The Madhya Pradesh High Court has delivered a significant ruling affirming that banks cannot unilaterally freeze customer accounts based solely on unverified cyber crime alerts from police agencies. The judgment reinforces the principle that financial sovereignty cannot be suspended without due process, even in the context of alleged cyber fraud.
Background & Facts
The Dispute
The petitioner, Mahesh Bhura, holds a savings bank account with State Bank of India bearing Account No. 41381381382, IFSC: SBIN0000396. The account was frozen without prior notice or formal charge, following an instruction from a cyber crime cell alleging that funds credited to the account were linked to cryptocurrency-related fraud. The petitioner, who engages in lawful trading of virtual currencies, was not informed of any investigation, nor was he given an opportunity to respond.
Key Facts
- The account freeze occurred without any notice, show-cause letter, or formal complaint issued to the petitioner
- The cyber crime cell of Bangalore (Respondent No. 4 in connected case) was the only agency to respond to the bank’s inquiry
- No police station provided documentation justifying the freeze under Section 102 of the Code of Criminal Procedure, 1973
- The disputed amount alleged to be connected to fraud is Rs. 1,400
- The petitioner has never been named as an accused, nor has any FIR been registered against him
- The bank acted solely on email instructions from cyber crime units, without verifying their legal validity
Procedural History
- Date of freeze: Not specified in judgment, but occurred prior to filing of petition
- 27.04.2026: Writ Petition No. 13494 of 2026 filed before the High Court of Madhya Pradesh at Indore
- The petitioner relied on the precedent set in Malcolm Murayis & Ors. v. State Bank of India and Others, W.P. No. 1100 of 2024, dated 26.04.2024
- In Malcolm Murayis, the same Court had previously held that blanket freezes based on cyber cell notices violate constitutional rights
- The Court had earlier issued an interim order on 14.03.2024 in Malcolm Murayis, permitting monthly withdrawals of Rs. 50,000 and directing cyber cells to respond
- No cyber crime agency, except Bangalore, responded to the Court’s email notices
The Parties' Positions
For the Petitioner
- Argued that freezing an account without notice or judicial sanction violates Article 21 (right to livelihood and property)
- Contended that cyber crime cells have no statutory power to direct banks to freeze accounts without a magistrate’s order under Section 102 CrPC
- Submitted that the petitioner is a legitimate trader and the fraud was committed by third parties using his account
- Proposed that the disputed amount be placed in a fixed deposit, accessible only upon judicial clearance
For the Respondent (State Bank of India)
- Stated that it acted only on instructions from cyber crime cells and is bound to comply with law enforcement directives
- Claimed no independent discretion to question the legality of police requests
- Did not produce any written order, warrant, or magistrate’s directive authorizing the freeze
Relief Sought
The petitioner sought:
- Immediate removal of the freeze on his bank account
- In the alternative, permission to operate the account subject to retention of Rs. 1,400 for investigation
- Interim relief permitting account operation during pendency
- Any other relief deemed just
The Legal Issue
Can a bank freeze a customer’s account based solely on an unverified email directive from a cyber crime cell, without compliance with Section 102 of the CrPC or a judicial order?
Arguments Presented
For the Petitioner
The petitioner relied on Malcolm Murayis & Ors. v. State Bank of India and Others to argue that cyber crime cells are investigative agencies, not adjudicatory bodies, and cannot unilaterally direct banks to freeze accounts. He cited Section 102 CrPC, which mandates that seizure of property must be reported to a Magistrate, and that such seizure cannot be used as a substitute for formal investigation. He emphasized that the absence of any notice or opportunity of hearing violates natural justice and Article 14 of the Constitution.
For the Respondent
The State Bank of India contended that it is merely a financial intermediary bound to comply with directives from law enforcement agencies. It argued that non-compliance could expose it to liability under anti-money laundering norms. However, it failed to produce any written order, magistrate’s sanction, or statutory provision authorizing the freeze.
The Court's Analysis
The Court examined the precedent in Malcolm Murayis and found the facts and legal issues to be identical. It noted that cyber crime cells, while empowered to investigate, are not vested with the authority to order asset freezes. Section 102 CrPC requires that any seizure of property be reported to a Magistrate, who must then determine its necessity. The Court observed that no such procedure was followed.
"The cyber crime cells have sent emails to banks to freeze accounts, but have not responded to the Court’s notices, demonstrating a complete disregard for judicial oversight and procedural compliance."
The Court further held that banks cannot abdicate their responsibility to ensure compliance with constitutional norms by blindly following police directives. The petitioner’s right to access his funds for livelihood, even if disputed, cannot be suspended indefinitely without judicial review.
The Court rejected the argument that banks are powerless to question police instructions. It emphasized that financial institutions have a duty to uphold constitutional rights and must not become instruments of arbitrary state action.
The Verdict
The petitioner succeeded. The Court directed the State Bank of India to immediately unfreeze the petitioner’s account. The disputed amount of Rs. 1,400 shall be transferred to a fixed deposit, which may only be liquidated upon a specific order by a competent Judicial Magistrate within three months. If no such order is passed within that period, the amount shall be released to the petitioner upon intimation to the cyber crime agency. Costs are not awarded.
What This Means For Similar Cases
Banks Cannot Act as Enforcers Without Judicial Sanction
- Practitioners must challenge account freezes based solely on cyber cell notices as violations of Article 21
- Banks must now verify whether a freeze order complies with Section 102 CrPC before acting
- Legal notices to banks should demand production of magistrate’s order or written sanction under law
Cyber Crime Cells Must Follow Due Process
- Cyber crime units must now file formal applications before Magistrates to freeze assets
- Email notices to banks are legally insufficient; written orders with magistrate endorsement are mandatory
- Failure to respond to court notices may result in adverse inference against the investigating agency
Fixed Deposit as Interim Safeguard
- The Court’s directive to place disputed amounts in fixed deposits sets a new precedent for interim relief
- This balances investigative needs with the right to access funds
- Similar relief may be sought in cases involving UPI fraud, digital wallet freezes, or crypto-related allegations
