⚠️ DISCLAIMER: Ministry of Cyber Affairs is an independent news, guides and directory service on cybercrime and cybersecurity, for victims and investigators. It is NOT an official government or ministry portal.
Website Scam CheckerNew
Back to News

Pakistan cracks down on mule SIM cards

6 October 2026
Source:NCCIA
Share

Pakistan’s National Cyber Crime Investigation Agency says its Multan unit has arrested two men allegedly involved in registering and using multiple fake SIM cards linked to financial scams. Officers recovered two mobile phones. The case fits a wider pattern of “mule SIMs” used to hide the real callers behind fraud.

MULTAN: Pakistan’s National Cyber Crime Investigation Agency (NCCIA) says its Multan unit has arrested two men allegedly involved in registering and using multiple fake SIM cards that were also linked to financial scams and other fraud.

The agency said on 5 October 2026 that the SIMs were used by different individuals and agencies.

During the action, officers recovered two mobile phones.

The NCCIA has not said how many SIMs were seized or how much money was lost.

Lineup placards identified the accused as Sanwal and Sheharyar Anwar.

The case is registered at Police Station NCCIA Multan under the Prevention of Electronic Crimes Act, 2016, and the Pakistan Penal Code.

What mule SIMs are

A mule SIM is registered in one person’s name but used by someone else.

Because the number traces back to a front subscriber, it hides the real caller and is commonly used for fraud calls, OTP theft and moving money through mule bank accounts.

Fake or bulk-activated SIMs feed that trade, letting criminal networks switch numbers quickly when one is blocked.

Wider crackdown

Pakistan’s telecom regulator and the NCCIA have earlier targeted illegal SIM networks that misuse biometrics and franchise devices to issue connections in other people’s names.

The Multan arrests add to pressure on that supply chain as fake SIMs remain a basic tool for financial cybercrime.

More in Cybersecurity

Related articles

Cybersecurity

OpenAI Disclosed ChatGPT User Content, Including Prompts and Files, in 88 Government Requests

OpenAI disclosed user content, including text and files entered into or generated by its services, in response to 88 government requests in January–June 2026, covering 130 accounts. The company received 146 content requests, typically search warrants, and produced data in about 60 percent of them, plus 620 non-content requests for subscriber records. Ordinary requests more than doubled from late 2025. No country breakdown is given. U.S. national security demands totaled 250–499.

12 Nov 2026
Cybersecurity

CyberStrike AI - Detection for Defenders: Scripting, Tempo and Residue

CyberStrike is a free, open-source AI agent for offensive security that pairs any LLM with 56+ tools, including a 40,000-line Windows post-exploitation module. A source-code reading of commit a5ed1e0 (v1.1.16) shows every Windows action runs through five fixed wrappers after a hard-coded five-process capability probe, leaving default cs-* and CyberStrike* artefacts. Includes Sigma, Suricata, YARA and KQL detections and a response playbook.

4 Nov 2026
Cybersecurity

Cybersecurity Checklist in the Agentic Hacking Era

Google Threat Intelligence Group and Mandiant say threat actors are now using agentic offensive frameworks such as ARTEX and PentAGI in real intrusions, moving from first stolen account to deep access in hours, sometimes 15 minutes. With CERT-In already warning of AI-assisted payment API hijacking at Indian NBFCs and fintechs, here is a checklist built on Google's five defence layers and CERT-In's controls.

2 Nov 2026