The Law, In Plain English
Is It Legal to Check SIM Owner Details in Pakistan? PECA 2016 Explained
Your own CNIC: completely legal. Anyone else’s: a crime. That is the entire law in one line. Checking which SIMs are registered against your own CNIC through 668 or cnic.sims.pk is exactly what PTA built those services for. Pulling a stranger’s name from their number falls under Section 16 of PECA 2016, which carries up to three years in prison, a fine of up to Rs 5 million, or both.
Written and reviewed by Muhammad Hayan — Pakistan telecom & digital-identity specialist (PTA policy, PECA 2016, NADRA biometric). Last reviewed: 8 July 2026 · Editorial standards · LinkedIn
So is it legal to check SIM owner details? People ask because half the internet gives a shady answer. This page gives the sourced one: the exact wording of the law, the penalty table with correct figures, what stays legal, and where the line actually sits. Ten minutes at a franchise will never teach you this; two minutes here will.
On this page
The one word that decides everything
The word is authorisation: Pakistani law treats your name, your CNIC number and your phone number as identity information. You hold standing authorisation for your own record, which is why PTA gives you two public windows into it and encourages a regular CNIC SIM check.
Nobody holds authorisation for a stranger’s record. Not an app, not a website, not a “database” seller on WhatsApp, not the shopkeeper who claims a source inside a franchise. Every route to another person’s identity runs through the same locked door, and PECA 2016 stands on the other side of it.
Hold onto that single test. Once you have it, you can judge any SIM service in Pakistan in five seconds without reading another line of law.
What Section 16 actually says
PECA 2016, the Prevention of Electronic Crimes Act, governs this entire space. Its Section 16 reads:
“Whoever obtains, sells, possesses, transmits or uses another person’s identity information without authorization shall be punished with imprisonment for a term which may extend to three years or with fine which may extend to five million rupees, or with both.” Prevention of Electronic Crimes Act 2016, Section 16
Notice the verbs, because they carry the whole section. Obtains covers the person searching, possesses covers whoever holds a leaked file, and uses covers whoever acts on it. The law was written to reach the customer of a lookup service, not only its operator, and that surprises almost everyone who reads it for the first time.
Section 17 handles the reverse situation: SIMs issued in your name without your consent. Whoever sells or issues a SIM without proper verification faces up to three years, a fine of up to Rs 500,000, or both. The case moves on PTA’s written complaint. Keep that section in mind; it becomes your weapon further down this page.
The penalty table, corrected
Most penalty tables circulating online are wrong, and some invent figures outright; this one comes straight from PECA 2016 itself.
| Provision | Offence | Maximum penalty |
|---|---|---|
| Section 3 | Unauthorised access to an information system or data | 3 months, Rs 50,000 fine, or both |
| Section 4 | Unauthorised copying or transmission of data | 6 months, Rs 100,000 fine, or both |
| Section 16 | Unauthorised use of identity information | 3 years, Rs 5,000,000 fine, or both |
| Section 17 | Unauthorised issuance of SIM cards | 3 years, Rs 500,000 fine, or both |
Two details worth flagging. Section 3’s fine is Rs 50,000, though plenty of pages print double that. And the “7 years plus Rs 5.7 million” penalty that circulates on lookup sites exists in no section of the Act at all; it was stitched together from unrelated provisions and has been copied from site to site ever since.
Everything you can legally do
The legal list is longer than most people expect, and every item on it starts with your own identity or your own handset.
- Count your SIMs: SMS your 13-digit CNIC (no dashes) to 668 for about Rs 2, or use cnic.sims.pk free from any country. The full walkthrough lives in our CNIC SIM check guide.
- See how many you hold against the cap: the reply shows your count per operator; here is how to read it against the 8-SIM limit.
- Verify the SIM in your hand: send MNP to 667 and the reply confirms its registration against a masked CNIC. Details sit in the 667 section of our homepage guide.
- Identify a number’s network: send N plus the number to 76367; you get the operator, never a name.
- Check your biometric status: Jazz users SMS their CNIC to 6001, Telenor to 7751, Zong and Ufone send V to 7911.
- Fix your record in person: any franchise of the relevant operator, with your original CNIC and a fingerprint, can complete verification, transfer ownership, or disown a SIM.
- Complain and report: PTA at 0800-55055 or complaint.pta.gov.pk; cybercrime at NCCIA’s 1799 helpline or complaint.nccia.gov.pk.
Every check on this list is free or costs a few rupees. Anyone charging Rs 500 for “SIM data” is selling something this list already gives you, or something the law forbids them to have.
What to stay away from
- “Pak SIM data” style database sites, covered in depth in our database-reality section: the registry they claim to search has no public API.
- Lookup apps and APKs, which routinely demand contacts and SMS permissions no genuine check needs.
- WhatsApp and Telegram “data sellers”, where both the sale and the purchase sit inside the same offence.
- “Live tracker” services: location data requires a court-sanctioned process, so a public tracker is fake, criminal, or both.
Enforcement is real and documented: PTA blocked 83 illegal SIM-sale websites in a single year (July 2024 to June 2025, per ProPakistani). By September 2025 it reported 1,372 personal-data sites, apps and pages blocked by September 2025. An NCCIA-led probe uncovered and got 139 data-selling platforms blocked by October 2025. The services vanish; the legal exposure stays with everyone who typed a number into them.
Who can trace a number (and how)
An honest page has to answer the obvious follow-up: someone must be able to do this, so who? Two groups. Law-enforcement and intelligence agencies acting through a documented legal request tied to a registered case, and courts issuing orders in proceedings. The operator or PTA hands the record to them on paper, with a trail.
No public version of that channel exists, and nobody can sell you a seat in it. Anyone advertising “agency access” is describing their own Section 16 offence. If your reason for needing a trace is genuine, harassment or fraud or a legal dispute, route it through a proper complaint. The NCCIA at 1799 can lawfully obtain what no website ever could, and your dated screenshots make their work faster.
When the law protects you
The same statute that blocks you from checking strangers protects you from them. If a CNIC SIM check ever shows a SIM you never bought, three moves in order: screenshot the result with its date, visit that operator’s franchise with your original CNIC and ask for SIM disowning, and keep the written reference slip. Where fraud looks likely, file the same day with NCCIA at 1799; Section 17 exists precisely for SIMs issued in your name without consent.
One timing rule matters here. Since PTA’s advisory of 24 May 2026, a newly activated SIM stays locked against disowning and transfer for 365 days from activation, which makes catching an unknown SIM early far more valuable than catching it late. A monthly check costs about Rs 2; the fraud it can pre-empt costs a police case.
FAQs
Is it legal to check SIM owner details on my own CNIC?
Yes, fully. 668 and cnic.sims.pk are official PTA services built for self-checking, and the regulator encourages using them regularly. The step-by-step method is in our CNIC SIM check guide.
Is it legal to check who owns another mobile number?
No. Another person’s name, CNIC and number count as identity information under PECA 2016, and Section 16 punishes obtaining or using them without authorisation with up to three years, Rs 5 million, or both.
What is the punishment for using SIM database apps?
Section 16 reaches whoever obtains, possesses or uses the data, so the app’s customer is exposed alongside its operator. The maximum is three years in prison, a Rs 5,000,000 fine, or both.
Can the police check any SIM’s owner?
Yes, through a documented legal request tied to a registered case or a court order. That channel never runs through public websites, and a complaint at 1799 is how citizens lawfully activate it.
Is using 667 or 76367 on any number legal?
Yes, because neither reveals identity. 667 verifies the SIM physically in your possession against a masked CNIC, and 76367 returns only a number’s current network.
Someone registered a SIM on my CNIC. Which law helps me?
Section 17 of PECA 2016: unauthorised SIM issuance, up to three years or Rs 500,000 on PTA’s written complaint. Disown the SIM at the franchise, keep the slip, and report to NCCIA at 1799 the same day.
Roman-Urdu mein
Apne CNIC par SIM check karna bilkul legal hai: 13-hindsa CNIC bina dash ke 668 par SMS karein (taqreeban Rs 2) ya cnic.sims.pk istemal karein (bilkul free). Lekin kisi doosre shakhs ke number se uska naam ya CNIC nikalna PECA 2016 ke Section 16 ke tahat jurm hai, jiski saza 3 saal tak qaid, Rs 50 lakh tak jurmana, ya dono hai. Agar aap ke CNIC par koi anjaan SIM nikle to franchise ja kar SIM disowning karwayein aur usi din 1799 par NCCIA ko report karein.
Poora tareeqa, har method ke sath, hamare CNIC SIM check guide mein maujood hai.