The Madhya Pradesh High Court has established a critical safeguard against arbitrary freezing of bank accounts based solely on unverified cyber crime alerts. In a decisive ruling, the Court held that financial institutions cannot act as de facto enforcement agents of police cyber cells without judicial oversight, reinforcing the principle that property rights cannot be suspended on administrative directives alone.
Background & Facts
The Dispute
The petitioner, Anshuman Tayal, is engaged in the lawful trading of cryptocurrency and virtual currencies. His bank account bearing number 50100286606769, maintained with HDFC Bank’s Airport Road Branch (IFSC: HDFC0002487), was frozen without prior notice or formal charge. The freeze was initiated based on an email communication from cyber crime cells of various police stations across India, alleging that funds credited to the account were proceeds of cyber fraud.
Key Facts
- The petitioner has never received any notice, summons, or complaint from any police station regarding involvement in cyber fraud.
- No FIR has been registered against the petitioner.
- The cyber crime cells of multiple states (including Bangalore, Karnataka) sent emails to HDFC Bank requesting account freezes, but none followed up with formal legal documentation.
- The amount in dispute was not quantified in the petition, but the Court accepted the bank’s disclosure of the frozen sum as communicated by the cyber cells.
- The petitioner has consistently maintained that he is engaged in legitimate crypto trading and that third parties may have used his account for illicit transactions without his knowledge.
- The petitioner sought immediate unfreezing of his account and proposed that the disputed amount be placed in a fixed deposit, accessible only upon judicial clearance.
Procedural History
- Date of account freeze: Not specified, but occurred prior to filing of writ petition.
- 21.04.2026: Writ Petition No. 14597 of 2026 filed before the Madhya Pradesh High Court, Indore.
- 14.03.2024: Interim order passed by the same Court in Malcolm Murayis & Ors. v. State Bank of India (W.P. No. 1100/2024), which served as binding precedent.
- In Malcolm Murayis, the Court had directed that petitioners be allowed to withdraw Rs. 50,000 per month from frozen accounts pending final disposal.
- The Court noted that despite being served via email, most cyber crime cells failed to respond to notices, indicating systemic negligence.
The Parties' Positions
For the Petitioner
- Argued that freezing of accounts without notice or magistrate’s order violates Article 21 of the Constitution (right to livelihood and property).
- Contended that banks are bound by the Reserve Bank of India’s guidelines and cannot act as instruments of extrajudicial seizure.
- Relied on Malcolm Murayis (supra) to assert that cyber crime alerts alone do not constitute legal grounds for account freeze.
- Proposed that disputed funds be held in fixed deposits, accessible only upon judicial order.
For the Respondent (HDFC Bank)
- Stated that the freeze was implemented solely on the basis of directives received via email from cyber crime cells of various police stations.
- Claimed no independent discretion to override such directives, citing compliance obligations under banking regulations.
- Did not contest the petitioner’s claim of innocence or lack of notice.
Relief Sought
The petitioner sought:
- Immediate unfreezing of his bank account.
- Direction to the bank to hold the disputed amount in fixed deposits pending judicial determination.
- Costs of the petition.
The Legal Issue
Can a bank freeze a customer’s account solely on the basis of an unverified email directive from a cyber crime cell, without any formal order from a magistrate under Section 102 of the Code of Criminal Procedure, 1973, and without providing the account holder an opportunity to be heard?
Arguments Presented
For the Petitioner
The petitioner relied on the precedent set in Malcolm Murayis & Ors. v. State Bank of India, where this Court held that cyber crime alerts do not equate to legal seizure. He argued that Section 102 CrPC requires a police officer to obtain a magistrate’s order before seizing property, and that mere email communications do not satisfy this requirement. He further cited K.S. Puttaswamy v. Union of India to emphasize that financial autonomy is integral to personal liberty. The petitioner submitted that the absence of any charge sheet, FIR, or notice rendered the freeze arbitrary and violative of natural justice.
For the Respondent
The bank contended that it was bound by the instructions issued by law enforcement agencies under the Information Technology Act, 2000, and the BNSS (Bharatiya Nagarik Suraksha Sanhita, 2023). It argued that non-compliance with cyber cell directives could expose it to regulatory penalties. However, it did not dispute the petitioner’s claim that no formal legal process had been initiated against him.
The Court's Analysis
The Court examined the precedent in Malcolm Murayis and found the factual and legal parallels in the present case to be identical. It emphasized that Section 102 CrPC mandates that any seizure of property by police must be reported to a magistrate without delay, and that the magistrate must record reasons for such seizure. The Court noted that the cyber crime cells had failed to comply with this mandatory procedure.
"The cyber crime cells, having issued directives to freeze accounts, have remained silent in response to court notices - a clear indication of procedural negligence and disregard for judicial authority."
The Court further observed that banks, as intermediaries, cannot assume the role of adjudicators. Their duty is to comply with lawful orders, not unverified administrative communications. The Court rejected the argument that regulatory compliance justifies violation of constitutional rights, stating:
"Compliance with unlawful directives does not render compliance lawful."
The Court also noted the systemic failure of cyber crime cells across states to respond to court notices, highlighting a pattern of institutional apathy. It held that the interim relief granted in Malcolm Murayis - allowing monthly withdrawals and placing disputed amounts in fixed deposits - was both equitable and legally sound.
The Verdict
The writ petition was allowed. The Court directed HDFC Bank to immediately unfreeze the petitioner’s account. The disputed amount, as communicated by the cyber crime agencies, shall be transferred to a fixed deposit. This amount shall remain locked until a competent Judicial Magistrate passes an order under Section 102 BNSS or any other applicable law, within three months from the date of this order. If no such order is passed within this period, the petitioner shall be entitled to withdraw the amount from the fixed deposit upon intimation to the concerned cyber crime agency. Costs of the petition are awarded to the petitioner.
What This Means For Similar Cases
Account Freezes Require Judicial Authorization
- Banks cannot freeze accounts based solely on cyber cell emails or administrative notices.
- Any seizure of funds must be preceded by a magistrate’s order under Section 102 BNSS or Section 102 CrPC.
- Practitioners must challenge freezes as violations of Article 21 if no judicial order exists.
Banks Must Challenge Unlawful Directives
- Financial institutions are not absolved of liability by claiming they "followed instructions."
- Banks must verify the legal basis of freeze requests and refuse non-compliant directives.
- Failure to do so may expose banks to liability for wrongful deprivation of property.
Cyber Crime Units Must Follow Due Process
- Cyber crime cells must now formalize freeze requests with magistrate applications.
- Non-response to court notices will be viewed as contempt of court and may trigger departmental action.
- Petitioners may now seek compensation for wrongful freezes under Article 226.
