Back
Lays Down 14 Guidelines for Freezing Bank Accounts in Cyber Cases
In a landmark ruling that promises to rein in the practice of indiscriminate freezing of bank accounts during cyber crime investigations, the has issued a comprehensive set of 14 guidelines aimed at striking a balance between effective law enforcement and the protection of innocent citizens' financial rights.
The decision by Justice Anand Sharma, delivered on a batch of 105 writ petitions led by , addresses the recurring grievance of account holders whose entire bank accounts were rendered inoperative based on vague or disproportionate investigative requests.
The Core Problem: Blanket Freezes Over Minor Suspicions
The petitioners, ranging from individuals to firms and companies, complained that their bank accounts were frozen or simply because a small, often negligible, suspected fraudulent transaction passed through them. In some cases, the disputed amount was as low as Rs. 100, while the account contained lakhs of rupees. Many petitioners had no link to the alleged crime, had been exonerated in the investigation, or were never named in any FIR. Yet, their financial lives were brought to a standstill by indefinite blanket freezes.
Arguments Before the Court
The petitioners' counsel argued that freezing the entire bank account is arbitrary, excessive, and disproportionate. They contended that in the modern digital economy, a bank account is not just property but a vital tool for livelihood, business, and daily survival. They urged that, at best, the disputed amount should be placed on hold, not the entire account.
The State and investigating agencies, however, defended the practice as a necessary measure to prevent the dissipation of cyber fraud proceeds, which move rapidly through multiple layers. They argued that immediate freezes are essential to preserve evidence and suspected crime proceeds, and that at the investigative stage, only is required.
The Court's Legal Analysis: is Key
Justice Sharma, after a detailed examination of the statutory framework under the , particularly Sections 106 () and 107 (), held that every exercise of State power must meet the . The court drew a distinction between a (an investigative measure requiring immediate report to a magistrate under Section 106(3)) and an (a judicial process for securing proceeds of crime under Section 107). Blanket freezes cannot be used as a substitute for the latter without following due process.
The court also relied on the standard operating procedure (SOP) dated , issued by the ' , which contemplates transaction-specific holds and a time-bound grievance redressal mechanism.
Key Observations
"The object is not to create an additional hurdle for cyber-crime investigation, but to ensure that effective investigation and protection of innocent citizens operate simultaneously. The fight against cybercrime will be strengthened, rather than weakened, when investigating agencies distinguish between a genuine and an innocent account into which an isolated transaction has incidentally travelled."
"A bank account is not merely a repository of money. In contemporary life it is the principal mechanism through which an individual receives his salary or business receipts, pays for food, education, medical needs, and discharges contractual obligations."
"A mere expression such as 'suspicious transaction' or ' ' cannot by itself constitute adequate reasons for indefinitely immobilising the entire bank account."
The 14 Guidelines for Fair Freezing
The court laid down the following binding principles for all cyber crime investigations in Rajasthan:
- No based on vague or unverified communications.
- nexus between account/transaction and offence must be recorded.
- Where disputed amount is identifiable, place a on that amount only, not the entire account.
- If wider freeze is necessary, specific reasons must be recorded in the case diary.
- under Section 106 BNSS must be reported to the magistrate forthwith.
- under Section 107 BNSS must follow judicial procedure.
- Freezes must be periodically reviewed; they cannot continue indefinitely.
- If the account holder is exonerated, the restraint must be withdrawn immediately.
- Upon conclusion of investigation or closure report, defreezing instructions must be issued without delay.
- Every communication to the bank must contain case reference, legal basis, and clear identification of the disputed amount.
- Banks cannot mechanically convert a transaction-specific request into a .
- Independent banking restrictions (KYC/AML) must be clearly distinguished from police-directed freezes.
- Grievance redressal under the January 2026 SOP must be strictly followed and not left unattended due to inter-state issues.
- Verification of grievances should preferably be done electronically; personal attendance should not be insisted upon unless necessary.
Wider Implications and Directions
The court directed the , to issue a comprehensive circular incorporating these guidelines within four weeks. The was also directed to issue an advisory to all banks for periodical training of officials on the proper handling of freeze requests and the distinction between holds, liens, seizures, and attachments. A compliance report must be filed within eight weeks.
In individual cases, the court ordered a review of each petitioner's account. Where the disputed amount is identifiable and no wider suspicion exists, the account must be defrozen except for the disputed sum. Where the officer no longer needs the funds, the freeze must be lifted immediately.
The judgment clarifies that these directions do not hamper legitimate investigations but ensure that extraordinary financial restrictions are imposed only on objective material, under lawful authority, and to the extent reasonably necessary.
All 105 writ petitions were disposed of with these directions, marking a significant step toward accountability in cyber crime investigations.
