Imagine this: your phone is working fine all morning. Then, without warning, the signal disappears. No bars, no network, no calls, no messages. You restart the phone. Nothing. You assume it is a network problem and wait for it to come back. Meanwhile, someone else is holding a duplicate of your SIM card — and using your number to empty your bank account.
That is SIM swap fraud, and it is not a theory. It happened in Pakistan to two members of the National Assembly and a Karachi businessman, who together lost millions of rupees. The cases came back into the news on 19 October 2026, when an investigation and a large fine were reported — but here is the first thing you must understand clearly, because getting the dates wrong changes the whole story.
First, Get the Dates Right: Old Frauds, New Reporting
The frauds themselves are not from this week. They happened months ago: one in January 2026 and one in September 2025. What is new — reported on 19 October 2026 — is the investigation into those cases and the fine that followed. This guide keeps that distinction visible throughout, because a reader who thinks “this happened yesterday” will misunderstand both the danger and the response.
The 19 October 2026 reporting covered an investigation into how criminals obtained duplicate SIMs, killed the victims’ original signals, and then used the victims’ numbers to access and move bank money. The regulator, the Pakistan Telecommunication Authority (PTA), fined operators a total of Rs155.6 million across two cases. The banks involved were only ordered to return the victims’ money. Those are the facts as reported — and the rest of this guide explains what they mean for you, and what to do if your own signal suddenly dies.
How SIM Swap Fraud Actually Works
A SIM swap is not a complicated hack of your phone. It is a trick played on the mobile network itself. Here is the method as it played out in the reported cases, step by step.
First, the criminals obtained a duplicate SIM for the victim’s number. That duplicate was issued through normal-looking channels — in one case, through an outlet in Thatta — even though the real owner had never asked for a replacement.
Second, the moment the duplicate SIM was activated, the victim’s original SIM stopped working. The network can only serve one active SIM for a number at a time, so the duplicate took over and the original went dead. From the victim’s side, this looks exactly like a sudden loss of signal. The phone shows no service, calls do not come through, and messages stop arriving.
Third, with the victim’s number now in their hands, the criminals used it to access and move bank money. A mobile number is the key to a shocking amount of financial life: one-time passwords (OTPs) for bank logins arrive by SMS, account recovery often runs through the number, and many banking alerts go to the same number. When the criminals controlled the number, they controlled the codes that were meant to protect the accounts.
That is why the signal dying is not a side effect of this fraud. It is the fraud announcing itself. And that is why waiting for the signal to “come back on its own” is the most dangerous response of all — because while you wait, the criminals are working.
The Three Cases That Made the News
The 19 October 2026 reporting described three victims. Their stories are worth knowing in detail, because they show that this fraud does not pick only one kind of target.
The first victim was MQM MNA Farhan Chishti. He lost Rs1.5 million after his phone went dead on landing at Islamabad airport on 12 January 2026. Think about that moment: a traveller lands, switches his phone on or checks it after the flight, and finds no signal. In an airport, with announcements and crowds around, a dead phone feels like an ordinary annoyance — a network glitch, a phone that needs restarting. In his case, it was the first sign that his number had already been taken over.
The second victim was MNA Shaharyar Mahar, who lost Rs2 million in a separate incident. The reporting does not tie his case to the same date or the same outlet as the others, and this guide does not invent a connection. What matters is the pattern: another public figure, another duplicate SIM, another drained account.
The third victim was Karachi businessman Sunny Kumar, who lost Rs8.5 million — the largest single loss of the three. In his case, the duplicate SIM was issued on 29 September 2025 at an outlet in Thatta. That date and place matter, because they show how far back this particular chain reaches, and how ordinary the point of failure looked: a SIM issued at a regular outlet, in a regular town, that should never have been issued at all.
Together, the three reported losses add up to Rs12 million. But the investigation suggested the problem ran wider than three victims, which brings us to the insider angle.
The Insider Angle: One Employee, About 30 Accounts
Investigators found something that makes these cases harder to dismiss as bad luck. Before Sunny Kumar’s swap, a bank employee in Mardan had accessed about 30 accounts. Suspected fraud linked to that insider alone was put at Rs25 million.
Read that carefully. It does not say the employee personally carried out every part of every fraud, and this guide does not claim more than the reporting does. What it does show is that at least one of these frauds may have had help from inside the system — someone with access to account information who could point criminals at the right targets, or smooth the way for the money to move once the number was taken over.
For an ordinary reader, the lesson is uncomfortable but important: SIM swap fraud is not always a stranger guessing your password. Sometimes the people behind it already know something about your accounts. That is one more reason why the defences in this guide do not rely on “nobody knows my details.” They rely on speed — noticing the red flag fast — and on checks you can run yourself.
What PTA Did: A Rs155.6 Million Fine
After the investigation, PTA fined operators Rs77.8 million per case, across two cases — a total of Rs155.6 million. The fine was imposed under Regulation 4(4), which holds operators solely responsible for every SIM they sell. In plain words: if a SIM is sold through your system, it is your responsibility, even if an individual outlet or employee was the one who issued it wrongly.
Two things about this action are worth noting honestly.
First, the sources read for this guide do not name the operator or operators fined, so this guide does not name one either. Guessing would be unfair and possibly wrong. What is certain is the size of the fine and the rule it was imposed under — and the message it sends: the regulator is treating wrongly issued SIMs as the operator’s problem, not as an excuse.
Second, the banks were only ordered to return the victims’ money. That is a very different kind of outcome from a fine. It means the victims in these reported cases were to be made whole by their banks, but the punishment — the financial penalty meant to force change — landed on the operators. If you are ever a victim yourself, that distinction matters: getting your money back and seeing someone punished are two separate processes, and you should pursue both, not assume one follows automatically from the other.
The Wider Crackdown Behind the Headlines
The 19 October 2026 reporting also cited a much larger enforcement picture, and it is worth seeing the three cases against that background. Over roughly two and a half years, 18.2 million illegal SIMs were blocked. The National Cyber Crime Investigation Agency (NCCIA) seized 195 active SIMs and 81 ATM cards. There were 171 arrests. And data of about 600,000 people was recovered.
Those numbers tell two stories at once. On one hand, enforcement is happening at real scale — millions of illegal SIMs removed, hundreds of arrests, a huge amount of stolen data recovered. On the other hand, the sheer size of those numbers shows how big the illegal SIM problem is. A system that has to block 18.2 million illegal SIMs is a system where a wrongly issued duplicate is not a rare freak event. It is a known, large-scale weakness — and that is exactly why your own defences matter, even if you have never been targeted.
Sudden Signal Loss Is the Red Flag — Act Immediately
This is the heart of the guide, and it cannot be said too plainly: if your phone signal suddenly dies for no reason, treat it as a possible SIM swap until you prove otherwise. Do not wait for it to come back. Do not assume it is a network outage. Do not restart the phone three times and then go for tea.
Here is what to do, in order, the moment you notice a sudden, unexplained loss of signal:
First, contact your operator immediately, from another phone if you have to — a family member’s phone, a landline, a neighbour’s phone. Tell them your signal has died suddenly and ask them to check whether a duplicate SIM has been issued on your number. Speed matters more than anything else here, because every minute the duplicate stays active is a minute the criminals can use your number.
Second, while you are in contact with the operator, ask them to block the number or the duplicate SIM if a swap is confirmed. Do not accept “wait and see” as an answer. Your number is the key to your bank accounts, and a swapped number is an emergency, not a routine complaint.
Third, contact your bank or banks at once, from the same borrowed phone. Tell them your number may have been swapped and ask them to freeze online transactions, block internet banking access, or place extra verification on your accounts until the situation is resolved. Do this even if you have not seen any money leave yet — by the time you see a deduction, the criminals may already be finished.
Fourth, once the immediate danger is contained, check which SIMs are registered on your CNIC. PTA provides a standard check for this: visit cnic.sims.pk, or send an SMS with your CNIC number (without dashes) to 668. If you see a number you do not recognise, or more SIMs than you actually own, report it to your operator and to PTA right away. This check is worth doing even when nothing has gone wrong — once every few months, as a habit — because a SIM you never asked for is a warning in itself.
Fifth, never treat a duplicate-SIM request you did not make as harmless. If your operator ever tells you a replacement SIM was requested, or if you receive a message about a SIM change you did not authorise, treat it as an attack in progress, not as an administrative mix-up. Real SIM replacements are things you request yourself, in person, with your own CNIC. Anything else deserves an immediate challenge.
One line of standing advice from PTA, repeated in its 19 October Cybersecurity Awareness Week warning, belongs here as well: never share OTPs, PINs or account passwords with anyone, and verify callers claiming to be from a bank or a government office before believing them. That warning is standing advice, not a new order or penalty — but it is the advice that closes the last gap, because a swapped SIM plus a shared OTP is how money moves fastest.
Red Flag → Immediate Action
| What you notice | What it could mean | What to do right now |
|---|---|---|
| Signal dies suddenly, no bars, no service | Possible SIM swap — your number may be on a duplicate SIM | Contact your operator at once from another phone; ask if a duplicate was issued |
| Phone works but SMS codes stop arriving | Your number may be diverted or swapped | Call your bank and freeze online transactions; then call your operator |
| Operator says a replacement SIM was requested | A swap may be in progress or already done | Challenge it immediately; ask for the SIM to be blocked |
| Unknown SIMs show on your CNIC check | A SIM exists in your name that you never bought | Report it to the operator and PTA; get it blocked |
| Caller claims to be your bank and asks for an OTP | Social engineering, often paired with a swap | Share nothing; hang up and call the bank’s official number yourself |
| Money leaves your account unexpectedly | Fraud already under way | Call the bank at once to freeze the account; then report to the operator and PTA |
What This Guide Is Not
To avoid confusion with two related topics covered elsewhere on this site: if your fingerprint fails at a SIM shop and you cannot buy a new SIM at all, that is a different problem with its own process, covered in our SIM fingerprint guide. And if you are worried about apps that secretly watch your phone, that is a different scam, covered in our spy-apps guide. Both are linked at the end. This guide is only about the swap — the case where your working number is taken over through a duplicate SIM.
It is also not a claim that every signal loss is a fraud. Networks do go down. Phones do have faults. A signal that dies in a basement, in a remote area, or during a known outage is usually exactly what it looks like. The red flag is a sudden, unexplained loss in a place where your phone normally works — especially if it stays dead after a restart, or if it comes with strange account activity. When in doubt, the cost of one phone call to your operator is nothing compared with the cost of waiting.
A Short Habit That Protects You
You do not need expensive tools to defend against SIM swap fraud. You need one habit and one number. The habit: check the SIMs on your CNIC every few months through cnic.sims.pk or by SMS to 668, and act the same day on anything you do not recognise. The number to remember: your operator’s helpline, saved somewhere you can reach it even when your own phone is dead — written down at home, or in a family member’s phone.
The reported cases show what happens when that habit is missing and the red flag is missed: a phone that dies at an airport, a duplicate issued at an ordinary outlet, and millions gone before anyone understood what had happened. The fine that followed — Rs155.6 million — may force operators to be more careful. But your signal is your earliest warning, and no fine can replace the minutes you save by acting on it immediately.
The details of the investigation, the three cases and the Rs155.6 million fine were reported by TechJuice, covering a The News investigation reported on 19 October 2026.
Also read: Fingerprint Not Matching at the SIM Shop? PTA’s Alternate Process — What to Do Instead of Arguing With the Retailer and Weak Signals or Dropped Calls? How to Complain So Your Operator and PTA Actually Fix It
FAQs
Is every sudden signal loss a SIM swap?
No. Networks have outages, phones develop faults, and coverage disappears in basements and remote areas. The red flag is a sudden, unexplained loss in a place where your phone normally works — especially if it stays dead after a restart, or if it comes with missing SMS codes or strange bank activity. When in doubt, call your operator from another phone and ask whether a duplicate SIM was issued; that one call costs nothing and rules out the dangerous case.
How do I check which SIMs are registered on my CNIC?
Use PTA’s standard check: visit cnic.sims.pk, or send an SMS with your CNIC number without dashes to 668. You will see the SIMs registered against your CNIC. If you find a number you do not recognise, or more SIMs than you actually own, report it to your operator and to PTA immediately and ask for the unknown SIM to be blocked. Doing this check every few months is a good habit even when nothing seems wrong.
What should I do first if my signal dies suddenly?
Contact your operator immediately from another phone and ask whether a duplicate SIM has been issued on your number — do not wait for the signal to come back on its own. Then call your bank and ask it to freeze online transactions until the situation is clear. Speed matters because the criminals use the swapped number to receive OTPs and move money, so every minute of delay helps them, not you.
Will PTA’s fine stop SIM swap fraud?
The Rs155.6 million fine, imposed under Regulation 4(4) holding operators solely responsible for every SIM they sell, puts real financial pressure on operators to stop wrongly issued duplicates — and the wider crackdown has already blocked 18.2 million illegal SIMs. But no fine removes the risk entirely, so your own defences still matter: act instantly on sudden signal loss, check your CNIC SIMs regularly, never share OTPs or PINs, and verify any caller claiming to be from your bank.