Removing NCII / Intimate Imagery in Pakistan (2026 Legal Guide) — Rules & Requirements
About this article
Reviewed by the Commoner Law editorial team. Sources: pakistancode.gov.pk, Punjab/Sindh/KP/Balochistan provincial codes, Supreme Court of Pakistan, FBR, EOBI, SBP, NEPRA, OGRA, PMDC, FIA, and provincial Healthcare Commissions. Provincial variations cite Punjab/Sindh/KP/Balochistan Acts and ICT-specific ordinances. Written in plain English with everyday Urdu legal terms (FIR, qabza, khula, NTN, CNIC) for a general audience — this is educational content, not legal advice. Our editorial standards
What is this right?
NCII — non-consensual intimate imagery — runs on a parallel-path response in Pakistan. The criminal path is the NCCIA under PECA §21 (offences against modesty of a natural person and minor): use of electronic means that may result in reputational damage or breach of privacy is punishable with up to seven years' imprisonment or a fine up to five million rupees or both. Where the depicted person is a child, PECA §22 (child pornography) applies and carries a heavier sentence. Where the conduct is ongoing — repeated messages, threats to publish, demands for payment — PECA §24 (cyber stalking) attaches.
The takedown path runs in parallel through StopNCII.org: the tool generates a cryptographic hash (a 'digital fingerprint') of your image or video on your own device, then shares the hash with participating platforms (Meta / Facebook / Instagram, TikTok, Reddit, Bumble, OnlyFans, others — see the StopNCII partners list) so they can detect and remove uploads of the same image. The image itself never leaves your device. The service supports Urdu and requires that you were 18 or older at the time the image was taken. For minors, use takeitdown.ncmec.org (the US National Center for Missing & Exploited Children's equivalent for content depicting under-18s). Both services are free.
When does it apply?
- Intimate images or videos of you (taken consensually or not) are being shared online without your permission.
- Someone is threatening to share intimate imagery unless you pay or do something — sextortion. Treat as criminal under PECA §21 and §24.
- Deepfake / AI-generated sexual content depicts you. PECA §21 and §20 (offences against dignity) attach because the prohibition is on the use of electronic means causing reputational damage or breach of privacy; the synthetic-versus-real distinction is not the bar.
- The depicted person is a minor (under 18) — escalate to PECA §22 (child pornography) and use NCMEC's takeitdown service, not StopNCII.
- Intimate content has been uploaded to a platform that participates in the StopNCII hash list (Meta, TikTok, Reddit, Bumble, OnlyFans, others).
Removing NCII Through NCCIA, StopNCII, and PTA
- If you are 18+ and the image is of you, hash it via StopNCII.org now. Go to stopncii.org, select the file (the hash is generated on your device, the file never uploads), confirm eligibility (you are over 18 currently AND were over 18 at the time the image was taken), and submit. Participating platforms will then detect and remove uploads of the same image.
- If the depicted person is under 18, use NCMEC's takeitdown service instead. takeitdown.ncmec.org. Same on-device hashing model, sized for content depicting minors.
- File an online complaint with the NCCIA under PECA §21 and §24. nccia.gov.pk. Cite the section, attach evidence (screenshots showing the post and URL, transaction details if there has been a payment demand, the suspect's known details). The investigation creates the criminal-case record.
- For content hosted by a Pakistani-licensed platform or accessible from a Pakistani IP, also file at PTA. Pakistan Telecommunication Authority complaint portal: complaint.pta.gov.pk. PTA has operational power under the PTA Act 1996 and PECA to direct telecom operators and platforms to block unlawful content.
- Preserve evidence before reporting. Screenshots that show the URL, the username, the date, and the content; full email headers; transaction SMS for any payment demand. Save to cloud immediately. Phones can be seized as part of the NCCIA investigation; you'll want copies that survive.
- If there is a payment demand (sextortion), do not pay. Payment never ends the demand — it confirms the victim will pay, and the demand returns. Report to NCCIA under §21 (modesty) and §24 (stalking / coercion) and notify the bank if a transfer has gone through (the SBP Electronic Fund Transfers Regulations 2018 apply).
What should you NOT do?
- Don't pay the extortionist. The demand returns. NCCIA, PTA, and StopNCII are all free. Payment also creates a transaction record that can be used as further leverage.
- Don't take a screenshot, then delete the original. The investigation needs the URL still active where possible — a screenshot loses metadata. Save the URL alongside the screenshot and any messages.
- Don't engage publicly on Pakistani social media in a way that reveals the victim. PECA §20 (dignity), §21 (modesty), and §26-A (false / fake information) can attach to public posts about the offence; routing through the official channels first protects both the victim and the criminal case.
- Don't assume StopNCII works for under-18 content. StopNCII is for adult NCII. For content depicting a minor, NCMEC's takeitdown service is the correct path.
- Don't pay 'image-removal services' charging an upfront fee. Both StopNCII and NCMEC are free. The Banking Mohtasib and NCCIA repeatedly warn that paid-recovery offers are themselves scams.
About Data Privacy & Digital Rights in Pakistan
Pakistan does not yet have a general data protection law. The Personal Data Protection Bill — most recently in circulation as the draft Personal Data Protection Act 2025 — remains in Parliament and is not enforced. In its absence, your digital-rights protections come from scattered statutes: the Prevention of Electronic Crimes Act 2016 (cyberstalking §24, modesty offences §21, dignity offences §20, child pornography §22, spoofing §26); the Pakistan Telecommunication (Re-organisation) Act 1996 (telecom secrecy); the Banking Companies Ordinance 1962 (banking confidentiality); and Article 14 of the Constitution (dignity of person, privacy of home).
For non-consensual intimate imagery (NCII), 'deepfake' sexual content, or sextortion, the criminal path runs through the NCCIA under PECA §§ 21 and 24 — and victims should also use StopNCII.org in parallel. StopNCII generates a hash of the image on your device and shares the hash with participating platforms so they can detect and remove uploads; the actual image never leaves your device. The service is available in Urdu and requires the depicted person to be 18+ at the time the image was taken. For minors, use takeitdown.ncmec.org instead.
Frequently asked questions
How does StopNCII actually work?
StopNCII generates a cryptographic hash — a 'digital fingerprint' — of your image or video on your own device. The actual file never leaves your device. The hash is then shared with participating platforms (Meta, TikTok, Reddit, Bumble, OnlyFans, and others on the partners list) so they can detect and remove uploads of the same image when they appear. The tool supports Urdu. You must have been 18 or older at the time the image was taken, and you must currently be 18+.
Does StopNCII work in Pakistan?
StopNCII does not impose a geographic restriction — it is operated globally by SWGfL and lists Urdu among the supported languages. Pakistani residents have used the service. The participating platforms are the ones that act on the hash; for content hosted off the participating-platforms list, the legal route (NCCIA under PECA §21) is the one to use.
What about deepfake sexual content?
PECA §21 (offences against modesty by electronic means) and §20 (offences against dignity) attach to deepfake sexual imagery because the prohibition is on the use of electronic means causing reputational damage or breach of privacy — the synthetic-versus-real distinction is not the legal bar. StopNCII's hashing also works on synthetic images of you that you have access to.
What is the penalty under PECA §21?
Up to seven years' imprisonment, or fine up to five million rupees, or both. PECA §22 (child pornography) carries a heavier sentence where the depicted person is under 18. PECA §24 (cyber stalking) attaches in parallel where the conduct is ongoing (repeated messages, demands, threats).
What is the removing non-consensual intimate imagery (ncii) right in Pakistan?
NCII — non-consensual intimate imagery — runs on a parallel-path response in Pakistan. The criminal path is the NCCIA under PECA §21 (offences against modesty of a natural person and minor): use of electronic means that may result in reputational damage or breach of privacy is punishable with up to seven years' imprisonment or a fine up to five million rupees or both. Where the depicted person is a child, PECA §22 (child pornography) applies and carries a heavier sentence. Where the conduct is ongoing — repeated messages, threats to publish, demands for payment — PECA §24 (cyber stalking)...
When does removing non-consensual intimate imagery (ncii) apply?
Intimate images or videos of you (taken consensually or not) are being shared online without your permission.Someone is threatening to share intimate imagery unless you pay or do something — sextortion. Treat as criminal under PECA §21 and §24.Deepfake / AI-generated sexual content depicts you. PECA §21 and §20 (offences against dignity) attach because the prohibition is on the use of electronic means causing reputational damage or breach of privacy; the synthetic-versus-real distinction is not the bar.The depicted person is a minor (under 18) — escalate to PECA §22 (child pornography) and...
How do I remove non-consensual intimate imagery from social media in Pakistan?
If you are 18+ and the image is of you, hash it via StopNCII.org now. Go to stopncii.org, select the file (the hash is generated on your device, the file never uploads), confirm eligibility (you are over 18 currently AND were over 18 at the time the image was taken), and submit. Participating platforms will then detect and remove uploads of the same image.If the depicted person is under 18, use NCMEC's takeitdown service instead. takeitdown.ncmec.org. Same on-device hashing model, sized for content depicting minors.File an online complaint with the NCCIA under PECA §21 and §24. nccia.gov.pk....
What mistakes should I avoid with removing non-consensual intimate imagery (ncii)?
Don't pay the extortionist. The demand returns. NCCIA, PTA, and StopNCII are all free. Payment also creates a transaction record that can be used as further leverage.Don't take a screenshot, then delete the original. The investigation needs the URL still active where possible — a screenshot loses metadata. Save the URL alongside the screenshot and any messages.Don't engage publicly on Pakistani social media in a way that reveals the victim. PECA §20 (dignity), §21 (modesty), and §26-A (false / fake information) can attach to public posts about the offence; routing through the official...