TL;DR: If the police have traced the beneficiary account in your cyber fraud case, the money has not come back yet. Tracing leads to a lien — a hold — on the balance sitting in that account, and the lien is what protects your claim. Cyber fraud recovery in India then turns on three things: whether money is still in the account, how quickly the lien was placed, and whether a magistrate later orders that money released to you.
The SMS from the cyber cell is usually short. The beneficiary account has been identified. A complaint number you have been quoting for weeks finally has something attached to it. Then the second message, or the phone call, adds the caveat: the balance in that account is only part of what you lost, and the refund will follow "after due process".
That phrase is where most people lose the thread. They assume tracing means recovery. It does not. Tracing means the police have found where your money landed. Recovery is a separate, slower thing, and it is decided by what happens to that account in the next few weeks.
What "account traced" actually means
When you report a financial cyber fraud, the details go to the Citizen Financial Cyber Fraud Reporting and Management System, the platform that sits behind the National Cyber Crime Reporting Portal and the 1930 helpline. That system pushes the transaction details to banks and payment operators so they can act on the beneficiary account. Separately, your local cyber cell or the police station registers your case and starts an investigation.
"Traced" is the investigating officer telling you that the account receiving your money has been identified. Usually it is a mule account — someone's savings account rented out or taken over, used to receive funds from many complaints. It might already be under lien from other victims.
In practice, tracing tells you one useful thing and one incomplete thing. Useful: the money did not vanish into nothing, and there is a specific account to hold. Incomplete: whether any of it is still there.
Lien marking: the step that decides the case
A lien is an instruction to the beneficiary's bank to hold a specified amount in that account. The money stays in the account. It is not transferred to you, and it is not transferred to the police. It simply cannot be moved by the account holder.
The legal peg for this is the police power to seize property. Section 106 of the Bharatiya Nagarik Suraksha Sanhita, 2023 — Section 102 of the old Code of Criminal Procedure — allows a police officer to seize property, and courts have treated a bank balance as property capable of being seized. Banks act on that instruction and mark the lien.
Lien is not the same as refund
- Lien: a hold on the balance. The money is still in the accused account holder's bank.
- Debit and credit: the actual movement of money out of that account into yours. This needs more than a police instruction.
- Release of lien: what happens if the case ends, the lien is not renewed, or the amount is found to belong to someone else.
A lien also has a shelf life in practice. Investigators are expected to keep it alive; if the officer does not extend it, or if the file goes quiet after a transfer, the bank may release the hold. If your case has gone silent for months, the first thing worth checking is whether the lien still exists. Ask your bank in writing, and ask the investigating officer in writing.
If several victims have claims on the same account
This is common with mule accounts, and it is not a first-come-first-served queue in any formal sense. Several liens may sit on one balance. Whoever gets a release order covering the full amount effectively takes it; where the balance is short, distribution among victims depends on how the investigating officer and the court handling the case approach it. There is no single national formula that applies everywhere — it varies by state and by the court hearing the matter. Anyone who tells you the split is settled law is overstating it.
What if the money is already gone
The honest answer: on these facts there is often very little to argue. Mule accounts are emptied fast — within minutes to a couple of days. If the lien was placed after the balance had already been withdrawn, the hold captures nothing.
Two routes remain, and both are weak on their own:
- Tracing the next layer — the account the money moved to from the mule account. This depends on the investigating officer's resources and willingness, and the trail usually ends at a wallet or an unregulated endpoint.
- Proceeding against the account holder as an accused, which may produce a restitution order if that person is traced, charged and convicted. That is a long road.
What does not work is filing more complaints about the same transaction. Duplicate complaints get clubbed, and the ones with the earliest acknowledgment number carry the strongest lien priority.
The first 24 hours matter more than anything after
Recovery outcomes track almost exactly with reporting speed. Every hour between the transfer and the lien is an hour the fraudster's network uses to move funds on. If you report the same day — the "golden hour" people refer to — the odds of catching a live balance are meaningfully better. Three days later, the money is usually layered away.
If you are reading this after a delay, the delay is not fatal to the police case. It is close to fatal to the recovery.
Your bank's liability — and its real limits
There are two different things people conflate here.
The first is the bank's liability for an unauthorised electronic transaction. Under the RBI's limited-liability framework for unauthorised electronic banking transactions, a customer who reports within three working days has zero liability. Reported later but within seven working days, liability is capped — currently at ₹5,000 for accounts with a balance up to ₹25 lakh. Beyond that, liability follows the bank's board-approved policy.
The second is whether your bank has to make good money that has already left and landed somewhere else. Generally, no. The limited-liability framework is aimed at losses arising from a bank's own failure or a systems breach. Where the loss resulted from the customer sharing an OTP, a PIN or credentials, the transaction is often treated as authorised in the first place, and the framework does not help.
Where the bank has been negligent — for example, it ignored an alert on a suspicious transaction that a reasonable bank would have stopped — a complaint to the RBI's Integrated Ombudsman Scheme, 2021 is the usual route. That route deals with the bank's conduct. It does not recover the fraudster's money.
How the refund order is actually passed
Nothing moves to you on the police's word alone. The sequence is roughly this:
- You file the complaint. You get an acknowledgment number and, if an FIR is registered, an FIR copy.
- The investigating officer traces the beneficiary account and asks the bank to mark the lien.
- The investigation proceeds — notices to the account holder, bank statements, call detail records, sometimes arrest.
- The investigating officer moves the court handling the case for release of the liened amount to the victim, or a charge sheet is filed and the question of disposal of the seized amount comes before the court.
- The magistrate passes an order. The beneficiary bank then debits the account and the money is credited to your account, usually through your own bank.
Where the amount is small and the account holder does not contest, some courts dispose of these applications quickly. Where the account holder claims the money is theirs, or where multiple victims are in the queue, expect it to sit.
How long does cyber fraud recovery in India actually take?
This is the question everyone asks, and only ranges can be given honestly:
- Lien: days to a few weeks after a well-reported complaint. Faster if reported within 24 hours.
- Investigation: three months to a year or more, depending on the state and the docket.
- Refund order: commonly six months to two years from the date of the lien, and longer where the case is contested.
These are typical ranges, not promises. A case where the account holder pleads guilty early can close much sooner. A case where the accused is untraceable can run for years without the money moving at all.
What to do this week
Concrete steps, in order:
- Confirm the lien in writing. Ask your bank, and ask the investigating officer, for the amount liened, the date it was marked and the date it is valid up to.
- Get the complaint acknowledgment number and the FIR copy if one exists. Keep physical copies.
- Send your bank a written complaint before the three-working-day and seven-working-day marks pass, if they have not already. The date of your written complaint is what fixes your liability position.
- Follow up with the investigating officer in writing, not only by phone. Ask specifically whether an application for release of the amount has been filed before the court.
- If nothing has moved in six months, ask the officer in writing for the status and consider a representation to the Superintendent of Police or the Nodal Officer for cyber crime in that district.
Where there may be nothing to recover
Some cases genuinely have no money left to chase. If the balance is zero, the first layer is a shell, and the account holder is a student who rented out her account for a small commission, then the realistic recovery is close to nil and the real value of the case is the criminal proceedings, not your money.
It is worth saying that plainly, because a lot of money is spent on follow-up that produces nothing. If you are weighing whether to engage a lawyer, the question to ask first is whether an amount is actually liened and still sitting there. Without that, there is usually no fund to litigate over.
Frequently Asked Questions
Does a traced account mean I will get my money back?
No. It means the account receiving your funds has been identified. Recovery depends on whether money is still in it and whether a lien is in place before it is withdrawn.
What is lien marking in cyber fraud cases?
It is an instruction to the beneficiary's bank to hold a specified amount in that account so it cannot be moved. The money stays in the account until a court orders otherwise.
Can I get my money back without a court order?
In most cases, no. Banks generally will not debit a customer's account and credit yours on a police request alone. A magistrate's order releasing the seized amount is the usual requirement, though some states have administrative arrangements in small-value matters.
What if the beneficiary account has only part of my money?
You can recover up to the amount liened, not necessarily your full loss. The shortfall can only be pursued through the criminal case against the accused.
Does my bank have to compensate me regardless?
Not regardless. The RBI's limited-liability framework applies to unauthorised transactions and gives you zero liability if you report within three working days. If you shared an OTP or credentials, the analysis changes.
How do I check whether the lien is still active?
Write to your bank's grievance or nodal officer and to the investigating officer, asking for the lien amount, the date it was marked and its current validity. Keep the replies.
Do I need a lawyer for this?
Not for filing or the initial follow-up. A lawyer is usually worth engaging when the question of release of the liened amount comes before a court, or when the bank is resisting a legitimate claim.
If you have a complaint number, a traced account and a lien that may or may not still be alive, the fastest way to get a real answer is to send the papers. The order or acknowledgment from the portal, the FIR copy if there is one, your bank statement showing the debit, and a two-line note on what the police have told you so far. From that, it is usually possible to say within a short conversation whether there is a fund worth pursuing or whether the case is really about the criminal proceedings. You can write in through the contact page or book a time.
This is general information about Indian law and procedure, not legal advice on your own situation.
Advocate Sudhir Rao, Supreme Court of India
Facing a similar matter? Speak to a criminal lawyer in Delhi — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.