Online fraud is now Pakistan's most reported cybercrime - financial-fraud complaints ran into the tens of thousands in 2025 alone. Phishing links, fake sellers, bogus investment schemes, and account-takeover scams drain accounts in seconds. The good news is that a clear recovery path exists, built around your bank, the National Cyber Crime Investigation Agency (NCCIA), and the Prevention of Electronic Crimes Act 2016 (PECA). The single factor that decides whether you get your money back is how quickly you act.
The first hour: freeze the money
Fraudulent transfers are usually cashed out fast. Your job in the first minutes is to trigger a hold on the beneficiary account before the scammer withdraws the funds. Do these three things at once - phone the bank while you gather screenshots:
- Call your bank's 24/7 fraud helpline printed on your debit card and ask them to flag the transaction and freeze onward movement.
- Note the exact time, amount, and beneficiary details - account number, IBAN, wallet ID, or the transaction reference number.
- Report to the NCCIA helpline 1799 so investigators can move against the receiving account in parallel with the bank.
Why the rush? Under State Bank of Pakistan consumer rules, banks are required to hold large or suspicious transfers briefly and to investigate reported fraud promptly. That short window is your best chance - once the money is withdrawn or moved abroad, tracing becomes far harder.
Step 1 - report to your bank in writing
The phone call stops the bleeding; the written complaint starts the formal process. Every bank in Pakistan must run a Complaint Management Unit (CMU) and a Customer Grievance Handling Mechanism under SBP rules. Send a written complaint (email or branch letter) that states the fraud, the amount, the date and time, and your demand for reversal. Keep the complaint reference number - you will need it to escalate.
Banks are expected to investigate a reported fraud within a short number of days and to reverse a confirmed unauthorised transaction quickly. If the disputed transaction was truly unauthorised (for example, a card-not-present transaction you never approved), your position is strong. For a fuller walkthrough of the banking side, see our guide to legal steps for financial fraud.
Step 2 - report to the NCCIA (cybercrime)
Cybercrime in Pakistan is prosecuted under PECA 2016. Jurisdiction now sits with the National Cyber Crime Investigation Agency (NCCIA), which took over the role of the former FIA Cyber Crime Wing. You can complain through several channels:
| Channel | How to use it | Best for |
|---|---|---|
| Helpline 1799 | Call to lodge and get guidance | Urgent freezing, first report |
| Online portal | complaint.nccia.gov.pk with evidence | Documented complaints, tracking |
| Reporting centre | Visit in person with printouts | Complex cases, formal statements |
| SBP Sunwai | sunwai.sbp.org.pk against your bank | Bank-side reversal disputes |
Upload every piece of proof: transaction receipts, screenshots of chats, the fraudster's phone number, account or wallet ID, and any fake website links. A formal complaint can lead to an FIR under PECA and lets investigators issue notices to the receiving bank to trace and hold the funds. For the wider offence framework, read our cybercrime and PECA overview.
Step 3 - chargebacks and card reversals
If you paid a fraudulent merchant by debit or credit card, a chargeback is a separate route that runs through the card scheme rather than the courts. Raise the dispute with your card-issuing bank and cite the transaction as unauthorised or as goods and services never delivered. The bank forwards it to the acquiring bank for the merchant.
Chargebacks have strict deadlines, so do not wait. Our guide to credit card disputes in Pakistan explains the timelines and evidence, and if you were scammed buying goods, online shopping disputes covers your consumer remedies too.
Step 4 - escalate to the Banking Mohtasib
If your bank does not resolve the complaint to your satisfaction in writing - typically within about 45 days - you can escalate free of charge to the Banking Mohtasib Pakistan, the independent banking ombudsman. In 2025 the Banking Mohtasib disposed of tens of thousands of complaints and returned over PKR 1.8 billion to customers, with fraud complaints among the fastest-growing category.
The Mohtasib process is conciliatory and does not need a lawyer, though legal help improves a technical dispute. Learn how it works in our Banking Mohtasib complaints guide. If a bank has wrongly frozen your own account during the mess, see bank account freezing in Pakistan.
The law behind your recovery
Several statutes give recovery its teeth. Knowing which one applies helps you frame your complaint:
| Law / provision | What it covers | Penalty (indicative) |
|---|---|---|
| PECA 2016, Section 14 | Electronic fraud | Up to 2 years and/or up to PKR 10 million |
| PECA 2016, Section 13 | Identity theft / unauthorised use of ID | Up to 3 years and/or up to PKR 5 million |
| PPC Section 489-F | Dishonoured cheque given to repay you | Up to 3 years and/or fine |
| Electronic Transactions Ordinance 2002 | Legal validity of digital records and evidence | Framework, not a penalty |
The Electronic Transactions Ordinance 2002 matters because it makes your screenshots, emails, and transaction logs admissible as evidence. If your case ends up in court, that evidentiary backing is decisive - our note on digital evidence in Pakistani courts explains how chats and messages are proved.
Evidence checklist
Weak evidence is why many complaints stall. Gather and preserve the following before you file - and never delete the original messages:
- Bank statement or transaction alert showing the debit, with date, time, and amount.
- Beneficiary details: account number, IBAN, wallet ID, or merchant name.
- Full chat and call history with the fraudster, plus their phone number.
- Screenshots of any fake website, advert, invoice, or payment page.
- Your CNIC and the bank complaint reference number.
Note on scope: penalties, timelines, and internal bank procedures can change with regulator circulars and vary between institutions. Treat the figures above as indicative and confirm current details with your bank, the NCCIA, or an expert legal consultation before relying on them.
Frequently asked questions
How fast should I report online fraud?
Within minutes. Call your bank's fraud helpline and the NCCIA (1799) immediately - recovery depends almost entirely on freezing the beneficiary account before the funds are withdrawn.
Who investigates online fraud in Pakistan now?
The NCCIA holds jurisdiction over cybercrime under PECA 2016, taking over from the FIA Cyber Crime Wing. Report via helpline 1799, complaint.nccia.gov.pk, or a reporting centre.
Does reporting to the police help?
Cyber-fraud is handled by the NCCIA rather than ordinary police stations. Route your complaint through the NCCIA and your bank; use the Banking Mohtasib for bank-side disputes.
What if I willingly transferred the money?
Recovery is harder but still possible if you report fast enough to freeze the receiving account. The scammer also commits electronic fraud under Section 14 of PECA.
Is there a cost to complain?
Reporting to your bank, the NCCIA, and the Banking Mohtasib is free. A lawyer is optional but valuable for FIRs, recovery suits, or a contested cheque under Section 489-F.