By Adv. K J Muhammed Aslam · Advocate, Ernakulam (Bar Council of Kerala)
Your account suddenly shows “debit freeze” but your branch says no police or cyber cell has asked for it — the bank imposed it on its own after flagging transactions as suspicious. This is not a Section 106 BNSS police seizure and the remedy is not the same. Under the RBI Master Direction on KYC (as updated 2025) read with the Prevention of Money-laundering Act, 2002 and clarified by the Kerala High Court’s binding interim SOP of 19 November 2025 in Abdul Azeez v. Union of India, 2025:KER:88312 (W.P.(C) Nos. 32516 & 32291/2024, Justice M.A. Abdul Hakhim), a bank may impose that freeze — as originally framed, a temporary, reviewable measure with same-day notice, a one-week decision on your explanation, and a three-month outer limit.
Update (July 2026): On 14 July 2026, in Ajith P.R. v. Union of India, 2026:KER:52379 (WP(C) No. 48300 of 2025), Justice M.A. Abdul Hakhim revised the Abdul Azeez guidelines after noting that mule-account holders were benefiting from the automatic three-month release. The revised guidelines, set out below, replace that release with a police complaint by the bank.
Why did my bank freeze my account when no police complaint exists?
Banks flagged a sharp rise in money mule accounts after UPI scale — accounts used to layer fraud proceeds. As reporting entities under Section 2(1)(wa) PMLA, banks must monitor transactions and report suspicion. The RBI Master Direction on KYC requires:
- ongoing monitoring and identification of unusual or large transactions (Clause 2.10, 2012 Circular),
- enhanced due diligence for suspicious patterns,
- reporting of Suspicious Transaction Reports (STRs) to FIU-IND, and
- Clause 59 (2016/2025 Master Direction): banks must diligently identify money mule accounts and take “appropriate action, including reporting to FIU-IND.”
What Clause 59 does not spell out is whether “appropriate action” includes freezing without a police requisition. The RBI told the Kerala High Court it has not authorised such freezing except for KYC non-compliance or on receipt of a statutory order, and that freezing is primarily on competent-authority requisition (including under BNSS or BUDS Act). The High Court therefore faced petitions where South Indian Bank had frozen accounts for over a year on suspicion alone, with no law-enforcement order even after the bank had informed RBI — funds inaccessible, business paralysed.
The same pattern repeats in other districts: a high-value UPI inflow, a profile mismatch with declared income, an algorithmic alert, and a debit freeze without prior notice.
What did the Kerala High Court actually decide on 19 November 2025?
The Court reached a balanced, purposive answer in Abdul Azeez (2025:KER:88312):
A bank may impose an immediate debit freeze (block outflows, preserve the credit balance) without prior notice where it has reasonable grounds to suspect fraud, money laundering or mule use — as a necessary adjunct to PMLA Section 12AA(3) enhanced monitoring and Clause 59 “appropriate action” — but the power is strictly time-bound and procedural.
The Court rejected two extremes: that banks are “silent spectators” who must watch suspected laundering continue, and that they may act as law-enforcement agencies imposing indefinite freezes on internal alerts. The absence of a specific RBI SOP was held to not mean banks are powerless; it means the Court must supply an interim protocol until the RBI notifies one under Section 35A of the Banking Regulation Act, 1949.
What was the original 8-point SOP?
The Abdul Azeez judgment laid down the following interim guidelines (para 27), pending an SOP from the RBI. They applied to bank-initiated suspicion freezes in Kerala until the July 2026 revision described in the next section:
| Step | What must happen | Deadline |
|---|---|---|
| 1. Freeze permitted | Bank may impose a debit freeze on reasonable suspicion without prior notice | Immediate |
| 2. Same-day notice to you | Bank must intimate freezing with reasons for suspicion by SMS and registered post on the date of freezing itself | Same day |
| 3. Intimation to authorities | Bank must send the freeze with reasons to the jurisdictional Cyber Crime Police Authority and all authorities required under RBI guidelines, and ensure receipt | Promptly, and prove delivery |
| 4. Your right to explain | You may submit a written explanation with documents to the bank | No statutory bar, but quickly (days) |
| 5. Bank decides in one week | On receipt, the bank’s appropriate authority must consider and pass orders within one week, communicate them, and de-freeze if satisfied | 7 days from your explanation |
| 6. Authority direction prevails | If cyber police or other competent authority issues an order, the bank must comply immediately and inform you | Immediate |
| 7. Three-month cap | If no explanation or unsatisfactory explanation, the bank may continue only for three months from the last delivery to the authorities. If no authority communicates within three months, the bank must lift the freeze, allow you to deal with the credit balance, and then either permit operation or demand closure | 3 months |
| 8. Challenge | If the bank rejects your explanation without valid reason, you may challenge it before the appropriate legal forum (writ under Article 226) | — |
Practical note: The petitioners in Abdul Azeez had offered documents showing genuine business, but the bank had not informed the local cyber police, only RBI. The Court directed South Indian Bank to now intimate the authorities and decide afresh per the SOP.
What changed in July 2026 — the revised guidelines
In Ajith P.R. v. Union of India (14 July 2026), the Court noted that banks were being compelled to release suspected mule accounts once three months passed without a police response, and revised the guidelines as follows:
| Step | What must happen | Deadline |
|---|---|---|
| 1. Freeze permitted | Bank may impose a debit freeze on reasonable suspicion without prior notice | Immediate |
| 2. Notice to you | Intimation by SMS/email on the date of freezing, and the reasons for suspicion by registered post | Same day; registered post within 3 working days |
| 3. Your explanation | You may submit an explanation; the bank must decide within one week of receiving it and unfreeze if satisfied | Explanation within 1 month of the bank’s communication |
| 4. Police complaint | If no explanation is received within one month, or it is unsatisfactory, the bank must file a written complaint with the SHO of its local police station, with a copy to you | As early as possible |
| 5. FIR | The SHO must register an FIR, including for Section 111 BNS (organised crime), and investigate | Immediately on the complaint |
| 6. Operation of the account | Where the bank has complained to the police, the account is operated according to the police’s directions; if permitted, the bank may allow operation or demand closure | — |
| 7. Challenge | If the bank illegally rejects your explanation, you may challenge it in accordance with law | — |
How is this different from the other two freeze types?
| Freeze type | Who orders | Legal basis | Must bank inform you same day? | Cap | Your leverage |
|---|---|---|---|---|---|
| Police / cyber cell | Investigating officer via bank requisition | Section 106 BNSS, reported to Magistrate | Bank often delays; request it in writing | No statutory cap — challenge via representation, Section 503 BNSS, Article 226 | Lien limited to disputed amount — see complete Kerala guide |
| Bank suo motu (suspicion) | Bank itself on internal alert | Clause 59 Master Direction, PMLA reporting duties, Kerala High Court guidelines (Abdul Azeez, revised in Ajith P.R.) | Yes — SMS/email same day; reasons by registered post within 3 working days | No automatic release since July 2026 — unresolved cases go to the police | Written explanation within one month → decision in 7 days |
| KYC / non-PAN | Bank under RBI KYC circulars | Clause 38-39 Master Direction (KYC) | Prior notice required before partial/full freeze | Phased before closure | Update KYC and seek de-freeze |
Identifying the type is the first advocacy step — get the bank’s written reason. If it cites an NCRP acknowledgment or crime number, treat it as police-ordered; if it cites “suspicious transactions” or “profile mismatch” with no crime number, invoke the Kerala High Court guidelines as revised in July 2026.
What should you do in the first week?
- Get the freeze order in writing. Ask the branch for the dated communication with the reason for suspicion, the account number, the date of freeze, whether it is debit freeze or full freeze, and the name of the noticing department.
- File a concise written explanation within 3-5 days. Attach: account statement highlighting the questioned credits with invoices or contract, GST or business proof, KYC, and a request that the bank consider and decide within one week as the High Court’s guidelines require. The revised guidelines allow one month from the bank’s communication — do not use all of it.
- Keep proof of delivery. Registered post acknowledgement and email to the nodal/grievance cell. If the reasons for suspicion have not reached you, ask for them in writing — the revised guidelines require them by registered post within three working days of the freeze.
- Do not route fresh business through others’ accounts while frozen — the bank may cite fresh suspicion for a new freeze.
- If rejected or no decision in 7 days, escalate. File a grievance with the bank’s nodal officer and, if unresolved for 30 days, the Reserve Bank – Integrated Ombudsman Scheme at cms.rbi.org.in; in parallel, consider a writ petition under Article 226 before the High Court of Kerala citing Abdul Azeez and Ajith P.R. and seeking a decision on your explanation under the revised guidelines.
What if the freeze is really a KYC freeze?
Then the SOP above does not apply — the KYC freeze follows a different phased notice-and-freeze-then-closure sequence. A branch that labels a suspicion freeze as KYC without a KYC deficiency is misapplying the Direction. That distinction — suspicion vs KYC non-compliance — is itself a ground of challenge.
Primary sources
- Abdul Azeez v. Union of India & Ors., W.P.(C) Nos. 32516 & 32291/2024, 2025:KER:88312 (Kerala High Court, Justice M.A. Abdul Hakhim, 19 Nov 2025) — judgment text on Indian Kanoon; LiveLaw report; a certified copy can be obtained through the Kerala High Court’s judgment portal (highcourt.kerala.gov.in)
- Ajith P.R. v. Union of India & Ors., WP(C) No. 48300 of 2025, 2026:KER:52379 (Kerala High Court, Justice M.A. Abdul Hakhim, 14 July 2026) — revised guidelines — judgment text on Indian Kanoon
- RBI Master Direction on KYC (as updated) (Clauses 2.10, 38-39, 59 money mule, STR to FIU-IND)
- Banking Regulation Act, 1949 — Section 35A
- Prevention of Money-laundering Act, 2002 — Sections 2(1)(wa), 12, 12AA
- Constitution of India — Articles 226, 300A
- Reserve Bank – Integrated Ombudsman Scheme, 2021 and CMS
FAQ