The Law, Plainly
Is It Legal to Check SIM Owner Details in Pakistan? The PECA 2016 Answer
Short answer: checking your own SIMs is fully legal. Checking someone else’s is a crime. Every method in our main guide, Check SIM Owner Details Pakistan, runs on your own NADRA-issued CNIC through official PTA channels. The law is on your side there. But pull a stranger’s name from their number and PECA 2016 Section 16 applies. That carries up to 3 years in prison, a fine up to Rs 5 million, or both.
Key takeaways
- Checking your own CNIC’s SIMs is fully legal — the official channels exist for exactly that.
- Section 16, PECA 2016: another person’s identity data = up to 3 years, Rs 5 million, or both.
- Section 17 covers SIMs issued in your name without consent: up to 3 years, Rs 500,000.
- 667 and 76367 stay legal by design: one needs the SIM in your hand, the other shows only the network.
- Victim of misuse? NCCIA 1799 or complaint.nccia.gov.pk.
- PTA, 24 July 2026: handing your SIM to someone else is a punishable offence, and activity on it is attributed to you.
So is it legal to check SIM owner details? Under PECA 2016, it depends on one word: whose. This page quotes the actual law, prints the correct penalty table (most sites get it wrong), and shows exactly where the legal line sits. Two minutes here and you’ll never have to guess.
On this page
The one-line rule
You are authorised for your own identity. That’s the whole test. Your CNIC, your SIMs, your record: every official check is built for exactly that. Confirming your own CNIC details and counting your SIMs both sit inside the line. Using those channels is what PTA wants you to do.
Nobody is authorised for a stranger’s identity. Not through an app, not through a website, not through a “database”, not through a helpline trick. Pakistani law treats another person’s name, CNIC number and phone number as their identity data. Reaching for it without permission is the offence itself.
That single sentence separates every legal method from every illegal one. Keep it in your pocket and the rest of PECA is just detail.
What PECA 2016 Section 16 actually says
Section 16 of the Prevention of Electronic Crimes Act 2016 (PECA) makes it an offence to obtain, sell, possess, transmit or use another person’s identity information without authorization. The maximum penalty is 3 years in prison, a fine up to Rs 5 million, or both.
“Whoever obtains, sells, possesses, transmits or uses another person’s identity information without authorization shall be punished …” Prevention of Electronic Crimes Act 2016, Section 16
That is the offence. The next half sets the punishment.
“… with imprisonment for a term which may extend to three years or with fine which may extend to five million rupees, or with both.”
Read those verbs again. Obtains, possesses, uses: the section doesn’t only catch the people selling data. The person who looks it up is inside the wording too. Paying a WhatsApp seller Rs 500 for a “premium check” puts you in the same sentence as the seller. Downloading a lookup APK does the same.
Section 17 covers the other direction: SIMs issued in your name without your consent. Selling or issuing a SIM without proper checks carries up to 3 years, a fine up to Rs 500,000, or both. PTA files the written complaint that starts such a case. If a franchise agent activated a SIM on your fingerprints without telling you, that’s the section that protects you.
PTA also acts against the operators themselves. It issued enforcement orders on 13 and 16 July 2026 over SIMs activated on citizens’ CNICs without consent. Press reports put the total at around Rs 740 million, and the per-operator figures printed in the press do not add up to that headline. We set out what is confirmed in our note on the July 2026 penalties. Instructions reported on 24 July 2026 then tightened how SIMs may be sold and issued, although PTA has not published the formal text.
The corrected penalty table
PECA 2016 sets the maximum penalty for unauthorized use of another person’s identity information at three years in prison, a fine of up to Rs 5 million, or both, under Section 16. Unauthorised SIM issuance under Section 17 carries up to three years and Rs 500,000. Penalty tables circulating online stitch together an invented “7 years” term, inflated fines, and section numbers that appear nowhere in the Act.
| Section | Offence | Maximum penalty |
|---|---|---|
| Section 16 | Unauthorized use of identity information (names, CNICs, numbers) | Up to 3 years, Rs 5,000,000, or both. |
| Section 17 | Unauthorised issuance of SIM cards | Up to 3 years, Rs 500,000, or both. |
| Section 3 | Unauthorized access to an information system or data | Up to 3 months, Rs 50,000, or both. |
| Section 4 | Unauthorised copying or transmission of data | Up to 6 months, Rs 100,000, or both. |
Two things to notice. Section 3’s fine is Rs 50,000, not the Rs 100,000 many pages print. And no combination produces “7 years and Rs 5.7 million”. That figure is stitched together from unrelated sections and appears in no statute. We pulled apart that whole family of invented PECA penalties on our SIM myths fact-check page.
What you can legally do (all of it, free or nearly free)
Checking your own record is legal through every official channel PTA runs. As of August 2026 that means the 668 SMS (about Rs 2 including tax), the free cnic.sims.pk portal, 667 for the SIM already in your hand, and 76367 for a number’s network. None of these reveals a stranger’s identity.
- Count your SIMs: SMS your 13-digit CNIC (no dashes) to 668, about Rs 2 including tax. Or open cnic.sims.pk free from anywhere in the world. NICOP and POC work too. The cnic.sims.pk portal guide walks through each screen.
- Verify the SIM in your hand: send “MNP” to 667. It confirms the number’s registration against a masked CNIC. It never reveals a stranger’s identity.
- Find a number’s network: send “N 03XXXXXXXXX” to 76367. You get the current network only, never a name.
- Check your biometric status: Jazz CNIC to 6001, Telenor CNIC to 7751, Zong V to 7911, Ufone *336*1#.
- See your own number: Jazz *99# (operator-documented). Zong *8#, Telenor *8888# and Ufone *780*3# are community-standard codes. The operator apps and helplines are the official route.
- Ask PTA directly: helpline 0800-55055, or the PTA Digital Assistant on WhatsApp at 0315-0055055 (announced 26 February 2026).
- Remove a SIM from your name: visit any franchise of that operator with your original CNIC and say “SIM Disowning”. Fee is up to Rs 200, waived in fraud cases.
- Report a crime: NCCIA cybercrime helpline 1799 (formerly FIA’s 1991) or complaint.nccia.gov.pk.
Notice the pattern: every one of the legal methods to check SIM owner details starts with your own CNIC or your own handset. That is the permission Section 16 talks about. It is why these routes are safe, while everything in the next list is not.
What to stay away from
- “SIM database” websites and “pak sim data” pages. The registry behind every real check — PTA’s SIM Information System 668, which the web nicknames “SVMS” — has no public API for anyone. These sites recycle old breach data, or they simply make up results. Using them sits inside Section 16’s wording. Worried that a real leak already exposed your details? Then learn how to check whether your CNIC was caught in a data breach.
- Lookup apps and APK downloads. Their own listings admit the data is “publicly available” or “user-submitted”. Reviews are full of payment scams. Named tools such as Minahil SIM Data advertise owner names, CNICs and even location, none of which any public feed can supply.
- WhatsApp “premium data” sellers. Selling identity data is a Section 16 offence. Buying it is the same section.
- “Live tracker” services. Location data needs a court order. Any public “tracker” is fake, a scam, or both. Here’s why every so-called live SIM tracker in Pakistan is a con.
The state hunts this market hard. In the enforcement year from Jul 2024 to Jun 2025, 83 illegal SIM-sale websites were blocked. By September 2025, 1,372 personal-data sites and apps were reported blocked. An NCCIA-led probe blocked a further 139 data-selling platforms by October 2025. These services vanish, but the risk they leave behind lands on the person who used them. Recent cases are logged in our mid-July rules roundup.
The law-enforcement boundary
Can anyone legally check a stranger’s SIM owner details in Pakistan?
Only two groups can. Investigators working inside a registered case, holding a written legal demand, and courts issuing orders in their own proceedings. In both routes the operator or PTA hands over the record against a written trail, under the Prevention of Electronic Crimes Act 2016. Nobody outside those two routes is authorised, whatever an app or website claims.
That’s the entire list. There’s no public version of that door, no “agency contact” selling access, and no app that inherited it. Anyone claiming otherwise is describing a PECA offence, not a service. Do you have a genuine legal need, such as harassment or fraud? Then file a complaint with NCCIA at 1799, or with your local police. They can lawfully obtain what you never could.
If someone used YOUR identity
The law also works for you. If the 668 SMS check or the portal shows a SIM you never bought, do three things in order. First, screenshot the result with its date. Second, visit that operator’s franchise with your original CNIC and say “SIM Disowning”. Keep the written reference number they give you. Third, do you suspect fraud rather than a paperwork mistake? Then file with the NCCIA at 1799 or complaint.nccia.gov.pk the same day. Section 17 exists exactly for this.
One timing note. Since PTA’s advisory of 24 May 2026, a newly activated SIM can’t be disowned or transferred for 365 days from its activation date. So unknown SIMs are worth catching early. Rule changes like that one are archived, dated and sourced, in our PTA SIM news changelog.
There is a mirror image of this. On 24 July 2026 PTA told users that handing your SIM to another person is a punishable offence. Anything done on that SIM is treated as the act of the person it is registered to. The message named no statute and no penalty, so read it as a liability warning rather than a new law. Full detail: what PTA said about sharing your SIM.
Frequently asked questions
Is it legal to check how many SIMs are on my CNIC?
Yes, completely legal. 668 and cnic.sims.pk are official PTA services built for exactly this. SMS your own 13-digit CNIC to 668, about Rs 2 including tax, or open the free portal from anywhere. Checking your own record monthly is what PTA recommends.
Is it legal to check SIM owner details of another number?
No. Another person’s name, CNIC and number are identity information under PECA 2016 Section 16. Getting or using them without permission carries up to 3 years, a Rs 5 million fine, or both. The section’s verbs cover the buyer as much as the seller, so “just looking” offers no protection.
Can I legally get a name and address from a phone number?
No legal public service exists for this, anywhere in Pakistan. The PTA registry has no public API. Sites promising it are recycling breach data or faking results, and using them is itself a Section 16 act. The full reframe: SIM owner details by number.
What’s the punishment for using SIM owner details apps?
PECA 2016 Section 16 reaches whoever “obtains, possesses or uses” identity information without authorization. The maximum is 3 years in prison, a fine up to Rs 5 million, or both. That wording covers the app’s user, not just its seller. Paying Rs 500 for a “premium check” changes nothing.
Are 667 and 76367 legal to use on any number?
They’re legal because they reveal no identity. 667 verifies the SIM physically in your hand before porting, sent from that SIM itself. 76367 returns only the current network of a number (“N 03XXXXXXXXX” format), for about Rs 2. Neither service shows a name, address or CNIC to anyone.
Can police or agencies check any SIM’s owner?
Yes, through a written legal request tied to a registered case, or a court order in its own proceedings. The operator or PTA hands over the record under a written trail. That channel never passes through public apps or websites, and nobody can lawfully sell you access to it.
Is it illegal to have more than 8 SIMs?
No. Holding older extras isn’t a jailable offence. The cap of 5 voice + 3 data was set by the Supreme Court on 5 November 2015, and it is enforced at activation. A 9th SIM shouldn’t activate at all. Extras on your CNIC are still yours in law, so disown the ones you don’t use.
Someone issued a SIM on my CNIC. Which law protects me?
PECA 2016 Section 17 covers unauthorised SIM issuance. It carries up to 3 years in prison, a fine up to Rs 500,000, or both, prosecuted on PTA’s written complaint. Disown the SIM at the operator’s franchise first and keep the reference number. Then report to NCCIA at 1799 or complaint.nccia.gov.pk.
Is it legal to give my SIM to someone else?
No. On 24 July 2026 PTA called handing your SIM to another person a punishable offence. Whatever happens on that SIM is attributed to the person it is registered to. The message cited no section and no fine, so read it as a warning about your own liability.
Roman Urdu mein
Apna CNIC-record dekhna poori tarah jaiz hai: 13-hindsa CNIC (dash ke baghair) 668 par SMS karein (about Rs 2) ya cnic.sims.pk kholein (free). Lekin kisi aur ke number se uska naam ya CNIC nikalna PECA 2016 Section 16 ke under jurm hai. Saza: 3 saal tak qaid, Rs 50 lakh tak jurmana, ya dono. Agar aap par koi anjaan SIM nikle to franchise par “SIM Disowning” kahein aur 1799 par report karein.
Written and reviewed by Muhammad Hamza, founder and editor of CnicSimInfo. Sources: the PECA 2016 statute text, PTA’s SIM Information pages, the Supreme Court order of 5 November 2015 (via Express Tribune), NCCIA notices, PTA’s 24 May 2026 advisory (confirmed to Geo Fact Check), and PTA’s SIM-sharing message of 24 July 2026 as reported by Daily Ittehad and Samaa. Re-verified quarterly; this is general information, not legal advice. Last reviewed: 5 August 2026. See our Editorial Standards and the SIM verification glossary.