How to Write an FIR for SIM Fraud in Pakistan — Exact Wording, PECA Sections, and Documents Required (2026)

Last Verified: May 2026 | By SimOwner.net.pk Editorial Team — Pakistan’s SIM fraud documentation specialists since 2015

You have confirmed unauthorized SIMs on your CNIC. Your JazzCash was drained. Your WhatsApp was taken over. You have already frozen your accounts and filed an FIA Cybercrime complaint online. Now you need an FIR — a First Information Report — filed at your local police station.

An FIR is not optional paperwork. It is the foundational legal document that:

• Creates an official criminal record of the SIM fraud
• Enables banks to process unauthorized transaction reversals (SBP guidelines require an FIR for formal reversal requests)
• Gives FIA investigators additional authority to subpoena network operator records
• Establishes your legal standing as a complainant if the case reaches court
• Protects you from liability if the fraudulent SIM was used for crimes in your name

Yet many SIM fraud victims never file an FIR — either because they do not know they can, because local police stations are unfamiliar with cyber-related fraud, or because they do not know what to say. This guide gives you everything you need: the exact sections of PECA 2016 to cite, the language to use, the documents to bring, and what to do if the SHO refuses to register the FIR.

First — confirm the current state of unauthorized SIM registrations on your CNIC at CNIC Information. The 668 response screenshot you take today is one of your primary FIR evidence documents.

Understanding FIR vs. FIA Complaint — Why You Need Both

Many SIM fraud victims ask: “I already filed an FIA complaint online — do I also need a police FIR?” The answer is yes, and here is why they serve different purposes:

File both. The FIA complaint triggers the specialist cybercrime investigation. The FIR creates the local criminal record that enables bank reversals, legal proceedings, and protects you from liability for the fraudulent SIM’s activities.

What Law Applies — PECA 2016 Sections for SIM Fraud

The FIR must cite the correct legal provisions. For SIM fraud in Pakistan, the applicable law is PECA 2016 (Prevention of Electronic Crimes Act 2016). Here are the specific sections:

Section 14 — Unauthorized Access to Information System

What it covers: Accessing any information system (including mobile network operator’s SIM registration system) without authorization.

Application: The criminal accessed the network operator’s SIM management system to register or transfer a SIM in your name without your authorization.

Penalty: Imprisonment up to 3 months or fine up to Rs. 50,000 or both.

Section 15 — Unauthorized Copying or Transmission of Data

What it covers: Copying, transmitting, or altering data in an information system without authorization.

Application: The criminal copied your subscriber registration data and used it to create fraudulent SIM registration entries.

Penalty: Imprisonment up to 6 months or fine up to Rs. 100,000 or both.

Section 16 — Identity Information Crimes

What it covers: Obtaining, selling, possessing, transmitting, or using identity information (CNIC number, name, biometric data) of another person without authorization, with intent to commit a crime or cause harm.

Application: The criminal used your CNIC number and identity information to register a SIM in your name — the primary identity crime in SIM fraud.

Penalty: Imprisonment up to 3 years or fine up to Rs. 5,000,000 or both. This is the primary section to cite — it carries the most serious penalty and most directly describes SIM fraud.

Section 17 — Unauthorized Interception

What it covers: Intercepting, causing to intercept, or attempting to intercept any communication transmitted through an information system or network.

Application: If the fraudulent SIM was used to intercept your OTP messages, banking communications, or WhatsApp messages.

Penalty: Imprisonment up to 2 years or fine up to Rs. 500,000 or both.

Section 21 — Electronic Fraud

What it covers: Dishonest or fraudulent input, alteration, deletion, or suppression of data or interference with an information system to gain any benefit or cause harm.

Application: If financial loss resulted from the fraudulent SIM — unauthorized JazzCash withdrawals, bank OTP interception leading to transfers.

Penalty: Imprisonment up to 2 years or fine up to Rs. 10,000,000 or both. If financial loss is involved, cite Section 21 alongside Section 16.

Documents to Bring to the Police Station

Arrive organized. Police stations that claim they “cannot register cyber FIRs” most often mean they are not sure what to do — presenting documented evidence with clear legal references removes their uncertainty.

Essential Documents

1. Your original CNIC Never leave home without it for any official matter.

2. 668 response screenshot (printed) The SMS response showing unauthorized SIMs on your CNIC. Print with the timestamp visible. This is your primary evidence of the fraud.

3. Network operator fraud report reference number When you called your network operator’s fraud line, they gave you a reference number. Print that confirmation or bring the SMS.

4. FIA Cybercrime complaint reference number Print the confirmation email or SMS you received after filing at complaint.fia.gov.pk.

5. Bank / JazzCash / Easypaisa transaction records Print screenshots showing unauthorized transactions — dates, amounts, and transaction reference numbers. If no financial loss occurred, bring a statement showing your balance was intact (to document what was at risk).

6. WhatsApp screenshots of fraudulent messages If your WhatsApp was compromised and fraudulent messages were sent to your contacts, bring printed screenshots provided by those contacts.

7. Timeline of events (written) A simple one-page chronology: when your phone lost service, when you discovered the fraud, what you found, and what actions you have taken. This helps the SHO (Station House Officer) understand the case quickly.

The Exact FIR Wording — Use This Template

This is a formal complaint statement you write and present to the SHO. Adapt the specifics to your situation. Write it on plain paper or bring it typed.

To, The Station House Officer (SHO), [Name of Police Station], [City], Pakistan.

Subject: First Information Report (FIR) — SIM Fraud, Unauthorized SIM Registration, and Identity Crime Under PECA 2016

Respected Sir/Madam,

I, [Your Full Name], son/daughter of [Father’s Name], CNIC No. [XXXXX-XXXXXXX-X], resident of [Your Complete Address], hereby report the following criminal act committed against me, requesting registration of an FIR under the Prevention of Electronic Crimes Act 2016 (PECA 2016).

Facts of the Case:

On approximately [date/time when you first noticed the fraud], I discovered that [number] unauthorized SIM card(s) had been registered on my CNIC number [XXXXX-XXXXXXX-X] without my knowledge or consent. This was confirmed by:

1. SMS response from PTA’s official 668 service, received on [date], showing [number] SIM(s) registered on my CNIC that I did not personally register. [Attach 668 screenshot as Exhibit A]
2. My mobile phone service on number [your number] on [network name] was [interrupted / transferred without my consent] on approximately [date and time].

[If financial loss occurred, add:] As a result of this fraudulent SIM registration, an unknown criminal intercepted OTP messages sent to my number and conducted unauthorized transactions. Specifically: [describe — e.g., Rs. [amount] was withdrawn from my JazzCash account / transferred from my [bank name] account on [date], transaction reference [number]]. [Attach bank/wallet statements as Exhibit B]

I have already:

• Filed a complaint with FIA Cybercrime Wing at complaint.fia.gov.pk on [date], complaint reference number [XXX]
• Reported the fraud to [network name] customer service, reference number [XXX]
• [If applicable: Frozen my JazzCash/Easypaisa/bank account]

Applicable Legal Provisions:

The acts committed by the unknown accused person(s) constitute offences under:

• PECA 2016, Section 16 — Identity Information Crimes (primary offence)
• PECA 2016, Section 14 — Unauthorized Access to Information System
• PECA 2016, Section 15 — Unauthorized Copying or Transmission of Data [If financial loss:] – PECA 2016, Section 21 — Electronic Fraud

Prayer:

I respectfully request that this FIR be registered immediately, an investigation be initiated to identify the accused, and necessary legal action be taken under PECA 2016 and all other applicable laws.

I undertake that the above information is true and correct to the best of my knowledge and belief.

Complainant: Name: [Your Full Name] CNIC: [XXXXX-XXXXXXX-X] Address: [Your Address] Phone: [Your Contact Number] Date: [Date] Signature: _______________

Exhibits Attached:

• Exhibit A: 668 service screenshot (timestamped)
• Exhibit B: Bank/wallet transaction records (if applicable)
• Exhibit C: FIA complaint reference
• Exhibit D: Network operator fraud report reference
• Exhibit E: [Any other evidence]

What Happens After You Submit the FIR Application

The SHO’s Legal Obligation

Under Section 154 of the Code of Criminal Procedure (CrPC), a police station is legally required to register an FIR when a cognizable offence is reported. PECA 2016 offences (Sections 14, 15, 16, 17, 21) are all cognizable — meaning police must register the FIR and may arrest without warrant.

The SHO does not have discretion to refuse FIR registration based on opinion that the case is weak or that it is a cyber matter. If they refuse, they are violating their legal obligation under CrPC Section 154.

If the Police Refuse to Register the FIR

This happens — some police stations are unfamiliar with PECA cases and may try to redirect you to FIA only. Here is your escalation pathway:

Step 1 — Cite CrPC Section 154 explicitly. Tell the SHO: “Under Section 154 of the Code of Criminal Procedure, you are legally required to register this FIR. PECA 2016 offences are cognizable. Please register the FIR or provide written reasons for refusal.”

Step 2 — Request a “complaint to DSP” entry. If the SHO still refuses, request that your written complaint be entered in the station’s daily register (roznamcha) as evidence of your visit and refusal.

Step 3 — Go to the District Superintendent of Police (DSP). File a written complaint with the DSP or SP (Superintendent of Police) of your district, citing the SHO’s refusal to register a cognizable offence FIR. DSPs regularly direct police stations to register FIRs when they have improperly refused.

Step 4 — File an application before the Magistrate (Section 22A CrPC). Under Section 22A of the CrPC, a person can approach a Judicial Magistrate if police refuse to register an FIR. The Magistrate can direct the police station to register the FIR. This requires filing a simple application with the relevant facts — a lawyer can assist.

Step 5 — Contact the Chief Minister’s complaint cell or Inspector General’s helpline. Most Pakistani provinces have a CM Complaint Portal and an IGP (Inspector General of Police) complaint helpline. Escalating a refusal to register a PECA FIR through these channels often results in quick resolution.

After the FIR Is Registered

Use the FIR for Bank Reversal

Take the registered FIR (which carries a case number, FIR number, and police station stamp) to your bank branch. Request a formal unauthorized transaction reversal, presenting:

• FIR copy
• FIA complaint reference
• Transaction records showing unauthorized activity

SBP’s consumer protection guidelines require banks to investigate unauthorized transaction complaints. A documented FIR significantly strengthens your reversal claim.

Monitor the Investigation

FIR registration initiates a police investigation. An Investigating Officer (IO) is assigned. The IO may:

• Contact FIA to share investigation resources
• Request records from the network operator (through appropriate legal channels)
• Request NADRA MBVS logs to determine whether biometric verification was properly completed
• Interview franchise employees at the location where the fraudulent SIM was registered

Follow up with the IO weekly. Ask for the challan (charge sheet) status. Cybercrime cases in Pakistan can be slow — consistent follow-up matters.

Know Your Rights as a Complainant

Under Pakistan’s criminal procedure law and victim protection provisions:

• You are entitled to know the progress of the investigation
• You may request copies of documents in the case file
• If the case is closed without prosecution (a “B” report), you can challenge this before a Magistrate
• You can engage a private advocate (lawyer) to assist with the investigation and appear on your behalf

Supporting Your FIR With a SIM Status Check

One of the most powerful pieces of evidence you can add to your FIR is a timestamped record of exactly which SIMs were registered on your CNIC at the time of the fraud discovery. This establishes the factual foundation of your complaint with precision.

Check and document your CNIC’s SIM registration status using the SimOwner.net.pk SIM database tools and save the results with a clear timestamp. The SIM information resources at SimOwner.net.pk also guide you through interpreting the 668 response correctly, ensuring your FIR accurately describes what was registered.

Frequently Asked Questions

Q: My police station says SIM fraud is “only for FIA” and they cannot register an FIR. Is this correct? A: No. PECA 2016 offences are cognizable under both FIA jurisdiction (through the cybercrime wing) and regular police jurisdiction. Both FIA and local police can investigate PECA offences. Local police station FIR registration is your right under CrPC Section 154, regardless of whether FIA is also involved. Cite Section 154 CrPC and request compliance.

Q: Do I need a lawyer to file an FIR? A: No — you can file an FIR yourself without a lawyer. However, for complex cases involving significant financial loss, or if you face police resistance, an advocate familiar with PECA cases can be valuable. Pakistan Bar Council and provincial bar associations can refer you to PECA-experienced advocates.

Q: The fraud happened through my number, but the SIM was registered in my name on a different network. Which police station is responsible? A: File the FIR at the police station with jurisdiction over your home address (where you reside as the victim). Jurisdiction for cybercrime FIRs in Pakistan follows the victim’s location per PECA 2016 provisions. The IO can coordinate with other jurisdictions during investigation.

Q: How long does the police investigation take after an FIR? A: PECA 2016 cases are supposed to be investigated within 14 days under expedited cybercrime procedures, though in practice investigations take longer. A challan (charge sheet) is typically filed within 30–60 days in active cases. Cases where the fraudster is identified quickly (through operator records showing the franchise location and registration records) move faster than cases where the fraudster’s identity remains unknown.

Q: Can I file an FIR if I do not know who committed the fraud? A: Yes. FIRs against “unknown accused” persons are standard in fraud cases where the perpetrator’s identity is not initially known. The investigation process — accessing operator registration records, NADRA MBVS logs, and franchise CCTV — is how the accused is identified. Do not wait until you know who did it.

Q: If my bank reversed the unauthorized transactions, do I still need to pursue the FIR? A: Yes, for several reasons. First, prosecution of the fraudster protects other Pakistanis from the same criminal. Second, the criminal may attempt the same fraud against you or others if not prosecuted. Third, if the bank reversal is challenged later, the FIR provides your legal foundation. Fourth, PECA Section 16 violations carry significant penalties — pursuing prosecution is a public interest matter beyond your personal financial recovery.

Q: My fraud amount is only Rs. 5,000. Is an FIR worth it for a small amount? A: Yes. The criminal act (identity fraud, unauthorized SIM registration) is a crime regardless of the amount stolen. Additionally: small initial frauds often precede larger ones against the same victim. An FIR and investigation can prevent future fraud against you. And your FIR contributes to the investigative picture of a criminal who may be targeting multiple victims.

Complete Document and Action Checklist

Before going to police:

• Screenshot 668 SIM check result (with timestamp)
• File FIA complaint at complaint.fia.gov.pk — get reference number
• Call network operator fraud line — get reference number
• Print bank/wallet statements showing unauthorized transactions (if any)
• Prepare written FIR statement using the template above
• Collect any WhatsApp screenshots of fraudulent messages from contacts

At the police station:

• Bring all original documents (CNIC, statements) + photocopies
• Present written FIR statement — request it be entered verbatim
• Cite PECA 2016 Sections 14, 15, 16, 21 explicitly
• Cite CrPC Section 154 if FIR registration is refused
• Obtain FIR copy with case number, station stamp, and date

After FIR registration:

• Submit FIR copy to your bank with formal reversal request
• Follow up with Investigating Officer weekly
• Keep all evidence documents in a secure file
• Check SIM status via 668 periodically to confirm no new unauthorized registrations

SIM fraud in Pakistan is a serious criminal offence. You have the right to legal protection, investigation, and prosecution of the perpetrators. Use these rights — because every FIR that results in prosecution makes Pakistan’s telecom fraud ecosystem slightly less hospitable for criminals.

For ongoing SIM verification, CNIC monitoring, and Pakistan’s most comprehensive SIM fraud prevention resources, visit Sim Owner Details — independently tracking Pakistan’s telecommunications security since 2015.

All legal references are to PECA 2016 and the Code of Criminal Procedure (CrPC) as current May 2026. SimOwner.net.pk is not a law firm — for legal advice specific to your situation, consult a qualified advocate. This guide is for educational and informational purposes.

Related Guides on SimOwner.net.pk:

• What to Do in the First 60 Minutes After a SIM Swap Attack
• SS7 Attack Explained — Can Hackers Intercept Pakistani SMS OTPs and What Can You Do About It (2026)
• CNIC Data Breach Pakistan — What Was Leaked, How to Check If You Were Affected, and What to Do (2026)
• How Criminals Register SIMs Using Your CNIC in Pakistan — And Exactly How to Stop Them (2026)