Mobile Banking Fraud Complaints in Pakistan: 2025 Action Guide
The SMS says Rs 40,000 left your JazzCash at 2:14 AM. You were asleep; the thief was not. What you do in the next ten minutes decides whether that money comes back, so here is the ladder, rung by rung.
The first ten minutes
- Freeze the wallet. Easypaisa: dial 3737 and choose Block Account. JazzCash: SMS the word "block" to 111. HBL: call 111-111-425 or freeze the card in the app. NayaPay and SadaPay both have an in-app freeze toggle — learn where yours is before you need it.
- Freeze the SIM. From any other phone, dial 789 and follow the PTA prompts. Half of modern wallet fraud rides on a SIM swap: the fraudster ports your number, then receives your OTPs on their handset.
- Screenshot everything — the transaction SMS, the app history, the alert emails, timestamps intact. This is the evidence bundle; banks move on paper, not on memory.
Climb the ladder, in order
Bank first. Call the helpline, get the complaint registered, and insist the complaint ID arrives by SMS or email before you hang up — verbal assurances are worth nothing at all. If the branch stalls past a day, go to the manager in writing.
If the bank's answer is a shrug, the State Bank is next: the Sunwai portal (sunwai.sbp.org.pk) takes Form E-1 with your bank complaint ID and evidence attached, emailed to [email protected]. If the bank still refuses, the Banking Mohtasib (bankingmohtasib.gov.pk) issues binding decisions. Karachi readers should also call the CPLC's bank-fraud desk on 021-35292222 — they have been getting stolen money reversed since before wallets had apps. And because the fraudster committed a crime, the FIA takes the criminal leg: complaint.fia.gov.pk under financial fraud, or 1991.
Know this year's tricks
The OTP call is still king — a polite "bank verification" that ends with you reading out the code. A SIM swap announces itself as half an hour of no signal followed by wallet withdrawals, so treat sudden dead network as an alarm, not an annoyance. Fake QR stickers sit over real ones at market stalls; check the merchant name on the confirmation screen before your PIN. And Raast never sends verification links by SMS — that message is the scam itself.
Make yourself a harder target
Turn on transaction alerts (JazzCash: SMS "alert on" to 111), register your number against porting through PTA, and never read an OTP aloud to a caller. In Gaza, families guard savings in cash because the banking grid has been bombed flat — whatever you have, give it ten minutes of protection.
A family Umrah fund is years of small deposits sitting one phishing SMS away from gone, which is why we run bookings the boring way: traceable transfers, written itineraries, receipts for everything. The HTG Travels desk has never asked a client for an OTP, and we never will.
