Scams, Fraud & Money Recovery
After a scam in Pakistan: file with NCCIA (the agency that replaced the FIA Cyber Crime Wing in May 2024), claim a refund under SBP's Electronic Fund Transfers Regulations 2018, and escalate free to Banking Mohtasib Pakistan if your bank refuses.
Covered in this guide:
Pakistan's scam-recovery system reorganised in 2024. The National Cyber Crime Investigation Agency (NCCIA) was formally established on 3 May 2024 under Section 51 of the Prevention of Electronic Crimes Act 2016 and replaced the Cyber Crime Wing of the FIA. Section 30 of PECA was amended in 2025 to give the NCCIA exclusive powers to investigate cybercrime under the Act — meaning complaints that used to go to the FIA's NR3C are now NCCIA cases. For the money side, the State Bank of Pakistan's Electronic Fund Transfers Regulations 2018 (issued under sections 3 and 26 of the Payment Systems and Electronic Fund Transfers Act 2007) require banks to refund unauthorised electronic transfers and place the burden of proof on the bank, not the consumer. If the bank refuses, the Banking Mohtasib Pakistan resolves the dispute for free under the Federal Ombudsmen Institutional Reforms Act 2013 and Part IVA of the Banking Companies Ordinance 1962; the order is binding on the bank if no representation is filed within 30 days.
For life-threatening emergencies in Pakistan, dial 15 (Police), 1122 (Rescue), or 115 (Edhi ambulance). The pages below cover the first 24 hours, filing with NCCIA, and recovering money from the bank.
Key Laws
Prevention of Electronic Crimes Act 2016 (PECA), as amended 2025
Act XL of 2016, amended by the Prevention of Electronic Crimes (Amendment) Act 2025 (29 January 2025)
Pakistan's cybercrime framework. Sections 14–24 criminalise unauthorised access, e-fraud, identity theft, electronic forgery, offences against dignity (§20), modesty (§21), and cyberstalking (§24). The 2025 amendment added §26-A (false/fake information; up to 3 years' imprisonment and PKR 2,000,000 fine) and Section 51 establishes the NCCIA.
Payment Systems and Electronic Fund Transfers Act 2007 (PS&EFT Act)
Act XXVI of 2007 — sections 3 and 26
Statutory basis for SBP to regulate electronic fund transfers and protect consumers. The 2018 Regulations issued under it set the unauthorised-transaction refund framework.
State Bank of Pakistan — Electronic Fund Transfers Regulations 2018
SBP PSD Circular No. 03 of 2018 (and subsequent amendments)
Banks bear the burden of proving an EFT was authorised. Where unauthorised, the bank must refund the amount and pay markup at 3% above the SBP policy rate for the period of delay.
Federal Ombudsmen Institutional Reforms Act 2013 (FOIRA) + Banking Companies Ordinance 1962, Part IVA
Act XIV of 2013; Ord. LVII of 1962 §§ 82-A to 82-G
Statutory basis for Banking Mohtasib Pakistan. Free to consumers. Banks must respond to a written complaint within 30 days; if unresolved the consumer has 45 days to file with the Mohtasib. Mohtasib's order becomes binding if no representation is filed within 30 days.
First 24 Hours After Being Scammed
Three jobs run in parallel in the first day. Call the bank's fraud line to block cards, freeze the account, and start a recall on transfers in progress — under the SBP Electronic Fund Transfers...
Reporting Cyber Crime to the NCCIA (Successor to FIA Cyber Crime Wing)
The NCCIA is Pakistan's exclusive federal cybercrime investigator. The FIA's Cyber Crime Wing (and the National Response Centre for Cyber Crime, NR3C) was merged into the NCCIA on 3 May 2024 under...
Disputing an Unauthorised Bank Transaction and Escalating to Banking Mohtasib
Pakistan has a two-step money-recovery framework. Step 1: the bank. The SBP Electronic Fund Transfers Regulations 2018 (issued under sections 3 and 26 of the Payment Systems and Electronic Fund...