The Prevention of Electronic Crimes Act 2016 — commonly known as PECA 2016 — is Pakistan’s primary digital crime law and the legal framework under which all SIM-related fraud is investigated and prosecuted. Yet most Pakistanis who are victims of SIM fraud do not know their legal rights under PECA, what specific acts constitute criminal offenses, or what penalties the law imposes on fraudsters.
This knowledge gap has real consequences. Victims who do not know the law cannot file effective complaints. Fraudsters who know their victims are uninformed operate with confidence. And police officers who encounter uninformed complainants sometimes fail to register proper FIRs under the correct PECA sections.
This is Pakistan’s most complete plain-language guide to PECA 2016’s SIM fraud provisions — what is illegal, what the exact penalties are, how investigations work, and what rights you have as a victim.
What Is PECA 2016? — The Foundation
The Prevention of Electronic Crimes Act was enacted by Pakistan’s parliament in August 2016 and came into full force immediately. It is administered by FIA (Federal Investigation Agency) through its National Response Centre for Cyber Crimes (NR3C).
PECA 2016 covers all digital and electronic crimes — from hacking and cyberstalking to financial fraud and identity theft. For SIM-related crimes specifically, PECA provides the legal framework that covers unauthorized SIM registration, SIM swap attacks, identity theft through CNIC misuse, and electronic financial fraud using mobile numbers.
Key PECA enforcement agencies:
- FIA Cybercrime Wing (NR3C) — primary investigator for all PECA cases
- Pakistan Telecommunication Authority (PTA) — regulatory enforcement, can file PECA-based complaints
- NADRA — provides identity verification data to FIA during investigations
- Telecom operators — must cooperate with FIA investigations under PECA obligations
PECA 2016 Sections That Apply to SIM Fraud — Complete Breakdown
Section 3 — Unauthorized Access to Information System
What it covers: Accessing any information system, database, or digital record without authorization.
SIM fraud application: Using another person’s CNIC data to access PTA’s SIM registration system for unauthorized registration.
Penalty: Imprisonment up to 3 months and/or fine up to Rs. 50,000
Section 4 — Unauthorized Copying or Transmission of Data
What it covers: Copying, transmitting, or reproducing another person’s data without authorization.
SIM fraud application: Copying CNIC data, biometric data, or subscriber records for unauthorized SIM registration purposes. Also applies to selling CNIC databases illegally.
Penalty: Imprisonment up to 6 months and/or fine up to Rs. 100,000
Section 13 — Electronic Fraud
What it covers: Dishonestly inducing another person to deliver property, money, or services through deception using electronic means.
SIM fraud application: Using a fraudulently registered SIM to receive banking OTPs, access JazzCash or Easypaisa accounts, or conduct mobile banking transactions belonging to another person.
Penalty: Imprisonment up to 2 years and/or fine up to Rs. 10 million
This is the most severely penalized SIM-related offense because it involves direct financial harm to victims.
Section 14 — Electronic Forgery
What it covers: Creating or using false electronic records or identity information for fraudulent purposes.
SIM fraud application: Registering a SIM using forged CNIC information, fake biometric data, or fraudulent identity documents.
Penalty: Imprisonment up to 3 years and/or fine up to Rs. 250,000
Section 15 — Electronic Fraud through Forgery
What it covers: Combination of Sections 13 and 14 — using forged identity to commit financial fraud electronically.
SIM fraud application: Using a SIM registered with forged CNIC to access and drain another person’s financial accounts. This is the charge used in most SIM swap fraud prosecutions.
Penalty: Imprisonment up to 3 years and/or fine up to Rs. 250,000, with additional civil liability for full financial recovery
Section 16 — Misuse of Electronic System or Device
What it covers: Using any electronic system to obtain unauthorized data or commit identity fraud.
SIM fraud application: Using telecom franchise terminals to register unauthorized SIMs. This section specifically targets corrupt franchise agents who register SIMs without proper biometric verification.
Penalty: Imprisonment up to 3 years and/or fine up to Rs. 1 million
Section 17 — Unauthorized Interception
What it covers: Intercepting electronic communications without authorization.
SIM fraud application: A SIM swap where the attacker intercepts OTPs and banking messages intended for the legitimate SIM owner.
Penalty: Imprisonment up to 2 years and/or fine up to Rs. 500,000
For SIM 180-Day Inactivity Rule Pakistan 2026 — What Happens to Your Number
Section 24 — Cyberstalking
What it covers: Using electronic communication to harass, intimidate, or stalk.
SIM fraud application: Using a fraudulently registered SIM to make threatening or harassing calls, send threatening messages, or conduct blackmail.
Penalty: Imprisonment up to 3 years and/or fine up to Rs. 1 million. Enhanced penalty if victim is a woman or minor — up to 5 years imprisonment.
For PTA Helpline 0800-55055 — What to Report and How to File Complaint Pakistan 2026
Penalty Summary Table — All SIM-Related PECA Offenses
| PECA Section | Offense | Imprisonment | Fine |
|---|---|---|---|
| Section 3 | Unauthorized system access | 3 months | Rs. 50,000 |
| Section 4 | Unauthorized data copying | 6 months | Rs. 100,000 |
| Section 13 | Electronic fraud | 2 years | Rs. 10 million |
| Section 14 | Electronic forgery | 3 years | Rs. 250,000 |
| Section 15 | Fraud through forgery | 3 years | Rs. 250,000 |
| Section 16 | Misuse of electronic system | 3 years | Rs. 1 million |
| Section 17 | Unauthorized interception | 2 years | Rs. 500,000 |
| Section 24 | Cyberstalking via SIM | 3–5 years | Rs. 1 million |
Important: Multiple PECA sections often apply to a single SIM fraud case. A fraudster who registers an unauthorized SIM (Section 16), uses it to intercept OTPs (Section 17), and drains a bank account (Section 13) can be charged under all three sections simultaneously — with sentences running consecutively.
Your Rights as a PECA Victim
As a victim of SIM fraud under PECA 2016, you have the following legal rights:
Right 1 — FIR Registration: You have the right to have an FIR registered at any police station for PECA offenses. If police refuse, you can file a complaint directly with FIA Cybercrime Wing (NR3C) which has independent FIR authority.
Right 2 — FIA Investigation: FIA Cybercrime Wing is legally obligated to investigate PECA complaints. They have authority to subpoena subscriber data from operators, access CCTV footage from franchise locations, freeze accounts, and arrest suspects.
Right 3 — Financial Recovery: Under PECA and the Code of Criminal Procedure, convicted fraudsters can be ordered by courts to compensate victims for financial losses. Courts can also freeze fraudster accounts during investigation to preserve recovery assets.
Right 4 — Interim Protection: During FIA investigation, you can request the court to issue a temporary order blocking further fraudulent activity using your CNIC — preventing additional SIM registrations while the case proceeds.
Right 5 — Operator Accountability: PTA can file PECA-based regulatory cases against operators whose franchise agents violated PECA. Operators are jointly liable for their agents’ criminal conduct in some circumstances.
For complete documentation of your SIM fraud evidence using official tools before filing your PECA complaint, visit Sim Owner Details — Pakistan’s most complete free SIM security platform.
How FIA Investigates a PECA SIM Fraud Case
Understanding the investigation process helps victims set realistic expectations:
Week 1 — Complaint Registration: FIA registers your complaint and assigns an investigating officer from NR3C. A formal notice is issued to the relevant telecom operator requesting all subscriber data for the unauthorized SIM(s).
Week 2–3 — Data Collection: The operator provides franchise registration records for the unauthorized SIM — exact timestamp, franchise location, CNIC documents used, and importantly, the biometric verification record. If biometric was bypassed, this record shows it.
Week 3–5 — Franchise Investigation: FIA visits the franchise location to collect CCTV footage from the registration date. Franchise agents who processed the unauthorized registration are identified and interviewed.
Week 5–8 — Suspect Identification: Using franchise records, CCTV footage, and phone traffic analysis, FIA identifies the fraudster. If the SIM was used for financial transactions, money trails through JazzCash or banking systems are traced.
Resolution — Prosecution: FIA files a challan (charge sheet) in the Special Cybercrime Court established under PECA 2016. Dedicated PECA courts operate in all major cities.
What PECA Means for Franchise Agents
Many Pakistanis do not realize that the franchise agent who fraudulently registers a SIM faces direct personal PECA liability — not just the fraudster who requested the registration.
A franchise agent who:
- Registers a SIM without proper biometric verification (Section 16)
- Accepts a CNIC photocopy without completing the biometric step (Section 14)
- Deliberately ignores biometric mismatch to complete a fraudulent registration (Section 15)
…faces the same PECA penalties as the fraudster. FIA prosecutes both parties. This is why naming the specific franchise location in your complaint is critical — it enables FIA to investigate the agent directly.
For the complete SIM information guide covering official verification methods and reporting procedures, all resources are available free.
Frequently Asked Questions
Q: Can I file a PECA case myself without a lawyer? A: Yes. You can file directly with FIA Cybercrime Wing at complaint.fia.gov.pk or by calling 9911. FIA handles the investigation without requiring a lawyer. For court proceedings, legal representation is advisable but not mandatory at the complaint stage.
Q: Is it illegal to use those websites that show “SIM owner details” of any number? A: Yes. Accessing another person’s subscriber data through unauthorized third-party sources violates PECA Section 3 (unauthorized access) and Section 4 (unauthorized data copying). The user is criminally liable, not just the website operator.
Q: How long does a PECA case take to reach court? A: FIA investigations typically take 2–6 months depending on case complexity. Dedicated PECA cybercrime courts then schedule hearings. Total timeline from complaint to verdict is typically 1–3 years, though interim protection orders can be obtained much faster.
Q: If the fraudster is arrested, do I automatically get my money back? A: Not automatically. You must file a separate civil suit for financial recovery or request the criminal court to include a compensation order in the sentence. FIA can freeze suspect accounts during investigation to preserve assets for recovery.
For complete Pakistan SIM database verification to document your PECA complaint evidence, all tools are free at Sim Owner Details.
SIM OWNER DETAILS
4 thoughts on “PECA 2016 SIM Fraud Law Pakistan — What Is Illegal and What Are the Penalties”