Cyber Fraud — PECA 2016 and FIA Cyber Crime in Pakistan
Reviewed by the Commoner Law editorial team. Sources: pakistancode.gov.pk, Punjab/Sindh/KP/Balochistan provincial codes, Supreme Court of Pakistan, FBR, EOBI, SBP, NEPRA, OGRA, PMDC, FIA, and provincial Healthcare Commissions. Provincial variations cite Punjab/Sindh/KP/Balochistan Acts and ICT-specific ordinances. Written in plain English with everyday Urdu legal terms (FIR, qabza, khula, NTN, CNIC) for a general audience — this is educational content, not legal advice. Our editorial standards
What is this right?
The first thirty minutes after an online scam decide everything. Call the bank to freeze the receiving account. File at FIA Cyber Crime. Save every screenshot before you block the number. Recovery rates collapse after the first day, and they collapse hard.
The Prevention of Electronic Crimes Act 2016 is the federal cyber-crime law. Its 2025 amendments expanded the scope to cover "disinformation" (controversially), but the core consumer-protection provisions remain the workhorses.
Common offences (section numbers per PECA 2016 as enacted):
- Section 14 — Electronic fraud: committing fraud via information systems or electronic communications; up to 2 years' imprisonment and/or fine up to Rs 10 million.
- Section 16 — Unauthorised use of identity information: obtaining, selling, possessing, transmitting or using another person's identity information without authorisation; up to 3 years and/or fine up to Rs 5 million.
- Section 21 — Offences against modesty of a natural person and minor: superimposing/sharing/threatening to share intimate or sexually explicit images; harsher penalties where a minor is involved.
- Section 24 — Cyber stalking: repeated unwanted contact, surveillance, monitoring, or photographing/videoing and distributing without consent; up to 3 years and/or fine up to Rs 1 million (higher for minors).
FIA Cyber Crime Wing is the investigating agency. Offices in major cities (Islamabad, Karachi, Lahore, Rawalpindi, Multan, Peshawar, Quetta, Faisalabad, Sukkur, Gujranwala). Online complaint at fia.gov.pk/cyber-crime; helpline 1991.
Practical timelines:
- Initial complaint registration: 24–72 hours.
- FIR registration: typically 7–30 days after preliminary inquiry.
- Asset freeze (for fraud): 30–90 days through Banking Mohtasib parallel.
- Recovery of funds: highly case-dependent; faster when bank traces happen quickly.
For sextortion and online harassment of women, the Digital Rights Foundation runs a 24-hour helpline (0800-39393) that coordinates with FIA.
When does it apply?
- You've been defrauded online (fake store, OTP theft, romance scam, fake investment).
- Someone has stolen your CNIC/identity for digital impersonation.
- You're being harassed, stalked, or threatened online.
- Your private images/videos are being shared without consent.
What to do if you've been scammed online
- Preserve evidence: screenshots with timestamps, URLs, message threads, transaction records, phone numbers.
- For financial fraud: contact your bank IMMEDIATELY (within hours) to freeze the receiving account. Banking Mohtasib + FIA work in parallel.
- File at FIA Cyber Crime: online at fia.gov.pk/cyber-crime, by visiting any office, or via helpline 1991.
- For harassment/non-consensual content: Digital Rights Foundation helpline 0800-39393, plus FIA. DRF can help with takedown of content from social platforms.
- Don't pay scammers "to get your money back" — that's a recovery scam, common in Pakistan.
What should you NOT do?
- Don't share OTPs or banking PINs. Banks never ask. Anyone asking is scamming.
- Don't pay sextortionists. Payment fuels demand; report to FIA + DRF helpline immediately.
- Don't delete evidence. Even messages from blocked numbers should be screenshotted before blocking.
- Don't trust "police" calls demanding money — the "police courier" / "FBR fine" / "PTA fine" scams are persistent.
Frequently asked questions
Can FIA recover funds from a scam?
If reported within hours and the receiving account is in a Pakistani bank, recovery is possible — banks can freeze and reverse. Delays significantly reduce success. PTA and FIA coordinate to flag scammer numbers.
Is online harassment specifically punished?
Yes. PECA § 24 (cyber stalking) covers repeated unwanted contact, surveillance, and non-consensual sharing of images/videos — up to 3 years' imprisonment and/or Rs 1 million fine (higher where a minor is involved). The Digital Rights Foundation helpline 0800-39393 specialises in coordinated response.
What's the punishment for sharing private images without consent?
PECA § 21 (offences against modesty) — sharing or threatening to share intimate / sexually explicit images is a specific offence with imprisonment and fine, takedown orders to platforms, and civil compensation through a parallel suit. Penalties are stiffer where a minor is involved.
When does cyber fraud — peca 2016 and fia cyber crime apply?
You've been defrauded online (fake store, OTP theft, romance scam, fake investment).Someone has stolen your CNIC/identity for digital impersonation.You're being harassed, stalked, or threatened online.Your private images/videos are being shared without consent.
I've been scammed online — what's the fastest way to recover in Pakistan?
Preserve evidence: screenshots with timestamps, URLs, message threads, transaction records, phone numbers.For financial fraud: contact your bank IMMEDIATELY (within hours) to freeze the receiving account. Banking Mohtasib + FIA work in parallel.File at FIA Cyber Crime: online at fia.gov.pk/cyber-crime, by visiting any office, or via helpline 1991.For harassment/non-consensual content: Digital Rights Foundation helpline 0800-39393, plus FIA. DRF can help with takedown of content from social platforms.Don't pay scammers "to get your money back" — that's a recovery scam, common in Pakis...
What mistakes should I avoid with cyber fraud — peca 2016 and fia cyber crime?
Don't share OTPs or banking PINs. Banks never ask. Anyone asking is scamming.Don't pay sextortionists. Payment fuels demand; report to FIA + DRF helpline immediately.Don't delete evidence. Even messages from blocked numbers should be screenshotted before blocking.Don't trust "police" calls demanding money — the "police courier" / "FBR fine" / "PTA fine" scams are persistent.