Legal Help · Published March 6, 2026
Cybercrime in Pakistan: Types, Punishments and Legal Remedies
From hacking to harassment, cybercrime in Pakistan covers a wider range of conduct than most people expect — and each type has its own section, punishment, and remedy.
Quick answer
Cybercrime in Pakistan spans unauthorized access, identity theft, dignity and modesty offences (defamation, non-consensual images), cyberstalking, and the newer Section 26-A offence for content causing fear or unrest — punishments range from fines to years of imprisonment. Remedies include an NCCIA complaint, content removal, and a civil damages claim where relevant.
Six offences, in plain terms
Unauthorized access and data interference
Covers hacking into a system or data without authorization, and interfering with or damaging data — punishable with imprisonment and fines that scale up sharply where the target is critical infrastructure.
Identity theft
Covers dishonestly using another person's identity information — including online accounts and digital identifiers — to cause harm or gain an advantage.
Offences against dignity of a person
Covers making, publishing, or transmitting false or defamatory information about someone through an information system, with the intent to harm their reputation.
Offences against modesty
Covers superimposing a person's image, or transmitting sexually explicit material of a person, without consent — a provision central to non-consensual image sharing and, in practice, deepfake-related cases.
Cyberstalking
Covers repeated, unwanted contact or monitoring of a person online with the intent to coerce, intimidate, or harass, despite a clear indication of disinterest.
Spreading fear, panic, or disorder online
Added by the 2025 amendment, this criminalises disseminating information likely to cause a sense of fear, panic, or unrest online — a broad, actively debated new offence.
The remedies available to a victim
- Reporting to the NCCIA (National Cyber Crime Investigation Agency), which since the 2025 amendment holds exclusive investigative authority over PECA offences.
- Requesting content removal or blocking through the process available under PECA where a court or authority orders it — relevant for non-consensual images or defamatory content still online.
- A parallel civil claim for defamation or damages, in addition to the criminal complaint, where the harm involves reputational or financial loss.
- Preserving evidence — screenshots, URLs, timestamps, and account details — before content can be deleted or an account can go offline, since this evidence is central to both the criminal complaint and any civil claim.
What Wakeel.org can help with
Explaining which PECA offence may apply to a situation, in plain English or Urdu, and helping you organize evidence and a timeline.
What it cannot do
It cannot file the complaint, assess digital evidence, or represent you — a licensed advocate should handle that.
Frequently asked questions
What are the main types of cybercrime in Pakistan?
Under PECA 2016, they include unauthorized access and hacking, identity theft, offences against a person's dignity (like online defamation), offences against modesty (including non-consensual image sharing), cyberstalking, and, since the 2025 amendment, spreading content likely to cause fear or unrest under Section 26-A.
What is the punishment for cybercrime in Pakistan?
Punishment varies significantly by offence — from fines and short imprisonment for lesser offences up to several years' imprisonment for serious offences like unauthorized access to critical infrastructure or repeated modesty-related offences. The exact punishment depends on the specific section and facts.
What legal remedies exist for a cybercrime victim in Pakistan?
A criminal complaint to the NCCIA, a request for content removal or blocking, and, where reputational or financial harm occurred, a parallel civil claim for damages. Preserving evidence quickly matters for all three routes.
Is online defamation a crime in Pakistan?
Yes — Section 20 of PECA covers making, publishing, or transmitting false information intended to harm a person's reputation through an information system, alongside the possibility of a separate civil defamation claim.
Can Wakeel.org help me understand a cybercrime situation?
Wakeel.org can explain which PECA offence may apply to a situation, in plain English or Urdu, and help you organize evidence and a timeline before filing a complaint or seeing a lawyer. It cannot file the complaint, assess digital evidence, or represent you — a licensed advocate should handle that.
General educational information, not legal advice. See our full disclaimer.
Related reading
Been a victim of cybercrime?
Ask Wakeel to help you understand your options and preserve evidence — then act quickly with a licensed advocate.