NCCIA Busts Illegal Network Selling Call Records and NADRA Data

The National Cyber Crime Investigation Agency (NCCIA) in Pakistan has dismantled an illegal network accused of illegally obtaining, selling and distributing sensitive personal data of Pakistani citizens via online platforms and social media. According to an NCCIA presentation to the Senate Standing Committee on Information Technology, the stolen data included call records, travel histories, NADRA-linked information, family trees, SIM ownership details, subscriber data, and geolocation records.

The suspects allegedly conspired to acquire and transmit this confidential information. A technical examination of seized mobile phones confirmed their involvement. The investigation revealed the use of fake WhatsApp and microfinance bank accounts to launder the proceeds of the illicit activity. Five individuals - Arshad Tariq, Arham Baree, Anam Sabir, Muhammad Rizwan and Samman Sabir - are named in the case.

Four suspects were arrested while Arham Baree was granted pre-arrest bail. The NCCIA also recovered seven mobile phones of various brands during the probe. The agency stated that the investigation is ongoing to identify additional individuals involved and to uncover potential foreign connections. Pakistan currently lacks a unified national threat-intelligence dashboard, which prevents real-time tracking of cyber threats targeting critical information infrastructure.

The NCCIA emphasized this deficiency limits early warning and coordinated response capabilities to cyberattacks.