SIM Scam Awareness – Protect Yourself from Phone Fraud in Pakistan

Common SIM Scams in Pakistan

1. Fake SIM Database Websites

Scammers create websites that look like SIM database portals, promising free lookup of SIM owner details. These sites are designed to:

• Harvest your CNIC number and personal information
• Install malware or spyware on your device
• Display ads that generate revenue for the scammer
• Redirect you to phishing pages that mimic PTA or NADRA portals

Red flags: Domains ending in .cf, .ml, .ga, .tk (free domains commonly used by scammers). Sites promising "live tracker," "fresh database," or "SIM data download."

2. CNIC Harvesting Scams

Scammers pose as telecom representatives, bank officials, or PTA staff calling or messaging you to "verify" your CNIC. They ask for:

• Your full CNIC number
• Your mother's name (security questions)
• Bank account details linked to your CNIC
• One-time passwords (OTPs) sent to your phone

Never share these details over the phone. Legitimate telecom operators and PTA never call to ask for your CNIC or OTP.

3. SIM Swap Fraud

In SIM swap fraud, a scammer convinces your mobile operator to issue a duplicate SIM for your number. Once they have your SIM, they can:

• Access your mobile banking and Easypaisa/JazzCash accounts
• Receive your OTPs and two-factor authentication codes
• Make unauthorized transactions
• Impersonate you on social media and messaging apps

Warning signs: Sudden loss of network signal, inability to make calls or send SMS, notifications of SIM activation on another device.

4. Phishing SMS and Calls

Scammers send SMS messages pretending to be from PTA, NADRA, or your mobile operator. Common phishing messages include:

• "Your SIM will be blocked. Verify now: [link]"
• "You won a prize. Claim by sending your CNIC to [number]"
• "Your CNIC has been used for illegal activity. Call [number] immediately"
• "Update your biometric verification or your number will be deactivated"

5. Fake PTA and NADRA Portals

Scammers create fake copies of official websites. The real PTA SIM information portal is cnic.sims.pk. Fake sites often use:

• cnic-sim.pk
• cnic.sims.org
• pta-sim.com
• nadra-sim.info
• sims.cf, sims.ml, sims.ga

How to Protect Yourself

• Only use official channels: PTA's *668#, cnic.sims.pk, and MNP to 667. Never use third-party SIM database websites.
• Check the URL carefully: Look for misspellings, unusual domain extensions (.cf, .ml, .ga), and missing HTTPS.
• Never share your CNIC online: Do not enter your CNIC on any website that is not an official government portal.
• Enable SIM lock: Contact your operator to enable SIM lock so a duplicate SIM cannot be issued without your presence.
• Monitor your SIM count: Dial *668# monthly to check for unauthorized SIMs on your CNIC.
• Use strong passwords: Secure your mobile banking and digital wallets with strong, unique passwords.
• Enable two-factor authentication: Use 2FA on all your important accounts beyond just SMS-based verification.

What to Do If You Have Been Scammed

1. Contact your bank immediately: If you shared financial information, call your bank to freeze accounts and prevent transactions.
2. Call your mobile operator: Report any suspicious SIM activity and request a SIM block if needed.
3. Dial *668#: Check for unauthorized SIMs on your CNIC immediately.
4. File a complaint with FIA: Visit nr3c.gov.pk or call 1991 to report cyber crime.
5. Report to PTA: File a complaint at complaint.pta.gov.pk or call 0800-22732.
6. Change passwords: Update passwords for all your online accounts, especially banking and email.

Official Channels