Allahabad High Court Issues Strict 5-Point Protocol Against Blanket Freezing of Bank Accounts in Cyber Crime Cases

Introduction

In a significant ruling aimed at curbing arbitrary actions by law enforcement in cyber crime investigations, the Allahabad High Court has declared blanket freezing of bank accounts illegal and arbitrary under Sections 94 and 106 of the Bharatiya Nagarik Suraksha Sanhita (BNSS), 2023. The Lucknow Bench, comprising Justices Shekhar B. Saraf and Manjive Shukla, was hearing a writ petition filed by Khalsa Medical Store through its proprietor, Yashwant Singh, whose Axis Bank account was entirely frozen following a notice from the Cyber Crime Police Station in Rachakonda, Hyderabad, Telangana. The court not only quashed the impugned notice but also laid down a comprehensive five-point protocol to ensure procedural safeguards, emphasizing that such freezes must be limited to specific amounts linked to alleged crimes and reported to a jurisdictional magistrate within 24 hours. This decision addresses growing concerns over the misuse of police powers in financial investigations, particularly in the digital age where cyber frauds are rampant, and underscores the need for "reasonable belief" rather than mere suspicion to justify seizures.

The ruling comes amid a surge in cyber crime cases, where police often issue broad directives to banks without adequate documentation, leading to severe financial and reputational harm to innocent account holders. By relying on Supreme Court precedents and judgments from other high courts, the bench highlighted the balance between investigative needs and fundamental rights, such as the right to livelihood under Article 21 of the Constitution. This development is poised to influence how cyber crime probes are conducted across India, prompting banks and police to adopt more transparent practices.

Case Background

The dispute originated from a cyber crime investigation registered as Cr. No. 520/2025 at the Cyber Crime Police Station, Rachakonda, Hyderabad, Telangana. The petitioner's Axis Bank account (A/C No. 917030037515043) was subjected to a debit freeze via a notice issued under Sections 94 and 106 BNSS on November 21, 2025. The notice alleged that the account was used for fraudulent transfers from victim accounts but failed to specify any amount for lien, provide a copy of the First Information Report (FIR), or include a formal seizure order. Instead, it demanded a blanket debit freeze and extensive account details, including transaction histories, IP logs, and personal identifiers like PAN and Aadhaar.

Yashwant Singh, proprietor of Khalsa Medical Store, challenged this action through Writ Petition No. 12211 of 2025, naming the Reserve Bank of India (as Respondent No. 1), the State of Uttar Pradesh (Respondent No. 2), the Superintendent of Police, Cyber Crime Cell, Lucknow (Respondent No. 3), and the Investigating Officer (IO) from Telangana (Respondent No. 4). The petitioner argued that the freeze crippled his business operations, preventing access to funds essential for daily transactions and inventory purchases. Despite multiple notices from the court, the IO from Telangana did not appear, leaving the bench to proceed without their input.

The case timeline reflects procedural lapses: The bank, upon receiving the notice, sought clarification from the IO multiple times but received no response, including no indication of the lien amount or case details. This inaction persisted until the hearing on January 19, 2026, when the court dictated its judgment. The broader context involves a pattern of similar complaints in cyber fraud cases, where police actions under the new BNSS—replacing the CrPC—have led to widespread account suspensions without judicial oversight, affecting small businesses and individuals disproportionately.

The main legal questions before the court were: (1) Whether a blanket freeze without specifying the tainted amount constitutes an illegal seizure of property under Section 106 BNSS? (2) What procedural safeguards must police follow when directing banks to freeze accounts in cyber crime probes? (3) Does the failure to inform a jurisdictional magistrate within 24 hours render such actions void? These issues struck at the heart of balancing investigative powers with property rights, especially since bank accounts qualify as "property" under the law.

Arguments Presented

The petitioner's counsel, Jalaj Kumar Gupta, contended that the police notice was a draconian overreach, violating principles of natural justice and proportionality. He emphasized that Section 106 BNSS permits seizure only of property "alleged or suspected to have been stolen" or linked to an offense, but the blanket freeze extended to the entire account, including legitimate funds unrelated to any alleged fraud. Gupta highlighted the absence of any FIR copy, seizure order, or specific amount, arguing this rendered the action arbitrary and in breach of Supreme Court guidelines requiring "direct links" between the property and the crime. He also pointed to the severe impact on the petitioner's livelihood, as the freeze halted all debits, effectively paralyzing the medical store's operations since November 2025. Drawing from other high court rulings, Gupta urged the court to quash the notice and direct immediate de-freezing, while establishing guidelines to prevent future abuses.

On the respondent side, counsel for Axis Bank, Amit Jaiswal, submitted that the bank had acted in good faith upon receiving the police notice but was hamstrung by the lack of follow-up documentation. Jaiswal informed the court that, despite issuing several letters to the IO seeking the lien amount, FIR details, and seizure order, no response was forthcoming. He referenced a Rajasthan High Court judgment in Dharmendra Chawra Harish Bhai v. State of Rajasthan (S.B. Criminal Miscellaneous Application No. 557 of 2025), which outlined strict protocols for account seizures in cyber cases, including mandatory FIR copies and nodal officer communications. The bank argued it could not unilaterally lift the freeze without legal clarity, but supported the petitioner's plea for relief, noting the notice's vagueness made compliance burdensome and potentially liable for the account holder's losses.

Notably, the IO from Telangana (Respondent No. 4) failed to appear despite repeated court notices, which the bench viewed with concern. This absence meant no counter-arguments were presented on behalf of the police, such as evidence linking the account to specific fraudulent transactions or justifications for the full freeze. The RBI and state respondents also did not actively contest the petition, leaving the bank's submissions as the primary opposition input. Overall, the arguments underscored a systemic issue: police expediency in cyber probes often overrides due process, leaving banks and account holders in limbo.

Legal Analysis

The court's reasoning was methodical, beginning with an affirmation that bank accounts constitute "property" seizable under Section 106 BNSS, as clarified by the Supreme Court in State of Maharashtra v. Tapas D. Neogy (1999) 7 SCC 685. In that case, the apex court expanded the definition to include accounts with "direct links" to offenses, particularly corruption, to prevent dissipation of crime proceeds. However, the Allahabad Bench stressed that this power is not unfettered; seizures must be based on "reasonable belief" rather than "mere suspicion," echoing Nevada Properties (P) Ltd. v. State of Maharashtra (2019) 20 SCC 119. There, the Supreme Court cautioned against using Section 102 CrPC (now 106 BNSS) to intervene in money disputes without substantiation, distinguishing suspicion (a lower threshold) from belief supported by evidence.

The bench further drew from Teesta Atul Setalvad v. State of Gujarat (2018) 2 SCC 372, which held that while prior notice to account holders is not mandatory, a post-facto report to the jurisdictional magistrate is essential under Section 106(3) BNSS. Failure to comply could void the action. Integrating insights from the other sources, the court noted the practical realities of cyber crimes, where rapid fund transfers necessitate quick freezes but not at the expense of rights. It referenced the Rajasthan High Court's detailed guidelines in Dharmendra Chawra Harish Bhai , which mandate FIR copies with freeze requests and prohibit full account blocks for third-party suspicions. Similarly, the Kerala High Court in Dr. Sajeer v. Reserve Bank of India (2024) 1 KLT 826 ruled that freezes must be proportionate, limited to suspected amounts, to avoid encroaching on dignity and livelihood rights under Article 21.

Distinguishing related concepts, the judgment clarified that Section 94 BNSS empowers summoning documents or devices for investigation, but when combined with Section 106 for seizures, it requires specificity—no blanket liens. The court critiqued the notice's demands for broad data (e.g., IP logs, full transaction histories) as invasive without safeguards, potentially violating privacy under the Bharatiya Sakshya Adhiniyam, 2023. Legal principles applied included proportionality, procedural fairness, and accountability: Police must provide seizure orders within 3-4 days, inform magistrates within 24 hours, and limit actions to crime-linked sums. Banks acting without proper procedure face civil and criminal liability for resultant damages, a deterrent against complicity in overreach.

This analysis reveals a judicial pushback against post-BNSS investigative laxity, ensuring seizures serve justice rather than cause undue hardship. By mandating case numbers and FIRs to banks, the ruling enhances transparency, allowing account holders to challenge freezes effectively.

Key Observations

The judgment is replete with pivotal excerpts that encapsulate the court's concerns and directives. Here are key quotations highlighting the reasoning:

1. "A blanket notice by the police to the bank to freeze a particular account, without indicating the amount (on which lien is being sought) would be illegal and arbitrary." This underscores the core flaw in the impugned notice, emphasizing specificity as a constitutional imperative.

2. "Section 106 of BNSS should not be interpreted to empower police officers to intervene in money disputes by seizing property especially based on mere suspicion but it must be bolstered by reasonable belief." Drawing from Supreme Court precedents, this observation elevates the threshold for police action, preventing misuse in financial probes.

3. "As soon as information to block or put on hold or marking of a lien is forwarded to a bank or any financial intermediary, including a payment system operator (PSO), then the information shall simultaneously be sent to the jurisdictional Judicial Magistrate within 24 hours. Failure to inform may render such an action as void." This procedural safeguard, inspired by Teesta Atul Setalvad , ensures judicial oversight from the outset.

4. "In several of these cases, we are finding that the debit freeze is sought on the entire account of the petitioners without providing to the bank the seizure notice that is required to be issued by the Investigating Officer." The bench's frustration with systemic lapses is evident, calling for standardized protocols.

5. "If any bank puts on hold any bank account or escrow account maintained by any entity / citizen on the request of the police without following the proper procedure, then the bank shall be personally liable for the Civil and Criminal consequences for the loss including financial and reputational damage of such entity / citizen." This warning promotes accountability across stakeholders.

These observations, directly from the 11-page order, reinforce the five-point protocol and signal a shift toward balanced cyber crime enforcement.

Court's Decision

In its final ruling on January 19, 2026, the Allahabad High Court quashed the November 21, 2025, notice under Sections 94/106 BNSS, declaring it "unjustified and illegal." The bench explicitly stated: "In light of the same, the impugned notice is quashed and set aside with a direction upon the banks concerned to immediately de-freeze the accounts of the petitioner and allow the petitioner to carry on his normal banking activities. Liberty is also granted to the petitioner to inform the bank for immediate de-freezing of the account in the course of the day today." This order provided swift relief to Khalsa Medical Store, restoring access to the account without prejudice to ongoing investigations.

Beyond the specific remedy, the court established a binding five-point protocol for future freezes in cyber crime cases:

• Principle A : Seizures under Section 106 BNSS require "reasonable belief," not mere suspicion, to avoid intervening in civil money disputes.

• Principle B : Freeze requests must be sent immediately to the bank's nodal officer, accompanied by the FIR or complaint copy; banks/PSOs may decline incomplete requests.

• Principle C : Notices can only mark liens on specific tainted amounts, never the entire account.

• Principle D : Simultaneous intimation to the jurisdictional magistrate within 24 hours is mandatory; non-compliance voids the action.

• Principle E : Banks face personal liability for damages if they freeze accounts without proper procedure.

The practical effects are profound: Police must now issue detailed, time-bound notices, reducing arbitrary freezes that have plagued cyber probes. For the petitioner, it meant immediate business resumption; for others, it sets a precedent for challenging similar actions via writs. Future cases may see fewer blanket directives, with increased reliance on digital evidence like traced transactions rather than broad suspensions. This could streamline investigations by focusing resources on verified links, while protecting innocents—such as unwitting recipients of fraud—from financial ruin.

Broader implications extend to the justice system: The ruling aligns with the BNSS's intent for efficient yet rights-respecting probes, potentially reducing high court litigation over freezes. It may influence RBI guidelines for banks, encouraging nodal officer protocols and training. In cyber crime hotspots like Telangana, this could foster better inter-state coordination, with FIRs shared promptly. Ultimately, by holding IOs and banks accountable, the decision fortifies economic freedoms, ensuring technology-driven crimes do not erode due process. Legal professionals anticipate its citation in similar petitions, possibly leading to nationwide uniformity via Supreme Court review.