Social media hacking incidents on platforms like WhatsApp, Facebook, and Instagram have been steadily increasing across Pakistan, raising serious concerns about cyber security and public awareness. This trend has persisted even after the establishment of the National Cyber Crime Investigation Agency (NCCIA) in 2025, which replaced the Federal Investigation Agency's (FIA) cybercrime wing to address growing cybercrime cases, particularly social media fraud and online financial scams.
Victims Report Financial Losses
Several victims have reported financial losses due to hacking. Grade-20 government officer Muhammad Afzal Ahmed shared that hackers used his WhatsApp account to request money from his friends and relatives, leading to several transfers via mobile banking before the account was restored after 24 hours. Similarly, Rizwan Anwar had a fake Facebook account created in his name, used to solicit money from his contacts. Another victim, Shahid Ali, a mechanic, claimed hackers collected Rs500,000 from people using his name after gaining access to his WhatsApp account. "I filed a complaint but am still waiting for action," said Ali.
NCCIA Faces Equipment and Coordination Challenges
Amir Naseem, Professor of Information Technology at Government College, noted that the NCCIA lacks sufficiently advanced equipment and updated systems, making it difficult to trace hackers. "Facebook, WhatsApp, and other social media applications do not have formal agreements with the FIA, which creates additional difficulties in investigations," explained Naseem.
Complaint Statistics Highlight Scale of Problem
According to official records available to The Express Tribune, in 2024, more than 380,000 complaints related to WhatsApp, Facebook, financial fraud, and online scams were received. Of these, 63 per cent originated from Punjab, while the remaining 37 per cent came from other provinces. After the formation of NCCIA, cybercrime showed a sharp rise. In 2025 alone, the agency received 254,930 complaints specifically related to hacking of WhatsApp, Facebook, and Instagram accounts or the creation of fake profiles used to demand money. Additionally, more than 500,000 phone calls were received from citizens seeking information or reporting suspected fraud. During the same period, authorities recorded over 85,000 complaints related to financial fraud and more than 25,000 directly linked to hacking incidents.
Current Complaint Trends
By February 2026, data shows that between 500 and 700 complaints related to social media hacking and fraud are received each month. In Punjab alone, more than 2,000 calls and emails are now received daily reporting hacking incidents or seeking help regarding cyber fraud.
Expert Warns of Evolving Tactics
Cybercrime and IT expert Shahid Hussain warned that criminals often impersonate friends or relatives to trick victims into sending money through duplicate accounts on WhatsApp, Facebook, and increasingly Instagram. "Hackers also share fake prize or financial benefit links that can steal personal data when clicked. Some fraudsters make phone calls pretending to be from banks or government programs, including the Benazir Income Support Programme, to obtain sensitive financial information," noted Hussain. "AI tools are now being used to copy photos and details to create fake profiles and send urgent money requests to contacts," added Hussain, who advised users to avoid suspicious links, report fake accounts, and enable two-factor authentication for better security.
Calls for Public Awareness
Former FIA Director General Khadim Hussain Bhatti claimed that although the government has established the NCCIA, public awareness about cyber fraud remains limited. "Large-scale awareness campaigns and digital safety education are necessary to prevent people from falling victim to online scams," said Bhatti.
Government Response and Revised Procedures
Officials from the cybercrime investigation agency acknowledged that cybercrime incidents are rising but maintained that efforts are underway to improve investigations, raise awareness, and strengthen cooperation with educational institutions to educate the public about online safety. Under the revised cybercrime procedures, citizens can now submit complaints related to cyber offences at their nearest police station instead of travelling to major cities, after which the cases are forwarded to the relevant cybercrime authorities.
