Your phone is snatched in the street. Or your SIM stops working for no reason and your bank app starts sending OTPs you never asked for. In Pakistan your mobile number is tied to your CNIC, and a number in the wrong hands can drain your account before you notice. Here is what to do, and what the law says.
Why your SIM matters legally
A SIM card in Pakistan is not a private thing. It is registered against your CNIC, and the Pakistan Telecommunication Authority (PTA) verifies the buyer with biometric fingerprints before a new SIM is activated. The number is yours in the eyes of the telecom company, the banks, and the police. If someone else uses a SIM registered in your name, the trail leads back to you. That is why you block fast.
Step 1: Block the SIM, not just the phone
Call your operator first. Jazz: 111. Telenor: 345. Zong: 310. Ufone: 333. Tell them your SIM is lost and ask them to block the number immediately. The operator can cut the SIM within minutes, which stops OTPs and calls from reaching whoever has your card.
Blocking the SIM is separate from blocking the phone. The phone itself is blocked by IMEI through PTA's Lost and Stolen Device System, and blocking a stolen phone by IMEI in Pakistan has its own steps. Do both. The SIM protects your number. The IMEI block makes the handset useless on every Pakistani network.
Step 2: Check every SIM on your CNIC
PTA runs an official SIM Information System. Send your 13 digit CNIC number to 668 by SMS, or check online at cnic.sims.pk. You will see every SIM registered in your name and which operator it belongs to. The ceiling is five voice SIMs and three data SIMs per CNIC, fixed by the Supreme Court in 2015. More than that means something is wrong.
If you find a SIM you never bought, that is an illegal SIM issued against your CNIC. Report it to your operator and to PTA. Under the 2026 verification rules, operators must block SIMs obtained through fraud immediately, and they must also block the IMEI of the device used to activate them. There is no waiting period for fraudulent SIMs.
Step 3: If your number was taken, act like it is an emergency
SIM swap fraud is when a criminal gets a replacement SIM issued against your number without your knowledge. Your own SIM goes dead and every OTP starts landing on their phone. It is a real problem in Pakistan. In October 2026, investigations reported by The News documented two MNAs losing Rs 1.5 million and Rs 2 million this way, and a Karachi businessman losing Rs 8.5 million. PTA fined the operator Rs 77.8 million per case under Regulation 4(4) of the Subscribers Regulations, which makes the operator responsible for every SIM it sells.
The warning sign is simple. Your phone suddenly shows No Service and stays dead. Treat that as a hijack, not a network glitch. Then, in this order:
- Call your operator from another phone and report the unauthorized SIM replacement. Ask them to block the number.
- Call your bank and wallet helplines (Easypaisa, JazzCash) and freeze digital banking before the fraudster uses your OTPs.
- Visit your operator's service centre in person with your CNIC to reclaim your number.
- File a complaint with FIA's cybercrime portal (helpline 1991) and with NCCIA (helpline 1799). If you need the exact process, read how to file an FIA cybercrime complaint in Pakistan.
- Check your bank statements, wallet transactions, and email recovery settings for anything you did not do.
What the new PTA rules change
In October 2026, PTA notified SRO 1519(I)/2026, the Subscriber Antecedents Verification (Third Amendment) Regulations, 2026. The rules now link a SIM's survival to the status of the identity document behind it, as PhoneWorld explained:
- Fraudulent SIMs are blocked at once, along with the IMEI of the device used to issue or activate them.
- If your CNIC is cancelled, confiscated, or impounded, the operator warns you by SMS and blocks your SIMs within five days, unless NADRA updates the status first.
- If the CNIC holder dies, the family gets 60 days to transfer ownership of the SIMs. After that, the SIMs are blocked.
- A blocked SIM can be restored once the identity document is confirmed as restored.
What this means for you: keep your CNIC valid and keep your SIMs in your own name. A SIM registered to a late relative now has a clock on it. Move it within the 60 days if you want to keep the number.
The criminal law side
SIM swap fraud is an electronic crime. The Prevention of Electronic Crimes Act 2016 (PECA) covers it directly. Section 14 punishes electronic fraud with up to two years in prison, a fine of up to Rs 10 million, or both. Section 16 punishes the unauthorized use of another person's identity information with up to three years, a fine of up to Rs 5 million, or both. A duplicate SIM in your name is your identity information, and using it to move money is fraud under both sections.
PTA also holds the operators accountable. In July 2026 it imposed Rs 740 million in penalties on four mobile operators for SIM issuance violations, acting under Section 23 of the Pakistan Telecommunication (Re-organization) Act 1996. The fines show that when a SIM is issued without proper verification, the operator pays, not just the victim.
Habits that keep your number safe
- Never share OTPs, CNIC copies, or fingerprints with anyone who calls you. No bank, no operator, and no government office asks for an OTP by phone.
- Keep transaction limits low on your bank app and wallets. Lower limits buy you time.
- Do not hand your thumb impression to unverified agents or free SIM stalls. Your biometrics can be used to issue a SIM in your name.
- Check the SIM count on your CNIC through 668 or cnic.sims.pk every few months.
If the handset is also gone, block it by IMEI through PTA at complaint.pta.gov.pk or by calling 0800-55055. PTA sends the OTP for the block to the SIM used in the missing phone, so do the SIM block first, then the phone block. For scams involving fake sellers or stolen money, the online fraud complaint route in Pakistan also applies.
Your number is the key to your money. Lose it, and you have minutes, not days. Block the SIM, block the phone, check your CNIC, and report fast. The law is on your side, but it works better when you act first.
For more on police procedure and your rights, read what an FIR is. You can also browse the rest of the Lexiber blog for guides on fraud, cybercrime and consumer protection.
Ask Lexiber free in English or Urdu. It shows you the exact section behind every answer.
