The rapid growth of smartphones, social media, online banking, e-commerce, and digital services has also increased the risk of cybercrime in Pakistan. Online fraud, identity misuse, harassment, unauthorized access, blackmail, fake information, and other digital offences can have serious financial and personal consequences.
The primary federal framework for cyber crime in Pakistan is the Prevention of Electronic Crimes Act, 2016 (PECA), which has been amended over time. In 2025, important changes were made to the law, including provisions regarding the investigation agency and other areas of electronic crime regulation.
The current framework in 2026 needs to be understood as PECA 2016 as amended, rather than simply relying on the original 2016 text. Therefore, this guide explains the cyber crime laws in Pakistan 2026 so read below.
What Is Cybercrime in Pakistan?
Cybercrime refers to criminal activity involving computers, information systems, electronic devices, digital data, or online communication. Examples can include:
- Online financial fraud
- Unauthorized access to accounts or systems
- Identity information misuse
- Cyber harassment
- Online blackmail
- Electronic forgery
- Electronic fraud
- Unauthorized transmission or use of data
- Certain forms of harmful or unlawful online content
The legal classification depends on what actually happened and which provisions of the applicable law for the happened cause.
What Is the PECA Act 2016?
The Prevention of Electronic Crimes Act, 2016, commonly called the PECA Act 2016, is Pakistan’s principal federal legislation dealing specifically with electronic crimes.
The law establishes offences involving information systems and electronic data and provides investigative and procedural mechanisms for dealing with such offences. The official Pakistan Code lists PECA as Federal Act XL of 2016.
PECA covers a wide range of conduct, including offences involving unauthorized access, data, electronic fraud, identity information, cyberstalking, harassment, and other prohibited online activity.
However, PECA does not operate in isolation. The Act itself provides that the Pakistan Penal Code can apply to offences to the extent that its provisions are not inconsistent with PECA.
What Changed With the PECA Act 2025 Amendment?
The PECA Act 2025 amendment introduced significant changes to the cybercrime framework.
One of the most important changes deals with the investigation agency. Section 29 was amended to establish the National Cyber Crime Investigation Agency (NCCIA) for inquiry, investigation, and prosecution of offences specified under PECA. The current official text identifies NCCIA as the relevant investigation agency.
The NCCIA itself states that it operates under the PECA framework and is responsible for receiving complaints and taking legal measures against cybercriminals.
Common Cybercrime Offences Under Pakistani Law
Electronic Fraud
Section 14 addresses electronic fraud where a person, with the intent of wrongful gain, interferes with or uses an information system, device, or data, or deceives another person in a way likely to cause damage or harm.
The provision allows imprisonment of up to two years, a fine of up to Rs. 10 million, or both. This can be relevant to certain forms of online fraud in Pakistan, although the exact legal provision depends on the facts of the case.
Electronic Forgery
Section 13 deals with electronic forgery, including certain manipulation or use of information systems or data intended to cause harm, facilitate an illegal claim, or commit fraud.
The ordinary offence can carry imprisonment of up to three years, a fine of up to Rs. 250,000, or both. Also, higher penalties apply where the offence concerns critical infrastructure information systems or data.
Identity Information Misuse
Section 16 addresses unauthorized use of another person’s identity information.
Obtaining, selling, possessing, transmitting, or using another person’s identity information without authorization can result in imprisonment of up to three years, a fine of up to Rs. 5 million, or both.
This can be relevant to cases involving stolen personal information, fake accounts, or misuse of another person’s digital identity.
Cyber Harassment Law in Pakistan
Online harassment can take different forms, including threatening communication, malicious content, unwanted contact, privacy violations, and other conduct depending on the circumstances.
The NCCIA identifies cyber harassment as an offence area and specifically refers to Section 20 of PECA 2016 in its public guidance on harmful online content affecting a person’s reputation or privacy.
Because online harassment cases can involve multiple types of conduct, victims should preserve the original evidence rather than deleting messages, profiles, posts, emails, or other material.
Cyber Crime Punishment in Pakistan
There is no single cyber crime punishment in Pakistan. The penalty depends on the offence and the specific provision involved. PECA provides different maximum penalties for different offences, and other laws may also apply depending on the conduct.
How to Report Cyber Crime in Pakistan
If you become a victim, preserve evidence before taking steps that could make it difficult to investigate the incident. Also, evidence can include:
- Screenshots
- URLs
- Usernames and profile links
- Phone numbers
- Emails
- Transaction records
- Bank or payment information
- Chat histories
- Relevant files
- Dates and times of incidents
The NCCIA currently provides an official online complaint registration system and identifies itself as the federal agency responsible for cybercrime investigation.
NCCIA Cyber Crime Complaint
According to the NCCIA’s official FAQ, complaints can be submitted through:
- The NCCIA online complaint form
- Pakistan Citizen Portal
- The nearest Cybercrime Reporting Centre (CCRC)
The NCCIA complaint form asks for information including the complainant’s name, CNIC, contact details, city, crime category, and details of the incident.
For a formal complaint, the NCCIA states that applicants should provide a written application, a copy of their CNIC, and copies of relevant evidence. Official NCCIA complaint portal: NCCIA Cyber Crime Complaint Form
What Should You Do After an Online Fraud?
If you experience an online scam or financial fraud, few steps should be followed immediately:
- First, preserve evidence and contact the relevant bank, payment service, or financial institution if money has been transferred or an account has been compromised.
- Second, secure affected accounts by changing passwords and enabling multi-factor authentication where available.
- Third, you should then report the incident through the appropriate authorities. The NCCIA specifically provides cybercrime reporting channels for fraud and other digital offences.
- Fourth, avoid negotiating with scammers or deleting evidence before documenting the incident.
When Should You Consult a Cyber Crime Lawyer in Pakistan?
A cyber crime lawyer in Pakistan may be useful when a matter involves significant financial loss, allegations against you, identity misuse, blackmail, harassment, business data, or potential criminal proceedings. A lawyer can help with:
- Understanding applicable legal provisions
- Preparing a complaint
- Organizing evidence
- Responding to legal notices
- Representing a person during proceedings
- Explaining procedural rights
- Advising on possible civil or criminal remedies
How to Protect Yourself From Cybercrime
- Use Strong, Unique Passwords
- Enable Two-Factor Authentication
- Verify Links and Messages
- Secure Social Media Accounts
- Preserve Evidence
Conclusion
The legal framework for cyber crime in Pakistan has evolved since the introduction of the PECA Act 2016. In 2026, the relevant framework includes PECA as amended in 2025, with the National Cyber Crime Investigation Agency (NCCIA) serving as the designated investigation agency under the amended law.
Online fraud, identity misuse, electronic forgery, harassment, and other digital offences can carry serious legal consequences. At the same time, victims have formal channels for reporting incidents and submitting evidence.
If you experience cybercrime, preserve evidence, secure affected accounts, report the incident through the appropriate official channel, and consider consulting a qualified cyber crime lawyer in Pakistan where the matter is serious or legally complex.
Frequently Asked Questions
1. What is the main cybercrime law in Pakistan?
The main federal law is the Prevention of Electronic Crimes Act, 2016 (PECA), as amended, including the 2025 amendments.
2. Where can I report cybercrime in Pakistan?
Cybercrime can be reported to the NCCIA through its official complaint portal, Pakistan Citizen Portal, email, or a Cybercrime Reporting Centre.
3. What is the punishment for online fraud in Pakistan?
Under Section 14 of PECA, electronic fraud can carry imprisonment of up to two years, a fine of up to Rs. 10 million, or both, depending on the offence and circumstances.
4. What should I do if I am a victim of cyber harassment?
Preserve screenshots, messages, URLs, usernames, and other evidence, secure your accounts, and report the incident through the NCCIA’s official complaint channels.
