What to Do If Someone Registered a SIM on Your CNIC

What to Do If Someone Registered a SIM on Your CNIC

This is the discovery that ruins someone’s week. You send your CNIC to 668 out of routine, and the count comes back higher than the SIMs you actually own. A number, maybe several, are registered under your identity that you never bought. The first reaction is usually confusion, then a cold realisation: under Pakistani law, you’re responsible for whatever those SIMs are doing.

It happens more than people think. A CNIC photocopy handed to a shop, a leaked database, a dishonest retailer reusing a captured fingerprint, and suddenly a number exists in your name that you’ve never seen. The good news is that the fix is well-defined. There’s a clear, legal process to confirm it, remove it permanently, and protect yourself. Speed is the main thing that matters, so work through the steps in order and don’t put it off.

Why this is urgent, not just annoying

Every SIM registered to your CNIC is your legal liability. The law doesn’t ask whether you personally activated it. If a criminal opens a JazzCash or Easypaisa wallet on a number under your name, bypasses someone’s bank OTP, runs a harassment campaign, or worse, the trail leads back to your CNIC first. You become the starting point of any investigation.

Beyond the legal exposure, there’s a quieter risk. PTA allows a maximum of five SIMs per CNIC. If a few rogue SIMs push you over that limit, the system can automatically block your SIMs, sometimes including your real, daily-use number, until the extras are removed. So an unauthorised SIM isn’t only a fraud problem, it can knock out the number you actually depend on.

That’s why the moment you spot a SIM you don’t recognise, you act. To understand the full picture of what’s tied to your identity before you start, our SIM Owner Details overview is a good first stop.

Step 1: Confirm and document it

Before you do anything else, lock down the evidence.

Send your CNIC to 668 and screenshot the reply with today’s date visible in your phone’s status bar. Then write out, plainly, every SIM you actually own and use. The difference between that list and the 668 count is your set of unauthorised SIMs. Note which operators they sit under, because you’ll deal with each network separately.

That dated screenshot is not just for you. It becomes evidence for the operator, for PTA, for the police if it comes to that, and for your bank if money is involved. Save it somewhere that isn’t only cloud-synced, and don’t delete it once the SIM is removed. For a printable, dated record with exact registration dates, our guide on identifying SIM ownership in Pakistan explains how the portal record strengthens your case.

Step 2: Find the actual numbers

The 668 reply gives you a count, not the digits. To act on a SIM you need the specific number, and there are two ways to get it.

Call the operator’s helpline first (Jazz 111, Zong 310, Ufone 333, Telenor 345) and report that an unauthorised SIM is registered on your CNIC. After verifying your identity, they can confirm details and flag the issue, though for the full list and permanent removal they’ll usually direct you to a franchise.

The more reliable route is to go straight to the franchise. When you arrive with your original CNIC, the staff can pull up every number that operator holds under your identity, with activation dates and status. That’s where you see exactly what you’re dealing with. For more on locating these numbers, see our walkthrough on how to check Pak SIM details.

Block versus disown: get this right

This single distinction is where most people go wrong, so slow down here.

Blocking a SIM just suspends it temporarily. The number stays linked to your CNIC, and a blocked SIM can still receive OTPs and keep you on the hook for liability. It looks like you fixed the problem, but you haven’t.

Disowning a SIM permanently severs it from your CNIC. The number is removed from your record entirely, the liability ends, and it can’t be reactivated by anyone, including the operator.

When the SIM isn’t yours, you always disown. Never settle for a block on a number you didn’t register. If a staff member offers to “block it for now,” push for full disowning instead.

Step 3: Disown it at the franchise

This is the step that actually solves the problem, and there’s no online shortcut. Permanent disowning requires an in-person biometric scan, which is a deliberate security feature, not bureaucracy.

Here’s how it goes:

  1. Take your original CNIC to an authorised franchise of the operator showing the unauthorised SIM. Photocopies and expired cards won’t work.
  2. Tell the staff clearly: “I want to disown unauthorised SIMs registered on my CNIC.”
  3. They’ll display every SIM that operator has under your CNIC.
  4. You’ll do a live fingerprint scan to confirm your identity.
  5. Sign the disowning form for the numbers you don’t recognise.
  6. Collect the reference number and the written receipt.

Keep that receipt for at least six months. If you have unauthorised SIMs across more than one network, you’ll need to repeat this at each operator’s franchise separately. It’s tedious, but it’s the only path that holds up legally.

Step 4: File a PTA complaint

Whether or not the franchise sorts it on the spot, file a complaint with PTA. It creates an official, dated record and gives PTA the authority to lean on the operator if they stall.

Log it at complaint.pta.gov.pk, or call the PTA helpline at 0800-55055. Keep your complaint reference number alongside the franchise receipt. Together they form a paper trail that protects you if anything done on that SIM resurfaces later. Our guide on how to search SIM ownership details instantly covers verifying the outcome once your complaint is in.

Step 5: Escalate if it’s serious

Sometimes a single forgotten SIM is an honest system error. But certain situations call for heavier action. Escalate if you find three or more unauthorised SIMs, if you’ve already lost money, if you’re getting threatening calls from numbers in your name, or if a franchise refuses to cooperate.

File an FIR at your local police station, or report to the FIA Cyber Crime Wing at cybercrime.gov.pk or the helpline 1991. Cite PECA 2016 Section 10 for unauthorised access and Section 14 for identity theft. Bring your original CNIC, the dated 668 screenshot, the portal printout, the franchise disowning receipts, and any bank statements or threatening messages tied to the fraud.

If five or more SIMs appear under your CNIC, also visit NADRA to flag your identity record and ask about safeguards, since that scale of misuse points to a leaked or compromised CNIC.

Step 6: Protect your money

While the SIM situation gets resolved, secure the financial side, because that’s usually what fraudsters are really after.

Notify your bank that a SIM may have been used to compromise your accounts. Freeze any mobile wallets like JazzCash or Easypaisa linked to your CNIC. And switch your important accounts from SMS-based OTPs to an authenticator app such as Google Authenticator, which a SIM swap can’t intercept. SIM-swap fraud has climbed sharply, and app-based two-factor authentication closes the most common attack route.

Step 7: Re-check after a couple of days

Once you’ve disowned the SIM, send your CNIC to 668 again after 24 to 48 hours to confirm it’s gone from your count. The operator-level removal should reflect fairly quickly, though PTA’s central database can take longer to fully sync. If the SIM is still showing after a few days, go back to your PTA complaint reference and follow up. To keep monitoring your record over time, our SIM database online resource is built for exactly this kind of follow-up audit.

One 2026 change to know about

PTA introduced a policy in mid-2026 adding a 365-day ownership lock on newly activated SIMs, which can delay how fast a recently activated SIM gets transferred or disowned. If the unauthorised SIM on your CNIC was activated very recently, physical disowning at the franchise may not be immediate. Don’t let that stop you. File the PTA complaint right away regardless, so your discovery is on record from day one, and follow up until it’s resolved. The dated complaint is what protects you in the meantime.

Preventing it from happening again

Cleaning up one rogue SIM is a wake-up call to tighten your habits. A few simple ones go a long way.

Stop handing out CNIC photocopies casually. When you must give one, write “FOR [purpose] ONLY” across the copy so it can’t be reused elsewhere. Never store CNIC images in your phone gallery, WhatsApp, or cloud backups, where a leak or a malicious app can grab them. Run a 668 check every month and keep the screenshots so any new addition stands out immediately. And if your CNIC is ever lost or stolen, report it to NADRA fast.

Pay special attention to elderly relatives. Older parents in particular tend to give out CNIC copies without a second thought and almost never check their SIM records. Running a monthly 668 check on their behalf, with their phone and their consent, can catch misuse they’d never spot themselves.

Send your CNIC to 668. If the SIM count comes back higher than the numbers you actually own, an unauthorised SIM is registered under your identity.

Yes. Under Pakistani law you’re liable for any SIM registered to your CNIC, regardless of who activated it, which is why you should remove it quickly.

No. Permanent disowning needs an in-person franchise visit with a live fingerprint scan. It can’t be done through an app, website, SMS, or phone call.

Blocking only suspends a SIM while it stays linked to your CNIC and can still receive OTPs. Disowning permanently removes it from your record. Always disown a SIM that isn’t yours.

File with PTA at complaint.pta.gov.pk or call 0800-55055. For serious cases, also report to the FIA Cyber Crime Wing at cybercrime.gov.pk or 1991.

PECA 2016, specifically Section 10 for unauthorised access and Section 14 for identity theft. Reference these when filing an FIR.

The operator usually processes disowning within a day or two. Re-check via 668 after 24 to 48 hours. PTA’s central database can take longer to fully update.