Legal Help · Published September 3, 2026
Online Fraud and Scams: Legal Remedies in Pakistan
What to do in the first hour, which law applies, and where to actually file — for a fake online seller, a phishing link, or unauthorized bank activity.
Quick answer
Call your bank immediately to try to freeze the transaction, then file with the National Cyber Crime Investigation Agency (NCCIA) at complaint.nccia.gov.pk, via the 1799 helpline, or by emailing helpdesk@nccia.gov.pk. Online fraud generally falls under Section 14 (electronic fraud) and Section 13 (electronic forgery) of PECA 2016. For bank or wallet fraud specifically, the Banking Mohtasib and State Bank of Pakistan can order your bank to refund losses caused by its own security lapses.
The framework, layer by layer
The first hour matters more than the complaint
If money moved from a bank account or mobile wallet, call your bank's helpline immediately to freeze the transaction and block the card — banks can sometimes reverse a transfer in the first hour that becomes unrecoverable a day later. File the cybercrime complaint after, not instead of, this call.
PECA Section 14 — electronic fraud
Section 14 covers using a fake identity, website, or electronic misrepresentation to cheat someone out of money or property online, carrying up to two years' imprisonment and a fine of up to PKR 10 million. Section 13 (electronic forgery) often applies alongside it when fake documents or accounts were used.
Report to the NCCIA — and to your bank's regulator
Cybercrime complaints go to the National Cyber Crime Investigation Agency (NCCIA) at complaint.nccia.gov.pk, by emailing helpdesk@nccia.gov.pk, or by calling the 1799 helpline. For bank or mobile-wallet fraud specifically, a parallel complaint to the Banking Mohtasib or the State Bank of Pakistan's Consumer Protection Department can force your bank to investigate its own security lapses.
Evidence quality decides how fast this moves
Vague screenshots slow an investigation down. Preserve the full unshortened URL of the fraudulent site or profile, the 12-digit transaction ID (UTR) and bank/wallet name, exported transaction logs, and timestamped screenshots showing the sender's name or number — not cropped images.
The fact most victims don't know: the burden of proof shifts to the bank
Under the State Bank of Pakistan's Electronic Fund Transfers Regulations 2018, it's the bank — not the customer — that has to prove an electronic transfer was properly authorised. If your bank can't demonstrate that, it can be required to reimburse the loss. In practice this means an unauthorised transaction complaint is not just a criminal matter for the NCCIA; it's also a regulatory complaint your bank is legally obliged to investigate and resolve within a defined timeframe.
If your bank's initial response is unsatisfactory, the Banking Mohtasib of Pakistan has statutory power to order a refund where the bank showed negligence or a security lapse — a route many fraud victims never use because they assume the NCCIA complaint is their only option. Running both in parallel, with a lawyer's help lining up the paperwork, generally gets better results than either alone.
What Wakeel.org can help with
Explaining which PECA sections likely apply and what evidence to gather before you file with the NCCIA, your bank, or the Banking Mohtasib.
What it cannot do
It cannot freeze a transaction, file the complaint on your behalf, or represent you — that requires your bank, the NCCIA, and possibly a licensed advocate.
Frequently asked questions
What law covers online fraud and scams in Pakistan?
Section 14 of PECA 2016 covers electronic fraud — using a fake identity, website, or misrepresentation to cheat someone online — punishable with up to two years' imprisonment and a fine of up to PKR 10 million. Section 420 of the Pakistan Penal Code can also apply to the underlying cheating, and Section 13 (electronic forgery) often applies if fake documents were involved.
How do I report an online scam in Pakistan?
File a complaint with the National Cyber Crime Investigation Agency (NCCIA) at complaint.nccia.gov.pk, by emailing helpdesk@nccia.gov.pk, or by calling the 1799 helpline. Bring your CNIC, transaction records, and screenshots — the NCCIA does not act on anonymous complaints.
Can I get my money back after a bank fraud or scam?
It depends on how quickly you act and who was at fault. Call your bank immediately to attempt a freeze or reversal, then file a formal complaint. Under the State Bank of Pakistan's Electronic Fund Transfers Regulations 2018, banks bear the burden of proving a transfer was authorised — if they can't, they may be required to refund it. The Banking Mohtasib can order a refund where the bank showed security negligence.
What evidence should I collect before filing a complaint?
The full, un-shortened URL of the fraudulent site or profile, the transaction ID (UTR) and bank or wallet name, exported transaction logs (PDF or CSV) from your banking app, and uncropped, timestamped screenshots showing the other party's name, number, or account details.
Can Wakeel.org help me report an online scam?
Wakeel.org can explain which PECA sections likely apply and help you organise your evidence before you file with the NCCIA or your bank. It cannot submit the complaint, freeze a transaction, or represent you — those steps require your bank, the NCCIA, and, where needed, a licensed advocate.
General educational information, not legal advice. See our full disclaimer.
Related reading
Just been scammed online?
Ask Wakeel what to do first — then verify with a licensed advocate before you act.