Delhi’s cybercrime account freeze system is being reshaped around a difficult administrative balance: investigators must stop fraud proceeds from moving, while innocent account holders need a timely way to restore access to their money. The introduction of the Money Restoration Module (MRM) and Grievance Redressal Mechanism (GRM) is intended to make that balance less arbitrary and more manageable for people whose accounts are caught in a cybercrime money trail.
A debit freeze can block ATM withdrawals, UPI payments, internet banking transfers and card transactions while still allowing deposits into the account. In some cases, a portion of the balance is also placed on hold. For an account holder, the restriction can therefore become more than a banking inconvenience: it can interrupt household expenses, medical payments, business transactions and other routine financial obligations.
The central problem is that cyber fraud money rarely remains in one account. According to Anyesh Roy, deputy commissioner of police in Delhi Police’s Intelligence Fusion and Strategic Operations unit, defrauded money typically moves through multiple bank accounts. Many of these are mule accounts used to receive or transfer illicit funds. Placing the money on hold in those accounts can help preserve funds for victims, but the transaction chain can also include bona fide account holders who received money through genuine transactions.
Roy said this can occur in the fourth or fifth layer of transactions, after the money has passed through several other accounts. An account holder may therefore be unaware that the money involved in a legitimate-looking transaction is connected to unlawful activity. The administrative challenge is to distinguish between an account that is actively involved in suspicious transactions and one that has received a disputed amount without knowledge of its origin.
Delhi Police’s response, as described in the report, operates through two principal actions. Where an account is involved in multiple suspicious transactions, the entire account may be debit-frozen, restricting outgoing transactions. In other cases, a lien may be placed only on the suspected amount. Under a lien, the account holder can continue using the account but cannot withdraw the disputed sum.
This distinction is important because it separates two different enforcement problems. A full debit freeze protects the investigation where the account itself appears deeply connected to suspicious activity. A lien is narrower: it attempts to preserve the disputed money without stopping all other legitimate banking activity. The difference determines whether an individual loses access to an entire account or only to the amount under investigation.
The GRM is designed for customers seeking the removal of a lien, unfreezing of an account or restoration of digital banking services. The customer first approaches the bank, after which a complaint is registered through the prescribed grievance channel. Bank officials and designated police or grievance officers examine the complaint. If the customer remains dissatisfied, the matter can be escalated to district and state grievance officers.
The process may include a meeting involving the investigating officer, the account holder and bank officials. Defined timelines govern grievance resolution, and directions may be issued to remove the lien, unfreeze the account or restore banking services. The mechanism therefore creates an administrative route for a person to explain a transaction rather than leaving the account holder to approach multiple offices without a clear process.
The numbers cited in the report indicate that this is not a marginal problem. Delhi Police received 5,833 requests under the GRM from the end of April, of which 4,820 had been disposed of by October 19. Under the MRM, the police received 17,336 requests and resolved 15,077. These figures show both the scale of complaints and the volume of cases moving through the new mechanisms.
The two systems address related but distinct situations. Under the MRM, a customer approaches the National Cybercrime Reporting Portal to seek restoration or interim custody of the disputed amount. The held amount is verified before an application is submitted. The matter then proceeds through the police or court, as applicable. The investigating officer examines the transaction, records findings and gives the account holder an opportunity to respond with supporting evidence.
A joint meeting with police and bank officials may also be held. The competent authority then decides whether the money should be restored to the victim or released to the account holder. The MRM consequently focuses on the disputed funds and the question of who should retain them, while the GRM deals more broadly with the banking restriction and the customer’s request for relief.
This division exposes the institutional complexity behind a financial account freeze. Banks control access to the account and digital channels, police investigate the suspected crime and trace the money, the National Cybercrime Reporting Portal serves as an entry point for restoration requests, and courts may become involved depending on the case. The account holder is required to navigate this chain even when the person did not knowingly participate in the underlying fraud.
The system’s basic logic is understandable. If cybercrime proceeds are allowed to move freely, recovering money for victims becomes more difficult. A temporary restriction can preserve the disputed amount while the transaction is examined. But the same intervention can impose costs on a person whose account has received a suspicious credit unknowingly. The problem is particularly acute when a small or isolated credit results in a restriction affecting the entire account.
The report notes that even a suspicious credit of Re 1 may trigger restrictions on the full account. That possibility illustrates the mismatch between the size of a disputed transaction and the scale of the operational impact. A small amount can lead to blocked payments, inaccessible banking channels and uncertainty over when normal services will return. The investigative objective may be limited to tracing one transaction, while the customer’s disruption extends across all outgoing payments.
This is also why the difference between a lien and a debit freeze matters as a question of proportionality. A lien preserves the amount under dispute while permitting other transactions. A debit freeze applies a wider restriction and may be justified where multiple suspicious transactions are identified. The process described by Delhi Police attempts to reflect that distinction, but the effectiveness of the system depends on how quickly and consistently the relevant authorities classify each case.
The GRM and MRM also change the nature of the account holder’s interaction with the system. Earlier, affected customers could be forced to run from pillar to post to have their accounts removed from a suspicious list and their banking services restored. The new mechanisms establish defined channels, escalation levels and opportunities to submit evidence. That does not eliminate the investigation, but it gives the customer a recognised place in it.
The figures for requests received and disposed of suggest that administrative capacity will remain central to the system. The GRM had disposed of 4,820 of 5,833 requests by October 19, while the MRM had resolved 15,077 of 17,336 requests. These totals indicate substantial processing activity, but they do not by themselves reveal how long individual cases took, how many resulted in complete unfreezing, or how many customers continued to face restrictions after disposal.
Those unanswered questions are important because disposal and restoration are not necessarily identical outcomes. A case may be examined, escalated or decided without immediately resolving every banking consequence for the account holder. The supplied report establishes the number of requests received and disposed of, but it does not provide a category-wise breakdown of outcomes, average resolution times or the number of cases in which only a lien remained.
The broader urban issue is the growing dependence of everyday life on uninterrupted digital banking. UPI payments, cards, internet banking and account-based transfers are now embedded in household, medical and commercial activity. When these services are restricted, the impact is felt not only inside a bank branch but across the city’s network of payments and services. A person may still have money in an account yet be unable to use it for ordinary obligations.
Delhi’s cybercrime response is therefore also a test of administrative design. Enforcement must be fast enough to stop the movement of stolen funds, but the redress system must be accessible enough to protect people who were not knowingly involved. The MRM and GRM represent an attempt to formalise that balance through verification, hearings, escalation and defined decisions rather than indefinite informal restrictions.
The evidence currently confirms that cybercrime proceeds can pass through multiple accounts, that innocent account holders may be caught in later transaction layers, and that Delhi Police has created mechanisms to process restoration and grievance requests. It does not establish how uniformly the mechanisms operate across banks or how long different categories of cases take to resolve. Those measures will determine whether the new framework merely processes complaints or substantially reduces the financial harm caused by account freezes.
