Educational, safety-first guidance for people responding to cyber incidents. This project is independent and is not a law-enforcement agency, law firm, bank, telecom operator, or account-recovery service.
A step-by-step guide for unauthorized SIMs, identity misuse, account impersonation, mobile-number takeover, and credential abuse in Pakistan.
- Contact the mobile operator through an official service center or helpline and request an immediate review of the number or SIM.
- Secure email, banking, wallet, and social accounts linked to the affected phone number.
- Check for unexpected password resets, call-forwarding changes, missing service, new accounts, or unauthorized transactions.
- Preserve operator messages, SIM packaging, service requests, account alerts, and identity documents used in reports.
- File a complaint with the Pakistan Telecommunication Authority (PTA) for credential or identity misuse and report cybercrime aspects to NCCIA.
- Phone number, operator, SIM/IMEI details where relevant, and the date service changed
- Operator complaint numbers, service-center receipts, and written responses
- Account recovery alerts, transaction records, and impersonating profile URLs
- Copies of identity documents should be redacted in public; provide full copies only through authorized private channels
- Never publish a full CNIC, passport, SIM number, biometric record, or recovery code.
- Do not rely on phone numbers found in unsolicited messages; use official operator and regulator channels.
- Do not destroy or replace the affected device before preserving relevant records.
| Date and time | Time zone | Event | Account or URL | Evidence file | Action taken | Reference number |
|---|---|---|---|---|---|---|
| YYYY-MM-DD HH:MM | PKT / UTC+5 | What happened | Identifier | File name | Report or containment step | Ticket / complaint ID |
Keep facts separate from assumptions. Record times exactly as displayed and note the time zone. Preserve original files; use copies for review or redaction.
For cybercrime complaints, use the official NCCIA complaint portal or the current reporting methods listed on the NCCIA website. For immediate physical danger, contact local emergency services. For urgent financial loss, contact the relevant bank, wallet, card issuer, or payment provider first.
This is a public repository. Do not open an issue containing victim names, CNIC or passport numbers, phone numbers, financial details, credentials, private media, chat exports, case files, or other evidence. Use official private reporting channels. Redact examples before sharing them for documentation improvements.
SIM misuse Pakistan · identity theft response · unauthorized SIM complaint · PTA identity misuse · mobile number takeover · CNIC misuse help
- PTA: misuse of credentials or identity
- PTA consumer complaints
- NCCIA complaint portal
- NCCIA FAQs and reporting routes
Links are provided for convenience and may change. Confirm current contact details on the authority or platform's official website before acting.
Corrections, accessibility improvements, translations, and updates to official links are welcome. Read CONTRIBUTING.md before opening a pull request.
This material is general information, not legal advice, forensic certification, or a guarantee of recovery. Procedures and reporting routes vary by jurisdiction and platform. A qualified lawyer, investigator, incident responder, or relevant authority should review high-risk cases.