Call us now:
The National Cyber Crime Investigation Agency (NCCIA) has become one of the most important law-enforcement agencies in Pakistan for dealing with cybercrime.
With online banking, WhatsApp, Facebook, Instagram, TikTok, digital payments, online businesses and electronic communication now part of everyday life, cybercrime complaints have increased and the legal consequences of online activity can be serious.
Many people, however, still do not know what NCCIA actually does.
Can NCCIA arrest a person?
What happens after an NCCIA complaint?
Can a person get bail in a cybercrime case?
Can the police register a PECA FIR?
What happens if you receive an NCCIA notice?
What evidence is required?
What happens in an online blackmail or fraud case?
These questions are particularly important after the Prevention of Electronic Crimes (Amendment) Act, 2025, which significantly changed the institutional framework for investigation of offences under the Prevention of Electronic Crimes Act, 2016 (PECA).
This guide explains the current NCCIA and PECA framework, important cybercrime offences, investigation procedure, digital evidence, bail, complaints and the legal steps a person should consider when facing or reporting a cybercrime matter in Pakistan.
What Is NCCIA in Pakistan?
The National Cyber Crime Investigation Agency (NCCIA) is Pakistan’s specialized federal law-enforcement agency dealing with offences under the Prevention of Electronic Crimes Act, 2016.
The 2025 amendments to PECA established NCCIA as the investigation agency responsible for inquiry, investigation and prosecution of offences under PECA.
NCCIA’s official website currently identifies its functions as including:
- Cybercrime investigation
- Digital forensics
- Prosecution
- Cybersecurity
- Investigation of financial fraud
- Investigation of harassment and cyberstalking
- Hacking and unauthorized access
- Identity theft
- Cyberbullying
- Cyber extortion and other cyber offences.
The change is important because many people still refer to the old FIA Cyber Crime Wing.
Is NCCIA the same as FIA Cyber Crime Wing?
No.
The 2025 amendments established NCCIA and provided for the transfer of the former FIA Cyber Crime Wing’s relevant personnel, cases, inquiries, investigations, assets and related matters to NCCIA.
Accordingly, people dealing with a new PECA cybercrime matter should understand the current NCCIA framework rather than relying on older FIA Cyber Crime procedures.
What Law Does NCCIA Apply?
The principal legislation is the:
Prevention of Electronic Crimes Act, 2016 (PECA)
The law has been amended several times, including through the:
Prevention of Electronic Crimes (Amendment) Act, 2025.
The 2025 amendment received presidential assent and was published in the Gazette of Pakistan on 29 January 2025.
PECA contains provisions dealing with numerous electronic and cyber offences, including:
- Electronic fraud
- Electronic forgery
- Unauthorized access
- Unauthorized use of identity information
- Unauthorized interception
- Offences against dignity
- Offences against modesty
- Cyberstalking
- Cyberbullying
- Spamming
- Spoofing
- False and fake information
- Online grooming and related offences
- Cyber terrorism
- Other offences involving information systems.
The Pakistan Penal Code and procedural criminal laws may also become relevant depending on the facts of a particular case.
The Biggest Change After PECA 2025: Who Investigates Cybercrime?
This is one of the most important things to understand.
Under the amended Section 29 of PECA, NCCIA is established for the inquiry into, investigation of and prosecution of offences under PECA.
Section 30 further provides that only an authorized officer of the investigation agency has the power to investigate an offence under PECA.
The current legal framework therefore places PECA investigation within NCCIA rather than treating an ordinary police station as the primary PECA investigation agency.
The Senate was also briefed in 2026 that, under the amended PECA framework, police stations are not authorized to register FIRs for cybercrimes under PECA, while a single incident involving both cyber and conventional criminal conduct may potentially involve separate proceedings for the different aspects.
This distinction can be very important when deciding where a complaint should be made.
What Cybercrime Cases Can NCCIA Investigate?
Cybercrime is not limited to hacking.
NCCIA’s current categories include matters involving:
Online Financial Fraud
Examples may include:
- Online payment fraud
- Digital banking fraud
- Fraud through electronic communications
- Fake online investment schemes
- Unauthorized digital transactions
- Online business scams
Online Harassment
This may involve:
- Repeated unwanted communications
- Threatening messages
- Online harassment
- Abuse through social-media accounts
- Cyberstalking
Online Blackmail and Extortion
This may involve threats to:
- Publish private photographs
- Release videos
- Publish private conversations
- Reveal personal information
- Contact family members
- Demand money or other benefits
Hacking and Unauthorized Access
Examples include:
- Unauthorized access to an email account
- Unauthorized access to social-media accounts
- Accessing another person’s information system without authorization
- Data theft
- Account compromise
Identity Theft
A person’s identity information can be misused for:
- Fake accounts
- Fraudulent transactions
- Impersonation
- Unauthorized registration
- Other unlawful activity.
NCCIA officially lists financial fraud, harassment, hacking and unauthorized access, identity theft, cyberbullying and cyberstalking among its cybercrime categories.
Section 20 PECA — Online Harm to a Person’s Dignity
Section 20 of PECA deals with offences against the dignity of a natural person.
This provision can become relevant where electronic communication or publication involves unlawful material affecting a person’s dignity, subject to the exact statutory ingredients and circumstances of the case.
Because PECA offences are technical offences, merely alleging that someone posted something offensive does not automatically establish every ingredient of Section 20.
The exact content, intention, circumstances and evidence must be examined.
Section 21 PECA — Offences Against Modesty
Section 21 deals with offences against the modesty of a natural person and minor.
This provision can become particularly important in cases involving:
- Intimate images
- Sexualized content
- Threats involving private material
- Online sexual harassment
- Certain forms of blackmail
Where intimate material is involved, immediate preservation of evidence and appropriate legal advice can be extremely important.
Section 24 PECA — Cyberstalking
Cyberstalking can arise from repeated electronic communication or monitoring and other conduct falling within the statutory definition.
A person should not assume that every unpleasant message is automatically cyberstalking.
The actual statutory requirements need to be examined.
Evidence such as:
- Message history
- Account information
- Dates and times
- Repeated communications
- Threats
- Screenshots
- URLs
- Device information
may become important.
Section 26A PECA — False and Fake Information
Section 26A is another provision that people should understand carefully.
It concerns false and fake information as defined by the statutory provision.
However, not every disagreement, criticism, opinion or inaccurate statement should automatically be treated as a Section 26A offence.
Whether a particular publication falls within the statutory offence depends on the exact language of the provision and the facts of the case.
Anyone receiving an NCCIA notice involving Section 26A should therefore have the actual allegation and content legally examined rather than assuming that the mere existence of a complaint establishes an offence.
What Happens After an NCCIA Complaint?
An NCCIA complaint is not automatically a conviction.
The complaint may lead to examination and investigation of the allegations and available material.
Depending on the circumstances, investigators may consider:
- The complainant’s statement
- Digital communications
- Social-media accounts
- Phone numbers
- IP-related information
- Electronic records
- Financial transactions
- Devices
- Digital forensic material
- Other relevant evidence.
NCCIA states that it has digital-forensic and investigative functions.
The important point is:
A complaint is an allegation; the investigation must determine what the evidence establishes.
What Should You Do If You Receive an NCCIA Notice?
This is one of the most important sections for a potential client.
If you receive an NCCIA notice, call, summons or communication concerning a cybercrime complaint, do not simply ignore it.
At the same time, you should not immediately assume that you have been found guilty of anything.
First determine:
- Who issued the communication?
- What is the complaint number?
- Who is the complainant?
- What PECA section is involved?
- What conduct is alleged?
- What evidence is being relied upon?
- Is your appearance required?
- Is your mobile phone, computer or other device being requested?
- Has a formal investigation commenced?
- Is there an allegation that could result in arrest or prosecution?
If criminal liability may arise, obtaining legal advice before making substantive statements can be important.
“NCCIA online complaint portal” → https://complaint.nccia.gov.pk/?
Can NCCIA Arrest a Person?
NCCIA officers have investigative powers under the amended PECA framework.
Section 29 treats NCCIA officers as police officers of equivalent rank for the purposes of inquiry and investigation and gives them corresponding investigative powers under the Code, subject to PECA.
However:
Investigation, arrest and conviction are three different stages.
The fact that an individual is the subject of an inquiry or complaint does not by itself mean that the person is guilty.
Where arrest becomes a concern, the applicable PECA provision, its classification, the evidence, the stage of investigation and the accused person’s circumstances must be examined.
Can You Get Bail in an NCCIA Case?
Bail can be relevant in NCCIA cases, but the answer depends on the exact offence.
PECA contains different offences with different classifications and punishments.
For example, the classification of an offence under Section 20, Section 21 or Section 24 may differ, meaning that it is unsafe to say generally that every cybercrime case is bailable or non-bailable.
A lawyer should examine:
- The exact PECA section
- Whether the offence is cognizable
- Whether it is bailable
- Whether it is compoundable
- The maximum punishment
- The evidence
- The stage of investigation
- Whether further inquiry arises
- Whether arrest is legally justified.
A recent 2026 Sindh High Court decision illustrates why the exact statutory provision matters: the Court discussed different classifications of PECA offences and distinguished Sections 20 and 21 from Section 24.
Therefore, anyone facing possible arrest in an NCCIA matter should obtain case-specific bail advice, rather than relying on a general internet article.
What Evidence Is Needed for an NCCIA Complaint?
NCCIA’s current FAQ states that a complaint requires:
- Written application
- CNIC copy
- Evidence copy.
The official online complaint portal also requires personal information and incident details and provides for submission of a description of the alleged cybercrime.
But in a serious case, evidence can be much more extensive.
Depending on the matter, preserve:
- WhatsApp messages
- SMS
- Emails
- Facebook messages
- Instagram messages
- TikTok material
- Screenshots
- Original photographs
- Videos
- Audio recordings
- Social-media URLs
- Usernames
- Account IDs
- Phone numbers
- Bank statements
- Transaction records
- Easypaisa/JazzCash records
- Cryptocurrency transaction information
- Login alerts
- Password-reset emails
- Device information
- Relevant computer or mobile phone data.
Do Not Delete the Original Evidence
One of the biggest mistakes people make in cybercrime cases is deleting the evidence.
For example, a person receiving online blackmail may delete the conversation out of fear or embarrassment.
That can make the subsequent investigation more difficult.
Where possible:
Preserve the original communication before deleting or blocking the account.
Keep the relevant device and electronic records safe.
Do not unnecessarily edit or manipulate screenshots.
Where a case is serious, legal advice should be obtained concerning the preservation and presentation of electronic evidence.
What If Someone Has Been Blackmailing You Online?
Online blackmail is one of the most serious and urgent cybercrime situations.
If someone threatens to publish private photographs, videos, conversations or personal information unless you pay money or comply with a demand, consider taking the following steps:
1. Preserve the evidence
Do not immediately delete the conversation.
2. Preserve account information
Record:
- Username
- Profile URL
- Phone number
- Email address
- Account ID
3. Preserve payment demands
If money was demanded, keep:
- Bank details
- Account numbers
- Transaction information
- Payment receipts
- Wallet information.
4. Secure your accounts
Change passwords and activate two-factor authentication.
5. Consider an NCCIA complaint
The official NCCIA complaint system is available online, and NCCIA also provides Cybercrime Reporting Centres.
6. Obtain legal assistance if the matter involves threats, extortion, arrest or serious criminal allegations.
What If Your WhatsApp, Facebook or Instagram Account Is Hacked?
If an account has been compromised, act quickly.
You should consider:
- Changing the password
- Activating two-factor authentication
- Checking active login sessions
- Removing unknown devices
- Securing the recovery email
- Securing the linked phone number
- Preserving evidence of unauthorized access
- Informing financial institutions if money is involved
- Reporting the cybercrime to the appropriate authority.
Do not assume that changing the password alone resolves the legal issue.
If the hacker has used your account to commit fraud or impersonate you, evidence establishing unauthorized access can become extremely important.
What If an NCCIA Complaint Against You Is False?
This is another important issue.
A person may be accused of cybercrime without the allegation ultimately being established.
A complaint should therefore be distinguished from proof.
If you believe a complaint is false, consider:
- Obtaining the complaint details
- Identifying the precise PECA provisions
- Preserving your own digital evidence
- Preparing a factual response
- Providing relevant exculpatory material
- Seeking appropriate legal representation
- Considering bail if arrest becomes a concern
- Considering appropriate judicial remedies where legally available.
The correct remedy depends on the procedural stage.
It is generally better to challenge a legally defective case through the appropriate procedure than to simply argue that the complaint is “false.”
Can a Business or Company Face NCCIA Proceedings?
Yes.
Cybercrime matters can involve:
- Companies
- Directors
- Employees
- IT departments
- E-commerce businesses
- Online platforms
- Corporate email systems
- Customer databases
- Financial systems.
A company facing a cybercrime allegation should immediately consider preserving:
- Server records
- Email records
- Login records
- Access logs
- Employee records
- Device information
- Internal correspondence
- Financial records.
Deleting internal records after receiving notice of a potential investigation can create additional legal complications.
NCCIA and Digital Forensics
Cybercrime cases are increasingly evidence-driven.
NCCIA states that it provides digital forensic services for retrieving, preserving and analyzing electronic data for investigations and legal proceedings.
This means that a cybercrime investigation may go beyond screenshots.
Depending on the case, investigators may examine electronic devices, accounts, communications and other digital material.
For this reason, a person should not assume that deleting a message or social-media post necessarily ends the evidentiary issue.
Can an Overseas Pakistani File an NCCIA Complaint?
Yes.
NCCIA’s current FAQ specifically provides guidance for overseas Pakistanis.
A person living outside Pakistan can nominate a focal person or liaison in Pakistan, such as a relative or legal counsel, to pursue the matter before a Cybercrime Reporting Centre.
This can be particularly useful where:
- The victim lives abroad
- The accused is in Pakistan
- The financial transaction occurred in Pakistan
- The relevant account or evidence is connected with Pakistan.
NCCIA also provides alternative guidance where an overseas complainant does not have a focal person in Pakistan.
How to File an NCCIA Complaint in Pakistan
NCCIA currently provides several complaint channels.
According to its official FAQ, a person can report cybercrime through:
- The Pakistan Citizen Portal
- The NCCIA online complaint form
- The nearest Cybercrime Reporting Centre.
The official online complaint portal is currently available and also lists a 24/7 helpline at 1799.
For formal investigation, NCCIA’s FAQ states that complainants should approach the relevant Cybercrime Reporting Centre.
NCCIA Islamabad
For Islamabad residents, NCCIA currently lists its Islamabad Police Station/Complaint Centre at:
Plaza 5/C, Street No. 169, G-13/3, Islamabad
The official NCCIA website lists:
Phone: 051-9262106
Cell/WhatsApp: +92 326 8399301
NCCIA also lists its headquarters at the National Police Foundation Building, Sector G-10/4, Islamabad.
Because office arrangements can change, users should verify the latest information from NCCIA before visiting.
What Should You Do Before Going to NCCIA?
Whether you are a complainant or an accused person, preparation matters.
If you are the complainant:
Prepare:
- Written complaint
- CNIC
- Chronology of events
- Screenshots
- Original communications
- URLs
- Account details
- Phone numbers
- Transaction records
- Relevant documents.
If you are the person accused:
Prepare:
- The NCCIA notice/communication
- Complaint/reference details
- Your relevant conversations
- Account information
- Documents supporting your position
- Relevant financial records
- Evidence showing the actual context of the dispute.
Do not destroy, fabricate or manipulate electronic evidence.
Can an Ordinary Personal Dispute Become an NCCIA Case?
This is an important practical question.
Sometimes a dispute begins as:
- A family dispute
- Employment dispute
- Business dispute
- Relationship dispute
- Money dispute
- Property dispute
and later moves onto WhatsApp, Facebook, Instagram or another platform.
The fact that communication occurred electronically does not automatically establish a PECA offence.
The legal question is:
Does the alleged conduct satisfy the ingredients of a specific offence under PECA or another applicable law?
This distinction can become very important in defending a complaint.
What If a Cybercrime Involves Both Online and Physical Conduct?
Some incidents involve both digital and conventional criminal conduct.
For example, an online communication may allegedly be accompanied by:
- Physical threats
- Extortion
- Assault
- Fraud
- Theft
- Physical intimidation.
The legal treatment may therefore involve more than one law or investigative authority.
The Senate was recently briefed that where online activity also leads to a conventional physical crime, separate proceedings may potentially arise for the cyber and conventional aspects.
Therefore, the complete facts should be assessed before deciding where to proceed.
10 Things Everyone Should Know About NCCIA
1. NCCIA is now the principal investigation agency for PECA offences.
2. FIA Cyber Crime Wing is no longer the correct reference point for new PECA investigations.
3. A complaint is not the same as proof of guilt.
4. Digital evidence can determine the outcome of a cybercrime case.
5. An NCCIA notice should not simply be ignored.
6. The exact PECA section matters.
7. Bail depends on the offence and circumstances.
8. Deleting digital evidence can create serious practical problems.
9. Online disputes do not automatically become PECA offences.
10. If arrest, investigation or prosecution is involved, professional legal advice should be obtained promptly.
Frequently Asked Questions About NCCIA Pakistan
Is NCCIA the same as FIA Cyber Crime Wing?
No. The 2025 PECA amendments established NCCIA and provided for the transfer of the former FIA Cyber Crime Wing’s relevant matters to NCCIA.
How do I file an NCCIA complaint in Pakistan?
You can use the official NCCIA complaint portal, Pakistan Citizen Portal, email or approach a Cybercrime Reporting Centre.
What is the NCCIA helpline number?
The official NCCIA complaint portal currently lists 1799 as the 24/7 cybercrime helpline.
What documents are required for an NCCIA complaint?
NCCIA’s FAQ identifies a written application, CNIC copy and evidence copy as required materials.
Can NCCIA arrest someone?
NCCIA has investigative powers under the amended PECA framework. Whether arrest is lawful or appropriate depends on the offence, applicable law and circumstances of the particular case.
Can I get bail in an NCCIA case?
Bail may be available depending upon the exact PECA offence, its classification, punishment, evidence and procedural circumstances.
What should I do if I receive an NCCIA notice?
Do not ignore it. Obtain the complaint/inquiry details, identify the alleged PECA offence and consider obtaining legal advice before making substantive statements where criminal liability may arise.
Can I challenge a false NCCIA complaint?
Depending on the stage and circumstances, there may be investigative and judicial remedies available. The appropriate remedy should be determined after reviewing the complaint, evidence and procedural position.
Can overseas Pakistanis file NCCIA complaints?
Yes. NCCIA’s current FAQ provides a mechanism involving a focal person or liaison in Pakistan.
Need a Lawyer for an NCCIA or Cybercrime Matter In Islamabad & Rawalpindi?
If you or a family member is facing an NCCIA complaint, cybercrime investigation, PECA case, NCCIA notice, online blackmail allegation, cyber harassment complaint, online fraud, hacking allegation, identity theft matter, arrest or bail issue, early legal assessment can be important.
Bukhari, The Legal Guardians & Associates LLP, based in Islamabad, provides legal assistance in NCCIA and PECA matters, cybercrime complaints, criminal defence, bail, digital-evidence issues and related litigation before the relevant authorities and courts. Contact
Our legal team assists clients in Islamabad and across Pakistan, subject to the nature and jurisdiction of the matter.
Facing an NCCIA Notice or Cybercrime Complaint?
Facing an NCCIA Notice, Cybercrime Complaint or PECA Case? Contact our Lawyers in Islamabad / rawalpindi Pakistan
If you or a family member has received an NCCIA notice, been called for a cybercrime inquiry, been accused under PECA, or is facing allegations involving online blackmail, cyber harassment, hacking, identity theft, online fraud or cyberstalking, it is important to understand the exact allegation and applicable legal provisions before taking further action.
Bukhari, The Legal Guardians & Associates LLP, based in Islamabad, provides legal assistance in NCCIA and PECA matters, cybercrime complaints, criminal defence, pre-arrest and post-arrest bail, digital-evidence issues and related litigation before the relevant authorities and courts.
If you are dealing with an NCCIA or cybercrime matter, contact our lawyers in Islamabad / Rawalpindi Pakistan for case-specific legal guidance in Islamabad and across Pakistan.
Contact Bukhari, The Legal Guardians & Associates LLP for case-specific legal guidance regarding NCCIA, PECA and cybercrime matters.
Contact Our Lawyers → Contact