Understand PECA 2016 Section 16 in Pakistan, SIM privacy laws, unauthorized identity information use, possible penalties, and safe SIM verification methods.
Mobile phones are part of everyday life in Pakistan. People use SIM cards for calls, banking, WhatsApp, online accounts, and identity verification. As a result, questions about SIM registration, mobile-number ownership, and personal-data privacy have become increasingly important.
You may have searched online for a mobile number, checked a SIM-related website, or wondered whether finding the registered owner of another person’s number is legally permitted.
One law that often comes up in these discussions is the Prevention of Electronic Crimes Act, 2016 (PECA). Section 16 addresses the unauthorized use of identity information.
But does this mean that simply searching for someone’s SIM information is a crime?
Not necessarily. The legal position depends on what information is obtained, how it is obtained, whether the person has authorized its use, and what the person does with that information. A routine check through an authorized service is different from accessing private records, obtaining someone else’s identity information without permission, or using personal data for fraud or harassment.
This guide explains Section 16 in simple English, its connection with SIM privacy, potentially unlawful conduct, and safer ways to verify SIM information in Pakistan.
What Is PECA 2016?
PECA stands for the Prevention of Electronic Crimes Act, 2016. It is a Pakistani law dealing with specified offences involving electronic systems, digital information, and other conduct covered by its provisions.
The law includes provisions addressing matters such as:
- Unauthorized access to information systems or data.
- Unauthorized copying or transmission of data.
- Electronic fraud and forgery.
- Unauthorized use of identity information.
- Unauthorized issuance of SIM cards.
- Certain forms of online harassment and privacy-related harm.
Not every online activity is an offence simply because it involves another person’s information. The relevant legal provision, the facts, authorization, and the circumstances all matter.
For readers researching the legal text, the official Pakistan Code publication of PECA 2016 is the appropriate starting point. Related provisions may also be relevant when an incident involves unauthorized access, data transmission, fraud, or SIM issuance.
What Does Section 16 of PECA 2016 Say?
Section 16 is titled “Unauthorized use of identity information.”
In substance, subsection (1) addresses obtaining, selling, possessing, transmitting, or using another person’s identity information without authorization.
The provision states that a person who commits the offence may face:
- Imprisonment for a term of up to three years.
- A fine of up to Rs. 5 million.
- Both imprisonment and a fine.
These are the maximum penalties stated in the provision, not an automatic punishment for every SIM-related search or privacy complaint.
Subsection (2) also provides a mechanism through which a person whose identity information has been obtained, sold, possessed, used, or transmitted may apply to the relevant authority for measures such as securing the information, destroying it, blocking access, or preventing its transmission, as applicable under the law.
What does “identity information” mean?
In simple terms, identity information is information that can identify or authenticate a person or enable access to data or an information system.
Depending on the circumstances, sensitive identity-related information may include:
- CNIC details.
- Identity credentials or authentication information.
- Personal information connected with digital accounts.
- Information used to impersonate someone.
- Other data that falls within the applicable legal definition.
Whether a particular piece of SIM-related information qualifies as identity information under Section 16 requires examining the facts and the statutory definition. It is not accurate to assume that every mobile number, search result, or publicly available detail automatically establishes an offence under this section.
Is Looking Up Someone’s SIM a Crime in Pakistan?
The answer depends on what “looking up someone’s SIM” actually means.
People use this phrase to describe several different activities. One person may mean checking their own SIM registrations, while another may mean trying to obtain a stranger’s name or CNIC through a private database.
Those activities should not be treated as legally identical.
1. Checking SIMs registered against your own CNIC
Checking the number of SIMs registered against your own CNIC through an authorized verification method is a legitimate account-security activity.
It can help you identify unexpected registrations and take steps to resolve them with the relevant mobile operator.
This is different from trying to obtain another person’s confidential identity records without authorization.
2. Searching a mobile number on a public website
A person may enter a mobile number into a search engine or visit a website that claims to provide SIM owner details.
The legal position depends on the information displayed, its source, the site’s authorization, and how the information is collected and used.
The fact that a website offers a lookup service does not prove that the service is lawful or that its data was obtained with permission.
A website might display publicly available business contact information, user-submitted information, or private identity data obtained without authorization. Those situations can raise very different legal questions.
3. Trying to obtain a person’s CNIC or confidential subscriber records
Attempting to obtain another person’s CNIC details, private subscriber records, credentials, or other protected identity information without authorization can raise serious privacy and legal concerns.
Depending on the circumstances, Section 16 or other applicable provisions may become relevant.
A mobile number alone does not give someone permission to access the subscriber’s confidential account records.
4. Using someone else’s SIM information for fraud or harassment
The legal risk can be greater when information is obtained or used to impersonate a person, access their accounts, threaten them, commit fraud, or facilitate another unlawful act.
The precise offences and penalties depend on the conduct and the evidence. Section 16 should not automatically be treated as the only potentially relevant provision.
Section 16 vs. Ordinary SIM Verification
The following table explains the practical distinction.
| Activity | General legal consideration |
|---|---|
| Checking SIM registrations against your own CNIC using an authorized method | A legitimate self-verification purpose |
| Asking an operator to verify your own SIM registration | An appropriate account-support route |
| Searching the internet for a publicly listed business number | Different from accessing confidential subscriber records |
| Attempting to obtain another person’s private CNIC or subscriber data without authorization | May raise Section 16 and other legal concerns |
| Buying or sharing a database containing allegedly confidential identity information | May create legal and privacy risks depending on the circumstances |
| Using SIM-related information to impersonate, defraud, or harass someone | May engage multiple legal provisions |
| Reporting an unknown SIM registered against your own CNIC | A legitimate way to protect your identity |
This table is a general explanation, not a legal determination about any particular incident.
Why SIM Owner Details Can Be Sensitive
A SIM card is more than a way to make phone calls. A mobile number can be connected with banking services, digital wallets, messaging accounts, password-recovery processes, and other personal services.
Incorrectly exposing or using subscriber information can therefore create risks beyond unwanted calls.
Identity theft
Someone may attempt to use personal information to impersonate another individual or mislead a service provider.
Account compromise
A mobile number may be used for account recovery or verification. Combining it with other personal information can increase the risk of unauthorized account access.
Financial fraud
Personal information may be used in social-engineering attempts, fraudulent calls, or scams targeting mobile-wallet and banking customers.
Harassment and unwanted contact
Information obtained from an unreliable lookup service can be used to target someone with unwanted calls, threats, or messages.
Misidentification
Third-party websites may show inaccurate, outdated, or unrelated information. A search result is not reliable proof that a particular person owns a particular number.
For these reasons, SIM verification should focus on legitimate needs, authorized methods, and respect for other people’s privacy.
Does Section 16 Apply to Every SIM Lookup Website?
No blanket conclusion should be drawn about every SIM lookup website.
The name or marketing of a website does not establish whether its operations comply with Pakistani law. Likewise, using a website does not by itself prove that a visitor has committed an offence under Section 16.
Relevant questions may include:
- What information does the service provide?
- Where did the information come from?
- Was the information obtained or used with proper authorization?
- Does the service expose confidential identity information?
- Is the information being used for a legitimate purpose?
- Is there evidence of fraud, impersonation, unauthorized access, or another unlawful act?
A service that provides an authorized check of a person’s own SIM registrations is not equivalent to a service that claims to reveal strangers’ confidential CNIC or subscriber records.
Do not assume that a site is official, PTA-approved, or legally authorized merely because it uses words such as “SIM database,” “owner details,” or “information system.”
Before submitting personal information, check the service’s identity, privacy practices, and official status. When in doubt, use the relevant mobile operator’s official support channels or an appropriate government service.
What Is the Difference Between Section 16 and Section 17?
PECA contains separate provisions addressing unauthorized use of identity information and unauthorized issuance of SIM cards.
Section 16: Unauthorized use of identity information
Section 16 concerns obtaining, selling, possessing, transmitting, or using another person’s identity information without authorization.
Its stated maximum penalties are up to three years’ imprisonment, a fine of up to Rs. 5 million, or both.
Section 17: Unauthorized issuance of SIM cards
Section 17 addresses selling or otherwise providing SIM cards and specified related modules without obtaining and verifying subscriber details in the manner approved by the Pakistan Telecommunication Authority.
The provision states a maximum penalty of up to three years’ imprisonment, a fine of up to Rs. 500,000, or both.
The provisions address different conduct. Section 16 is relevant to unauthorized identity-information use, while Section 17 concerns specified SIM issuance practices.
A case involving both unauthorized identity information and improperly issued SIM cards may require separate legal analysis of the conduct and evidence.
How Can You Check SIMs Registered Against Your Own CNIC Legally?
If your concern is whether unknown SIM cards are registered against your own CNIC, start with recognized verification channels.
Method 1: Use the SIM Information System
The SIM Information System at CNIC.SIMS.PK provides a way to check SIM registration counts against a CNIC.
A general process is:
- Open the SIM Information System.
- Enter your own CNIC details as requested.
- Complete any required verification.
- Review the operator-wise SIM counts.
- If you identify an unexpected registration, contact the relevant mobile operator for investigation.
The result is useful for checking registrations associated with your CNIC. Do not assume that the count alone identifies every number or provides the registered person’s complete personal details.
Method 2: Use the 668 SMS service
The 668 service is commonly used in Pakistan to check SIM registrations associated with a CNIC.
Before using the service, confirm the current procedure and any applicable charges through an official source or your mobile operator.
Use your own CNIC information and review the response carefully. If the results indicate an unexpected SIM registration, contact the operator concerned.
Method 3: Visit the relevant operator’s authorized service centre
If an unexpected registration appears, visit an authorized franchise or customer-service centre of the relevant operator.
Explain that you want to investigate a SIM registration associated with your CNIC. The operator can advise you about identity verification, its complaint process, and any action available under its procedures.
Take your original identification document if requested, and ask for a complaint or reference number.
For more detailed guidance, read the related article “How to Check an Unauthorized SIM Registered on Your CNIC.”
What Should You Do If an Unknown SIM Is Registered on Your CNIC?
An unexpected registration should be investigated, but it does not automatically prove that someone has deliberately committed a crime.
There may be several explanations, including an old registration, an administrative issue, or unauthorized use of identity information.
Take the following steps.
Step 1: Confirm the information
Repeat the check through an appropriate official or authorized channel. Make sure you entered your CNIC correctly and interpreted the operator’s result accurately.
Step 2: Contact the relevant mobile operator
Ask the operator to investigate the registration and explain what verification is required.
Do not rely on an unofficial website claiming that it can remove a SIM from your CNIC instantly.
Step 3: Request appropriate corrective action
If the registration is unauthorized, ask the operator to explain the available process for blocking, disowning, or otherwise correcting it, as appropriate.
Keep any complaint number and supporting documents.
Step 4: Escalate if necessary
If the issue remains unresolved, use the Pakistan Telecommunication Authority’s complaint channels where appropriate. If there is evidence of identity theft, fraud, or another offence, consider reporting it to the relevant law-enforcement authority.
Keep copies of relevant messages, complaint records, and other evidence. Avoid publishing your full CNIC or another person’s personal information on social media.
For further information, see “How to Remove an Unauthorized SIM From Your CNIC” and “SIM Disowning in Pakistan: How to Remove a SIM From Your CNIC.”
Can You Legally Find Out Who Owns Any Pakistani Mobile Number?
A mobile number does not automatically entitle every person to access its subscriber’s private identity records.
If you receive a suspicious call or message, you can take reasonable steps to protect yourself without attempting to access confidential data.
For example, you can:
- Block the number if appropriate.
- Report suspicious calls or messages to your operator.
- Preserve relevant evidence.
- Report threats, fraud, or harassment through the appropriate official channels.
- Verify your own SIM registration through authorized methods.
If you need subscriber information for a legal dispute or investigation, seek advice about the proper legal process rather than relying on an unverified database.
A name displayed by an unofficial lookup website is not conclusive proof of ownership. It may be wrong, outdated, or associated with a different person.
Does Consent Matter Under Section 16?
Authorization is central to the wording of Section 16.
In practical terms, there is an important difference between accessing information for a purpose that the person or relevant authority has properly authorized and obtaining or using information without that authorization.
However, consent is not a universal answer to every legal question. The applicable law, the type of data, the scope of permission, the service’s rules, and the conduct involved can all matter.
For example:
- A person may authorize a service to process specified information for a particular purpose.
- That permission does not necessarily authorize unrelated use or onward sale of the information.
- Access to a mobile number does not automatically authorize access to private subscriber records.
- A website’s terms do not necessarily make the collection or disclosure of third-party identity data lawful.
When sensitive information is involved, use a service with a clear and legitimate purpose and obtain appropriate authorization.
What If Someone Has Already Looked Up Your SIM Information?
If you suspect that someone has obtained or misused your identity information, focus on the evidence and the practical steps available to you.
Protect your accounts
Change passwords for affected accounts, secure your email, and review account-recovery settings. Contact your bank or mobile-wallet provider if you suspect financial exposure.
Contact your mobile operator
Ask whether there are any suspicious SIM-related changes, unauthorized replacements, or registration issues associated with your number.
Preserve evidence
Save relevant messages, screenshots, URLs, dates, and complaint references. Do not alter evidence or make unsupported public accusations.
Report suspected misuse
Use the relevant operator’s complaint process and appropriate official reporting channels. A qualified Pakistani lawyer can help assess whether the facts support a complaint under Section 16 or another law.
Request appropriate protection
Section 16(2) provides a route for a person whose identity information has been affected to apply for appropriate measures concerning that information. The available remedy depends on the facts and the relevant authority’s powers.
Common Myths About PECA 2016 Section 16
Myth 1: Every SIM search is a criminal offence.
Not necessarily. The nature of the information, authorization, method of access, and circumstances matter.
Myth 2: A website can reveal any person’s SIM details because the number is public.
A public mobile number does not automatically make confidential subscriber records public or authorize their disclosure.
Myth 3: Section 16 only applies to hackers.
The provision is not limited in its wording to hacking. It addresses specified acts involving another person’s identity information without authorization.
Myth 4: Every unexpected SIM registration proves identity theft.
An unexpected result should be investigated. The result alone does not establish who caused it or whether a crime occurred.
Myth 5: A lookup website is legal because it is accessible online.
Availability on the internet does not establish that the website’s data sources or practices are authorized.
Myth 6: Section 16 automatically imposes a Rs. 5 million fine.
No. Rs. 5 million is the maximum fine stated in the provision, not an automatic penalty for every search or allegation.
Frequently Asked Questions
1. Is looking up someone’s SIM a crime under PECA 2016?
Not automatically. Section 16 concerns specified acts involving another person’s identity information without authorization. Whether a particular SIM lookup violates the law depends on the facts, the information involved, and how it was obtained or used.
2. What is the punishment under Section 16?
Section 16(1) provides for imprisonment of up to three years, a fine of up to Rs. 5 million, or both. These are maximum penalties stated in the law.
3. Can I check how many SIMs are registered against my own CNIC?
Yes. You can use an appropriate authorized verification method, such as the SIM Information System or the 668 service, subject to the current procedures.
4. Can I use a website to find a stranger’s CNIC from a mobile number?
You should not attempt to obtain confidential identity information without authorization. A website’s claim that it can provide such information does not establish that the service is lawful or accurate.
5. Is searching a phone number on Google illegal?
A routine search for publicly available information is not automatically an offence under Section 16. The situation can be different if someone obtains, discloses, or uses identity information without authorization or engages in other unlawful conduct.
6. Does Section 16 apply to SIM owner details websites?
It may be relevant depending on the website’s activities, data sources, authorization, and use of personal information. The existence of a lookup feature alone is not enough to determine whether a specific service violates the law.
7. What should I do if an unknown SIM is registered against my CNIC?
Confirm the result through an authorized channel, contact the relevant mobile operator, request investigation and corrective action, and escalate through appropriate official complaint channels if necessary.
8. Is Section 16 the same as Section 17?
No. Section 16 concerns unauthorized use of identity information. Section 17 addresses specified SIM issuance practices that fail to follow the subscriber-verification requirements approved by PTA.
9. Can a person be punished simply because someone files a complaint?
A complaint is not the same as proof of an offence. The facts, evidence, applicable law, and legal process determine the outcome.
10. Where can I read the law?
Consult the official Pakistan Code publication of the Prevention of Electronic Crimes Act, 2016, and check any applicable amendments. For advice about a specific incident, consult a qualified lawyer in Pakistan.
Conclusion
PECA 2016 Section 16 is an important provision concerning the unauthorized use of identity information in Pakistan. It covers specified acts involving another person’s identity information without authorization and provides for penalties of up to three years’ imprisonment, a fine of up to Rs. 5 million, or both.
However, it would be inaccurate to say that every search for a mobile number is automatically a crime. A basic search, an authorized self-check, an attempt to access confidential subscriber records, and the misuse of identity information are different situations.
If your purpose is to protect your own identity, check your SIM registrations through appropriate channels, contact your operator about unexpected results, and report suspected misuse through the relevant official process. Respect other people’s privacy and avoid services that claim to expose confidential personal information without a clear lawful basis.
Disclaimer: This article provides general educational information, not legal advice. It does not establish whether any particular person or website has violated the law. Pakistani legislation may be amended, and the application of a provision depends on the facts and legal interpretation. Consult the current official legal text and a qualified Pakistani lawyer for advice about a specific situation.
For More Details: Sim Ownerss