How To Report SIM Fraud — PTA vs NCCIA Explained

You've found a SIM you never registered sitting on your CNIC, or a scammer used a SIM fraudulently issued in your name to take a loan, harass someone, or empty an account. Now what? Most people freeze at exactly this point, because Pakistan doesn't have one single place to report SIM fraud. It has two, and they do genuinely different jobs. Get the wrong one, or only file with one when you needed both, and your case can sit going nowhere for weeks while the person responsible stays reachable. This guide walks through exactly which authority handles what, how to file with each one correctly the first time, and when you need to go to both PTA and NCCIA in parallel rather than choosing between them.

Here's the current state of both systems, since the setup itself changed fairly recently and a lot of guides online still describe the old one.

PTA vs NCCIA: The Actual Difference

The confusion is understandable, because both names get thrown around interchangeably in WhatsApp forwards and old blog posts. They're not interchangeable. The Pakistan Telecommunication Authority (PTA) is the industry regulator for telecom operators. Its power over SIM fraud is administrative: it can order an operator to deactivate a fraudulently issued SIM, block a number used for scam calls or SMS, block a stolen phone's IMEI, and even blacklist a CNIC from getting new SIMs after repeat abuse. What PTA cannot do is investigate a crime, gather digital evidence for prosecution, or arrest anyone.

That's NCCIA's job. The National Cyber Crime Investigation Agency was formally established under Section 51 of PECA 2016 by a gazette notification on 3 May 2024, replacing the FIA's Cyber Crime Wing, and became fully operational in April 2025 after a one-year transition period during which existing FIA cyber-wing staff continued their duties. Under the Prevention of Electronic Crimes (Amendment) Act, 2025, NCCIA now holds exclusive jurisdiction for cybercrime inquiries, investigations and prosecutions — meaning ordinary police stations and the old FIA cyber wing no longer handle these cases directly. If someone used a fraudulently obtained SIM to commit identity theft, run a scam, or steal money, NCCIA is the body that builds the criminal case against them.

• 📶PTAFixes the SIM/number itself
• 🕵️NCCIAInvestigates the person behind it
• 🏦Your bankFreezes/reverses transactions
• 🏛️Police stationRegisters an FIR if money was lost

Which One Should You Contact?

Tap the situation closest to yours below. Nothing you tap here is stored or sent anywhere — it just shows you the relevant guidance.

Reporting to PTA, Step by Step

PTA's process is two-step by design: your telecom operator gets the first chance to fix it, and PTA is the escalation path if that doesn't work.

1. Confirm the problem first. Text your CNIC number to 668 to see how many SIMs are registered against it. Our 668 SMS code guide explains how to read the reply.
2. Contact your operator directly about the specific SIM or number. Keep the complaint reference number they give you — PTA will ask for it later.
3. Give the operator 3 to 5 working days to respond before escalating, unless it's urgent (a stolen device, an active scam number).
4. File with PTA at complaint.pta.gov.pk, or call the toll-free helpline 0800-55055. Include your operator complaint reference, CNIC, the SIM/number in question, and any evidence (screenshots, call logs, the 668 reply).
5. Track it online. Log back into complaint.pta.gov.pk with your CNIC to see the operator's response and PTA's status update.
6. Expect a working timeline, not an instant fix. Straightforward IMEI blocks can complete in about 24 hours; SIM-fraud complaints with full documentation are typically reported to take somewhere in the region of 30 to 45 working days.

Reporting to NCCIA, Step by Step

NCCIA now handles the criminal-investigation side that used to sit with FIA's Cyber Crime Wing. If you've seen older guides pointing to the FIA helpline or NR3C, that structure no longer exists — NCCIA absorbed it.

1. Gather your evidence before you start. Screenshots, transaction IDs, the fraudulent SIM number, any call recordings or messages, and your CNIC.
2. Choose your channel. The main options are the online portal at complaint.nccia.gov.pk, the Pakistan Citizen Portal at web.citizenportal.gov.pk, email to helpdesk@nccia.gov.pk, or visiting your nearest Cybercrime Reporting Centre in person.
3. Call the helpline for urgent guidance. 1799 is a 24/7 line, live since June 2025. Note that a phone call alone doesn't formally register a complaint — it's for guidance and urgent account-securing steps, not a substitute for filing.
4. Submit a full written complaint with your name, CNIC, contact details, and a clear description of what happened, plus every piece of evidence you have.
5. Get your complaint reference number and keep it — you'll need it for follow-up and if you also involve your bank or a lawyer.
6. Expect a verification stage before a full investigation opens, since complaints are checked before formal proceedings begin.
7. File an FIR at a police station too, if you lost money, since banks and NCCIA's own process often ask for one alongside the cybercrime complaint.

Do You Need to File With Both?

More often than people expect, yes. Think of it as fixing two separate problems that happen to share one cause. PTA fixes the instrument — the SIM itself gets blocked, disowned, or the IMEI gets blacklisted, so it can't be used against you or anyone else again. NCCIA pursues the person who used that instrument to commit a crime — building a case that can, eventually, lead to prosecution.

If someone registered a SIM in your name and simply let it sit unused, PTA alone may be enough — disown it, done. But the moment that SIM (or the OTPs, calls, or messages that came through it) was used to take money, open an account, impersonate you, or threaten someone, you have a PECA-relevant crime, and NCCIA needs to be in the loop regardless of what PTA does with the SIM itself. Filing with only one when the situation calls for both is one of the most common reasons people feel like "nothing happened" after they reported it — they closed half the loop.

Evidence Checklist Before You File

Complaints with complete documentation move faster on both sides. Tick what you already have — nothing here is stored or sent.

A Realistic Scenario

Ayesha gets a message from her bank about a loan she never applied for. Confused, she checks her CNIC's SIM count via 668 and finds a number she doesn't recognise. Someone registered a SIM against her identity months earlier, likely through a compromised or careless franchise verification, and used it to receive the OTPs needed to open a digital loan account in her name.

She does two things the same afternoon, not one after the other. First, she visits a franchise to request SIM disowning for the number she never registered, and separately reports it at complaint.pta.gov.pk so PTA can order it blocked. Second, because an actual loan was taken out in her name, she files a full complaint with NCCIA at complaint.nccia.gov.pk, attaching the loan notice, the 668 reply, and her PTA complaint reference. She also visits the nearest police station to note her situation, since the lending platform later asks for an FIR to pause collection.

Ayesha is an illustrative example, not a real case, but the sequence matches how these situations are meant to be resolved: the SIM gets neutralised on the PTA side while the fraud itself gets investigated on the NCCIA side, in parallel, not as two separate attempts weeks apart.

What Happens After You File

On the PTA side, your operator investigates the SIM's registration record — when it was issued, at which franchise, whether NADRA verification was properly performed — and reports back to PTA, which then relays the outcome to you. Expect an acknowledgment within a few working days, and resolution timelines that can stretch to several weeks for anything requiring operator-side investigation, versus roughly a day for a straightforward stolen-device IMEI block.

On the NCCIA side, your complaint typically goes through an initial verification stage before a formal case opens. Investigators may request additional evidence, and building a prosecutable case, especially one involving cross-border elements, understandably takes longer than a telecom fix. Keep every reference number you're given, and follow up in writing rather than relying only on phone calls, since portals let you attach new evidence and track status directly.

Common Mistakes People Make

• Calling the old FIA cybercrime numbers. Numbers like 1991 or 9911, and the NR3C portal, belonged to the FIA's Cyber Crime Wing before it was absorbed into NCCIA. They're outdated references that still circulate in older guides and forwarded messages.
• Filing with only PTA when a crime occurred. Getting a SIM disowned doesn't investigate who used it or recover any money lost through it.
• Filing with only NCCIA and leaving the fraudulent SIM active. Without a parallel PTA complaint, the same SIM can keep being used while the criminal case is still being built.
• Skipping your operator before escalating to PTA. PTA's process expects you to have given the operator a chance first, and asks for that reference number.
• Treating a helpline call as a filed complaint. Both 1799 and 0800-55055 are for guidance; the written complaint through the portal, email, or in person is what actually opens a case.
• Not keeping reference numbers. Every escalation, every bank call, every follow-up goes faster when you can quote a previous reference immediately.

Other Agencies Worth Knowing

Depending on exactly what happened, one more contact may be relevant alongside PTA and NCCIA.

• State Bank of Pakistan, if a bank or mobile wallet transaction is involved: cpd.helpdesk@sbp.org.pk. Your bank's own fraud desk should still be your first call for freezing or reversing a transaction.
• Your nearest police station, for filing an FIR when money was lost — many banks and NCCIA's own process reference this alongside the cybercrime complaint.
• PTA's DIRBS system, if the fraud involved a stolen or cloned device rather than just a SIM — see PTA's device registration guidance for IMEI-specific steps.

For the wider legal backdrop to all of this, our PECA 2016 explained guide breaks down what the law actually covers and where NCCIA's authority comes from.

Claims I Couldn't Verify

Where PTA or NCCIA's own published pages didn't confirm a specific number or timeline, I've marked it "reported" rather than official. Contact numbers and process details can change; always cross-check against pta.gov.pk and nccia.gov.pk directly before relying on any single source.

Reporting SIM Fraud: FAQs

What's the actual difference between PTA and NCCIA?

PTA is the telecom regulator — it can block or disown a fraudulent SIM. NCCIA is the criminal investigation agency — it builds a case against the person who committed the fraud, under PECA.

Do I need to report to both?

If a SIM issued without your consent was actually used to commit fraud, identity theft, or harassment, yes — PTA to neutralise the SIM, NCCIA to pursue the person behind it. If the SIM just sat unused, PTA alone may be enough.

Is the FIA still the right place to report cybercrime?

No. The FIA's Cyber Crime Wing (previously NR3C) was absorbed into NCCIA, which was established under Section 51 of PECA 2016 and became fully operational in April 2025. Older numbers like 1991 or 9911 are outdated for this purpose.

How do I check how many SIMs are registered on my CNIC?

Text your CNIC number to 668 from any network, or check the cnic.sims.pk portal. Our 668 SMS code guide and portal guide walk through reading the results.

What's PTA's complaint helpline?

0800-55055, toll-free. You can also file directly at complaint.pta.gov.pk or email complaint@pta.gov.pk.

What's NCCIA's complaint helpline?

1799, a 24/7 line live since June 2025. Note it's for guidance and urgent steps; a written complaint through the portal, email, or in person is what formally files your case.

Does calling the helpline count as filing a complaint?

No, for either agency. Helplines give guidance; the online portal, email, or an in-person visit is what actually registers your complaint.

How long does PTA take to resolve a SIM fraud complaint?

Straightforward stolen-device IMEI blocks can complete in about 24 hours. Complaints requiring operator-side investigation into a SIM's registration history are typically reported to take longer, often several weeks with complete documentation.

Is SIM disowning free?

Yes, when the SIM is genuinely fraudulent and not registered by you. Ask at any franchise or escalate through PTA if the operator doesn't act.

Do I need an FIR as well?

If money was lost, yes — banks and NCCIA's own process commonly ask for a police FIR alongside the cybercrime complaint. File it at your nearest police station.

Related guides: SIM Owner Details (main guide) · SIM Swap Fraud in Pakistan · OTP Fraud & Interception Scams · 668 SMS Code Explained · cnic.sims.pk Portal Guide · PECA 2016 Explained.
Note: this is general information, not legal advice. Confirm current procedures directly on pta.gov.pk and nccia.gov.pk. This site is independent and is not a government service.