Legal Bridge LLP®Lahore, Pakistan · Pakistan-law matters
International campaigns & data · Article 21 of 30

Legitimate Telemarketing vs Call Centre Fraud: How to Avoid Impersonation, Misleading Sales and Unauthorised Transactions

A customer-journey review that tests the actual conversation rather than relying on the campaign’s label.

Article 21 of the call-centre legal library

Begin with the identity the customer is asked to trust

A legitimate outsourced agent may speak on behalf of a real client under a genuine authorisation. The problem arises where the caller invents a relationship with a bank, government office, insurer, technology company or other organisation to induce trust.

Ask exactly how the agent introduces the seller and service. Compare that statement with the client agreement and actual authority. “We work with leading companies” can be misleading where the campaign has no relevant relationship, even if the words avoid naming a specific brand.

PECA provisions concerning electronic fraud, identity-information misuse and spoofing may become relevant according to their separate elements. Do not collapse every disputed representation into one offence or assume that a genuine company name eliminates the deception question. [1]

A real product can still be sold through an unlawful process

The existence of a product does not answer whether its price, benefits, conditions or urgency were honestly explained. A campaign can mislead customers by inventing a debt, presenting an optional service as mandatory or concealing recurring charges.

Review the actual script, objection-handling instructions and supervisor coaching. An approved document may look acceptable while live instructions encourage agents to make claims that cannot be supported. Compliance review should therefore examine actual practice through lawful quality checks.

For overseas campaigns, destination-market rules can impose additional requirements. US federal rules and UK PECR guidance address different calling categories and conduct. Pakistani registration does not substitute for those requirements. [2] [4]

Lead availability is not proof of permission

A list supplier may have valid contact details but no adequate basis for the intended campaign. Ask how the data was obtained, what permission or other lawful basis supports the proposed use, which seller was identified and whether objections or suppression requirements apply.

Do not treat a spreadsheet column labelled “consent: yes” as self-proving. The supporting record and the applicable regime matter. Some live calling can proceed without consent under particular conditions; other technologies or campaign categories require it. A single consent slogan cannot resolve every market. [3] [4]

Where provenance is unclear, quarantine the disputed leads and investigate. Buying replacement lists from the same unverifiable source does not correct the underlying problem.

Payment authorisation should be real and intelligible

Separate the customer’s agreement to hear an offer from authority to charge them. Make the actual seller, service, amount and material terms clear and use a properly authorised payment process. Access to card or account details does not itself establish permission for a transaction.

A campaign that collects sensitive information through a fictitious refund, technical fault or unpaid liability can raise serious electronic-fraud and identity-information issues. The legal assessment must still identify the applicable elements and evidence. [1]

Restrict employee access to payment information and prevent informal storage in personal messages or uncontrolled spreadsheets. These are recommended risk controls, not a claim that one security product guarantees compliance with every payment or data rule.

Complaints and opt-outs are part of the service, not an obstacle

Train agents to recognise a clear objection, disputed charge or request for clarification. Route it to an accountable person and preserve the record. Do not measure performance in a way that rewards suppressing complaints or retaining customers through false statements.

The applicable calling regime determines suppression and consent-revocation requirements. Build the process around that regime and verify that the client and all relevant service providers receive the necessary update. A promise to remove a number is ineffective if the next imported list immediately adds it back. [3] [2] [4]

Where a refund is due under the applicable terms or law, the process should be genuine. A refund policy displayed on a website is not useful if no one has authority or operational ability to implement it.

Three decisions for a campaign review

Approve: the client is verified, representations are supportable, the lead and contact basis has been assessed, and payment and complaint processes are workable. Record the scope and any conditions.

Correct before launch: a genuine campaign has an unclear disclosure, incomplete lead evidence or a technical suppression problem. Set a specific corrective requirement and do not describe the campaign as approved until it is met.

Suspend and investigate: instructions involve fabricated affiliation, fictitious liability, unexplained identity data or unauthorised charges. Preserve the evidence and obtain advice on stopping the conduct and any reporting obligations. These categories are an internal decision framework, not an official legal certification.

Worked example: an appointment campaign changes purpose

A hypothetical centre is engaged to arrange genuine product demonstrations. Midway through the contract, the client instructs agents to say that the call concerns a compulsory compliance inspection. The original lawful service does not authorise the new representation.

Management should preserve the instruction, reject or suspend the disputed change and assess the legal position. It should not let agents continue while waiting for a rewritten contract that merely repeats the deceptive instruction. A contract cannot create authority that the client does not possess. [1]

A sustainable telemarketing operation can explain its identity, permission, offer and payment process to the customer, its client and an investigator without changing the story for each audience.

Legal Bridge LLP can review Pakistan-side fraud and contractual exposure in a campaign. US, UK or other destination-market permissions should also be checked by appropriately qualified counsel for that jurisdiction.

State the true seller; Verify the contact basis; Keep claims and charges accurate; Honour complaints and lawful opt-outs
Article 21 summary diagram
Article questions

Questions and careful answers

Is every unsolicited sales call fraudulent?

No. Legality depends on the applicable calling rules and actual conduct. Some campaigns may be prohibited or require permission without every breach automatically satisfying all elements of electronic fraud.

Can a real product be marketed deceptively?

Yes. False identity, invented urgency, concealed charges or unsupported claims can create legal exposure even when a genuine product exists. Review the complete sales process, not just the product catalogue.

Can an agent use the client’s brand name?

Only where the representation is genuinely authorised and accurate. Verify the client’s identity and authority, especially where an intermediary claims to represent an unrelated brand or institution.

Is a lead supplier’s consent label enough?

No. Examine the underlying permission record, collection process, intended seller and applicable market rules. A spreadsheet label or supplier invoice is not independent proof that the proposed contact is lawful.

Does hearing the offer authorise a payment?

Not automatically. The customer’s authorisation must correspond to the actual transaction and applicable requirements. Possession of payment details is not permission to make an unrelated or undisclosed charge.

Should agents ignore opt-outs to meet sales targets?

No. Build a reliable process for objections and applicable suppression or revocation requirements. Performance incentives should not encourage false assurances or repeated contact contrary to the relevant rules.

Does a client indemnity make a deceptive campaign safe?

No. Contractual risk allocation does not legalise prohibited conduct or prevent regulatory or criminal scrutiny. The business must assess obvious unlawful instructions rather than outsource that judgment entirely.

What should happen when the script changes?

Reassess identity, claims, data use, payment steps and destination-market requirements. Preserve the old and new instructions and obtain appropriate approval before implementing a material change.

Should refunds be offered simply to avoid preserving records?

No. Customer remediation and evidence preservation are separate responsibilities. Do not destroy transaction records or condition a legitimate remedy on suppressing a complaint or false account.

What is the most effective campaign control?

A documented pre-launch review followed by actual-call or process checks and a workable escalation route. Paper approval alone is weak if supervisors encourage a different practice during live operations.

Official sources

Primary sources and further reading

These links support the general information in this article. Check the current text, amendments, procedure and forum before relying on a source for a specific matter.

  1. Prevention of Electronic Crimes Act, 2016, consolidated text including the 2025 amendments — Pakistan Code, Ministry of Law and Justice

    Primary statute. Read each offence and procedural power separately. The official consolidation was checked; recheck subsequent Gazette amendments before publication or case-specific reliance.

  2. Complying with the Telemarketing Sales Rule — US Federal Trade Commission

    Agency guidance must be read alongside the current regulation and subsequent amendments, especially the five-year recordkeeping rule.

  3. 47 CFR § 64.1200: restrictions on telemarketing and telephone solicitation — US Electronic Code of Federal Regulations

    Technology, destination, call type, consent and exemptions matter. State law is a separate review.

  4. How to comply with the rules on live marketing calls — UK Information Commissioner’s Office

    Live calls, objections, TPS/CTPS and special campaign categories. ICO flags review following the Data (Use and Access) Act.

Source links last checked: . This date is not a publication date.

Continue reading

Related call-centre guides

Related Pakistan-law services

Service routes that may be relevant

The right route depends on the conduct, documents, forum and engagement scope.

Corporate and commercial

Pakistan-law advice for companies, founders, shareholders, investors and in-house teams on governance, transactions, contracts, compliance and disputes.

Browse all legal services

Request consultationWhatsApp