Pakistan’s Prevention of Electronic Crimes Act 2016 — commonly known as PECA 2016 — is the primary legal framework governing all SIM-related fraud, identity theft, and digital crimes in Pakistan. Every unauthorized SIM registration, every SIM swap attack, every fraudulent use of another person’s CNIC for mobile registration is a criminal offence under this law — with penalties including imprisonment up to 7 years and fines up to Rs. 10 million.
Understanding PECA 2016 is essential for every Pakistani mobile user — both to know what protections the law provides and to understand exactly what actions cross into criminal territory. This guide covers every SIM-related provision of PECA 2016, what constitutes a crime, what the penalties are, how the law is enforced, and how it protects Pakistan’s 190+ million mobile subscribers.
Key Principle: Under PECA 2016, any unauthorized access to, misuse of, or fraudulent registration using another person’s CNIC or SIM is a criminal offence — regardless of whether financial damage has yet occurred.
What Is PECA 2016?
The Prevention of Electronic Crimes Act 2016 was enacted by Pakistan’s National Assembly and came into force on August 19, 2016. It is Pakistan’s most comprehensive digital crimes legislation, covering:
- Unauthorized access to electronic systems
- Electronic fraud and identity theft
- Cyberstalking and harassment via electronic means
- Unauthorized SIM registration and misuse
- Malicious code distribution
- Online terrorism and hate speech
- Child exploitation via digital means
PECA 2016 is enforced primarily by the FIA Cybercrime Wing (NR3C) and adjudicated by specially established cybercrime courts. Charges under PECA 2016 are cognizable (police can arrest without warrant) and non-bailable in serious cases — reflecting the severity with which Pakistan treats digital crimes.
PECA 2016 Sections Directly Relevant to SIM Fraud
Section 14 — Unauthorized Access to Identity Information
What it covers: Obtaining, selling, possessing, transmitting, or using another person’s identity information — including CNIC numbers, biometric data, and mobile SIM registration details — without authorization.
What is illegal under this section:
- Using someone else’s CNIC number to register a SIM
- Selling databases containing Pakistanis’ CNIC numbers and personal details
- Purchasing personal identity information from illegal databases
- Accessing the SIM registration records of another person without authorization
- Possessing a photocopied or forged CNIC for fraudulent SIM registration
- Using stolen CNIC data to bypass identity verification on any platform
Penalty:
- Imprisonment up to 3 years
- Fine up to Rs. 5 million
- Or both imprisonment and fine
Why this matters for SIM users: Simply having your CNIC number stolen and used for SIM registration constitutes a crime under this section — the victim does not need to suffer financial loss for the crime to be prosecutable.
Section 16 — Unauthorized Issuance of SIM Cards
What it covers: The unauthorized registration, issuance, or activation of SIM cards — including both the criminal who registers the SIM and the telecom franchise employee or operator who facilitates it.
What is illegal under this section:
- Registering a SIM using another person’s CNIC without their biometric presence and consent
- A franchise employee processing a SIM registration without proper biometric verification
- Facilitating or assisting another person in registering a SIM fraudulently
- Issuing a SIM to someone whose biometric does not match the provided CNIC
- Operating a SIM registration service that bypasses PTA’s biometric requirement
- Possessing a SIM registered under a CNIC that is not yours without legal authorization
Penalty:
- Imprisonment up to 3 years
- Fine up to Rs. 1 million
- Or both
- Additionally, the franchise or operator found complicit can have their license revoked by PTA
Critical point: This section makes the franchise employee equally liable as the criminal who presents the fraudulent CNIC. This is why corrupt franchise insiders face the same prosecution as the external fraudster.
Section 14A — Cyberstalking Using SIM
What it covers: Using electronic means — including SIM-registered mobile numbers — to harass, intimidate, or stalk another person.
What is illegal:
- Using an unauthorized SIM registered on someone else’s CNIC to make harassing calls
- Sending threatening or intimidating messages from a fraudulently registered SIM
- Repeatedly contacting a person without consent via a fraudulent SIM
Penalty:
- Imprisonment up to 3 years
- Fine up to Rs. 1 million
- Enhanced penalties if the victim is a woman or minor
Section 20 — Offences Against Dignity of a Natural Person
What it covers: Using electronic devices — including SIMs — to transmit or display material that is false, obscene, or designed to cause harm to another person’s reputation.
Relevance to SIM fraud: Criminals who use fraudulently registered SIMs to send defamatory, false, or harmful content can be charged under this section in addition to Section 16.
Penalty:
- Imprisonment up to 3 years
- Fine up to Rs. 1 million
Section 17 — Tempering with Critical Information Infrastructure
What it covers: Unauthorized access to or interference with Pakistan’s critical information infrastructure — which includes PTA’s SIM registration systems and NADRA’s identity database.
Relevance to SIM fraud: Criminal networks that attempt to hack PTA’s or NADRA’s systems to alter SIM registration records, or that compromise operator biometric systems, face the most severe penalties under PECA.
Penalty:
- Imprisonment up to 7 years
- Fine up to Rs. 10 million
- Or both
What Actions Are Legal vs. Illegal Under PECA 2016 — Complete Guide
This is one of the most practically important sections of PECA for everyday Pakistani mobile users:
| Action | Legal Status | Applicable Section |
|---|---|---|
| Checking SIMs on your own CNIC via 668 | ✅ Fully Legal | N/A |
| Entering someone else’s CNIC in 668 | ❌ Illegal | Section 14 |
| Registering a SIM with your own CNIC and biometric | ✅ Fully Legal | N/A |
| Registering a SIM using someone else’s CNIC | ❌ Illegal | Sections 14 + 16 |
| Checking cnic.sims.pk for your own CNIC | ✅ Fully Legal | N/A |
| Purchasing “SIM data” from illegal online services | ❌ Illegal | Section 14 |
| Reporting unauthorized SIM to PTA | ✅ Fully Legal | N/A |
| Using a fraudulent SIM to make calls | ❌ Illegal | Section 16 |
| Selling SIM data online | ❌ Illegal | Section 14 |
| Sharing your own CNIC photocopy with consent | ✅ Legal | N/A |
| Using someone’s CNIC photocopy without consent | ❌ Illegal | Section 14 |
| Porting your own number via 667 MNP | ✅ Fully Legal | N/A |
| Porting someone else’s number without authorization | ❌ Illegal | Sections 14 + 16 |
Penalties Under PECA 2016 — Complete Reference Table
| Offence | Maximum Imprisonment | Maximum Fine |
|---|---|---|
| Unauthorized use of identity info (Section 14) | 3 years | Rs. 5 million |
| Unauthorized SIM issuance (Section 16) | 3 years | Rs. 1 million |
| Cyberstalking via SIM (Section 14A) | 3 years | Rs. 1 million |
| Harassment via electronic means (Section 20) | 3 years | Rs. 1 million |
| Tempering with critical infrastructure (Section 17) | 7 years | Rs. 10 million |
| Combination of Section 14 + 16 (SIM swap fraud) | 7 years combined | Rs. 10+ million |
| Offences involving minors | Enhanced by 50% | Enhanced |
| Repeat offenders | Double the base penalty | Double the base |
Combined charging: In serious SIM fraud cases, FIA typically charges under multiple PECA sections simultaneously — which compounds penalties. A SIM swap fraud case involving identity theft (Section 14) + unauthorized SIM (Section 16) + financial fraud could result in combined imprisonment of 7+ years.
How PECA 2016 Is Enforced — The Investigation and Prosecution System
Enforcement Authority: FIA Cybercrime Wing (NR3C)
PECA 2016 designated the FIA as the primary enforcement authority. FIA Cybercrime has:
- Trained digital forensics investigators
- Legal authority to obtain warrants for digital evidence
- Power to compel operators and platforms to provide records
- Dedicated cybercrime courts for faster prosecution
Investigation Powers Under PECA:
Section 29 — Search and Seizure: FIA investigators can search any premises and seize electronic devices, SIM cards, computers, and financial records with a warrant issued by a cybercrime court judge.
Section 30 — Interception: With judicial authorization, FIA can intercept communications from suspected fraud SIMs — providing direct evidence of criminal use.
Section 31 — Retention of Data: FIA can compel operators to retain and produce call records, SIM registration data, and network activity logs for investigation purposes.
Prosecution Under PECA:
Cases under PECA 2016 are tried by special cybercrime courts established in all provincial capitals. These courts have:
- Judges with specialized training in digital evidence
- Faster processing than standard criminal courts
- Power to grant bail conditions specific to digital crimes (e.g., no access to electronic devices during trial)
How PECA 2016 Protects SIM Fraud Victims — Legal Rights
As a SIM fraud victim, PECA 2016 gives you specific legal rights:
Right to file a complaint: You have the legal right to file a complaint with FIA Cybercrime regardless of the amount of financial loss. No minimum threshold exists.
Right to evidence preservation: FIA can compel operators to preserve all records related to your case under Section 31 — preventing the criminal from covering their tracks.
Right to compensation: Courts can award compensation to fraud victims in addition to criminal penalties against the convicted offender.
Right to anonymity in certain cases: Courts can order your personal information to be withheld from public records in cases where revealing your identity creates a safety risk.
Right to legal representation: You are entitled to present your case through legal counsel in cybercrime court proceedings.
PECA 2016 and Illegal SIM Data Websites — What Pakistani Law Says
Dozens of websites operate in Pakistan and abroad offering to sell “SIM owner data,” “CNIC linked information,” or “mobile number registration details” for a fee. Under PECA 2016:
Visiting these websites: Not inherently illegal, but any purchase constitutes receiving stolen/unauthorized identity information — potentially Section 14.
Purchasing SIM data from these websites: Illegal under Section 14 — you are purchasing unauthorized identity information.
Operating such a website targeting Pakistani users: Illegal under Section 14 and potentially Sections 17 and 20 — carries up to 7 years imprisonment.
Sharing data obtained from these sites: Illegal under Section 14 — distributing unauthorized identity information.
PTA has blocked hundreds of such websites within Pakistan. FIA has prosecuted operators of several Pakistan-based SIM data services. The legal risk of using these services extends to buyers, not just sellers.
The only legal way to access Pakistan SIM data is through official PTA channels — 668, cnic.sims.pk, and operator franchise verification. Everything else is a PECA 2016 violation. For official SIM data access tools and guides, visit simsownersdetails.pk/pak-sim-data/.
Recent PECA 2016 Enforcement Cases — What Happens to Convicted SIM Fraudsters
Pakistan’s cybercrime courts have delivered significant convictions under PECA 2016 in recent years:
Franchise employee convictions: Multiple franchise employees across Jazz, Zong, and Telenor have been convicted under Section 16 for processing unauthorized SIM registrations. Sentences have ranged from 1 to 3 years imprisonment plus fines.
SIM swap fraud prosecutions: FIA has successfully prosecuted SIM swap operations targeting JazzCash and Easypaisa accounts. Combined Section 14 + 16 charges have resulted in sentences up to 5 years.
Illegal SIM data website operators: Several operators of websites selling Pakistani mobile users’ data have been identified, arrested, and charged under Section 14. FIA has coordinated with international partners in cases where operators were based abroad.
Call centre fraud prosecutions: Organized fraud call centres using fraudulently registered SIMs have been raided by FIA, with operators charged under both PECA 2016 and the Pakistan Penal Code for criminal conspiracy.
These cases demonstrate that PECA 2016 enforcement is active and ongoing — SIM fraud is not a low-risk crime in Pakistan.
Frequently Asked Questions — PECA 2016 SIM Fraud Law Pakistan
Q: If I accidentally entered someone else’s CNIC in 668, am I liable under PECA?
A: A single accidental query is unlikely to be prosecuted. PECA enforcement focuses on deliberate, repeated, or commercially motivated misuse of identity information. However, the technical answer is that unauthorized querying of another’s CNIC data is covered by Section 14.
Q: Can a franchise be prosecuted if it registered a fraudulent SIM without knowledge?
A: Franchises have a legal duty of care to verify biometric data. If biometric verification was not properly conducted — even without knowing the CNIC was fraudulent — the franchise faces regulatory action from PTA. Criminal prosecution under Section 16 requires evidence of deliberate non-compliance or complicity.
Q: Is it legal to have a SIM registered under my parent’s CNIC?
A: A SIM registered on your parent’s CNIC with their consent and their biometric verification is legal. A SIM registered on their CNIC without their biometric presence — even with their verbal consent — is illegal under Section 16 because biometric verification is mandated.
Q: Can my employer ask me to register a company SIM on my personal CNIC?
A: This is legally grey territory. Corporate SIMs should be registered under company NTN, not personal CNICs. A SIM registered on your CNIC is legally your SIM — the employer has no legal ownership. This practice is problematic and potentially exposes you to liability for company phone activity.
Q: What is the statute of limitations for PECA 2016 offences?
A: PECA 2016 does not specify a statute of limitations. Under general Pakistani criminal law principles, serious offences (those with 3+ year penalties) have longer prosecution windows — typically 5 years from the date the offence is discovered, not just when it occurred.
Q: If I report a PECA violation, is my identity protected?
A: FIA handles complainant information with confidentiality. For cases involving ongoing threats, courts can order anonymity protections. Discuss this with FIA when filing if you have specific safety concerns.
Q: Can PECA 2016 charges be applied to someone operating from outside Pakistan?
A: PECA 2016 has extraterritorial jurisdiction for crimes targeting Pakistani citizens or systems (Section 47). FIA cooperates with Interpol and foreign law enforcement for cross-border prosecution. Operators of foreign-based SIM data websites targeting Pakistan have been investigated under this provision.
Q: Does PECA 2016 cover crimes on WhatsApp, Telegram, or social media linked to SIM fraud?
A: Yes. PECA’s electronic crime definitions cover all digital communication channels. SIM-based fraud conducted through WhatsApp, Telegram, or any social platform falls within PECA’s jurisdiction.
Summary — PECA 2016 SIM Fraud Law Pakistan
| PECA Section | Crime | Max Sentence | Max Fine |
|---|---|---|---|
| Section 14 | Unauthorized identity info use | 3 years | Rs. 5M |
| Section 16 | Unauthorized SIM issuance | 3 years | Rs. 1M |
| Section 14A | Cyberstalking via SIM | 3 years | Rs. 1M |
| Section 20 | Harassment via electronic device | 3 years | Rs. 1M |
| Section 17 | Critical infrastructure tampering | 7 years | Rs. 10M |
PECA 2016 gives Pakistani citizens strong legal protection against SIM fraud and gives law enforcement powerful tools to investigate and prosecute perpetrators. The law is actively enforced — use it. If you are a victim of SIM fraud, report to FIA Cybercrime, file with PTA, and file a police FIR. The legal system has the tools to pursue your case.
For Pakistan’s most complete SIM verification resource — including free official tools to check your CNIC and protect your mobile identity — visit Sim Owner Details. For a deeper understanding of how Pakistan’s SIM information database feeds into PECA 2016 enforcement, explore our SIM information guide.
Related Guide:
SIM OWNER DETAILS