How to file a cyber crime complaint in Pakistan (NCCIA), step by step

Most people who are scammed online in Pakistan never report it, usually because they don't know where to go or think nothing will happen. Reporting matters: it creates an official record your bank can act on, it links your case to others involving the same numbers and accounts, and in many fraud cases it is the only route to getting money back.

Who handles cyber crime in Pakistan now

Cyber crimes under the Prevention of Electronic Crimes Act (PECA) 2016 are investigated by the National Cyber Crime Investigation Agency (NCCIA). It replaced the FIA's Cyber Crime Wing in 2025, so older articles that tell you to complain to "FIA Cyber Crime" now point to the same function under a new name. Always use the official website and avoid "complaint agents" who contact you on social media offering to recover your money for a fee; they are a well-known second scam.

Before you file: the first 15 minutes

1. If money left your bank account or JazzCash/Easypaisa wallet, call the helpline printed on your card or shown inside the official app. Ask them to block the transaction and the receiving account. Note the complaint number they give you.
2. Don't delete anything. Chats, SMS, call logs and emails are your evidence.
3. Change passwords and turn on two-step verification on any account that might be affected, starting with your email and WhatsApp.
4. Stop all contact with the scammer. Don't negotiate and don't send more money to "unlock" a refund.

Evidence checklist

• A copy of your CNIC (front and back).
• Screenshots that clearly show the date, time and sender: SMS, WhatsApp chats, call logs, emails or social media messages.
• Transaction IDs (TIDs), amounts and times, plus a bank or wallet statement showing the transfer.
• The suspect's phone numbers, account numbers, IBANs, wallet numbers, profile links and usernames.
• Any website or link the scammer used. Copy the full address, not just a screenshot.
• A short written timeline: what happened, in order, with dates.

Filing the complaint

1. Go to the NCCIA's official website (nccia.gov.pk) and open the online complaint form, or visit the nearest NCCIA office in person.
2. Choose the closest complaint category: financial fraud, hacking, harassment, blackmail and so on.
3. Write your timeline in plain language. Include every number, account and link the suspect used.
4. Attach your evidence. Keep the original files on your phone as well.
5. Submit and save the complaint reference number. You'll need it to follow up and to share with your bank.

Drofsecurity's emergency flow asks you a few questions and produces a ready-to-file complaint draft with this structure, so you only need to paste it and attach your screenshots.

After filing

Investigations take time. Follow up with your reference number, and give your bank the reference so they can process a fraud dispute. If you're contacted by someone claiming to be from NCCIA asking for a fee to speed up your case, treat it as a scam and verify through the official office.

If you're outside Pakistan

Each country has its own agency: the FBI's IC3 in the United States, Action Fraud in England and Wales, the national cyber crime portal (cybercrime.gov.in, helpline 1930) in India, and ReportCyber in Australia. Drofsecurity's emergency page detects your country and shows the right one.