One of my clients recently had a case which I am explaining below and if you are stuck in such similar situation, here is what to do.
Note: Due to attorney-client privilege, I cannot disclose complete case details or identify the actual parties involved. However, I am sharing the essential facts and legal approach so that if you find yourself in a similar situation, you can understand the available solutions and legal remedies.
TL;DR: If someone opens a bank account using your identity documents without your knowledge, you must file a police complaint immediately and send a formal legal notice to the bank. The bank is liable for KYC lapses. You should not try to resolve this yourself — approach an advocate who handles banking and cyber fraud cases.
A resident of Pune, Mr. Arjun Mehta, had been living abroad since 2016. He discovered in February 2025 that a bank account had been opened in his name at a branch of HDFC Bank in Indore. The account was opened in December 2017 and had been active for years. He had never visited that branch. A routine KYC notification from the bank tipped him off. When he contacted the branch manager, the manager admitted the account was opened by someone else, but refused to file a complaint or investigate further. Frustrated, Mr. Mehta initially tried to handle it through calls and emails. Those efforts got him nowhere. He then approached the Chamber of Advocate Sudhir Rao. The office issued a detailed legal notice under the RBI Master Directions on KYC and the Digital Personal Data Protection Act, 2023. The bank was forced to freeze the account, file a suspicious transaction report, and cooperate with police investigation. Advocate Sudhir Rao's expertise in banking fraud and identity theft cases helped secure a written undertaking from the bank that Mr. Mehta's credit profile would be corrected and the fraudulent account closed.
Key Facts of the Case
- Mr. Arjun Mehta had not lived in India since 2016 and had not visited the country since 2017.
- A bank account was opened fraudulently at HDFC Bank's Indore branch in December 2017 using Mr. Mehta's PAN card.
- The bank manager acknowledged the account was opened by a third party, not Mr. Mehta, yet refused to initiate any complaint or investigation.
- Mr. Mehta only learned of the account after receiving a KYC compliance notification from the bank in early 2025.
- The bank's failure to conduct proper in-person KYC verification was a clear violation of RBI's Master Direction on KYC, 2016.
- A legal notice under the Digital Personal Data Protection Act, 2023 compelled the bank to act.
- The fraudulent account was used for unknown transactions, potentially involving money laundering or tax evasion.
The Direct Legal Answer
What should I do immediately?
First, do not approach the person who opened the account. File a written complaint at the nearest police station in the city where the fraudulent account was opened. If the police refuse, escalate to the Superintendent of Police and then file a private complaint before a Magistrate.
Can I force the bank to act?
Yes. Send a formal legal notice to the bank's branch manager, the regional manager, and the nodal officer. Cite RBI's Master Direction on KYC — the bank is responsible for verifying the identity of every account holder. If they fail to respond, approach the Banking Ombudsman under the Banking Ombudsman Scheme, 2006.
What criminal offences apply here?
This amounts to cheating, identity theft, and forgery. Under the Bharatiya Nyaya Sanhita, 2023, sections such as 318 (cheating), 336 (forgery), and 340 (using a forged document as genuine) apply. The police must register an FIR for these cognizable offences.
Advice in Such Cases
Consult with Lawyer: The very basic and important step to start is talk to Lawyer / advocate. You should not hesitate in paying his consultation fee i.e. might be in range of Rs. 10,000 to 50,000 depends case to case. He is helping you in this situation to come out. He is expert in the domain and can help you explain the procedure which you might have never explored. A good lawyer can get the issues resolved much faster than you think.
Identity theft and banking fraud cases involve nuanced procedural strategies — especially when the bank is uncooperative. An advocate who regularly handles such matters will know exactly how to invoke RBI guidelines, draft a legal notice, and escalate within the banking ombudsman framework. General practitioners often miss these critical steps.
Never try to confront the fraudster yourself. Let the legal process handle it. Also, write to the credit bureaus (CIBIL, Equifax) to flag your credit report and prevent further misuse.
Applicable Sections of Law
- Section 318 BNS: Cheating — whoever cheats another and thereby dishonestly induces that person to deliver property. Punishable with imprisonment up to 7 years and fine.
- Section 336 BNS: Forgery — making a false document or electronic record with intent to cause damage or injury. Punishable with imprisonment up to 2 years or fine or both.
- Section 340 BNS: Using as genuine a forged document — whoever fraudulently uses a forged document as genuine. Punishable with imprisonment up to 7 years and fine.
- Digital Personal Data Protection Act, 2023: Section 8(5) requires data fiduciaries (banks) to implement appropriate security safeguards. A violation can lead to penalties up to ₹250 crore.
Punishment and Penalties
- Minimum punishment: None specified under these sections; discretion of the court.
- Maximum punishment: Up to 7 years imprisonment under Section 318 BNS and Section 340 BNS.
- Fine: Discretionary by court, may include compensation to the victim.
- Cognizable: Yes — police can arrest without warrant.
- Bailable: For cheating (Section 318 BNS) — generally bailable; for forgery and using forged documents — non-bailable in many cases.
- Compoundable: No — these offences are not compoundable as they involve public interest.
Jurisdiction — Where to File the Case
The police complaint must be filed at the police station having territorial jurisdiction over the bank branch where the fraudulent account was opened. For criminal matters, the Magistrate's court in that same jurisdiction will take cognizance. In this case, the Indore police station and the Indore Magistrate's court would have jurisdiction. Jurisdiction matters because the offence of forgery and cheating occurs where the account is operated or the document is used — not where the victim resides. Filing in the wrong jurisdiction can delay the case significantly.
What if Police Refuse to File FIR?
If the police refuse to register an FIR, you have these options:
- Approach the Superintendent of Police under Section 173(4) BNSS and file a written complaint.
- If the SP also refuses, file a private complaint before the Magistrate under Section 175(3) BNSS.
- The Magistrate can order the police to investigate under Section 175(3) itself.
- As a last resort, file a writ petition before the High Court seeking a direction to register an FIR.
And remember — the police cannot refuse to register an FIR for a cognizable offence. That's settled law.
Rights of the Accused
- Right against self-incrimination: Article 20(3) of the Constitution — no person accused of an offence shall be compelled to be a witness against themselves.
- Right to legal representation: Article 22(1) — the accused has the right to consult and be defended by a legal practitioner of their choice.
- Right to be produced before Magistrate: Section 63 BNSS — the accused must be produced before a Magistrate within 24 hours of arrest.
- Right to know grounds of arrest: Article 22(1) — the accused must be informed of the grounds of arrest as soon as possible.
- Right to a copy of FIR: The accused is entitled to a copy of the FIR free of cost.
Bail Provisions
Forgery and cheating offences can be bailable or non-bailable depending on the specific section invoked. Under Section 318 BNS (cheating), the offence is generally bailable. But under Section 340 BNS (using forged document as genuine), it is non-bailable. So the accused may need to apply for regular bail before the Magistrate or Sessions Court. Anticipatory bail under Section 482 BNSS is available if there is a reasonable apprehension of arrest. The court will consider the severity of the offence and the accused's criminal antecedents while granting bail. Bail conditions typically include a surety bond and regular attendance.
Quashing of FIR / Case
The accused can approach the High Court under Section 528 BNSS to quash the FIR if the allegations do not disclose a prima facie offence or if the FIR is an abuse of process of law. Grounds include: the complaint is frivolous, the dispute is purely civil, no criminal intent, or the parties have settled the matter (though this offence is non-compoundable). Quashing is rarely granted in identity theft cases because the misuse of another's identity inherently involves mens rea and public interest. But if the bank admits the KYC lapse and there is no evidence of fraud, the High Court may exercise its inherent powers sparingly.
If You Are the Victim
- File a police complaint immediately at the police station where the account was opened.
- Send a formal legal notice to the bank and escalate to the Banking Ombudsman if they do not respond.
- Inform the credit bureaus (CIBIL, Equifax, Experian, CRIF) to flag your credit report.
- Keep all correspondence with the bank — emails, call recordings, and letters.
- Do not attempt to contact the person who opened the account. Let the authorities handle it.
Documents You Must Keep Ready
- Copy of your Aadhaar card and PAN card.
- Any KYC notification or bank correspondence received.
- Proof of your residency abroad (passport stamps, visa copies, travel tickets).
- Bank statement showing the fraudulent account details (if disclosed by the bank).
- Legal notice sent to the bank and its acknowledgment.
- Any response or communication from the bank.
- Identity proof and address proof to establish your non-resident status.
What Evidence Is Required?
- Primary evidence: The fraudulent account opening form, KYC documents, and bank statements showing transactions.
- Corroborative evidence: Your own identity documents proving you were not in India at the time of account opening.
- Circumstantial evidence: The bank manager's admission (preferably in writing or recorded call).
- Digital evidence: Email communications, call recordings, and screenshots of bank portal notifications.
- Expert evidence: A handwriting expert may be needed to prove the signature on the account opening form is not yours.
- Documentary evidence: Your passport stamps, travel itinerary, and residency proof showing you were abroad.
How the Police Behave in Such Cases
Police often treat identity theft complaints with skepticism, especially if the amount involved is small. They may ask the victim to approach the bank first or to "settle" the matter. This is wrong — the police must register an FIR for a cognizable offence. The victim should insist on a written complaint and, if refused, follow the escalation process to the SP and Magistrate. In larger cities like Pune or Indore, cyber crime cells handle such cases more professionally. Persistence and legal representation help.
Timeline of Legal Process
- FIR registration: 1-7 days, depending on police cooperation.
- Investigation: 30-90 days; police will call the bank for records, examine KYC documents, and record statements.
- Chargesheet filing: Within 60-90 days of FIR registration (or upon completion of investigation).
- Cognizance by Magistrate: 15-30 days after chargesheet.
- Trial: 6-18 months, depending on court backlog.
- Judgment: Variable — typically 1-3 years from FIR date.
- Appeal: If conviction or acquittal, appeal takes another 1-2 years.
How Long Will the Investigation Take?
The police investigation in identity theft cases usually takes 2-4 months. The bank must provide account opening documents, CCTV footage, and transaction records. If the bank cooperates, the process is faster. If the bank is uncooperative, the police may need a court order to compel them. Delays often happen when the accused is a repeat offender or when the account was used across multiple states.
Understanding the Costs
The total cost of a matter like this varies significantly from one case to the next — it depends on the complexity of the dispute, the forum involved, the number of hearings, and the specific facts of your situation. There is no single fixed figure that applies to everyone.
A professional advocate can give you an accurate estimate only after reviewing all your facts and documents in a consultation.
Can the Matter Be Settled Out of Court?
Technically, cheating and forgery are non-compoundable offences — the parties cannot enter into a private settlement to withdraw the case. However, if the bank takes corrective action and the police investigation reveals no actual loss to the victim, the court may consider a lenient view. The victim can also approach the Banking Ombudsman for a compensation settlement. Lok Adalat is not available for criminal offences. Mediation is possible only for the civil aspect — like recovering any losses or correcting credit reports.
Common Mistakes People Make
- Delaying the complaint: Delays give the fraudster time to use the account and damage your credit further.
- Confronting the fraudster directly: This is dangerous and can escalate into personal harm or legal counter-claims.
- Engaging a lawyer without domain expertise: An advocate who does not regularly handle banking fraud or identity theft cases may miss procedural shortcuts like invoking RBI guidelines or the Digital Personal Data Protection Act. This can prolong the case and weaken your position.
- Throwing away evidence: Keep every email, call recording, and bank notification — even if it seems minor.
- Talking to the bank without legal counsel: The bank may try to shift blame or get you to sign a waiver without legal advice.
- Posting on social media about the case: This can alert the fraudster and prejudice the investigation.
FAQs People Normally Have
Can I get the fraudulent account closed without a police complaint?
Generally, no. Banks require a police FIR to initiate an internal investigation and close the account. Your legal notice may push them, but the formal closure usually follows an FIR.
Will my credit score be affected?
Yes, if the account had any defaults or missed payments. You must immediately file a dispute with credit bureaus and provide the FIR copy to get your report corrected.
Can the bank be penalized for KYC lapses?
Absolutely. The Reserve Bank of India can impose penalties on the bank for failing to conduct proper KYC. You can also claim compensation for harassment through the Banking Ombudsman.
How long does it take to resolve this?
The police investigation takes 2-4 months. The full legal process — from FIR to final judgment — can take 1-3 years, depending on court backlog and the accused's cooperation.
Do I need to return to India to file the complaint?
Not necessarily. You can authorize a representative through a power of attorney to file the complaint and appear before the police or court. Many NRIs handle such cases remotely through their advocates.
This article is general legal information, not legal advice. Consult a qualified advocate about your specific situation.
Advocate Sudhir Rao, Supreme Court of India
Facing a similar matter? Speak to a criminal advocate in Delhi — Advocate Sudhir Rao appears in bail, trial and appellate matters before the Delhi District Courts, the Delhi High Court and the Supreme Court of India.