Mobile Number Portability (MNP) Fraud in Pakistan — How Criminals Port Your Number and How to Stop Them (2026)

Last Verified: May 2026 | By SimOwner.net.pk Editorial Team — tracking Pakistan’s SIM fraud landscape since 2015

Most Pakistanis think of Mobile Number Portability (MNP) as a convenience feature — a way to switch from Jazz to Telenor without changing your phone number. And it is. But MNP is also one of the most underreported pathways for SIM fraud in Pakistan, because unauthorized number porting can achieve the same result as a SIM swap — putting your phone number under a criminal’s control — through an entirely different regulatory process with its own distinct set of exploitable gaps.

This guide explains exactly how MNP fraud works in Pakistan, what the criminal gains from porting your number rather than swapping your SIM, how to detect whether your number has been fraudulently ported, and the specific steps to stop it, reverse it, and prevent it from happening.

Start by checking the current status of your SIM — whether it is still on your original network or has been moved — at SimOwner.net.pk. A fraudulent port changes your registered network; this check makes it immediately visible.

What Is MNP and How Does It Normally Work?

Mobile Number Portability is a PTA-mandated service that allows any Pakistani mobile subscriber to move their phone number from one network operator to another without changing the number itself. It was introduced in Pakistan in 2007 and has enabled millions of subscribers to switch networks based on coverage, pricing, or service quality.

The legitimate MNP process works as follows:

Step 1 — The subscriber dials 667 (or contacts the new network’s franchise) to initiate a port request. Dialing 667 generates a Porting Authorization Code (PAC) — a unique code that authorizes the number transfer.

Step 2 — The subscriber visits the new network’s franchise with their CNIC and biometric verification (fingerprint via NADRA MBVS). They provide the PAC code.

Step 3 — The new network submits the porting request to PTA’s MNP Clearinghouse. The existing network (the “donor”) is notified.

Step 4 — A mandatory waiting period applies — under PTA’s MNP regulations, the donor network can raise objections (e.g., outstanding postpaid balance) during this window.

Step 5 — The port executes — typically within 24–48 hours. The subscriber’s number goes live on the new network. The old SIM deactivates simultaneously.

Notice what happens at Step 5: the old SIM deactivates. This is important — it means that MNP fraud, like SIM swap fraud, results in your original SIM losing service. From the victim’s perspective, the first symptom is identical.

How MNP Fraud Works — The Criminal’s Method

MNP fraud exploits the PAC code generation step and the franchise verification gaps in the same way SIM swap fraud exploits franchise-level biometric verification failures.

Method 1 — The 667 PAC Code Interception

The simplest MNP fraud does not require visiting a franchise at all — it requires social engineering.

The attack:

1. The criminal calls you impersonating a network operator employee, PTA official, or prize notification call center
2. They convince you to dial 667 and read back the code you receive (framing it as “verification,” “account update,” or “prize claim”)
3. You dial 667, receive a PAC code via SMS, and read it to them
4. They take the PAC code to a franchise and initiate a port of your number to a new SIM under their control

Your number is now theirs. The criminal has a working SIM with your phone number on a different network — receiving all your calls, OTPs, and WhatsApp verifications.

This is the single most important MNP fraud vector in Pakistan. The 667 PAC code is the functional equivalent of your SIM PIN — never share it with anyone, regardless of how legitimate the caller sounds. No genuine PTA employee, network employee, or prize system ever asks you to share a 667-generated code.

Method 2 — Fraudulent In-Person Port Request

This method mirrors the SIM swap fraud approach:

1. The criminal obtains or fabricates your CNIC details
2. They visit a franchise of a different network (one you are not currently on)
3. They claim to be you, present identity documentation (genuine or counterfeit)
4. If the franchise’s MBVS verification fails or is bypassed, they generate a PAC via the franchise system
5. The port initiates

This method is harder than a simple SIM replacement request because porting requires contacting the victim’s existing network as well — creating more verification checkpoints. However, franchises with corrupt employees or poor verification practices remain vulnerable.

Method 3 — SIM Replacement + Port Combination

The most sophisticated MNP fraud combines two steps:

1. First: Perform a SIM replacement (get a physical SIM with the victim’s number on their existing network)
2. Second: Use that SIM (with full control of the number) to legitimately dial 667, generate a PAC, and port to a new network

This method is slower but harder to detect — the initial SIM replacement appears to be straightforward replacement fraud. The porting step that follows is technically “legitimate” since it was authorized by whoever controlled the SIM. It also means your original SIM goes through two deactivations — first replacement, then port — creating confusion about the timeline.

Why Criminals Choose MNP Fraud Over SIM Swap

If SIM swap and MNP fraud produce similar results (criminal controls your number), why would a criminal choose MNP fraud? Several reasons:

Different network — harder to reverse: When a number is fraudulently ported to a new network, reversing it requires coordination between two operators plus PTA’s MNP clearinghouse. SIM swap reversal happens within one operator. Multi-operator processes take longer — giving criminals more time.

Postpaid account access: If a criminal ports your number to a postpaid plan on a new network in your name, they can make expensive calls (international, premium rate) that generate a bill against your CNIC — and potentially damage your CNIC’s credit standing with operators.

Persistent access window: An MNP port takes 24–48 hours to execute from request to activation. During this window, PTA’s regulations provide for a cancellation period — but many victims do not know this window exists. Criminals exploit the window for maximum damage before the victim discovers the fraud.

Warning Signs Your Number Is Being Ported Without Your Consent

Warning Sign 1 — You receive an unsolicited 667 SMS. If your phone receives an SMS with a code from 667 that you did not request, someone has initiated a port request for your number. The code is the PAC. Do not share it — contact your operator’s fraud line immediately.

Warning Sign 2 — Your network sends an “MNP Request Received” SMS. PTA requires that operators notify subscribers when a porting request is received. If you receive this notification and did not initiate it, act immediately — you are within the objection window.

Warning Sign 3 — Your phone loses signal at an unexpected time. Unlike a SIM swap (which happens quickly), MNP port deactivation of your original SIM happens when the port completes — typically 24–48 hours after request. If your signal drops without explanation, check whether your number has been ported.

Warning Sign 4 — You suddenly cannot make calls but can still connect to WiFi. If your phone shows full WiFi connectivity but no cellular service, and you have not manually enabled airplane mode, your SIM may have been deactivated by a port.

Monitor your active SIM status regularly at SimOwner.net.pk’s live tracker tools — this shows whether your number is still on its registered network or has moved.

The Cancellation Window — Your Most Important Protection

PTA’s MNP regulations include a mandatory notification and cancellation window. When a porting request is received:

1. The subscriber receives an SMS notification from their current network
2. The subscriber has a specific window (the exact period per current PTA regulations — confirm with your operator, typically 24 hours) to cancel the port by replying to the notification or calling their operator
3. If no cancellation is received within the window, the port proceeds

This window is your most powerful protection against MNP fraud. If you receive an unexpected MNP notification and immediately call your operator’s fraud line, the port can be stopped before it completes.

The challenge: criminals count on victims not knowing about this window. Many Pakistanis who receive an “MNP Request Received” SMS assume it is spam and ignore it. It is not spam — it is a regulatory notification, and ignoring it allows the fraud to complete.

What to do if you receive an unexpected MNP notification:

State explicitly: “I have received an MNP request notification that I did not authorize. Please cancel this port request immediately and flag my account for fraud investigation.”

Reversing a Completed Fraudulent Port

If the port has already completed — your original SIM is deactivated and your number is now on a different network — reversal is more complex but remains possible.

Step 1 — Contact Your Original Network Immediately

Even though your number is now on a different network, your original network’s customer service can initiate a reversal port process on your behalf. They can also pull the porting request records showing when and how the port was initiated — essential evidence for FIA.

Step 2 — Contact the Receiving Network

The network that received your fraudulently ported number can suspend the ported SIM pending investigation. This prevents the criminal from continuing to use your number while the reversal is processed.

Call the receiving network’s fraud line (the number your number was ported to) and report: “A SIM was fraudulently ported to your network using my identity without my consent. The ported number is [your number]. Please suspend this SIM immediately.”

Step 3 — File an FIA Cybercrime Complaint

File at complaint.fia.gov.pk. Include:

• Your CNIC number
• Your phone number
• Your original network operator
• The date your number stopped working
• Any 667 SMS or MNP notification you received (with timestamps)
• Evidence of any financial loss resulting from the port

MNP fraud violates PECA 2016 Section 14 (unauthorized access) and Section 16 (identity information crimes), with the same penalty structure as SIM swap fraud — up to 3 years imprisonment and Rs. 5,000,000 fine.

Step 4 — File a PTA Complaint

File at complaint.pta.gov.pk. PTA’s MNP Clearinghouse has authority to issue an emergency reversal order for fraudulent ports. A PTA complaint with supporting evidence is the fastest regulatory pathway to port reversal.

Realistic timeline: Port reversal via PTA complaint takes 3–7 working days when properly documented. This is slower than SIM swap recovery — another reason why intercepting the port before it completes (Step 3 from Warning Signs section) is vastly preferable.

How to Protect Your Number From MNP Fraud Permanently

Protection 1 — Never Share a 667-Generated Code

This cannot be repeated enough. The PAC code from 667 is the master key to your number’s portability. No legitimate entity ever needs you to share it. If anyone asks — regardless of what they claim — it is fraud.

Protection 2 — Add a Verbal Password to Your Network Account

Call your network’s customer service and ask to add a verbal password or secret phrase to your account. This is a free service. Any subsequent account changes — including port requests initiated at a franchise — require the agent to verify this password before proceeding.

This is not universally implemented across all Pakistani networks, but Jazz, Telenor, and Zong customer service can note this on your account. Ask specifically: “Please add a security note requiring verbal password verification for any account changes or porting requests.”

Protection 3 — Enable Number Lock (Where Available)

Some networks offer a “number lock” or “port lock” feature that prevents porting requests from being processed without in-person verification at a specific branch. Ask your network operator if this is available for your account.

Protection 4 — Check Your SIM’s Registration Status Regularly

Using SimOwner.net.pk’s SIM verification tools, verify your number’s current registered operator periodically. If your number has moved to a different network without your knowledge, this check surfaces it immediately.

Protection 5 — Respond to ALL Network SMSes

Never dismiss an SMS from your network as spam without reading it. MNP notifications, fraud alerts, and SIM change notifications from legitimate operators look like bulk SMSes — but they are regulatory notifications with time-limited response windows.

Protection 6 — Minimize CNIC Photocopy Exposure

MNP fraud via franchise impersonation requires the criminal to present your CNIC details. Reducing the circulation of your CNIC number and photocopies reduces the information available to potential fraudsters.

The Difference Between MNP and SIM Swap — A Comparison

Understanding the distinction helps you identify which type of fraud occurred:

Frequently Asked Questions

Q: I received a 667 SMS code that I didn’t request. What should I do? A: Do not share the code with anyone. Call your network’s customer service immediately and report that an unauthorized port request was made. Ask them to cancel it and flag your account. The code itself is harmless if not used — but someone clearly has your number and attempted to initiate a port.

Q: Can I check whether my number has been ported to a different network? A: Yes. If your phone shows signal loss that you cannot explain, call the number from a different phone. If the call routes through a different network than your original one (you can hear a different ringtone, or the network ID on the receiving phone shows differently), a port may have occurred. You can also check your SIM registration at SimOwner.net.pk.

Q: If my number was fraudulently ported, is the criminal’s SIM traceable? A: Yes. Every SIM on every Pakistani network is registered with CNIC and biometric data per PTA regulations. The SIM issued to the criminal on the receiving network has registration records — which FIA can access through the network operator in the course of a criminal investigation. MNP fraud leaves a more detailed evidence trail than many criminals expect.

Q: Does MNP fraud affect my SIM’s existing mobile wallet balance? A: The mobile wallet (JazzCash, Easypaisa) is linked to your phone number, not the physical SIM. When a criminal gains control of your number via MNP, they can trigger wallet OTPs and potentially access your mobile wallet balance. Freeze your mobile wallet accounts immediately upon discovering MNP fraud — same priority as SIM swap recovery.

Q: How long does a legitimate MNP port take in Pakistan? A: Under PTA’s MNP regulations, the process takes 24–48 hours from PAC submission to port completion. Same-day porting is not available. This window is both a protection (gives victims time to cancel) and a risk (gives criminals a working operation window).

Q: Can postpaid subscribers be targeted for MNP fraud? A: Yes, but with additional complexity — postpaid accounts have outstanding balance checks during porting. Criminals targeting postpaid subscribers typically ensure any outstanding balance is paid (sometimes using stolen payment information) to clear the way for the port.

Q: If my number is fraudulently ported and I incur charges on the new network, am I liable? A: No. Charges on a fraudulently ported number are the fraudster’s liability. You will need to produce your FIA complaint reference number and PTA complaint documentation to the receiving network to formally dispute any charges. Do not pay any charges on a network you never consented to join.

Summary: MNP Fraud Protection Checklist

Use this checklist to protect your number:

• Never share a 667-generated PAC code with anyone
• Add a verbal password to your network account
• Respond to all MNP notification SMSes immediately — they are not spam
• If port not initiated by you — call operator fraud line within minutes
• Check SIM registration status periodically at SimOwner.net.pk
• Minimize CNIC photocopy distribution
• Know your operator’s fraud helpline number in advance

MNP fraud is less common than SIM swap in Pakistan — but it is growing as criminals discover that the multi-operator reversal complexity gives them a longer exploitation window. The knowledge gap is your vulnerability: most victims have never heard of MNP fraud before it happens to them. You now have the knowledge. Apply these protections today.

For Pakistan’s most comprehensive SIM verification, fraud prevention, and CNIC protection resources, visit SimOwner.net.pk — independently tracking Pakistan’s telecom fraud landscape since 2015.

All PTA MNP regulation references verified as of May 2026. PECA 2016 legal references current. SimOwner.net.pk is not affiliated with PTA or any mobile network operator.

Related Guides on SimOwner.net.pk:

How to Register a SIM for a Minor (Child Under 18) in Pakistan — Legal Rules and Parent Guide 2026

CNIC Data Breach Pakistan — What Was Leaked, How to Check If You Were Affected, and What to Do (2026)

NADRA MBVS Explained — How Pakistan’s Biometric SIM Verification System Actually Works (2026)

eSIM Security in Pakistan 2026 — Can Your eSIM Be Swapped or Hacked? Complete Risk Guide