KARACHI: The National Cyber Crime Investigation Agency (NCCIA) has arrested more than 70 people after raiding two alleged call centres operating in Karachi’s PECHS area.
According to the NCCIA, both call centres were being operated by the same organisation and were allegedly used to target US citizens through fraudulent offers of credit cards and financial services at low interest rates.
Two Cases Registered, 79 People Nominated
The investigation agency said separate cases were registered following Sunday’s raids at the two locations. A total of 79 people have been nominated in the two FIRs, with 48 named in one case and 31 in the other.
Officials said both call centres were operating from residential buildings, making it difficult to identify the commercial activities being conducted at the premises. The NCCIA has not disclosed the name of the organisation allegedly operating the centres.
Allegations of Obtaining Sensitive Information
During the operation, the NCCIA also seized an active Customer Relationship Management (CRM) system, which investigators consider significant to the case.
According to information contained in the FIRs, call centre agents allegedly contacted US citizens while posing as representatives of financial institutions. They are accused of obtaining sensitive information, including Social Security numbers, phone numbers, dates of birth, bank account details and credit card information.
Investigators said the information was transferred to a locally hosted CRM system and was allegedly passed on by the call centre operators to merchants associated with their partners.
Alleged Use of Stolen Data for Unauthorised Transactions
According to the FIRs, the alleged operation involved two stages. The first involved obtaining sensitive financial information through phone calls, while the second allegedly involved using that information to make unauthorised charges through merchant accounts.
The NCCIA has secured the computers, CRM system and other digital material seized during the raids. Forensic analysis is currently under way.
Officials expect the examination to provide further evidence about the alleged network, its database, links between individuals involved and the way the operation was conducted.
Cases Registered Under PECA and PPC
The cases have been registered under various provisions of the Prevention of Electronic Crimes Act (PECA) and the Pakistan Penal Code (PPC).
The FIRs include provisions relating to unauthorised access to information systems or data, unlawful copying or transmission of data, unauthorised access to critical information, electronic forgery, electronic fraud, unauthorised use of identity information and spoofing.
Provisions of the PPC relating to abetment and common intention have also been included in the cases.
Why the CRM System Matters
Investigators believe the seized CRM system could prove important because it allegedly contains customer data, contact details and records of other activities.
Forensic examination of the system may help investigators trace links between agents, call centre operators and allegedly connected merchants. This could potentially expand the investigation beyond the call centres to the wider alleged financial network.
Concerns for Pakistan’s Legitimate Call Centre Industry
The case also has implications for Pakistan’s IT and outsourcing sector. According to State Bank of Pakistan data, the country’s exports of IT and IT-enabled services reached a record $4.6 billion in FY2025-26, with call centres forming part of the broader sector.
Crackdowns on call centres allegedly involved in illegal activities could raise concerns about the reputation of Pakistan’s legitimate outsourcing industry and potentially affect businesses that comply with regulatory requirements.
NCCIA Karachi conducted raids at two alleged fraud call centres operating in PECHS Block 6, Tariq Road, Karachi, where 73 individuals were found. A live CRM system containing customer and operational data, along with other digital evidence, was seized for forensic examination. FIRs No. 92/2026 and 93/2026 have been registered, with one identified operator arrested and two declared absconders. Further investigation is underway.
#NCCIA #CyberCrime #CyberFraud #Karachi #CallCentre— NCCIA (@NCCIAOFFICIAL) September 27, 2026
The alleged operation of call centres from residential premises in PECHS has also raised questions about regulatory oversight. The NCCIA’s available details do not clarify whether the organisation involved was formally registered with any relevant authority.
The allegations remain subject to investigation and judicial proceedings. Being nominated in an FIR does not, by itself, establish guilt.
