How to Report Cybercrime in Pakistan (NCCIA, Step by Step)

October 18, 2026

Got scammed online, blackmailed on WhatsApp, or had your JazzCash drained by an OTP trick? Here’s the short version: file a complaint with the NCCIA (National Cyber Crime Investigation Agency) — online at complaint.nccia.gov.pk, by calling the free helpline 1799, or by visiting a reporting centre in person. This guide walks you through each route, what evidence to attach, and what actually happens after you file.

Pakistan’s cybercrime numbers are exploding — the NCCIA received over 148,000 complaints in 2026, up from about 104,000 in 2025, with financial fraud the biggest category. And yet most victims never file, usually because they don’t know where to start. This is that starting point.

Note: This is a practical guide, not legal advice. If your case involves serious financial loss or threats, talk to a lawyer as well.

First: save your evidence (before you do anything else)

Do this before you block anyone or delete anything:

  1. Screenshot everything — chats, call logs, payment receipts, the scammer’s profile, phone numbers, account numbers.
  2. Don’t delete messages or accounts. Investigators need the originals; edited or missing evidence weakens your case.
  3. Keep transaction records — JazzCash/Easypaisa transaction IDs, bank statements, the exact date and time money moved.
  4. Save the URLs and usernames — Facebook/WhatsApp/Instagram handles, fake shop links, everything.

Keep the original files untouched. If your case ever reaches court, digital forensics experts check the metadata to prove nothing was tampered with.

The 3 ways to file your complaint

Option 1: Online portal (fastest — recommended)

  1. Go to complaint.nccia.gov.pk.
  2. Fill in the online form: your full name, CNIC number, contact details, and a clear description of what happened, with dates.
  3. Upload your evidence — screenshots, transaction records, chat logs.
  4. Submit and save your complaint reference number. You’ll use it to track your case.

This is the route most people should take: it’s free, it generates a trackable reference, and you don’t have to visit any office to start.

Option 2: Helpline 1799 (for urgent guidance)

Call 1799 — it’s toll-free and runs 24/7. The helpline is best for:

  • Immediate advice when something is happening right now (SIM fraud, active blackmail, a compromised account you need to secure).
  • Guidance on which evidence to gather before filing the formal complaint.

One thing to know: a phone call alone is not a formal complaint. It gets you instructions fast, but follow it up with the online portal or an in-person visit so your case is on record.

Option 3: In person (for serious cases)

Visit your nearest NCCIA Cyber Crime Reporting Centre (CCRC) — they’re in Islamabad, Lahore, Karachi, Rawalpindi, Peshawar, Quetta, Multan, Faisalabad and other major cities. Bring:

  • A written application (English or Urdu) describing the incident.
  • A copy of your CNIC.
  • Printed or digital copies of your evidence.

An in-person visit is usually required when you need to register a formal FIR — typically for significant financial loss or cases needing device forensics.

You can also email a detailed complaint with your CNIC copy and evidence to [email protected], or route it through the Pakistan Citizen Portal app. Overseas Pakistanis can nominate a relative or representative in Pakistan to file on their behalf.

What happens after you file

Here’s the part most guides skip — the honest version:

  1. 14-day verification period. By law, the NCCIA gets 14 days to review your complaint before a formal investigation begins. They check your evidence, may call you for a statement, and assess whether it discloses an offence under the cybercrime law (PECA).
  2. Investigation. If it qualifies, an inquiry opens. Investigators can pull subscriber data from telecom companies and platforms, forensically examine devices, and register an FIR.
  3. Prosecution. Where warranted, arrests and trial follow.

Be realistic about timelines: after the verification stage, things move at the speed of the system. Cases needing data from foreign platforms (Meta, WhatsApp) or forensic analysis take longer. What keeps your case moving is you — stay reachable, respond fast when they ask for more evidence, and keep your reference number handy.

And here’s the uncomfortable context: between 2023 and 2026, Pakistan logged over 523,000 cybercrime complaints — with barely 200 convictions. The system is overloaded. Filing still matters: it’s the only way your case exists officially, and patterns across complaints are how repeat scammers get flagged.

What the NCCIA can actually help with

  • Online financial fraud (JazzCash/Easypaisa scams, fake shops, OTP theft)
  • Blackmail and harassment on WhatsApp, Facebook, Instagram
  • Hacked accounts and identity theft
  • Fake job offers and prize/lottery scams
  • Non-consensual image sharing

FAQ

Is reporting to the NCCIA free?

Yes. The online portal, the 1799 helpline, email and in-person complaints are all free of charge.

I already reported to the FIA. Do I need to re-file?

The NCCIA has replaced the FIA’s old Cyber Crime Wing as the body that handles these complaints. Cases filed with the FIA before the transition should have migrated — call 1799 to confirm your case is in the new system and get an updated reference number.

The scammer is using a foreign number / based abroad. Can I still report?

Yes, file anyway. Cross-border cases are harder and slower, but the complaint creates an official record, and the NCCIA does cooperate with foreign platforms on data requests.

Will the scammer know I reported them?

Your complaint is between you and the agency. There’s no public listing of complainants.

How do I check my complaint status?

Use the reference number from your online submission on the NCCIA portal. If you filed before the FIA-to-NCCIA transition, call 1799 to get your updated tracking reference.


Been targeted by a scammer? Check our Scammer’s Directory of Pakistan — a running record of fraudsters operating in the country, built from real reports. And if a number looks suspicious, verify before you pay.