The National Cyber Crime Investigation Agency (NCCIA), Pakistan’s federal cybercrime body, has arrested a man in a WhatsApp account hacking case in Pakistan involving an alleged Rs1.3 million fraud. An agency spokesperson said Muhammad Sultan, son of Muhammad Yousaf, was detained in a targeted raid in his hometown of Panserah, Faisalabad, on 2 November 2026.
Investigators accuse him of taking control of a citizen’s WhatsApp, then posing as that person to ask acquaintances for money. The contacts allegedly paid a total of Rs1.3 million before the victim raised the alarm.
How the account was taken over
According to the agency, Sultan first presented himself as a courier company representative and contacted the victim. He then sent a fraudulent link and obtained a verification code that unlocked access to the victim’s WhatsApp account.
Once inside the chat, he impersonated the account holder and requested funds from people in the contact list. That sequence—fake courier pitch, malicious link, stolen code, then money requests—is the core of the WhatsApp account hacking case in Pakistan now before investigators.
Complaint, law and evidence
The victim reported the matter at the Cyber Crime Reporting Centre in Islamabad. A case was registered under the Prevention of Electronic Crimes Act (PECA), the main federal law covering online offences such as hacking and digital fraud.
Authorities say they traced the suspect through technical means, seized the mobile phone used in the crime, and recovered key digital evidence for court proceedings. The recovery of the handset is intended to support charges that the same device drove both the account takeover and the subsequent WhatsApp scam contacts faced.
Official response
NCCIA Director General Syed Ali Nasir Rizvi said enforcement will continue against people involved in account hacking and online fraud. The agency has not publicly released further details on additional suspects or on how much of the Rs1.3 million, if any, has been returned to those who paid.
Aasan alfaaz mein
NCCIA ne Faisalabad ke Panserah se ek shakhs Muhammad Sultan ko giraftar kiya hai. Ilzam yeh hai ke us ne kisi shehri ka WhatsApp hack karke us ke contacts se 13 lakh rupay mangwa liye. Pehle courier wali identity se fake link bheja, verification code le kar account khol liya, phir dost-rishtedaron se paise maange. Agar aap ke WhatsApp se ajeeb paise ki darkhwast aaye, to Islamabad Cyber Crime Reporting Centre par shikayat darj karwaein.
