Bank Account Frozen Due to UPI Transaction: Cyber Cell Freeze, Layer Accounts, Debit Freeze & De-Freezing Remedy in India

By Adv. Govind Bali
Fastrack Legal Solutions LLP

A bank account may become frozen after receiving money through UPI even where the account holder did not knowingly participate in a cyber fraud. This commonly occurs when investigators trace suspected fraud proceeds through several successive bank accounts and identify a UPI credit, transfer, merchant payment or peer-to-peer transaction connected with the transaction trail.

Under the Bharatiya Nagarik Suraksha Sanhita, 2023, police have statutory power to seize property that is alleged or suspected to have been stolen or is found in circumstances creating suspicion of the commission of an offence. Section 106 also requires the police officer to report the seizure to the Magistrate having jurisdiction. See Section 106 BNSS on India Code.

For cyber-fraud complaints, the National Cyber Crime Reporting framework facilitates rapid reporting and financial-fraud response. The Ministry of Home Affairs system directs victims of financial cyber fraud to 1930 and the National Cyber Crime Reporting Portal. See the MHA cybercrime grievance portal.

But a cyber-fraud transaction appearing somewhere in an account does not automatically mean that the account holder committed the fraud. The legal issue is usually whether the account itself, a particular amount, or the transaction trail has a sufficient nexus with the alleged offence to justify continued restriction.

For the broader legal framework, also read our Bank Account Freeze in India: Cyber Police Freeze, Legal Remedy & De-Freezing Procedure.

Quick Answer: What Should You Do If a UPI Transaction Leads to a Bank Freeze?

Obtain the bank’s written freeze details.
Identify the police station, cyber cell, State and complaint/FIR/NCRP reference.
Determine whether the restriction is a full debit freeze, lien, hold or amount-specific freeze.
Identify the disputed UPI transaction and amount.
Collect documents showing the source and purpose of the transaction.
Approach the Investigating Officer with a written de-freezing representation.
Seek restriction of the freeze to the disputed amount where appropriate.
If police relief is not granted, approach the competent Magistrate or Court.
In suitable cases, constitutional jurisdiction of the High Court may also be invoked.
Preserve the entire banking and transaction trail.

Section 503 BNSS empowers the Magistrate, in the circumstances specified in that provision, to make appropriate orders regarding disposal or delivery of property whose seizure by police has been reported. See Section 503 BNSS on India Code.

1. Why Can a UPI Transaction Lead to a Bank Freeze?

Modern cyber-fraud investigations frequently depend on tracing digital money. A complainant may report investment fraud, online trading fraud, impersonation, OTP fraud, phishing, fake customer-care fraud, matrimonial fraud, job fraud, loan fraud, cryptocurrency fraud, marketplace fraud, social-media fraud or UPI payment fraud.

Once money leaves the victim’s account, it may move rapidly across several accounts.

Example: Victim → Account A → Account B → Account C → your account.

Your account may therefore appear in the transaction chain even if you never communicated with the original victim. The investigation then turns on the reason the money reached your account.

2. What Is a Layer Account in Cyber-Fraud Investigations?

The expression layer account is commonly used operationally to describe successive accounts through which suspected proceeds are transferred.

Layer	Transaction
Victim account	₹1,00,000 fraudulently transferred
Layer 1	Receives ₹1,00,000
Layer 2	Receives ₹60,000
Layer 3	Receives ₹20,000
Merchant/individual	Receives ₹8,500

The person receiving ₹8,500 may have received it for legitimate goods, repayment of debt, salary, freelance work, sale of property, reimbursement, a business payment or an unrelated personal transfer.

The mere existence of the transfer therefore does not by itself answer whether the recipient had criminal knowledge or involvement. That factual distinction is central to a de-freezing application.

3. What Legal Power Allows Police to Seize Property?

Section 106 BNSS provides that a police officer may seize property that is alleged or suspected to have been stolen, or property found under circumstances creating suspicion of the commission of an offence.

The provision also requires a subordinate police officer to report the seizure to the officer in charge and requires every police officer acting under Section 106(1) to report the seizure forthwith to the Magistrate having jurisdiction.

This reporting requirement can become significant when examining whether a bank-account restriction has been maintained in accordance with statutory procedure.

4. Section 106 BNSS vs Old Section 102 CrPC

Many older judgments and cyber-police communications refer to Section 102 CrPC. After commencement of the BNSS on 1 July 2024, the corresponding general police-seizure provision is Section 106 BNSS.

Current pleadings should not mechanically reproduce old CrPC section numbers without examining when the FIR was registered, when proceedings commenced, the transitional provisions, the applicable procedural law and the precise police communication under challenge.

5. Can the Entire Bank Account Be Frozen for One UPI Transaction?

This is often the real dispute.

Suppose the total bank balance is ₹8,00,000 and the disputed UPI receipt is ₹15,000. A full debit freeze prevents operation of the entire ₹8,00,000 even though the investigated transaction concerns only ₹15,000.

The legal challenge may therefore focus on proportionality and nexus. The account holder may request that only the disputed ₹15,000 remain subject to lien or hold while the balance is released, or that a less restrictive mechanism replace the total freeze.

For a detailed discussion of this issue, read Can Cyber Police Freeze the Entire Bank Account for One Suspicious Transaction?

6. Full Debit Freeze vs Lien vs Amount Hold

Full Debit Freeze

The account may receive money but withdrawals and transfers are blocked.

Debit and Credit Freeze

Both incoming and outgoing operations may be restricted.

Lien

A specified sum is earmarked and cannot ordinarily be withdrawn, while the remaining account balance may continue to operate.

Hold

The bank places an operational restriction over a particular amount or transaction.

When challenging a freeze, first establish exactly what the bank has done. Ask for the amount under lien, the amount frozen, date of restriction, police/cyber-cell authority, complaint or FIR reference, police station, State and investigating officer details where available.

7. What If the Bank Refuses to Give the Cyber Complaint Details?

The account holder should submit a written request to the bank’s branch manager, nodal officer, grievance officer or compliance team. Ask for the restriction particulars available to the bank.

A useful request is for: the police or cyber authority, complaint/FIR/NCRP reference, disputed transaction amount, date of freeze instruction and nature of debit restriction.

The purpose is not to demand confidential investigation material from the bank. It is to identify the authority whose instruction caused the restriction so the account holder can approach the correct investigating agency or court.

8. What Documents Should Be Collected Immediately?

Banking Documents

Six to twelve months’ bank statements.
Account-opening documents and KYC.
Disputed UPI transaction details.
UTR/reference number.
Screenshots.
Account-freeze communication.
Bank correspondence.

Proof Explaining the Payment

Invoice or purchase order.
WhatsApp conversation or email.
GST invoice.
Delivery challan.
Salary document.
Loan repayment proof.
Sale invoice.
Rental document.
Contract.
Freelancing invoice.
Reimbursement record.

Identity / Business Documents

Aadhaar and PAN.
GST registration.
Incorporation documents.
Proprietorship documents.
Employment proof.
Office proof.

A legitimate commercial explanation supported by contemporaneous evidence is considerably stronger than a later oral statement unsupported by documents.

9. What Is the First Legal Step for De-Freezing?

The first practical legal step is usually a written representation to the Investigating Officer or Cyber Cell.

The representation should state:

Account holder’s identity.
Bank and account number.
Date of freeze.
Disputed transaction.
Amount.
Source of transaction.
Commercial or personal purpose.
Absence of connection with the complainant or fraudster, where true.
Supporting evidence.
Financial hardship caused by total freeze.
Willingness to cooperate.
Request for de-freezing or amount-specific lien.

Do not send a vague message saying only, “Please unfreeze my account.” The application should enable the officer to understand the transaction immediately.

10. Should You Contact the Original Cyber-Fraud Complainant?

Direct communication with the complainant should be approached cautiously. An account holder should ordinarily deal through the bank, investigating officer, cyber cell, Magistrate or Court and legal counsel.

Attempting to privately “settle” with an unknown complainant can create avoidable complications, particularly where the account holder does not know whether the person is genuinely connected with the case. The investigation should remain properly documented.

11. What If the Police Station Is in Another State?

This is common in cyber-fraud matters. A Delhi account may be frozen on an instruction from a cyber unit in another State.

The geographical distance does not make the freeze disappear. Identify the exact police station, district, State, complaint/FIR number, Investigating Officer and disputed amount. A written representation can then be sent electronically and physically where necessary.

If judicial intervention becomes necessary, territorial jurisdiction must be assessed carefully based on the police action, bank account, cause of action and relief sought.

12. Can the Magistrate Order Release of Frozen Property?

Section 503 BNSS provides a statutory mechanism where seizure of property by police has been reported to the Magistrate and the property is not produced before a criminal court during inquiry or trial. The Magistrate may make such order as considered appropriate regarding disposal, delivery to the person entitled to possession, custody or production of the property.

Depending on the procedural posture, an account holder may therefore seek an appropriate judicial order regarding the continued restriction.

13. Section 107 BNSS: Proceeds-of-Crime Attachment Is Different

Section 107 BNSS creates a separate mechanism where police believe property was derived or obtained, directly or indirectly, from criminal activity. The investigating police officer, with the statutory approval contemplated by the section, may apply to the competent Court or Magistrate for attachment.

Section 107 provides for a show-cause process, an opportunity of hearing, attachment of property found to be proceeds of crime and interim ex parte attachment in appropriate circumstances. See Section 107 BNSS on India Code.

A Section 106 investigative seizure and a Section 107 proceeds-of-crime attachment should therefore not be treated as identical procedures.

14. Why the Distinction Between Section 106 and Section 107 Matters

The legal basis of the restriction determines the challenge.

Ask whether the account was merely seized or frozen during investigation under Section 106, or whether police are alleging that the balance itself represents proceeds of crime and are proceeding under Section 107.

The procedural safeguards and degree of court involvement differ.

15. What Arguments Can Support De-Freezing?

No Knowledge of Cyber Fraud

The account holder had no communication or connection with the original fraud.

Legitimate Consideration

The payment arose from a genuine transaction.

Documentary Trail

Invoices, messages and banking records explain the payment.

Only One Transaction Is Disputed

The remaining balance has no demonstrated connection with the alleged offence.

Business Paralysis

A full freeze may prevent salaries, GST payments, vendor payments, rent, EMI, statutory dues and ordinary business transactions.

Willingness to Preserve the Disputed Amount

The account holder may offer to maintain the disputed amount subject to court directions while seeking release of the remaining funds.

Investigation Can Continue Without Total Freeze

Where appropriate, the applicant may argue that continued investigation does not require indefinite immobilisation of unrelated funds.

16. What Arguments Usually Fail?

“I do not know anything.”

This does not explain why the money came.

“The transaction is very small.”

A small amount can still be relevant to an investigation.

“The bank must immediately unfreeze it.”

The bank may be acting on instructions from an investigating authority.

“I never filed any cyber complaint.”

The complaint may have been filed by another victim.

“I will close the account.”

Attempting to close or empty an account connected with an investigation may create further complications.

The stronger strategy is to explain the disputed transaction with evidence.

17. What If You Sold Cryptocurrency or Digital Assets?

Extra caution is required where money was received after a P2P cryptocurrency sale, exchange transaction, digital-token transaction, USDT sale or online marketplace deal.

The defence file should preserve exchange account records, KYC, wallet details, transaction hash, P2P order, chat logs, payment confirmation and buyer details available on the platform.

The more complete the transaction trail, the easier it is to distinguish a genuine transaction from a mule-account arrangement.

18. What Is a Mule Account?

A mule account is generally understood in financial-fraud enforcement as an account used to receive or move illicit funds on behalf of another person.

Investigators may examine indicators such as rapid incoming and outgoing transfers, multiple unrelated credits, immediate cash withdrawal, commission for receiving money, handing over account credentials, permitting another person to operate the account and unexplained transaction patterns.

A genuine account holder should therefore be prepared to explain unusual transactions rather than rely only on the fact that the account stands in his or her name.

19. Can Salary Accounts Be Frozen?

A salary account is still a bank account. However, where continued total restriction causes severe hardship and only a particular amount is disputed, the account holder may request proportionate relief.

Supporting material could include salary slips, employer letter, rent, school fees, medical expenses, EMI obligations and evidence of dependent family members.

The hardship argument should supplement—not replace—the explanation for the disputed transaction.

20. Can a Current Account of a Business Be Frozen?

Yes. Cyber-tracing may affect business accounts. The commercial impact can be severe because a total debit freeze can prevent wages, GST, TDS, vendor payments, statutory dues, freight, utilities and working-capital servicing.

A company seeking relief should provide a structured business record demonstrating normal turnover, ordinary transaction pattern, invoice corresponding to the disputed credit, GST treatment, buyer or customer relationship, bank history and source of the remaining account balance.

21. Can Only the Disputed Amount Be Kept Under Lien?

This is often the most practical relief to seek.

Example: Total balance ₹12,00,000; disputed cyber credit ₹25,000.

The account holder may request: Maintain ₹25,000 under lien, subject to investigation and court orders, and release operation of the remaining balance.

Whether this is granted depends on the case, but it provides a proportionate alternative to asking the investigator simply to remove every restriction.

22. What If Several Cyber Complaints Have Been Linked to the Same Account?

Multiple freezes require a different strategy. One cyber cell cannot necessarily resolve restrictions imposed independently by other authorities.

Prepare a freeze matrix:

Complaint	State	Police Station	Amount	UTR	Status
A	Karnataka	Cyber PS	₹8,000	XXXX	Pending
B	Telangana	Cyber Cell	₹17,500	XXXX	Representation filed
C	Gujarat	Cyber PS	₹5,000	XXXX	Awaiting details

This prevents considerable confusion and assists counsel in identifying which authority must be approached for each restriction.

23. Does Paying Back the Disputed Amount Automatically Unfreeze the Account?

No. A bank freeze is part of an investigation or police instruction. Simply transferring money to someone does not automatically terminate the complaint, investigation, freeze instruction, FIR or transaction trail.

Any resolution should be formally reflected through the investigating authority, bank communication or judicial order as applicable.

24. What If the Account Holder Is Completely Innocent?

Then the objective is to demonstrate that innocence through the transaction record.

A strong factual presentation might state that ₹42,000 was received against a dated invoice for supply of goods, the goods were delivered under a delivery challan, GST was charged and the transaction appears in the business books, while the recipient had no relationship with the original cyber-fraud complainant.

That is materially stronger than merely saying: “I am innocent and know nothing.”

25. What Should a De-Freezing Representation Contain?

A. Account Details

Bank, branch, account number and IFSC.

B. Freeze Details

Date, cyber cell, complaint/FIR number and amount.

C. Disputed Transaction

Date, UTR, payer and amount.

D. Explanation

Commercial or personal purpose.

E. Supporting Documents

Invoice, messages, agreements and statements.

F. Absence of Criminal Nexus

Facts demonstrating lack of knowledge or participation.

G. Hardship

Salary, business and statutory obligations.

H. Cooperation

Undertaking to cooperate with investigation.

I. Prayer

Request complete de-freezing or, alternatively, restriction of lien to the disputed amount.

26. When Should You Approach the Court?

Judicial intervention may become appropriate where a representation is ignored, the Investigating Officer refuses to consider de-freezing, the account remains frozen indefinitely, unrelated funds remain blocked, there is no clarity regarding the authority, statutory procedure is disputed, multiple attempts at cooperation have failed or severe financial prejudice continues.

Section 503 BNSS recognises the Magistrate’s power to make orders concerning property whose police seizure has been reported to the Magistrate in the circumstances specified there.

27. Can the High Court Be Approached?

In an appropriate case, a High Court may be approached under its constitutional or criminal jurisdiction, depending on the nature of the police action, territorial jurisdiction, existence of an effective alternative remedy, procedural illegality, proportionality, duration of freeze and facts of the investigation.

This should not be treated as the automatic first remedy in every UPI freeze case. The more efficient sequence may sometimes be: Bank → Cyber Cell/IO → Magistrate → High Court if necessary.

28. What Should You Not Do After a Bank Freeze?

Do not fabricate invoices.
Do not backdate documents.
Do not delete chats.
Do not contact suspected fraudsters to coordinate explanations.
Do not route money through another account to defeat the restriction.
Do not provide false information to the bank.
Do not ignore police notices.
Do not hand account credentials to third parties.

Preservation of electronic and banking evidence is important.

29. National Cyber Crime Reporting System

For victims of financial cyber fraud, the Government’s cybercrime ecosystem directs financial-fraud reporting to 1930 and the National Cyber Crime Reporting Portal.

For an account holder whose account has been frozen because it appears downstream in the money trail, however, simply filing another cyber complaint may not itself remove the existing freeze. The account holder must deal with the authority responsible for the actual restriction.

30. Bank Account Freeze Checklist

Bank statement.
Written freeze confirmation.
Lien/frozen amount.
Cyber complaint number.
FIR number, if any.
Police station and State.
Investigating Officer.
Disputed UPI transaction.
UTR/reference.
Payer details.
Invoice/agreement.
WhatsApp/email trail.
GST records.
Legitimate source of remaining funds.
Hardship documents.
Representation to IO and acknowledgment.
Subsequent police or bank replies.

31. Frequently Asked Questions

Why has my account been frozen after receiving a UPI payment?

It may have appeared in the transaction trail of a cyber-fraud complaint. Police have statutory seizure powers under Section 106 BNSS over property suspected to be connected with an offence.

Does a frozen account mean I am accused of cyber fraud?

Not necessarily. A restriction may arise because the account appears in the fund trail. Whether the account holder has criminal involvement is a separate factual and legal question.

Can police freeze property during investigation?

Section 106 BNSS permits police seizure of property alleged or suspected to be stolen or found in circumstances creating suspicion of an offence and requires reporting of such seizure to the jurisdictional Magistrate.

Can I ask for only the disputed amount to remain frozen?

Yes, that can be sought as relief where the facts support it. The investigating authority or court will determine whether such limited restriction is appropriate.

Can a Magistrate order release?

Section 503 BNSS empowers the Magistrate to make appropriate orders regarding property whose police seizure has been reported where the provision applies.

What is Section 107 BNSS?

Section 107 provides a court-supervised process relating to property believed to be derived or obtained from criminal activity, including notice, hearing and attachment provisions.

Should I call 1930 to unfreeze my account?

1930 is the government helpline for reporting financial cyber fraud. A downstream account freeze generally requires engagement with the bank and the police or cyber authority that imposed the restriction.

What if the cyber cell is in another State?

Identify the exact police authority and submit a documented representation. If judicial relief is required, jurisdiction must be assessed on the facts.

How long does de-freezing take?

There is no single universal period. It depends on the investigating agency, transaction trail, cooperation, court proceedings and number of complaints linked to the account.

Can a business seek urgent relief?

Yes. Business paralysis, salaries, GST, vendor payments and statutory obligations can be placed before the authority or court together with the merits of the transaction explanation.

Key Takeaways

A UPI-linked bank freeze should not be approached merely as a banking complaint. It is usually a criminal-investigation and property-seizure issue.

The correct response is: identify the disputed transaction → identify the cyber authority → establish the legitimate transaction trail → submit a documented representation → seek amount-specific relief where justified → approach the competent court if necessary.

Section 106 BNSS provides the general police-seizure framework, Section 503 provides for Magistrate orders regarding seized property in the circumstances specified there, and Section 107 contains a separate statutory process for attachment of property alleged to represent proceeds of crime.

Authoritative Legal Sources

Disclaimer

This article is for general legal awareness and educational purposes only. It does not constitute legal advice, advertisement or solicitation. Cyber-fraud investigations and bank-account freezes depend on the actual complaint, FIR, transaction trail, police instruction, bank response, applicable procedural law and judicial orders.

Fastrack Legal Solutions