The Punjab and Haryana High Court has delivered a decisive ruling affirming that financial institutions cannot unilaterally freeze bank accounts or impose liens based solely on automated alerts from cybercrime portals, absent any confirmed suspicious transaction or judicial order. This judgment reinforces the constitutional right to property and procedural fairness under Article 21, setting a critical precedent for account holders caught in overbroad cybercrime enforcement mechanisms.
Background & Facts
The Dispute
The petitioner, Sajjan Singh, an agriculturist residing in Haryana, sought the de-freezing of his savings bank account No. 3115000100074291 maintained with Punjab National Bank, Sahlawas Branch. A lien of Rs. 6,71,000 was imposed on his account following an automated alert generated by the National Cyber Crime Reporting Portal. The alert was triggered in connection with Case No. 20/2025 registered at the Cyber Economic & Narcotic Crime Police Station under Sections 66D of the Information Technology Act, 2000 and Sections 316(2) and 318(4) of the Bharatiya Nyaya Sanhita, 2026.
Key Facts
- The petitioner is a farmer with no prior criminal record or involvement in any financial fraud
- His account was frozen without prior notice or opportunity to be heard
- The Bank confirmed in its affidavit that no suspicious transaction was detected in the petitioner’s account
- The Bank’s internal investigation concluded that the petitioner’s KYC documents were complete and valid
- The petitioner had not received any funds from any alleged suspicious party
- No FIR has been registered against the petitioner
- No order of attachment under Section 107 of the Bharatiya Nagarik Suraksha Sanhita, 2023 has been passed by any Magistrate
- The petitioner submitted multiple representations to the Bank and law enforcement agencies, all of which remained unaddressed
Procedural History
- Date of Account Freeze: Not explicitly stated, but occurred after automated alert from National Cyber Crime Reporting Portal in early 2025
- Date of Petition Filing: 18.03.2026 (petition filed under Articles 226 and 227 of the Constitution)
- Date of Bank’s Affidavit Filed: Prior to 18.03.2026 (filed by Mr. Satpal Singh, Branch Manager)
- Date of Interim Reference: 24.02.2026 (Court referenced its earlier order in Labpreet Kaur v. Union of India, CWP No. 31234 of 2024)
- Date of Hearing: 18.03.2026
- Date of Judgment: 18.03.2026
The Parties' Positions
For the Petitioner
- Argued that the freeze and lien were arbitrary and violative of Article 14 and Article 21
- Emphasized that the Bank itself found no suspicious activity in his account
- Highlighted that he was not named in any FIR or charge sheet
- Contended that automated alerts cannot substitute due process
- Relied on the Court’s earlier order in Labpreet Kaur as binding precedent
For the Respondent-Bank
- Conceded that no criminal case was registered against the petitioner
- Admitted that no suspicious transaction was found in his account
- Stated that the lien was imposed solely on the direction of law enforcement agencies
- Did not dispute the petitioner’s claim of innocence or the absence of irregularities
Relief Sought
The petitioner sought:
- Immediate de-freezing of his savings bank account No. 3115000100074291
- Removal of the lien of Rs. 6,71,000 on the account
- Direction to the Bank and law enforcement agencies to cease any further action without due process
The Legal Issue
Can a bank lawfully impose a debit freeze or lien on a customer’s account based solely on an automated cybercrime alert, in the absence of an FIR, court order, or any verified suspicious transaction?
Arguments Presented
For the Petitioner
The petitioner’s counsel relied on the fundamental rights under Articles 14 and 21 of the Constitution, arguing that financial autonomy is integral to personal liberty. He cited Labpreet Kaur v. Union of India (CWP No. 31234 of 2024), where this Court had previously held that automated alerts cannot justify account freezes without independent verification. He emphasized that the Bank’s own investigation exonerated the petitioner and that no statutory provision permits freezing accounts without judicial or quasi-judicial sanction. He further argued that the imposition of a lien without notice or hearing violated the principles of natural justice.
For the Respondent
The Respondent-Bank conceded that no criminal case had been registered against the petitioner and that its internal audit found no irregularities in his account. It admitted that the lien was imposed only on the direction of law enforcement agencies, without independent assessment. The Bank did not contest the petitioner’s claim of innocence or the absence of suspicious entries. The Addl. Solicitor General for the Union of India did not file a separate counter, and the Bank’s position effectively amounted to a surrender of the legal justification for the freeze.
The Court's Analysis
The Court undertook a rigorous examination of the legal basis for freezing bank accounts in the absence of judicial process. It noted that while law enforcement agencies may request banks to assist in investigations, such requests cannot override constitutional safeguards. The Court observed that the National Cyber Crime Reporting Portal functions as an alert mechanism, not a judicial authority, and its automated triggers cannot substitute the requirement of probable cause or due process.
"In the absence of suspicious entry, the Bank or any other authority has no right to freeze anyone’s account in the form of debit freeze or lien on a particular amount."
The Court emphasized that the petitioner’s account had been cleared by the Bank’s own investigation, and no FIR had been registered against him. It further noted that no order of attachment under Section 107 of the Bharatiya Nagarik Suraksha Sanhita, 2023 had been passed by a Magistrate, which would have been the only lawful basis for such a restriction. The Court distinguished this case from situations involving ongoing investigations where provisional restraint may be justified, stating that here, the petitioner was entirely uninvolved.
The Court also reaffirmed its earlier ruling in Labpreet Kaur, holding that consistency in judicial protection of financial rights is essential. It rejected the notion that banks can act as de facto enforcement arms of cybercrime units without accountability. The Court held that the right to access one’s own funds is a facet of personal liberty under Article 21 and cannot be suspended on the basis of unverified digital alerts.
The Verdict
The petitioner succeeded. The Court directed Punjab National Bank to de-freeze the petitioner’s savings bank account No. 3115000100074291 and remove the lien of Rs. 6,71,000 within three days from the date of judgment. The Court clarified that this order does not condone any unlawful activity by the petitioner, should evidence of wrongdoing emerge later. All pending applications were disposed of.
What This Means For Similar Cases
Account Freezes Require Concrete Evidence, Not Automated Alerts
- Banks cannot rely on National Cyber Crime Reporting Portal alerts alone to freeze accounts
- Internal bank investigations exonerating a customer must be given decisive weight
- Any freeze without an FIR, court order, or verified suspicious transaction is ultra vires
Due Process Is Non-Negotiable in Financial Restrictions
- No account freeze may be imposed without notice or opportunity to be heard
- The burden lies on the State or bank to prove suspicious activity, not on the account holder to prove innocence
- Precautionary measures must be grounded in judicial or statutory authority, not administrative convenience
Precedent Now Binding Across All Banks
- The Labpreet Kaur precedent, now reinforced, applies uniformly to all banks in India
- Practitioners may cite this judgment to challenge arbitrary freezes in any jurisdiction
- Clients whose accounts are frozen on cybercrime alerts without FIRs should immediately file writ petitions under Article 226
