Introduction:
The Rajasthan High Court has issued comprehensive guidelines to curb the indiscriminate and prolonged freezing of bank accounts in cybercrime investigations, while ensuring that the legitimate objective of tracing and recovering the proceeds of cyber fraud is not compromised. Emphasising that an effective investigation and the protection of innocent account holders must operate together, the Court held that extraordinary financial restrictions cannot be imposed mechanically, indefinitely or beyond what is reasonably necessary for the investigation.
Justice Anand Sharma issued the directions while deciding a batch of 105 petitions, led by Shree Balaji Enterprises v. Reserve Bank of India & Batch, in which individuals, firms, companies and other account holders challenged the freezing, debit-freezing or lien marking of their bank accounts pursuant to communications issued by investigating agencies in connection with alleged cyber financial frauds.
The petitions reflected a recurring problem that has become increasingly common with the rise of digital transactions and cyber fraud. In many cases, investigating agencies tracing the movement of allegedly fraudulent funds issue communications to banks seeking restraint over accounts through which suspicious money may have passed. Such accounts may belong to persons directly involved in the offence, suspected “mule account” operators, intermediaries, businesses or completely innocent persons whose accounts received or transmitted a disputed amount as part of an otherwise legitimate transaction.
The consequences of freezing an entire bank account can be severe. A blanket debit freeze may prevent an individual from accessing savings, salary or business funds. For a commercial establishment, it can disrupt payment of wages, statutory dues, suppliers and other ordinary business obligations. The High Court therefore recognised that although swift financial action is often essential in cybercrime cases, the process cannot operate on the assumption that every account touched by a suspicious transaction is itself an account connected with criminality.
The Court noted the large number of similar cases repeatedly coming before it and considered it necessary to frame general safeguards. The objective was not to create additional obstacles for cybercrime investigators. Rather, the Court sought to ensure that investigating agencies distinguish between a genuine mule account and an innocent account into which an isolated or incidental transaction may have travelled.
This distinction became the foundation of the judgment. The Court observed that the fight against cybercrime would be strengthened, rather than weakened, by requiring investigative action to be based on objective material and proportionate to the circumstances of each case. A genuine investigation does not require the indiscriminate freezing of every account appearing somewhere in the transaction trail.
The legal context of the case also involved the provisions of the Bharatiya Nagarik Suraksha Sanhita, 2023. The Court examined the distinction between seizure under Section 106 of the BNSS and attachment of property believed to represent proceeds of crime under Section 107. It further distinguished such statutory investigative measures from transaction-specific holds or liens and from independent restrictions imposed by banks under their Know Your Customer, Anti-Money Laundering or fraud-risk management obligations.
The Court was particularly concerned that different types of financial restrictions were often being treated as though they were legally identical. A request to preserve a particular disputed amount could be converted into a complete freeze of an account. A police communication could be followed by a banking restriction without clearly informing the account holder of its legal basis. An account could also remain frozen for a prolonged period simply because an investigation was still pending, without any meaningful review of whether continued restraint remained necessary.
Recognising these concerns, the High Court laid down a framework based on legality, proportionality, periodic review and accountability. It held that the extraordinary financial consequences of freezing a person’s bank account must be supported by objective material, exercised under lawful authority, connected with a legitimate investigative purpose and limited to the extent reasonably necessary.
The judgment is therefore significant not only for persons whose accounts are frozen in cybercrime investigations but also for investigating agencies, banks and regulators. It seeks to create a more structured approach in which the investigation of cyber fraud remains robust while innocent citizens are not left financially paralysed without adequate justification.
Arguments of the Parties:
The petitioners, comprising account holders from different factual backgrounds, challenged the freezing, debit-freezing and lien marking imposed on their accounts. Their principal grievance was that restrictions were often placed mechanically on the basis of communications received from investigating agencies without any proper examination of the individual account holder’s connection with the alleged cyber offence.
The petitioners’ case, in substance, was that the mere fact that a disputed amount had travelled through an account could not automatically establish that the account holder was involved in the underlying fraud. In modern banking systems, money can move through several accounts within a short period. A legitimate business, trader or individual may receive funds from a customer or transfer funds in an ordinary commercial transaction without knowledge that the money may have originated from a fraudulent activity further up the transaction chain.
According to the petitioners, the freezing of an entire account merely because a particular transaction was under suspicion was disproportionate. Where the disputed amount could be specifically identified, the authorities ought to preserve that amount alone through a lien or hold instead of preventing all operations in the account. A blanket freeze, they argued, could affect funds having no connection whatsoever with the alleged offence.
The petitioners also highlighted the hardship caused by prolonged restrictions. In several cases, account holders were allegedly left without meaningful information regarding the nature of the cyber complaint, the amount in dispute, the investigating agency involved or the precise reason for continuing the freeze. They contended that the account holder’s inability to access legitimate funds could continue for months or longer merely because the investigation remained pending.
Another major concern was the practical difficulty faced in inter-State cybercrime investigations. A complaint registered in one State could result in the freezing of an account maintained by a person in Rajasthan. The affected account holder could then be left in the difficult position of having to contact or travel to another State merely to understand why the account had been restricted or to seek clarification from the investigating agency that had issued the request.
The petitioners contended that this effectively transferred the burden of inter-State coordination from State authorities to individual citizens. A person who had not been accused of any wrongdoing could be expected to travel long distances simply because an investigating agency in another jurisdiction had traced a disputed transaction to his or her account. Such a system, they argued, was particularly harsh for small businesses, salaried persons and ordinary account holders.
The petitioners also raised concerns regarding the absence of periodic review. A freeze initially justified by the need for urgent investigation could become unnecessary as the investigation progressed. If the account holder was subsequently found to have no connection with the offence, or if the disputed amount was no longer required, there was no justification for continuing the restraint. Yet, according to the petitioners, account restrictions were often allowed to continue without a structured review mechanism.
The respondents, including the investigating authorities and banking institutions, were required to balance these grievances against the realities of cybercrime investigation. Cyber financial fraud frequently involves rapid movement of money across multiple accounts, different banks and several States. Investigators may need to act swiftly to prevent further dissipation of suspected proceeds. Delays in tracing or securing the funds can result in the disappearance of the money and make recovery substantially more difficult.
The investigative agencies could therefore contend that account restraints are sometimes necessary to preserve suspected proceeds and prevent further movement of funds. Cyber fraud often involves complex networks of accounts, including mule accounts used to receive and transfer money on behalf of fraudsters. A transaction that appears isolated at one stage may form part of a wider chain that becomes apparent only after further investigation.
The banking authorities also operate within a separate regulatory framework. Banks may have independent obligations relating to KYC compliance, anti-money laundering controls, fraud detection and risk management. The respondents could therefore maintain that not every restriction imposed on an account is solely the consequence of a police or cybercrime request. Certain restraints may arise from regulatory or internal banking requirements, subject to applicable law and directions of the Reserve Bank of India.
The issue before the Court was consequently not whether investigative agencies could freeze accounts at all. Their power and responsibility to act against cyber fraud were not in dispute. The real question was how that power should be exercised so that urgent investigative action does not become an indefinite or disproportionate financial punishment for persons whose involvement in the offence has not been established.
The High Court therefore had to strike a balance between two equally important considerations. On one side was the need to prevent cybercriminals from moving, concealing or dissipating fraud proceeds. On the other was the need to ensure that an innocent person or legitimate business is not deprived of access to an entire bank account merely because a limited amount of disputed money had passed through it.
Court’s Judgment:
Justice Anand Sharma adopted a balanced approach, making it clear that the directions were not intended to weaken cybercrime investigations or create unnecessary procedural hurdles. The Court instead held that effective investigation and protection of innocent citizens are complementary objectives. An investigation becomes more credible and legally sustainable when restrictions on financial accounts are based on objective material and proportionate to the actual circumstances.
The Court’s first and most significant direction was that no bank account should be subjected to an indefinite blanket debit freeze merely on the basis of a vague, cryptic or unverified communication. Before imposing or continuing a restraint, the Investigating Officer must ascertain and record material demonstrating a prima facie nexus between the particular account or transaction and the offence under investigation.
This requirement is crucial because it prevents the mere appearance of an account in a financial trail from automatically resulting in a complete freeze. Investigative agencies must identify some objective basis for connecting the account with the alleged offence. The Court thus moved away from an approach in which financial restrictions could be imposed simply because money had passed through an account at some stage.
The Court further emphasised proportionality. Where the disputed amount is identifiable, the ordinary course should be to preserve that particular amount through a lien or hold rather than freeze the entire account. A wider restraint may still be justified in appropriate cases, but the authorities must have reasons demonstrating why the less restrictive measure is insufficient.
The Court directed that the principles earlier laid down in the case of Jinat Bano must be strictly followed. The underlying approach is that a transaction-specific problem should ordinarily receive a transaction-specific response. If an alleged fraud concerns an identifiable amount, freezing an entire account containing substantially larger legitimate funds may be disproportionate unless the facts justify such an extensive restriction.
At the same time, the Court recognised that some cases may legitimately require a complete freeze. The nature of the suspected offence, repeated suspicious transactions, indicators suggesting that the account is being used as a mule account, evidence of the account holder’s conscious involvement, or the inability to segregate legitimate funds from suspected proceeds may justify wider action. However, the Court required specific reasons for such a decision to be recorded in the case diary or other appropriate record and communicated to the bank.
The requirement of recording reasons introduces an important element of accountability. A blanket freeze is not to be treated as the default response. The Investigating Officer must be able to demonstrate why a transaction-specific lien would not adequately serve the needs of the investigation.
The Court also carefully distinguished the legal basis for different forms of restraint. Where the action amounts to seizure under Section 106 of the BNSS, the statutory requirement of forthwith reporting the seizure to the competent Magistrate must be complied with. Where the investigating agency seeks attachment of property as proceeds of crime, the procedure prescribed under Section 107 of the BNSS must be followed, including placing the matter before the competent Court or Magistrate in accordance with law.
This distinction is particularly important because a transaction-specific hold, seizure of property and attachment of proceeds of crime are not interchangeable concepts. Each has its own legal foundation and procedural requirements. The Court therefore directed investigative officers to be sensitised about the difference between a suspected transaction, a transaction-specific hold or lien, seizure under Section 106, attachment under Section 107 and independent banking restrictions arising from KYC, AML or fraud-risk considerations.
The Court also held that an account freeze cannot continue indefinitely merely because the investigation itself is pending. Investigations, particularly those involving cybercrime across several jurisdictions, may take considerable time. But the pendency of an investigation does not automatically mean that every financial restraint imposed at the beginning must continue unchanged.
The necessity for continuing a freeze must therefore be periodically reviewed by both the Investigating Officer and the supervisory officer. If the investigation reveals that the account holder has no connection with the offence or that the disputed amount no longer needs to be retained, the restraint must be withdrawn forthwith.
Similarly, upon completion of the investigation, filing of a closure report, exoneration of the account holder or a finding that the account or funds are no longer required, instructions for defreezing must be issued without avoidable delay. The Court thus recognised that financial restrictions must have a continuing investigative justification and cannot survive merely because no one has formally taken steps to remove them.
The High Court also addressed the quality of communications between investigating agencies and banks. Every communication, as far as permissible, should contain sufficient particulars to identify the relevant case, account, transaction and amount involved, as well as the legal basis for the action. This is intended to prevent vague communications from being interpreted too broadly by banks.
Correspondingly, banks were directed not to mechanically convert a request concerning a particular transaction or amount into a blanket freeze of the entire account unless the communication and the material disclosed therein lawfully justified such wider action. This direction recognises that banks are not merely passive recipients of instructions; they must understand the nature of the restraint being sought and apply it according to the legal authority communicated to them.
The Court nevertheless preserved the independence of legitimate banking restrictions. Measures arising from KYC requirements, anti-money laundering obligations, fraud-risk management or other regulatory duties remain governed by the applicable law and RBI directions. However, banks must clearly distinguish such independent restrictions from restraints imposed pursuant to a police or cybercrime investigation. An account holder should not be left uncertain about whether the bank is acting under its own regulatory authority or because of an investigative communication.
The Court also directed strict compliance with the grievance redressal mechanism under Clause 10 of the Standard Operating Procedure dated 2 January 2026. The fact that a cyber complaint originated in another State cannot become a reason for leaving the affected account holder’s grievance unattended.
Verification of an account holder’s grievance should ordinarily be undertaken electronically or through video conferencing wherever practicable. Personal appearance should not be insisted upon unless genuinely necessary for the investigation, and the reasons for requiring such appearance must be recorded. This direction reflects the practical realities of inter-State cybercrime cases and seeks to reduce unnecessary hardship.
In the specific batch of petitions, the Court directed the concerned Investigating Officers and respondent banks to examine every affected account in light of the principles laid down in the judgment. Where the disputed amount was identifiable and there was no material justifying a wider freeze, the account was to be permitted to operate subject only to a lien or hold over the disputed amount.
Where no disputed amount could be identified and there was no specific material justifying the continuation of a complete freeze, the restraint was required to be reviewed and appropriate action taken in accordance with law. Similarly, where the account holder had already been exonerated or the investigation no longer required retention of the account or funds, defreezing was to be undertaken forthwith.
The Court gave particular importance to inter-State coordination. In matters where an account had been restrained solely because of an investigation outside Rajasthan, the concerned Rajasthan Police authorities or banks were directed to communicate with the requisitioning agency and obtain the necessary clarification. The burden should not fall upon the citizen to travel to another State merely to discover why the account had been frozen.
The Court observed that inter-State cyber investigation is now an unavoidable reality. However, inter-State investigation cannot mean an inter-State transfer of hardship to an innocent citizen. Authorities must coordinate with one another rather than requiring an affected person to navigate multiple jurisdictions without assistance.
For institutional implementation, the Court directed the Director General of Police, Rajasthan and the Inspector General or DIG in charge of Cyber Crime to issue, within four weeks, a comprehensive General Circular or Standing Order incorporating the principles laid down in the judgment.
The circular was requird to direct every Investigating Officer to compl