Legal Bridge LLP®Lahore, Pakistan · Pakistan-law matters
Legality & legal rights · Article 05 of 30

Can NCCIA Treat Calling Software, International Clients or Foreign Payments as Evidence of Cybercrime? Understanding the Legal Test

A practical evidence guide for businesses that need to explain legitimate technology and revenue without dismissing genuine warning signs.

Article 05 of the call-centre legal library

Relevance is not the same as guilt

An investigator may legitimately examine a CRM, dialler configuration or bank receipt because it could clarify the alleged conduct. That does not make possession of the item a criminal offence. A court’s assessment of guilt requires proof of the applicable offence, not simply a list of equipment common to the outsourcing industry. [1]

Equally, “this software is used worldwide” is not a complete defence where the allegation concerns its particular use. A standard tool may contain records of authorised customer support or records of a deceptive campaign. The useful response explains the real configuration and activity rather than insisting that familiar technology is legally irrelevant.

Separate three questions: is the material relevant, is it reliable, and what does it actually establish about the charged conduct?

What a dialler or CRM may show

Potentially relevant material includes campaign names, user permissions, call times, recorded instructions, number presentation, exports and changes to customer records. Each item needs interpretation. A campaign label chosen by a vendor is not necessarily an accurate description of the business activity.

Authorisation is especially important. A user account may belong to an agent, a shared team or an administrator; access logs and authentication arrangements can affect attribution. Avoid treating every action under a shared credential as conclusively performed by the person whose name appears on an employment list. Conversely, shared credentials are a weak control and may make a genuine explanation harder. [1]

Businesses should document who administers the platform and preserve the relevant configuration. A screenshot alone may omit context that the underlying audit history supplies.

Foreign contracts are useful only if they match performance

An authentic overseas contract can explain why the company holds customer data, uses certain scripts or receives payment. Its evidential value depends on the actual parties, scope and performance. A broad clause authorising “marketing services” does not answer whether the agent was entitled to claim to represent a particular bank or insurer.

Check the agreement against statements of work, campaign approvals, client messages, delivery reports and invoices. Where the contracting client is itself an intermediary, identify the authority connecting it to the end customer or brand. This is a commercial due-diligence recommendation, not a claim that one standard document is mandatory in every transaction.

A fabricated or backdated agreement can worsen the position. Maintain the original execution history and record later amendments honestly. The question is what authority existed when the disputed conduct occurred. [1]

Overseas receipts need a transaction-level explanation

Foreign revenue is compatible with genuine export services. Its legal significance depends on source, purpose and connection to the alleged activity. Reconcile the payer, invoice, service period, underlying client and banking reference. Where a payment processor or group company pays on the client’s behalf, preserve the explanation rather than leaving an unexplained mismatch.

A large receipt is not automatically proof of fraud. Nor does receipt through a bank prove that the underlying campaign was lawful. Banking documentation answers some questions, not every question about customer-facing conduct. [1]

PSEB’s renewal process includes export-revenue information and supporting business records. That is another reason for maintaining accurate commercial accounts, but regulatory reporting must not be confused with a judicial determination that every transaction is legitimate. [2]

Preserve provenance, not just favourable extracts

Reliable evidence includes the circumstances in which records were created, stored, accessed and exported. PECA’s investigation provisions address forensic integrity, documentation and chain of custody. A business should support those objectives by preventing alteration and keeping a clear record of any preservation or export it undertakes. [1]

Where practicable, preserve original files and relevant metadata, record the export method and identify the responsible custodian. Forensic imaging, hash verification and specialist examination may be useful, but should be performed by competent personnel rather than described as magic guarantees of authenticity.

Do not select only favourable messages while deleting the rest of the conversation. Counsel needs the difficult material too. A complete factual assessment is safer than an attractive but misleading evidence bundle.

Worked example: a payment that initially looks unexplained

A hypothetical call centre receives a transfer from a company whose name differs from the client named in its contract. The invoice relates to a legitimate support campaign, but the payer is the client’s treasury affiliate. The appropriate explanation may include the contract, payment instruction, invoice and correspondence identifying that arrangement.

That evidence explains the payer mismatch. It does not automatically establish lawful lead collection, accurate sales representations or every employee’s conduct. The review should keep each issue separate rather than treating one cleared concern as complete exoneration.

If no genuine explanation exists, do not manufacture one. Identify the uncertainty, preserve the records and obtain advice about the next lawful step.

Build a concise evidence map

Use one row for each allegation or requested issue: the factual question, relevant system, custodian, date range, supporting record, limitation and next action. Separate verified facts from matters requiring external confirmation. This helps management and counsel avoid contradictory statements.

For instance, “the company used an overseas number” should lead to questions about assignment, permitted use, presentation and the actual script. “The company received dollars” should lead to the payer and service explanation. Neither statement should be allowed to stand as an unexplained accusation or an unsupported reassurance.

The strongest business response connects real evidence to the precise legal issue. It neither denies that ordinary tools can be misused nor assumes that ordinary tools prove misuse.

Legal Bridge LLP can help organise a legally focused evidence response. Technical forensic work, where required, should be scoped separately with an appropriately qualified specialist rather than presented as ordinary legal drafting.

Locate the relevant record; Preserve its provenance; Explain the commercial context; Test it against the allegation
Article 05 summary diagram
Article questions

Questions and careful answers

Can ordinary calling software be examined in an investigation?

Yes, where relevant and obtained through lawful process. Its ordinary commercial use does not make it immune from examination, but its presence alone does not prove an offence.

Does receiving foreign currency establish electronic fraud?

No. The source, commercial purpose and connection to the allegation matter. Genuine outsourcing commonly involves overseas receipts, which should be supported by authentic transaction records.

Is a bank transfer proof that the campaign was lawful?

Not by itself. It can establish movement of funds and identify a payer. It does not independently prove truthful representations, lawful data use or authority for every campaign activity.

Can a genuine contract still leave important gaps?

Yes. The contract may identify a client without establishing authority for a particular brand representation, dataset or transaction. Compare it with actual instructions and performance records.

Are screenshots enough to explain a disputed message?

They may help, but can omit context and provenance. Preserve the original communication and relevant surrounding material where possible, and document any lawful extraction or export.

Does a shared login identify the employee responsible?

Not conclusively. Attribution may require access logs, work allocation, device information and other evidence. Shared credentials also create a governance weakness that should be corrected without altering historical records.

Should a company create missing documents after receiving a notice?

It may provide an honest current explanation or reconstruct a chronology from genuine records. It must not fabricate, backdate or present newly created documents as contemporaneous originals.

What is an evidence map?

It links each issue to the relevant record, system, custodian and date range, while identifying limitations. It helps avoid dumping unrelated data or making claims unsupported by the preserved material.

Does a forensic hash prove that a statement is true?

No. A properly used hash can help assess whether a digital file has changed. It does not establish that the original content was accurate or that a particular person authored it.

Should unfavourable messages be withheld from the company’s lawyer?

No. Legal advice depends on a complete factual picture. Preserve and disclose relevant difficult material to counsel through an appropriate confidential channel rather than preparing a selectively favourable narrative.

Official sources

Primary sources and further reading

These links support the general information in this article. Check the current text, amendments, procedure and forum before relying on a source for a specific matter.

  1. Prevention of Electronic Crimes Act, 2016, consolidated text including the 2025 amendments — Pakistan Code, Ministry of Law and Justice

    Primary statute. Read each offence and procedural power separately. The official consolidation was checked; recheck subsequent Gazette amendments before publication or case-specific reliance.

  2. Call centre registration, renewal and branch requirements — Pakistan Software Export Board / Tech Destination

    Public operational guidance, not a criminal-law immunity certificate. Portal requirements and charges can change.

Source links last checked: . This date is not a publication date.

Continue reading

Related call-centre guides

Related Pakistan-law services

Service routes that may be relevant

The right route depends on the conduct, documents, forum and engagement scope.

Corporate and commercial

Pakistan-law advice for companies, founders, shareholders, investors and in-house teams on governance, transactions, contracts, compliance and disputes.

Criminal defence and investigations

Pakistan criminal-law assessment for allegations, FIRs, custody, bail, investigation, evidence, trial preparation, appeals and related cybercrime defence.

Browse all legal services

Request consultationWhatsApp