INTRODUCTION:
In the landmark judgment delivered in Abdul Azeez v. Union of India & Ors. and the connected matter (WP(C) 32516/2024), the Kerala High Court addressed an urgent and critical issue at the intersection of banking regulation and cybercrime prevention. The petitioners, whose accounts were frozen by South Indian Bank based on suspicious and inconsistent transactions, approached the High Court alleging that the bank’s action was arbitrary, unilateral, and unsupported by law. They argued that the freezing of their accounts without any prior requisition from a law enforcement agency or court amounted to a violation of their rights as account holders. Justice M.A. Abdul Hakhim undertook a comprehensive analysis of the statutory powers of banks, the regulatory framework established by the Reserve Bank of India (RBI), and the alarming rise in financial cybercrimes facilitated by digital payment systems. The Court ultimately issued a detailed set of guidelines empowering banks to impose temporary debit freezes on suspicious accounts without prior notice, while also directing RBI to frame a nationwide Standard Operating Procedure (SOP) to bring uniformity, clarity, and accountability to the process. The judgment underscores the critical responsibility of banks as gatekeepers of the financial system and the corresponding duty of RBI to ensure a robust regulatory mechanism that prevents misuse of digital banking channels for illegal activities.
ARGUMENTS ON BEHALF OF THE PETITIONERS:
The petitioners, represented by Albin A Joseph and other counsel, challenged the action of South Indian Bank on the ground that their accounts were frozen without any lawful authority or due process. They contended that the freezing was done solely on the basis of internal suspicion by the bank, without any communication from investigative agencies or a court order. The petitioners asserted that they were engaged in legitimate business activities and that the transactions flagged by the bank were neither unlawful nor fraudulent. The action of freezing their accounts without prior notice, without affording them an opportunity to explain, and without any statutory backing, they argued, amounted to arbitrary exercise of power, violating their rights under the Constitution. They further highlighted that despite the freeze continuing for over a year, no law enforcement authority had sought information or initiated any proceeding against them, which demonstrates that the bank acted beyond its authority. The petitioners also referred to RBI’s stand in the counter affidavit, which categorically stated that banks do not possess unilateral power to freeze accounts unless acting on requisition from law enforcement agencies or court orders. This, they argued, reaffirmed that the bank’s action was illegal, unsustainable, and liable to be quashed. They sought immediate de-freezing of their accounts and compensation for the hardship, reputational harm, and business loss caused by the illegal freeze.
ARGUMENTS ON BEHALF OF THE BANK AND RBI:
South Indian Bank defended its action by pointing to the unusual and suspicious nature of the transactions conducted through the petitioners’ accounts. The bank contended that it has a statutory obligation to monitor and report suspicious transactions under the Prevention of Money-Laundering Act (PMLA) and that failure to take timely action could render the bank complicit in facilitating criminal activities. The bank asserted that the unusual activity, non-alignment with the petitioners’ declared income profiles, and repeated irregular patterns triggered reasonable grounds for suspicion, compelling immediate freezing of operations to prevent further misuse. The bank submitted that it had reported the suspicious transactions to the RBI Financial Intelligence Unit (FIU) and other relevant authorities and that any further delay could compromise ongoing investigations into cyber and financial crimes.
The Reserve Bank of India, represented by its counsel, maintained a clear stand: as per existing regulatory guidelines, banks do not possess independent authority to freeze accounts without requisition from a competent authority. RBI emphasized that while banks must report suspicious transactions, the current regulatory structure does not vest them with unilateral power to freeze accounts based purely on suspicion. However, RBI also acknowledged the unprecedented rise in cybercrimes and the misuse of bank accounts in digital fraud, including UPI-based scams, phishing, mule accounts, and layered money-laundering transactions. RBI accepted the Court’s observation that evolving financial crimes require a stronger regulatory response and expressed readiness to consider the Court’s directive regarding formulation of a comprehensive SOP for dealing with suspicious accounts.
COURT’S JUDGMENT:
Justice M.A. Abdul Hakhim delivered a detailed and forward-looking judgment that balances individual rights, institutional responsibilities, and national economic security. The Court acknowledged the petitioners’ grievance that their accounts were frozen without requisition from law enforcement agencies and without specific statutory backing. However, it also emphasized the alarming escalation of sophisticated cybercrimes, digital payment frauds, and unauthorized money transfers across digital banking platforms. The Court observed that banking institutions today are frequently exploited as conduits for online fraud, money laundering, and trans-border cybercriminal syndicates.
The Court held that although existing RBI circulars guide banks in identifying suspicious transactions, they do not provide a clear roadmap or operational mechanism to deal with such accounts once suspicion is established. The judgment highlighted RBI’s statutory authority under Section 35A of the Banking Regulation Act, empowering it to issue binding directions to safeguard the integrity and stability of the banking system. Noting the increased misuse of UPI systems, wallet transfers, and instant remittance platforms, the Court stated that RBI has a duty to exercise its powers to protect the financial architecture of the country.
The Court upheld the need for banks to implement immediate precautionary freezes on accounts when reasonable suspicion exists, without waiting for law enforcement direction. However, to prevent misuse or arbitrary actions, the Court laid down a structured mechanism:
Banks may impose immediate debit freeze when reasonable suspicion arises.
Account holders must be informed on the same day through SMS and registered post.
The freeze must be reported to the jurisdictional Cyber Crime Police under existing RBI guidelines.
Account holders may submit explanations, which the bank must consider and decide upon within one week.
In absence of satisfactory explanation, banks may continue the freeze for a maximum of three months, unless otherwise directed by law enforcement authorities.
If no agency responds within three months, the freeze must be lifted, and the bank may either allow operation or demand closure of the account.
Account holders may legally challenge any arbitrary or unjustified rejection of their explanation.
The Court emphasized that banks, though not public authorities in the strictest sense, play a critical role in preventing financial abuse. Banks that fail to act promptly could become unwilling facilitators of crime. The Court clarified that these guidelines will operate until RBI formulates a binding SOP.
The petitions were disposed of with a direction to South Indian Bank to immediately notify relevant authorities about the freezing actions and thereafter follow the newly framed guidelines. The RBI was directed to urgently develop and publish a nationwide SOP defining the powers, limits, and obligations of banks when dealing with suspicious accounts.