Legal Help · Published February 24, 2026
PECA Act Pakistan: Complete Guide to Cybercrime Laws
PECA is the single statute behind almost every cybercrime case in Pakistan — and it changed significantly in 2025. Here's the framework, start to finish.
Quick answer
The Prevention of Electronic Crimes Act 2016 covers unauthorized access and hacking, offences against a person's dignity (Section 20) and modesty (Section 21), and cyberstalking (Section 24). The 2025 amendment gave the new National Cyber Crime Investigation Agency (NCCIA) exclusive investigative powers and added Section 26-A criminalising online content that causes fear or unrest.
The framework, layer by layer
Unauthorized access and interference (Sections 3–10)
Cover hacking, unauthorized data access, interference with information systems, and identity theft — the technical backbone of the Act, aimed at the systems side of cybercrime.
Offences against individuals (Sections 20, 21, 24)
Section 20 covers offences against a person's dignity (including online defamation), Section 21 covers offences against modesty (including non-consensual sharing of sexually explicit images), and Section 24 defines cyberstalking — the sections most citizens actually interact with.
The 2025 amendment reshaped enforcement
The PECA Amendment Act 2025 gave the newly created National Cyber Crime Investigation Agency (NCCIA) exclusive investigative powers over cybercrime — previously shared with police and the FIA — and added Section 26-A, criminalising the spread of information likely to cause fear, panic, or unrest online.
Special courts and admissible digital evidence
PECA cases are tried before designated courts, and the Act works alongside the Qanun-e-Shahadat Order 1984's electronic evidence provisions, plus the NCCIA's own forensic lab reports, which the 2025 amendment made directly admissible in court.
What the 2025 amendment actually changed, and why it's contested
Independent analysis from LUMS SAHSOL and Pakistan's own National Commission for Human Rights have both examined the 2025 amendment closely, and both flag the same tension: the new Section 26-A's broad language around content causing "fear, panic or disorder" gives the NCCIA significant discretion over what counts as an offence, which rights groups argue creates real risk for legitimate online speech alongside its intended targets.
Practically, this means the same conduct — a strongly worded post, a viral rumor, a piece of commentary — can land very differently depending on how it's characterised, which is exactly why getting a lawyer's read on anything that risks touching Section 26-A matters more than trying to self-assess based on a general summary.
What Wakeel.org can help with
Explaining what a specific PECA section covers and how it generally applies, in plain English or Urdu.
What it cannot do
It cannot file a complaint with the NCCIA, assess digital evidence, or represent you — a licensed advocate should handle that.
Frequently asked questions
What is PECA in Pakistan?
The Prevention of Electronic Crimes Act 2016 (PECA) is Pakistan's primary cybercrime statute — covering hacking and unauthorized access, offences against a person's dignity and modesty, cyberstalking, and other electronic crimes, with a 2025 amendment that reshaped enforcement and added new offences.
What changed in PECA's 2025 amendment?
It created the National Cyber Crime Investigation Agency (NCCIA) with exclusive investigative authority over cybercrime cases, gave the NCCIA its own forensic lab whose reports are admissible in court, and added Section 26-A, criminalising online dissemination of information likely to cause fear, panic, or unrest.
What are the most commonly used PECA sections?
Section 20 (offences against dignity, including online defamation), Section 21 (offences against modesty, including non-consensual sharing of intimate images), and Section 24 (cyberstalking) are the provisions most citizens actually encounter, alongside the unauthorized-access sections used in hacking and fraud cases.
Who investigates cybercrime under PECA now?
Since the 2025 amendment, the National Cyber Crime Investigation Agency (NCCIA) has exclusive investigative authority, replacing the earlier shared arrangement between police and the FIA's Cyber Crime Wing.
Can Wakeel.org explain a PECA provision to me?
Wakeel.org can explain what a specific PECA section covers and how it generally applies, in plain English or Urdu, and help you organize facts before filing a complaint or seeing a lawyer. It cannot file a complaint with the NCCIA, assess digital evidence, or represent you — a licensed advocate should handle that.
General educational information, not legal advice. See our full disclaimer.
Related reading
Dealing with a cybercrime issue?
Ask Wakeel to explain which PECA section applies — then verify with a licensed advocate before you act.