First 24 Hours After Being Scammed in Pakistan (2026 Legal Guide) — Rules & Requirements
About this article
Reviewed by the Commoner Law editorial team. Sources: pakistancode.gov.pk, Punjab/Sindh/KP/Balochistan provincial codes, Supreme Court of Pakistan, FBR, EOBI, SBP, NEPRA, OGRA, PMDC, FIA, and provincial Healthcare Commissions. Provincial variations cite Punjab/Sindh/KP/Balochistan Acts and ICT-specific ordinances. Written in plain English with everyday Urdu legal terms (FIR, qabza, khula, NTN, CNIC) for a general audience — this is educational content, not legal advice. Our editorial standards
What is this right?
Three jobs run in parallel in the first day. Call the bank's fraud line to block cards, freeze the account, and start a recall on transfers in progress — under the SBP Electronic Fund Transfers Regulations 2018 the bank carries the burden of proving the transaction was authorised, so the speed of your report and a written reference number matter. File the criminal complaint at NCCIA — Pakistan's federal cybercrime agency since 3 May 2024 (it replaced the FIA Cyber Crime Wing under Section 51 of PECA 2016). Preserve every piece of evidence — screenshots, WhatsApp threads, transaction SMS, EasyPaisa / JazzCash receipts, voice notes — because the bank dispute, the NCCIA case, and any Banking Mohtasib escalation all turn on documentary proof.
For life-threatening emergencies in Pakistan dial 15 (Police), 1122 (Rescue), or 115 (Edhi ambulance). For Pakistan Telecommunication Authority complaints (SIM scams, fake call centres, unsolicited messages) the helpline is 0800-55055 and the portal is complaint.pta.gov.pk.
When does it apply?
- An unauthorised debit / credit card transaction, mobile-wallet (EasyPaisa, JazzCash, NayaPay, SadaPay) transfer, or online banking transaction on your Pakistani account.
- You were tricked into authorising a transfer by an impersonation call — fake bank fraud team, fake NADRA, fake FBR refund, fake delivery/customs charge.
- An OTP, ATM PIN, or mobile-banking login was disclosed to a caller who turned out not to be from the bank.
- An online sale on OLX, Daraz, Facebook Marketplace, or a classifieds advert failed to deliver after payment.
- An investment scheme, fake forex / crypto platform, or 'guaranteed return' offer stopped paying or refused withdrawal.
- A SIM-card scam (call from a number claiming to be PTA, telecom company, or a courier) is in progress or just happened.
What to Do in the First Day After Being Scammed in Pakistan
- Call your bank's fraud line. Use the number on the back of the card or in your official banking app — never any number that came from the suspicious message. Ask for the card to be blocked, the account frozen if needed, and for transfers in progress, a recall to be attempted. Demand a written reference number for the complaint. Under the SBP Electronic Fund Transfers Regulations 2018 the bank must document the report on receipt.
- File an online complaint with the NCCIA. The National Cyber Crime Investigation Agency (nccia.gov.pk) replaced the FIA Cyber Crime Wing on 3 May 2024 and has exclusive powers under PECA Section 30 to investigate cybercrime. The complaint form asks for your details, the nature of the offence, the suspect's known details, the channel, the financial details, and any evidence. Keep the complaint reference number.
- For SIM / telecom / unwanted-call scams, also file at PTA. Pakistan Telecommunication Authority complaint portal: complaint.pta.gov.pk. Helpline: 0800-55055. The PTA handles unsolicited calls, SIM-card fraud, and unlawful online content.
- Preserve evidence. Screenshots of WhatsApp / SMS threads, EasyPaisa / JazzCash / bank transaction SMS, voice recordings, fake-website URLs. Save them to cloud (Google Drive, iCloud) immediately — phones can be seized as part of an NCCIA investigation, and you'll want copies that survive that.
- Change passwords on every account using the same email or password. Switch to authenticator-app 2FA where available; SMS-based 2FA is defeated by SIM-swap fraud, which is a known Pakistan-targeted pattern.
- Write a one-page timeline. Bank reference number, NCCIA reference number, PTA reference (if filed), exact dates and times. This is the spine of any Banking Mohtasib complaint later.
What should you NOT do?
- Don't share your OTP, ATM PIN, or mobile-banking login with anyone — including someone claiming to be from your bank, NADRA, FBR, or PTA. No Pakistani bank or government agency will ever ask for an OTP. Voluntary disclosure can be treated as consumer negligence by the bank's investigation and weaken your refund claim.
- Don't pay 'recovery agents' charging an upfront fee to recover scammed money. Both NCCIA and SBP repeatedly warn that recovery scams are themselves common Pakistan-targeted scams. NCCIA, Banking Mohtasib, and the bank dispute process are all free.
- Don't delete the WhatsApp thread, call log, or fraudulent SMS. The bank investigation, the NCCIA case, and any Banking Mohtasib escalation all turn on documentary proof.
- Don't post detailed scam evidence publicly before filing. Section 26-A of PECA (added by the 2025 Amendment) criminalises certain online posts about pending matters; the safer move is to keep the facts in the official channels first.
About Scams, Fraud & Money Recovery in Pakistan
Pakistan's scam-recovery system reorganised in 2024. The National Cyber Crime Investigation Agency (NCCIA) was formally established on 3 May 2024 under Section 51 of the Prevention of Electronic Crimes Act 2016 and replaced the Cyber Crime Wing of the FIA. Section 30 of PECA was amended in 2025 to give the NCCIA exclusive powers to investigate cybercrime under the Act — meaning complaints that used to go to the FIA's NR3C are now NCCIA cases. For the money side, the State Bank of Pakistan's Electronic Fund Transfers Regulations 2018 (issued under sections 3 and 26 of the Payment Systems and Electronic Fund Transfers Act 2007) require banks to refund unauthorised electronic transfers and place the burden of proof on the bank, not the consumer. If the bank refuses, the Banking Mohtasib Pakistan resolves the dispute for free under the Federal Ombudsmen Institutional Reforms Act 2013 and Part IVA of the Banking Companies Ordinance 1962; the order is binding on the bank if no representation is filed within 30 days.
For life-threatening emergencies in Pakistan, dial 15 (Police), 1122 (Rescue), or 115 (Edhi ambulance). The pages below cover the first 24 hours, filing with NCCIA, and recovering money from the bank.
Frequently asked questions
What replaced the FIA Cyber Crime Wing?
The National Cyber Crime Investigation Agency (NCCIA), established on 3 May 2024 under Section 51 of the Prevention of Electronic Crimes Act 2016. The 2025 amendment to PECA gave the NCCIA exclusive powers under Section 30 to investigate cybercrime under the Act, replacing the previous FIA Cyber Crime Wing / National Response Centre for Cyber Crime (NR3C). All older fia.gov.pk/ccw or nr3c.gov.pk links now route to NCCIA at nccia.gov.pk.
Will my bank actually refund an unauthorised transaction?
Where the transaction is genuinely unauthorised (an EFT initiated by someone other than you with no benefit to you), the SBP Electronic Fund Transfers Regulations 2018 place the burden of proof on the financial institution — not on you. Where the bank cannot demonstrate authorisation, it must refund the amount plus markup at 3% above the SBP policy rate for the period of delay. Where you authorised the transaction but were tricked into doing so (impersonation, fake-bank caller), the legal position is less protective and recovery depends on bank discretion and the Banking Mohtasib's view on the facts.
Do I file at FIA or NCCIA?
NCCIA, for cybercrime offences. Since 3 May 2024 the FIA's Cyber Crime Wing has been merged into NCCIA and all cases were transferred; the 2025 PECA Amendment made NCCIA's powers exclusive under Section 30. The FIA still handles non-cyber matters (immigration offences, anti-corruption, anti-trafficking, anti-money laundering), so use FIA only where the offence isn't electronic.
Is there a single Pakistan-wide scam helpline?
There is no single consolidated cybercrime helpline that the NCCIA publishes nationally on its website. The Police emergency number across Pakistan is 15. The PTA helpline (for SIM / telecom / online-content complaints) is 0800-55055. The Banking Mohtasib Karachi Secretariat is reachable on +9221-99217334. For NCCIA complaints, the online portal at nccia.gov.pk is the primary channel.
What is the first 24 hours after being scammed right in Pakistan?
Three jobs run in parallel in the first day. Call the bank's fraud line to block cards, freeze the account, and start a recall on transfers in progress — under the SBP Electronic Fund Transfers Regulations 2018 the bank carries the burden of proving the transaction was authorised, so the speed of your report and a written reference number matter. File the criminal complaint at NCCIA — Pakistan's federal cybercrime agency since 3 May 2024 (it replaced the FIA Cyber Crime Wing under Section 51 of PECA 2016). Preserve every piece of evidence — screenshots, WhatsApp threads, transaction SMS,...
When does first 24 hours after being scammed apply?
An unauthorised debit / credit card transaction, mobile-wallet (EasyPaisa, JazzCash, NayaPay, SadaPay) transfer, or online banking transaction on your Pakistani account.You were tricked into authorising a transfer by an impersonation call — fake bank fraud team, fake NADRA, fake FBR refund, fake delivery/customs charge.An OTP, ATM PIN, or mobile-banking login was disclosed to a caller who turned out not to be from the bank.An online sale on OLX, Daraz, Facebook Marketplace, or a classifieds advert failed to deliver after payment.An investment scheme, fake forex / crypto platform, or...
What should I do immediately after being scammed in Pakistan?
Call your bank's fraud line. Use the number on the back of the card or in your official banking app — never any number that came from the suspicious message. Ask for the card to be blocked, the account frozen if needed, and for transfers in progress, a recall to be attempted. Demand a written reference number for the complaint. Under the SBP Electronic Fund Transfers Regulations 2018 the bank must document the report on receipt.File an online complaint with the NCCIA. The National Cyber Crime Investigation Agency (nccia.gov.pk) replaced the FIA Cyber Crime Wing on 3 May 2024 and has exclusive...
What mistakes should I avoid with first 24 hours after being scammed?
Don't share your OTP, ATM PIN, or mobile-banking login with anyone — including someone claiming to be from your bank, NADRA, FBR, or PTA. No Pakistani bank or government agency will ever ask for an OTP. Voluntary disclosure can be treated as consumer negligence by the bank's investigation and weaken your refund claim.Don't pay 'recovery agents' charging an upfront fee to recover scammed money. Both NCCIA and SBP repeatedly warn that recovery scams are themselves common Pakistan-targeted scams. NCCIA, Banking Mohtasib, and the bank dispute process are all free.Don't delete the WhatsApp thread,...