Educational, safety-first guidance for people responding to cyber incidents. This project is independent and is not a law-enforcement agency, law firm, bank, telecom operator, or account-recovery service.
A Pakistan-focused, evidence-first guide for responding to online payment fraud, impersonation scams, phishing, and unauthorized transactions.
- Stop further payments and do not send any additional fees, OTPs, PINs, or recovery codes.
- Contact the bank, wallet, card issuer, or payment service through its official channel; ask whether the transfer can be held, recalled, or disputed.
- Secure the email and phone accounts linked to financial services; change passwords from a trusted device and enable multi-factor authentication.
- Write down the transaction ID, amount, date, recipient details, platform, and the exact sequence of events.
- Report promptly to the relevant financial provider and Pakistan's National Cyber Crime Investigation Agency (NCCIA).
- Original chats, emails, voice notes, call logs, advertisements, and profile links
- Payment receipts, transaction IDs, account statements, beneficiary details, and dispute numbers
- Full URLs and screenshots that include the address bar, date, and time
- A chronological incident timeline; preserve originals and work from copies
- Do not pay a person who promises guaranteed fund recovery.
- Do not confront the suspected fraudster in a way that risks deletion of evidence.
- Do not publish bank statements, CNIC details, phone numbers, or private chats in a public GitHub issue.
| Date and time | Time zone | Event | Account or URL | Evidence file | Action taken | Reference number |
|---|---|---|---|---|---|---|
| YYYY-MM-DD HH:MM | PKT / UTC+5 | What happened | Identifier | File name | Report or containment step | Ticket / complaint ID |
Keep facts separate from assumptions. Record times exactly as displayed and note the time zone. Preserve original files; use copies for review or redaction.
For cybercrime complaints, use the official NCCIA complaint portal or the current reporting methods listed on the NCCIA website. For immediate physical danger, contact local emergency services. For urgent financial loss, contact the relevant bank, wallet, card issuer, or payment provider first.
This is a public repository. Do not open an issue containing victim names, CNIC or passport numbers, phone numbers, financial details, credentials, private media, chat exports, case files, or other evidence. Use official private reporting channels. Redact examples before sharing them for documentation improvements.
online fraud Pakistan · financial scam help · phishing response · unauthorized transaction · cybercrime complaint Pakistan · NCCIA fraud report
- NCCIA financial fraud information
- NCCIA complaint portal
- NCCIA FAQs and reporting routes
- Google guidance for avoiding and reporting phishing
Links are provided for convenience and may change. Confirm current contact details on the authority or platform's official website before acting.
Corrections, accessibility improvements, translations, and updates to official links are welcome. Read CONTRIBUTING.md before opening a pull request.
This material is general information, not legal advice, forensic certification, or a guarantee of recovery. Procedures and reporting routes vary by jurisdiction and platform. A qualified lawyer, investigator, incident responder, or relevant authority should review high-risk cases.