Which law and forum are relevant?
Pakistan where the incident, victim, suspect, data, account, property or information system has the required Pakistan connection. NCCIA states that it is the authorised cybercrime investigation agency under the current PECA framework.
Evidence preservation is different from collecting screenshots for social media. The objective is to retain the original source, context, account identifiers, timing and a record of how copies were made. Cropped images may omit information that later becomes important.
Protect the victim first. Contact the bank, payment provider or platform through verified channels where funds or account access remain at risk. Change credentials from a trusted device, enable stronger authentication and document the security actions taken. Do not continue a risky conversation merely to gather more evidence.
A complaint should distinguish verified facts from inference. Record what happened, when, through which account, what was represented, what was paid or accessed, and what response followed. Preserve complaint confirmations and reference numbers.
A controlled way to approach the issue.
- Stop further loss safely
Use verified bank, platform and account-security channels without deleting the source material.
- Preserve original sources
Retain devices, full threads, emails, headers, profiles, URLs, transaction records and available exports.
- Create a factual chronology
Record dates, times, amounts, accounts, statements and actions without speculation.
- Make controlled working copies
Store copies securely and note who created them, when and from which original source.
- Assess the complaint route
Confirm the Pakistan connection, correct authority, required documents and any need for a local focal person.
Records commonly needed for preliminary review.
| Record | Why it matters |
|---|---|
| Communications | Full message threads, emails and platform exports rather than only selected screenshots. |
| Account identifiers | Usernames, URLs, phone numbers, email addresses, wallet or merchant identifiers. |
| Financial trail | Bank, card, wallet, exchange, invoice and transaction reference records. |
| Device context | Device, account ownership, access history and security changes. |
| Complaint record | Platform, bank and authority submissions, acknowledgements and reference numbers. |
Risks that can weaken the position.
- Resetting or selling a device before preservation
- Editing screenshots or removing surrounding messages
- Forwarding evidence through uncontrolled public groups
- Paying a person who promises guaranteed tracing or recovery
- Submitting a complaint that mixes assumption with verified fact
Cybercrime, Online Fraud and Digital Evidence
Review the service scope, documents and engagement route for this Pakistan-law issue.
View Related Legal ServicePractical questions before action.
Should the victim keep communicating with the suspect?
Not where doing so creates safety, financial or legal risk. Preserve existing evidence and obtain advice about any further contact.
Are screenshots enough?
They may be useful, but the original source, full context, account data, exports and transaction records can be important.
Can an overseas victim report in Pakistan?
NCCIA publishes guidance for overseas complainants, including local focal-person information in some circumstances. Current requirements should be checked for the case.
Authorities consulted for this guide.
- NCCIA — Cybercrime reporting FAQs
- NCCIA — Complaint portal
- Pakistan Code — Prevention of Electronic Crimes Act
Official pages can change. The linked authority should be checked again when a matter is opened.
Need advice based on your documents and the current record?
This guide is general information. A confidential consultation can assess how the Pakistan-law issues apply to the facts, documents and forum in your matter.
Submission does not create a lawyer-client relationship. Formal advice begins only after conflict checks, identity verification, scope and fees, and written engagement.