.
• Digital forensic report: If available, a forensic report on the app or device — secondary evidence but useful in establishing the app's fraudulent design.

How the Police Behave in Such Cases

Make no mistake — police handling of P2P fraud cases is inconsistent across jurisdictions. Cyber crime cells in metropolitan areas generally follow structured NCRP protocols, but smaller district units may lack the training to distinguish between a fraud orchestrator and an innocent conduit. Officers sometimes treat lien-flagged account holders as suspects by default. Nodal officers managing high volumes of NCRP complaints may not respond promptly to calls or written inquiries. Harassment through summons without formal FIR registration is not uncommon. Having all communications documented and routed through an advocate changes the dynamic considerably, as authorities tend to respond more formally and promptly to legal correspondence.

Timeline of Legal Process

• Day 1-7: File complaint on cybercrime.gov.in; write formal representation to bank nodal officer and branch grievance officer.
• Week 2-3: Lawyer drafts and sends formal legal notice to bank and, where appropriate, to the NCRP nodal officer's office in the concerned state.
• Week 3-6: Bank responds to grievance (RBI mandates a response within 30 days under the Ombudsman scheme).

Advocate Sudhir Rao, Supreme Court of India

Facing a similar matter? Speak to a criminal advocate in Delhi — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.