Pakistan Cybercrime Laws 2025 | PECA 2016 Guide | SIM Fraud Penalties | SimOwner

1. Key PECA 2016 Sections and Penalties

As digital connectivity, mobile wallets, and online services grow in Pakistan, so does the risk of cybercriminal activity. PTA and the Federal Investigation Agency (FIA) enforce strict cybercrime laws to protect citizens. The primary legal framework governing digital offenses is the Prevention of Electronic Crimes Act (PECA) enacted in 2016. In this guide, we discuss key PECA sections, penalties for SIM fraud and CNIC misuse, and how to file complaints.

PECA 2016 outlines penalties for various online offenses:

• Section 14 (Identity Theft): Using someone else\'s CNIC details, biometric data, or identity documents without authorization. Penalty: Up to 3 years imprisonment and/or Rs. 5 million fine.
• Section 17 (Electronic Fraud): Engaging in online fraud, lottery scams, or OTP hijacking. Penalty: Up to 7 years imprisonment and/or Rs. 10 million fine.
• Section 20 (Offenses Against Dignity): Cyber-harassment, blackmails, and online defamation. Penalty: Up to 3 years imprisonment and/or Rs. 1 million fine.
• Section 24 (Device Tampering): Accessing or modifying a mobile phone or router unlawfully.

These sections provide the legal basis for prosecuting cybercriminals in Pakistan. The FIA Cybercrime Wing is the designated law enforcement agency for investigating and prosecuting these offenses, working in coordination with PTA and NADRA.

The Evolution of Digital Law Enforcement: From FIA to NCCIA

In mid-2024, the federal government approved the establishment of a dedicated cyber security agency, the National Cyber Crime Investigation Agency (NCCIA), to replace the FIA\'s Cybercrime Wing. The NCCIA operates under the Ministry of Information Technology and Telecommunication, possessing specialized tools and digital forensics laboratories to prosecute modern electronic crimes, SIM registration fraud, online blackmail, and identity theft. By establishing a dedicated agency distinct from the general Federal Investigation Agency, Pakistan aims to accelerate the resolution of digital fraud complaints, improve tracking of cryptocurrency scams, and build international cooperation networks to counter cross-border cyber harassment.

Reporting Financial Scams to SBP and Cybercrime Cells

If you are targeted by a mobile banking or wallet scam (e.g. fraudulent transaction on EasyPaisa or a commercial bank account), immediate action is required to freeze funds and track the scammers:

1. Contact Your Bank Immediately: Call your bank\'s official helpline within 30 minutes of the fraud. Request the block of your account and the transaction reference number. The bank can initiate a chargeback or dispute if the funds have not left their partner network.
2. File SBP Banking Mohtasib Complaint: If your bank fails to cooperate or resolve your dispute, contact the Banking Mohtasib Pakistan (toll-free helpline: 0800-55223). SBP regulations protect consumers from unauthorized electronic funds transfer losses if reported timely.
3. Register Complaint with FIA Cybercrime: Visit complaint.fia.gov.pk or call 9911. Provide the transaction ID, the scammer\'s mobile number, and the recipient bank account details. FIA will trace the registered SIM card owner of the scammer\'s wallet.

2. SIM Card Fraud and Biometric Penalties

It is illegal to purchase or sell active biometrically registered SIM cards. Registering a SIM card against someone else\'s CNIC without their knowledge constitutes identity theft under Section 14. Fraudulent retail agents who misuse BVS biometric machines are prosecuted under PECA laws.

Preventative Legal Measures for Individual Citizens

Beyond knowing the penalties, citizens must take proactive steps to safeguard their digital rights under PECA 2016. If your physical CNIC is lost, immediately file a Loss Report (FIR) at the local police station and obtain a temporary slip from NADRA. This FIR serves as your legal alibi if any criminal attempts to register SIM cards or open mobile bank accounts using your lost card during the replacement window. Keep digital copies of your de-registration receipts whenever you block unauthorized numbers, as these are critical proof of your active identity protection audits. Furthermore, be cautious when using public Wi-Fi networks in airports or cafes; encrypt your web traffic using a VPN to prevent cybercriminals from capturing your sensitive mobile bank logins or OTP codes.

Telecom operators are required to verify the identity of subscribers biometrically before activating any SIM. If an agent bypasses this system or registers multiple SIMs on a single thumbprint, they face heavy fines, loss of retail license, and criminal prosecution. Citizens are advised to verify their active SIM count regularly to prevent misuse of their identity.

3. How to File an FIA Cybercrime Complaint

If you are a victim of online fraud, harassment, or SIM misuse, document all evidence and contact the FIA:

1. File an online complaint through the official FIA Cybercrime Wing portal (complaint.fia.gov.pk).
2. Call the toll-free FIA cybercrime helpline at 9911.
3. Visit the nearest FIA Cybercrime office located in Karachi, Lahore, Islamabad, Peshawar, or Quetta.

Provide details of the suspect, mobile numbers used, screenshots of communication, bank transaction records, and any other relevant evidence. FIA will investigate the complaint and initiate legal proceedings against the perpetrators under PECA laws.

Frequently Asked Questions