Skip to content
Online threat level: HIGH Cyber awareness program for Pakistan Report cybercrime — NCCIA 1799

Common online scams in Pakistan

How each scam works, the red flags to watch for, and what to do if it happens to you. Share any card on WhatsApp to warn your family.

SMS · 8XXX / unknown numberCongratulations! Your Rs 25,000 BISP payment is approved. To receive, send your CNIC and the code you get to this number.

How it works: Scammers copy official names and logos, then collect your CNIC, OTPs or a “processing fee”. With the OTP they open wallets or take over accounts in your name.

Red flags & What to do

Red flags

  • You never applied, but you “won” or “qualified”
  • Message from a normal mobile number
  • Asks for OTP, PIN or a fee
  • Link that is not exactly .gov.pk

What to do

  • Check only on the official programme website or official short code
  • Never share OTP or pay a fee to receive aid
  • Report the number to PTA and NCCIA (1799)
Phone call · looks officialSir, your card is blocked due to suspicious activity. I am sending a verification code — read it to me to reactivate.

How it works: The caller triggers a real transfer or login, and the OTP you read out approves it. Some callers show a bank-like caller ID.

Red flags & What to do

Red flags

  • Asks for OTP, PIN, CVV or password
  • Creates panic: “blocked”, “misuse”, “last chance”
  • Asks you to stay on the line or not tell family

What to do

  • Hang up. Call the number on the back of your card
  • Never read any code to anyone
  • If you shared it, call the bank immediately to block
Accounts & identity Trending

WhatsApp “code sent by mistake”

WhatsApp · often a friend’s hacked accountSorry, I sent a 6-digit code to your number by mistake. Please send it to me, urgent.

How it works: They are registering YOUR number on their phone. The code is yours. Once shared, they take over your WhatsApp and ask your contacts for money.

Red flags & What to do

Red flags

  • Anyone asking for a WhatsApp code
  • Urgency and emojis like 🙏
  • Friend writes in an unusual way

What to do

  • Never forward the code
  • Turn on two-step verification (Settings → Account)
  • Hijacked? Re-register WhatsApp with your number and warn contacts
Phone call · sometimes an AI-cloned voiceYour son has been caught after an accident. Send Rs 50,000 right now to settle it — and don’t tell anyone.

How it works: Fear removes logic. Callers pose as police, a friend or a relative — sometimes with a voice that sounds familiar — and demand instant payment.

Red flags & What to do

Red flags

  • “Don’t tell anyone”
  • Payment to a personal wallet
  • You cannot speak to the person directly

What to do

  • Hang up and call your family member directly
  • Use a family code word for emergencies
  • Report the number to NCCIA 1799
WhatsApp / Telegram / Facebook adEarn Rs 5,000 daily from home — just like videos and rate products. Joining fee Rs 1,500. Limited seats!

How it works: You get small payouts at first to build trust, then you must “deposit” larger amounts to unlock VIP tasks or withdraw. The money is gone.

Red flags & What to do

Red flags

  • Any fee before work starts
  • Unrealistic daily income
  • Recruiter refuses a video call or office address

What to do

  • Never pay to get a job
  • Search the company name + “scam” and check official websites
  • Report the group/number on the platform and to NCCIA
Harassment & blackmail Trending

Sextortion & photo blackmail

Instagram / Facebook / WhatsApp video callI have your video. Pay Rs 30,000 in 1 hour or I send it to your family and university group.

How it works: A friendly fake profile builds trust, records a video call or receives pictures (sometimes edited/AI-made), then threatens to share them.

Red flags & What to do

Red flags

  • New account that quickly turns flirty
  • Pushes for a video call or pictures
  • Countdown deadline for payment

What to do

  • Do NOT pay — stop replying, keep the chat
  • Tell someone you trust; you are not alone
  • Report to NCCIA (1799) · confidential help: DRF 0800-39393 · or our support form
Robocall or caller posing as an officialYour SIM biometric verification is incomplete and will be blocked in 2 hours. Press 1 or share the code to re-verify.

How it works: Fear of losing your number makes you share codes or personal details that are used to hijack wallets, WhatsApp or to issue a duplicate SIM.

Red flags & What to do

Red flags

  • Officials don’t verify SIMs over phone calls
  • Request for codes or CNIC details
  • Short deadline

What to do

  • Hang up; visit your operator’s franchise if worried
  • SMS your CNIC number to 668 to see SIMs on your name
  • PTA helpline: 0800-55055
Fake wallet SMS + phone callYou have received Rs 8,000 from 03XX. [then a call] Brother, I sent it by mistake, it was my child’s fee, please return it.

How it works: The SMS is fake, typed from a normal number. Nothing actually arrived — you send your own money.

Red flags & What to do

Red flags

  • Credit SMS from a regular mobile number
  • Emotional story and pressure
  • Balance in app doesn’t match

What to do

  • Check the balance inside the official app
  • If money truly arrived, let the wallet helpline reverse it
  • Block and report the number
Call or WhatsApp with logosYour number won a motorcycle in our anniversary lucky draw! Pay Rs 4,500 tax and delivery to receive it.

How it works: There is no prize. Each payment is followed by a new “fee” until you stop.

Red flags & What to do

Red flags

  • You never entered
  • You must pay to receive a prize
  • Personal wallet number for “tax”

What to do

  • Ignore and block
  • Check the brand’s official page or helpline
  • Report to NCCIA 1799
Facebook / Instagram pageiPhone 15 Pro (PTA approved) only Rs 65,000! Full advance, delivery in 2 days. DM now, comments off.

How it works: The page collects advance payments and disappears or blocks you; sometimes it sends a cheap fake.

Red flags & What to do

Red flags

  • Too-good-to-be-true price
  • No cash on delivery
  • Recently created or renamed page

What to do

  • Prefer cash on delivery or trusted marketplaces
  • Check “Page transparency” for creation date and name changes
  • Keep chats and receipts; report the page
WhatsApp file from a contact📄 E-Challan_Notice.apk — “Your vehicle challan is pending, open to see the fine.”

How it works: The app asks for SMS and accessibility permissions, then silently reads OTPs and forwards itself to your contacts.

Red flags & What to do

Red flags

  • A file ending in .apk
  • Asks to allow “unknown apps”
  • Requests SMS or accessibility permission

What to do

  • Don’t open it; delete and warn the sender
  • Installed it? Uninstall, go offline, change passwords from another device
  • Call your bank to watch for transactions
Harassment & blackmail

Illegal instant-loan apps

App ads on social mediaGet Rs 20,000 in 5 minutes! No documents, just CNIC. Allow contacts for fast approval.

How it works: Huge hidden charges and short deadlines, then threats and humiliating messages to everyone in your contacts.

Red flags & What to do

Red flags

  • Wants contacts, gallery or SMS access
  • Not a licensed bank or lender
  • Repayment period of a few days

What to do

  • Borrow only from licensed institutions
  • Revoke permissions and uninstall
  • Harassed? Save evidence and report to NCCIA
Facebook groups / agents on WhatsAppUrgent hiring for Europe and Gulf — free visa! Pay Rs 80,000 processing fee, confirmed job letter in 7 days.

How it works: Fake job letters and visa documents are sent after payment; the agent vanishes or keeps asking for more.

Red flags & What to do

Red flags

  • “Free visa” but large fees
  • Payment to a personal account
  • No licensed office you can visit

What to do

  • Use only government-licensed overseas employment promoters
  • Verify the licence through official government channels
  • Never hand over your passport or pay in cash without a receipt
Telegram / WhatsApp trading groupOur AI trading bot gives 10% weekly profit, guaranteed. Minimum investment Rs 20,000. See today’s withdrawals!

How it works: Fake dashboards show growing profits; withdrawals are blocked by new “fees” or the platform disappears.

Red flags & What to do

Red flags

  • Guaranteed or fixed high returns
  • Pressure to invite others
  • Screenshots of other people’s “profits”

What to do

  • Don’t invest through chat groups
  • Check that the company is registered with the regulator
  • Report the group and keep payment records
Seen a new scam? Tell us through the contact form so we can warn others. If you lost money or a crime happened, always report it to NCCIA (1799).
FAQ

Online scams in Pakistan: questions

What are the most common online scams in Pakistan?

The most common online scams in Pakistan are fake BISP and prize messages, calls pretending to be from a bank or JazzCash/Easypaisa asking for a code, WhatsApp account takeovers, “task” jobs, illegal loan apps and sextortion.

How can I tell if a message is a scam?

Watch for four signs: urgency, fear, a prize you never applied for, and any request for an OTP, PIN or fee. If you are unsure, paste the message into our scam checker: open the guide

I shared a code or sent money. What should I do now?

Call your bank or wallet’s official helpline at once to block the account, change your passwords, keep screenshots and transaction IDs, and report to NCCIA on 1799. Acting within the first hour helps most.

How do I warn my family about online scams?

Share any scam card from this page on WhatsApp, or send our ready-made tip cards to family groups. Elders and children are targeted most, so a short message today can prevent a loss tomorrow.

Something wrong happening online?

You are not alone. Get help now.

Report cybercrime to the official agency, NCCIA. If you are facing harassment or blackmail, our team guides you confidentially.