Check SIMs on CNIC without Internet (USSD/Feature Phone)

Not everyone in Pakistan is checking their phone over a fast 4G connection. Plenty of people are on a basic keypad phone, on a patchy signal in a village, or simply out of data until the next top-up. The myth that you need a smartphone and internet to see which SIMs are registered on your CNIC stops a lot of people from ever checking. They shouldn’t.

The truth is the most reliable way to audit your CNIC works entirely over SMS. No app, no Wi-Fi, no data balance. It runs on a ten-year-old Nokia exactly the same as it does on the newest phone. If you can send a text message, you can check your SIMs.

This guide walks through every offline method, what each reply means, the mistakes that stop people from getting a response, and how to turn this into a 30-second monthly habit that genuinely protects you.

Why bother checking your CNIC at all?

Every SIM in Pakistan is tied to a CNIC through biometric verification. When a number is activated, your name and ID get permanently linked to it in PTA’s central database. From that point on, the law treats you as the owner of everything that SIM does. Calls, messages, mobile wallet transactions, OTPs, all of it lands on your identity.

That cuts both ways. If you genuinely own the SIM, no problem. But if someone managed to register a number on your CNIC, whether through a leaked photocopy or a dishonest retailer, you carry the liability for it without even knowing it exists. People discover these ghost SIMs months later, usually when a bank flags an account or a number under their name is used in a scam.

A quick offline check closes that gap. And because the SMS method needs no internet, there’s no excuse to skip it.

The 668 method: your main offline check

The number to memorise is 668. It’s a PTA service run jointly with all the operators, and it returns a count of every SIM registered against your CNIC across the networks. Here’s the full process:

1. Open the Messages app on any phone.
2. Type your 13-digit CNIC number with no dashes and no spaces. If your card reads 35201-1234567-1, you send 3520112345671.
3. Send that message to 668.
4. Within a few seconds you get a reply listing your SIM count, usually broken down by operator.
   
   

A typical response reads something like “Total SIMs against your CNIC: Jazz 2, Zong 1, Telenor 0, Ufone 0, SCOM 0.” The data is pulled live from the same system that governs SIM activation, so it reflects your real, current record.

It costs roughly Rs. 2 plus tax per message. That’s the one downside compared to the free online portal, but a couple of rupees once a month is nothing against the cost of an undetected fraud SIM.

One detail trips people up, so read it twice: 668 returns the number of SIMs, not the actual phone numbers behind them. If the count is higher than what you personally own, that’s your signal that something is off, but you’ll need a franchise visit to see the specific digits. If you want to understand exactly how to read and act on that count, our guide on how to check SIMs on CNIC with numbers walks through it properly.

What the 668 reply actually tells you

Read the breakdown line by line. Match each operator’s count against the SIMs you knowingly use on that network. Most people can rattle off their own numbers without thinking, so any mismatch jumps out fast.

Say you only ever bought one Jazz SIM but the reply shows “Jazz 3.” That’s two numbers you can’t account for. Don’t panic, but don’t sit on it either. Note the operator (Jazz, in this case), because that’s the company you’ll need to deal with to find and remove the extra numbers.

If everything matches, you’re done in under a minute. Screenshot it anyway, because comparing month to month is where this habit earns its value.

The 667 code: checking the SIM in your hand

668 shows the whole picture. 667 zooms into one specific SIM, the one physically in your phone right now.

Insert the SIM you want to verify, open Messages, type MNP in capital letters, and send it to 667. The reply gives you the registered owner’s name, a partially masked CNIC, and the network for that single SIM. It can’t look up any other number, which is exactly why it’s permitted under privacy rules.

This is the code to use when you buy a used SIM, receive a number from someone, or want to confirm a SIM you found is actually registered to you. It works fully offline, same as 668. For more on verifying a number this way, see our breakdown on how to check a SIM number through CNIC ownership.

Operator USSD menus (no internet needed)

Each network also keeps its own dial-up menu you can open without any data. These show account and SIM information for that operator’s SIM in your phone.

Dial the code, follow the on-screen menu, and you’ll get options related to your number and account. These don’t replace the 668 cross-network check, they sit alongside it for when you want operator-specific details. Networks do occasionally update these codes, so if one doesn’t respond, call the helpline or check the operator’s own app to confirm the current one.

There’s one more code worth saving. Because of mobile number portability, a number that looks like a Zong number might actually be running on Jazz now. To find the real current operator of any number, send that number to 76367. Handy before you call a helpline, so you ring the right company. The CNIC Tracker page keeps a running list of these dial codes if you’d rather bookmark one reference.

668 versus the online portal

PTA also runs a free web portal at cnic.sims.pk that returns the same underlying data, with exact registration dates and a printable layout. It’s excellent, but it needs internet, which defeats the purpose here.

So the simple rule is this. If you’re offline, on a feature phone, or out of data, use 668. If you have a connection and want a dated, printable record for legal use, use the portal. Both pull from the same PTA database, so the SIM counts will match. For a closer look at the online side and what extra data it surfaces, our piece on CNIC SIM check Pakistan online covers it in detail.

Common mistakes that stop you getting a reply

People often send their CNIC to 668 and hear nothing back, then assume the service is broken. Almost always it’s a formatting slip. Watch for these:

• Dashes in the CNIC. Send the 13 digits clean, with no hyphens. 3520112345671, not 35201-1234567-1.
• Spaces between numbers. No spaces anywhere.
• Extra words. Don’t write “CNIC” or any other text. Just the number.
• Wrong shortcode. Double-check it’s 668, not 688 or 866.
• No SMS balance. The service charges a small fee, so a zero balance means no message goes out.
  
  

If your format is clean and you still get nothing within a few minutes, wait and try again. System response can lag occasionally, and a freshly activated or recently changed SIM may take up to 24 hours to reflect across the network.

Make it a monthly habit

Here’s the part that actually matters. Checking once and forgetting about it isn’t protection. Fraud SIMs get added quietly, and the average rogue SIM operates for months before the owner notices.

So pick a date, the 1st of the month works well, and send your CNIC to 668. Screenshot the reply with the date showing in your phone’s status bar. Next month, compare. Any increase you didn’t authorise is someone using your identity, and you’ve caught it early. To go deeper on tracking your own line count over time, our guide on how to check the number of SIMs registered against your CNIC is worth a read.

This habit is especially important for older relatives. Elderly parents and grandparents, particularly in rural areas, are the easiest targets. They hand over CNIC photocopies without thinking, rarely check their records, and often don’t know what biometric verification even is. If you have family like this at home, run a 668 check on their CNIC from their own phone once a month. Ten minutes can save the whole household from years of legal trouble.

A warning about fake lookup sites

Search online and you’ll find no shortage of websites and apps promising to reveal the name and address behind any number “in seconds.” Treat all of them as suspect. Most show made-up data, many quietly save your CNIC for future fraud, and some push spyware through fake app downloads. PTA has blocked over a thousand of these, and using one is itself an offence under PECA 2016, not just running one.

There is no public tool, anywhere, that lets you enter a stranger’s number and pull their identity. That data sits with PTA and law enforcement only. The legitimate offline path is 668, 667, and your operator’s own channels. Anything charging money to “unlock” owner details is a scam, full stop.