Understanding PECA 2016: Cyber Crimes and Penalties in Pakistan

PECA defines offences by what is done to or through an information system. Some provisions protect systems and data themselves; others protect persons. Their reputation, modesty, privacy, and property. The person-protecting provisions are the ones most citizens encounter, and they sit alongside older offences in the Pakistan Penal Code, which continue to apply where conduct fits them.

• Unauthorised access to, copying of, or interference with information systems and data
• Electronic forgery and electronic fraud fake documents and dishonest online transactions
• Unauthorised use of identity information. The engine behind most fake profiles
• Cyberstalking and offences against the modesty of a person and minors
• Offences against the dignity of a person false information harming reputation

Section 20 (offences against the dignity of a natural person) is the provision most fake-profile and defamation complaints rely on: it criminalises intentional transmission of information through an information system that harms a natural person's reputation or dignity, or that is false and used to intimidate or injure. Section 21 (offences against the modesty of a natural person and minor) targets the non-consensual sharing or threatened sharing of private material. Section 24 (cyberstalking) covers repeated unwanted communication and following, including conduct intended to coerce or intimidate.

Complaints are filed with the investigating agency now the NCCIA which has statutory powers of investigation, including seeking data from service providers and examining devices. Where the complaint discloses an offence, the agency proceeds under PECA and the matter moves to the designated court for trial. Bail, interim protections, and the conduct of proceedings are all strategic decisions an advocate manages from the start.

1. 1

   Complaint with evidence

   A written complaint plus the evidence package (screenshots, URLs, device originals where possible) starts the process.

2. 2

   Agency processing and investigation

   The NCCIA processes the complaint, records statements, and investigates using its statutory powers.

3. 3

   Proceedings before the designated court

   Offences are tried in the special courts established under the Act's framework.

4. 4

   Trial and outcome

   Evidence is tested in court; convictions carry the statutory penalties, and parallel civil remedies (damages, takedowns) can proceed alongside.

The most practical recent change is institutional: the FIA's Cyber Crime Wing was replaced by the National Cyber Crime Investigation Agency (NCCIA) in 2024, so complaints that once went to the FIA cyber crime channels now route to the NCCIA. Later amendments have added offences and adjusted enforcement machinery meaning older online guides can be out of date in ways that matter.

For complainants the practical takeaways are stable: preserve evidence, file with the current agency, and get advice early. For respondents people accused under PECA. The stakes (criminal record, bail conditions, reputation) make competent defence representation equally urgent.

PECA is also misused filed to silence, pressure, or harass. Defences turn on the elements of the specific provision: whether the information was false, whether harm to dignity was intentional, whether the communication was unwelcome, and whether the conduct actually falls within the offence at all. Procedural defects in the complaint and investigation are also litigated.