Mr. Deepak Gupta, a sixty-year-old proprietor running Deepak Electrical Industries out of New Delhi since 1990, found himself unable to operate his ICICI Bank account one day — not because he had done anything wrong, but because the account had been silently frozen following a flag on the National Cyber Crime Reporting Portal. No FIR had been registered. No police order had been issued. The Investigating Officer himself admitted before the Magistrate that his unit had nothing to do with the freeze. Yet the bank held the account debit frozen. On 27 March 2026, the Karnataka High Court had enough of it.
The writ petition, filed under Articles 226 and 227 of the Constitution of India, is a landmark illustration of how India's cyber crime complaint infrastructure can inadvertently trap innocent third parties — and what the courts can and will do about it.
How the Account Got Frozen
Deepak Electrical Industries maintained an ICICI Bank account (No. 62905033443) at the Chandni Chowk branch, Delhi. In November 2024, the petitioner received two inward transfers from his vendor, S.P. Chemicals — legitimate business payments totalling Rs. 8,41,000. These were routine commercial transactions between trading counterparties.
At some point thereafter, the account was flagged on the National Cyber Crime Reporting Portal (NCRP) in connection with a cyber crime complaint. Under the NCRP's Citizen Financial Cyber Fraud Reporting and Management System, banks receive automated lien-marking requests when flagged account numbers appear in a complaint. ICICI Bank acted on this flag and imposed a lien, effectively freezing the account.
The petitioner received no prior notice, no written communication from any police authority, and no explanation from the bank. He simply could not use his own account.
The Magistrate's Proceedings — Where the Truth Emerged
Before approaching the High Court, the petitioner filed an application before the jurisdictional Magistrate under Sections 497 and 503 of the Bharatiya Nagarik Suraksha Sanhita, 2023 (the equivalents of CrPC Sections 451 and 457) seeking defreezing. The Magistrate called for an IO Report from the East CEN Crime Police Station, Shivaji Nagar, Bengaluru.
What the IO stated in that report turned the case on its head.
The IO clearly stated that the above mentioned account is not freezed by the East CEN police in this crime.
The IO further stated that the account was freezed in the NCRB portal, but the freezer is not related to this crime and not ordered by the East CEN police.
It was further stated by the IO that there is no freezer details available even in NCRB portal pertaining to the account.
On this basis, the Magistrate rejected the application — holding that without a formal freeze order reported to the Magistrate, the court lacked jurisdiction to defreeze. The petitioner then moved the High Court.
The Magistrate's rejection, paradoxically, became the petitioner's strongest weapon before the High Court. The IO's own admissions — recorded in a judicial order — established definitively that the bank had acted entirely on its own, without any lawful backing.
The Court's Analysis — Three Decisive Findings
Justice Sachin Shankar Magadum analysed the Magistrate's order and extracted two core facts that drove the entire legal reasoning: (i) no crime had been registered requiring the freeze; and (ii) the East CEN Police had issued no communication to the bank whatsoever.
"Freezing of a bank account is a serious and drastic measure, which cannot be resorted to lightly or in a mechanical manner. Such action must necessarily be preceded by a valid and lawful communication issued by the competent Investigating Agency."
Justice Sachin Shankar Magadum — WP 19405/2025, para 10The Constitutional Dimension
The Court did not stop at finding the freeze legally unsustainable. It elevated the analysis to the constitutional plane, holding that the bank's unilateral action infringed two fundamental guarantees.
The Rule Laid Down — What Banks Must Do
The Court's reasoning in paragraphs 10 and 11 sets out a clear rule of action for banks receiving NCRP freeze requests:
A valid, lawful communication from a competent Investigating Agency is a mandatory prerequisite. That communication must clearly indicate the reasons for the freeze — specifically, that the funds are suspected to be proceeds of crime or linked to a cognizable offence under active investigation.
In the absence of such a communication or foundational material, any unilateral bank action freezing an account is legally unsustainable. The NCRP portal flag alone, without a supporting communication from the relevant police authority, does not satisfy this threshold.
The Final Order
The writ petition is hereby allowed.
Respondent No. 3 – ICICI Bank is directed to forthwith defreeze the petitioner's Bank Account bearing No. 62905033443 and permit the petitioner to operate the same without any restriction. Consequently, the lien marked on the said account shall stand withdrawn.
It is, however, made clear that this order shall not preclude or impede any Investigating Agency from initiating appropriate action in accordance with law, if any incriminating material is discovered in future warranting such action.
Why This Judgment Matters
Legal Team
Conclusion
The Deepak Gupta judgment exposes a structural gap in India's cyber crime reporting infrastructure. The NCRP Portal's lien-marking mechanism was designed to enable rapid response to financial cyber fraud — and it serves a legitimate purpose. But when a bank receives a portal flag and freezes an account without waiting for a formal police communication, it becomes an instrument of injury rather than justice.
Deepak Electrical Industries had done nothing wrong. The inward transfers from S.P. Chemicals were ordinary business receipts. The Investigating Officer himself confirmed the firm had no connection to any crime. Yet the account sat frozen — almost certainly disrupting purchasing, payroll, and day-to-day operations of a 35-year-old enterprise.
The Court's insistence on a valid, reasoned communication from the investigating agency as a threshold requirement for any account freeze is a proportionality check that every bank's compliance team should now be bound by. The NCRP portal flag opens a window for investigation; it does not, and must not, substitute for a lawful order.