Scam Message & Fraud Detector (2026)
Received a suspicious WhatsApp job offer, lottery prize claim, fake BISP text, or bank suspension threat? Paste the message below for an instant multi-vector heuristic cybersecurity audit.
Scans for psychological urgency traps, credential theft vectors, unverified APK links, and official Pakistani shortcode spoofing.
Official Pakistan Sender IDs vs. Fraudulent Numbers
One of the easiest ways to spot a scam in Pakistan is checking the sender's identity. Legitimate government entities, financial institutions, and telecommunication operators send messages via registered 4-to-5 digit shortcodes or branded Alpha Sender IDs approved by the Pakistan Telecommunication Authority (PTA).
| Department / Service | Official Legitimate Sender | Common Scammer Tactic | Safety Verdict |
|---|---|---|---|
| BISP / Ehsaas Programme | 8171 Only | SMS from personal 03xx-xxxxxxx numbers | 100% Fraud if from mobile number |
| Commercial Banks (HBL, Meezan, UBL) | Branded Name (e.g. 'HBL', 'Meezan') | Robocalls from 03xx numbers asking for OTP | Banks never ask for OTP or PIN |
| Nadra Verification | 8008, 8009, 8300 | WhatsApp messages claiming CNIC expired | NADRA does not conduct audit on WhatsApp |
| Electricity Disconnection (LESCO, K-Electric) | Official Bill or Registered Shortcode | Urgent SMS claiming power cutoff tonight with 03xx number | Phishing scam to collect online transfers |
| Courier Services (TCS, Post, Leopard) | Official Tracking SMS with Consignment # | TinyURL/bit.ly link claiming missing address info | Credit card credential harvesting |
How to Officially Report Cyber Scams in Pakistan
Report Spam SMS to PTA (Shortcode 9000)
Forward the spam text directly to PTA's automated shortcode 9000. Format: [Sender Number] [Spam Message Content]. PTA will block the sender SIM card permanently.
Report Financial Fraud to FIA Cyber Crime (1991)
If money was stolen via Easypaisa, JazzCash, or bank transfer, call the FIA Cybercrime Helpline: 1991 immediately, or file an online complaint at complaint.fia.gov.pk.
Block & Report on WhatsApp
Open the sender's profile inside WhatsApp, tap Report Contact, and select Report and Block. WhatsApp will audit the last 5 messages and ban the offending account across their network.
Anatomy of a Social Engineering Scam
Artificial Urgency
Phrases like "Urgent action required within 2 hours", "Account will be permanently closed today", or "Last chance" are designed to trigger panic and bypass logical thinking.
Unrealistic Financial Rewards
No legitimate company pays Rs. 5,000 daily for clicking like on YouTube videos. High return promises with zero effort are always the precursor to an advance-fee trap.
Deceptive Links & Unofficial APKs
Shortened URLs (bit.ly, tinyurl) or requests to download an `.apk` file directly bypass official Google Play Store protections and install keystroke loggers on your device.
Credential & OTP Solicitation
Any message asking you to "read out the 6-digit code" or enter your MPIN into a web form is an attempt to authenticate an unauthorized transaction.
Frequently Asked Questions
How can I verify if a BISP or Ehsaas message is genuine?
Official Benazir Income Support Programme (BISP) and Ehsaas beneficiary alerts are sent EXCLUSIVELY from the official 4-digit shortcode 8171. BISP never sends messages from ordinary 11-digit mobile numbers (e.g., 0300, 0305, 0312). Any message asking you to call a mobile number or click a link is 100% fraudulent.
Will my bank or mobile wallet ever ask for my OTP or PIN over SMS or phone call?
Never. Under State Bank of Pakistan (SBP) cybersecurity directives, commercial banks (HBL, Meezan, UBL, etc.), Easypaisa, and JazzCash will NEVER ask you for your 4-digit PIN, 6-digit OTP (One-Time Password), CVV number, or debit card expiry date. Anyone requesting this information is attempting unauthorized account draining.
How do WhatsApp YouTube video liking and review job scams work?
Scammers contact victims offering Rs. 300 to Rs. 1,000 for liking YouTube videos or leaving 5-star Google Map reviews. To build trust, they actually pay small initial amounts via JazzCash or Easypaisa. Once hooked, they invite the victim into a private Telegram group where they demand prepaid investments of Rs. 10,000 to Rs. 500,000 into fake crypto VIP task schemes, after which they freeze withdrawals.
How do I report fraudulent SMS or WhatsApp numbers to PTA and FIA?
To report unsolicited fraudulent spam to the Pakistan Telecommunication Authority (PTA), forward the fraudulent SMS along with the sender's mobile number to toll-free shortcode 9000. For financial theft, impersonation, or cyber harassment, file a formal complaint with the FIA Cyber Crime Wing via their helpline 1991 or portal at complaint.fia.gov.pk.
What should I do if I clicked a phishing link or shared my OTP?
Immediately call your bank's 24/7 emergency helpline to freeze all debit cards and block digital banking access. If you installed an unknown APK file, disconnect your phone from Wi-Fi and mobile data immediately, boot into Safe Mode, and uninstall the malicious app or perform a factory reset.
Explore Related Security & Telecom Tools
📊 Statutory & Mathematical Analysis Matrix
| Statutory Component / Legal Deduction Item | Calculated Amount (USD) |
|---|---|
| Primary Net / Statutory Payable Amount | 0.00 |