Online blackmail, threats, doctored images, fake profiles and relentless messaging are among the fastest-growing complaints in Pakistan, with tens of thousands lodged every year and women and minors the most affected. The good news is that the law is clear and the reporting route is straightforward - if you act quickly and preserve the right evidence. This guide walks you through what qualifies as cyber harassment under the law, how to report it to the NCCIA (formerly the FIA Cyber Crime Wing), and what happens after you file.
What counts as cyber harassment
Cyber harassment is any use of an electronic system - WhatsApp, Instagram, TikTok, Facebook, email, SMS or calls - to threaten, intimidate, blackmail, defame or degrade a person. Under the Prevention of Electronic Crimes Act (PECA) 2016 and its 2025 amendment, the common forms include:
- Blackmail and sextortion - threatening to release private photos, videos or chats unless money or favours are given.
- Non-consensual images - sharing, or threatening to share, intimate or morphed pictures of someone.
- Cyberstalking - repeated unwanted contact, monitoring or messaging that causes fear or distress.
- Online defamation and impersonation - fake accounts, false accusations, or content posted to damage reputation.
- Threats and hate messages - intimidation, abuse or threats of harm delivered electronically.
If the conduct also spreads deliberately false information that causes fear or panic, it may fall under the newer Section 26A introduced by the 2025 amendment. For the wider picture on how these offences are prosecuted, see our overview of cybercrime and PECA in Pakistan.
The law and the penalties
PECA 2016 sets out the specific offences and their punishments. The 2025 amendment revised several penalties upward, so exact terms can vary with the charge and the court. The table below is a plain-English guide to the sections that matter most in harassment cases:
| PECA section | What it covers | Indicative penalty |
|---|---|---|
| Section 20 | Offences against the dignity of a person (defamation, reputational harm) | Up to 3 years imprisonment and/or fine |
| Section 21 | Offences against modesty - non-consensual, intimate or morphed images | Up to 5 years imprisonment and fine up to PKR 5 million |
| Section 24 | Cyberstalking - repeated contact, monitoring, threats | Up to 3 years imprisonment and/or fine |
| Section 26A | Intentional spread of false or fake information causing fear or unrest | Up to 3 years imprisonment and fine up to PKR 2 million |
Penalties are indicative. The precise section, punishment and any enhanced fine depend on the facts, the victim's age and the amended text. For a charge tailored to your case, take the evidence to a lawyer before you file - book a consultation.
Lock down your evidence first
Evidence wins cybercrime cases. Before you block, delete or confront anyone, preserve everything. Digital records are only as strong as their context, so capture full, uncropped proof. Our guide on using WhatsApp and digital evidence in Pakistani courts explains why this matters for admissibility.
| Evidence to preserve | Why it matters |
|---|---|
| Uncropped screenshots | Must show the sender's name/number or profile, message and visible timestamps |
| Profile and post URLs | Lets investigators trace the account and request platform data |
| Chat exports and call logs | Shows the pattern and frequency of contact for stalking or blackmail |
| Voice notes, images, videos | Original files carry metadata that a screenshot alone loses |
| Your CNIC copy | Required to register the complaint in your name |
| Written statement of events | A clear timeline of what happened, when, and by whom |
Do not delete the offending messages, deactivate your account, or pay a blackmailer - paying almost always invites further demands and destroys leverage. Keep the account intact so investigators can act on it.
How to report to the NCCIA
Since 2025, the National Cyber Crime Investigation Agency (NCCIA) has replaced the FIA Cyber Crime Wing as the body that receives and investigates cybercrime complaints under PECA. You can lodge a complaint through any of these channels, all free of charge:
| Channel | How to use it | Best for |
|---|---|---|
| Online portal | Register your complaint at complaint.nccia.gov.pk with your details and evidence | Most cases - fastest to start |
| Send your statement and evidence to helpdesk@nccia.gov.pk | Attaching large evidence files | |
| Helpline | Call the national cybercrime helpline for urgent guidance | Live threats and emergencies |
| In person | Visit the nearest Cybercrime Reporting Centre (CCRC) with a written application and CNIC | FIR, financial loss, device forensics |
You can also route a complaint through the Pakistan Citizen Portal app. For cases involving significant financial loss or the need for device forensics, an in-person visit is usually required to register a First Information Report (FIR). Specialised NCCIA units now handle cases involving women and children to speed up assistance.
What happens after you file
Once your complaint is lodged, the law provides a 14-day verification period before a formal inquiry is opened. During this window the agency reviews your evidence, may call you for a statement, and assesses whether the matter discloses an offence under PECA. If it does, an inquiry or investigation begins, which can include:
- Requesting subscriber and traffic data from platforms and telecom operators.
- Seizing or forensically examining devices linked to the offence.
- Registering an FIR and, where warranted, arrest and prosecution before the courts.
Timelines after the verification stage vary widely with case complexity, cross-border platform cooperation and forensic workload. Staying reachable and responding promptly to information requests keeps your case moving.
Getting the content removed
Reporting the crime and removing the content are two separate tracks - pursue both. The NCCIA can seek removal of unlawful material as part of its investigation, and you can independently file with the PTA Complaints Management System to have harmful content blocked or taken down in Pakistan. In parallel, report the post or account directly to the platform (Meta, TikTok, X, Google) citing non-consensual, harassing or impersonating content - platform takedowns are often the fastest relief.
If the harassment spills into defamation of your character, our guides on online defamation and social media laws in Pakistan explain your civil and criminal options. Where money has been extorted or lost, see recovering money from online fraud.
Frequently asked questions
Do I report to the FIA or the NCCIA?
The NCCIA. It took over the FIA Cyber Crime Wing's functions in 2025 and now receives cybercrime complaints under PECA. File at complaint.nccia.gov.pk or visit a Cybercrime Reporting Centre.
Is there any fee to file a complaint?
No. Registering and processing a cybercrime complaint is free. You should never be asked to pay the agency to lodge or advance your case.
Can I report anonymously?
You must provide your identity and CNIC to register a formal complaint, but the agency handles sensitive cases - especially those involving women and minors - with confidentiality.
What if the harasser is unknown or uses a fake account?
Still file. Investigators can request account and traffic data from platforms and operators to trace the person behind a fake or anonymous profile.
Should I pay a blackmailer to make it stop?
No. Paying almost always leads to more demands and weakens your case. Preserve the evidence, do not engage, and report immediately.
Can a lawyer help with my complaint?
Yes. A lawyer can frame the correct PECA sections, prepare your statement and evidence, follow up on the inquiry, and represent you if the matter reaches court.