Cybercrime in Pakistan is handled federally, and the financial side runs through your bank in parallel. Fraud reporting almost everywhere involves four distinct routes with different powers, and using only one of them is the most common mistake. This guide sets out each and what it can actually do.

The order that matters

If money has already moved, the bank or payment provider comes first, before anything else. Only they can attempt to hold or recall funds, and that possibility decays by the hour. Everything else — police, regulators, consumer bodies — remains available tomorrow. The bank largely does not.

Where to report in Pakistan

  • The Federal Investigation Agency operates the National Response Centre for Cyber Crime, which takes complaints about online fraud, harassment, impersonation and account compromise. It has a complaint portal and regional offices in the major cities.
  • Your bank's fraud line is the only route to attempt a hold on funds that have already moved, and should be the first call for anything involving a transfer.
  • The State Bank of Pakistan sets consumer protection expectations for banks and operates a complaint escalation route once the bank's own process is exhausted.
  • The Securities and Exchange Commission handles complaints about investment offerings and companies, and publishes registers you can check before investing.

What to have ready before you start

  • The amount, date and exact time of each payment.
  • The account number, wallet address or handle you paid, and the name it was held in.
  • How you were contacted, and the full message history exported rather than screenshotted.
  • Any website, advertisement or profile involved — capture it now, because it will be removed.
  • Your own identification documents, which most reporting routes require.

Keep the references

Every body you contact will issue a reference number. Keep them all in one document with the date and the name of anyone you spoke to. Cases move between institutions, and the next person you deal with will rarely have any of the history. The single most useful thing you can maintain is that one page.

A note on accuracy

Reporting routes, portal addresses and helpline numbers change. Everything above describes bodies and their functions rather than relying on a link that may be stale. Find the current contact route through the relevant government's own domain, and be cautious of search advertisements — fraudulent "support" numbers for banks and government services are themselves a common scam.

And afterwards

Be wary of anyone who contacts you offering to recover your money for a fee, particularly if they approach you rather than the other way round. Victim details circulate, and second-wave recovery fraud specifically targets people who have already lost money. Legitimate recovery work does not begin with an unsolicited message.