Method Guide · The Fingerprint Layer

SIM Biometric Verification (BVS): Status Codes, Fixes and the Fingerprint Layer

One boundary bears repeating. These BVS status codes answer only for the SIM that runs them, and only about your own registration. They expose nobody’s identity. No code anywhere turns a stranger’s number into the owner’s details behind it, and the apps selling sim tracker claims hit the same wall. That wall is Section 16 of PECA 2016, set out on our legality page.

Status codes for every network

Run one code from the SIM you want to check, and the network replies with its biometric verification status. Jazz uses 6001, Telenor 7751, Zong 7911, and Ufone answers on *336*1#.

Each channel answers only for the SIM that runs it, and standard SMS rates apply at most. The reply states whether that SIM’s registration is biometrically verified. Run the BVS check before any franchise visit, so you walk in knowing where you stand. Save the table once, because these codes change rarely. When they do change, this page, the master code sheet and the by-network hub change with them, and we date the edit.

What happens during a live match

During a live match, your CNIC number goes into the operator’s system and your thumb goes onto a scanner. The print travels to NADRA, which compares it with the fingerprints taken when your CNIC was made and returns match or no match. The operator’s system records that verdict against the SIM. The counter ritual is short, and its moving parts explain most failures.

Notice what never happens. Nobody at the shop sees your stored prints, and no print is checked against the whole population. The question is narrow: does this thumb belong to this CNIC? The answer is yes or no. That narrowness is the privacy design, the same thinking that keeps 668 replies to bare counts, as our portal guide explains.

The live part of that match hardened in July 2026. Instructions reported on 24 July 2026 tell operators that BVS devices must use Live Finger Detection. The scanner has to satisfy itself that a real, living finger is on the glass. That closes the door on lifted prints, moulded fakes and a photograph of a thumb. PTA has not published a numbered circular for it, so this is reported instruction rather than published regulation. Our report on the tightened SIM issuance rules lists the rest.

It also explains why matches fail. A dirty scanner, a wet thumb, a worn print, or a NADRA record made twenty years ago can each break it. Nothing sinister needs to have happened. The fixes below follow straight from those causes.

How SIMs end up unverified

SIMs end up unverified for four main reasons: legacy cards sold before Pakistan’s 2015 biometric drive, a fingerprint capture that never completed at the point of sale, record migrations when operators merge systems, and identity documents that changed at NADRA after the original capture. Almost every unverified flag traces back to one of these four.

• Pre-2015 legacy cards. SIMs sold before the biometric era were re-verified in the national drive. A few stragglers survived, above all numbers that spent years switched off in a drawer.
• Capture that never finished. A rush-hour sale where the scanner misfired and the retailer moved on. The SIM works; the flag does not.
• Record migrations. Operators merge, systems join up, and a few flags travel badly. Warid moving into Jazz showed this, and the current Telenor and PTCL integration shows it again. Brands move around your record, and our news log tracks the live one.
• Documents that changed. A CNIC renewed after decades can leave old captures behind it. So can an identity record updated at NADRA. When that happens, check first that your CNIC details are current.

None of these are accusations; they are maintenance. The registry is a living system, and the status codes — every network’s, collected with exact send formats in our SIM verification status check guide — let ordinary people spot loose threads without learning the plumbing.

Worn fingerprints and older hands

Worn fingerprints are the quiet, common problem nobody writes about. Decades of manual work, age and some skin conditions thin the ridges until scanners hesitate. The people affected are often the parents and grandparents whose SIMs date from the legacy era.

Ask the counter staff to try other fingers, because capture quality differs from finger to finger. A failed thumb is not a failed person. Clean, dry hands scan better than lotioned or damp ones. Where every capture fails, the standard route is to update the fingerprint record at NADRA first, then return to the franchise. The operator matches against whatever NADRA holds, so fixing the source fixes the rest.

Families can make this kinder by sending a younger relative along for the queue. Just remember that the biometric itself cannot be handed over. The thumb on the scanner must belong to the CNIC on the counter. That rule cannot be bent, and it is the whole security model. The same logic runs past the counter, which is why PTA keeps warning against handing your SIM to anyone else. It is also why every “we verify for you online” service is a fraud by definition, as our myths desk keeps showing.

An official route for exactly this problem is also being built. At a Senate committee meeting on 16 July 2026, PTA was directed to bring in alternative verification methods, including retina scanning and facial recognition through mobile apps, for people whose fingerprints fail. Nothing has been notified, so it changes nothing at the counter today. What does apply today is the exemption route, granted in three specified categories on a medical certificate or NADRA verification. Our report on the facial-verification plan separates the verified record from the press-only detail.

Why the layer exists at all

BVS exists to stop anonymous SIMs. Strip the acronym away and it answers a blunt question. How do you sell a hundred thousand SIMs a day without selling anonymity to criminals? Paper registration failed that test for years. Fingerprints raised the price of a fake identity, from a photocopied form to beating NADRA’s own match. The enforcement record since then shows the pressure holding.

The fight is not decorative. PTA and the agencies keep dismantling operations built to cheat this layer, from fake-fingerprint kits to bulk-activation rings. The sim database sites sell the illusion of beating it too, peddling stale leaked records rather than anything live. The running tally of raids and blocked services lives on our PTA news log, with dates and sources. Every seizure teaches the same lesson: the fingerprint layer is what stands between your CNIC and a stranger’s SIM habit.

The pressure now reaches the operators themselves. PTA issued seven enforcement orders on 13 July 2026 and one more on 16 July 2026, covering Jazz, Zong, Telenor and Ufone. The reported grounds run straight through this page: SIMs activated on citizens’ CNICs without consent, biometric verification lapses, and weak Live Finger Detection and geofencing on BVS devices. The action is reported under Section 23 of the Pakistan Telecommunication (Re-organization) Act, 1996. Press coverage put the total at around Rs 740 million, though the per-operator figures reported do not reconcile with that headline. Our report on those enforcement orders stays with what the orders themselves show.

Which brings it back to you, the ordinary holder. Your own part in it is small. Run the status code once. Fix an unverified flag once. Then let a monthly 668 habit watch the rest. If you suspect your CNIC already sits in Pakistani leaked data, that separate check takes a minute too. The biometric layer does the heavy lifting, and the codes just let you check its work.

Roman Urdu mein