How to Spot a Deepfake Scam Video or Cloned Voice Call in Pakistan

A video of a famous Pakistani promising big returns, or a call in your son's voice asking for money, can now be made by software in minutes. Do not pay from the video or the call. Check it through a channel you already trust, then report it to NCCIA on 1799 or at complaint.nccia.gov.pk.

These deepfake scams use AI, meaning software that copies a real face or voice. The Securities and Exchange Commission of Pakistan (SECP) warned on 21 November 2025 that it had seen AI-generated ads on social media using pictures of celebrities, finance influencers and brokerage executives to pull people into fake share trading groups on WhatsApp. NCCIA's own website lists financial fraud as the most reported cybercrime in its 2026 figures, at 48 per cent of complaints.

We read the SECP warnings, NCCIA's complaint rules and the Prevention of Electronic Crimes Act on 6 October 2026.

How deepfake scams work in Pakistan

Deepfake scams in Pakistan come in two main forms. One is a fake video ad where a well-known person seems to recommend an investment app or WhatsApp group. The other is a call where a cloned voice of a relative or boss asks for an urgent transfer.

Fake investment videos with public figures

The ad shows a TV anchor, cricketer or business leader praising a trading app and promising daily profit. The link leads to a WhatsApp group or an app, never to a licensed broker.

SECP described this exact pattern in its November 2025 release. It named a fake app, "TSLWEA / TSL WEALTH", that copied the name of a licensed broker, and said it had reported the platforms to Google, PTA and law enforcement. In May 2025 SECP warned that fake platforms show made-up profits, allow small withdrawals to build trust, then block access.

Cloned voice calls asking for money

A cloned voice needs only a short clip of real speech, which many people post online. The caller sounds like your brother, child or manager, and there is always a reason for speed: an accident, an arrest, a deal that closes today.

Check a suspicious video before you trust it

A deepfake video often looks right at first glance but fails simple checks. The most reliable test is not visual: find out whether the person ever said it on their own official account.

1. Watch the mouth. Lip movements that drift from the words, or teeth that blur, are common signs.
2. Watch the edges of the face. Look for flicker around the hairline, glasses or ears, and skin that looks too smooth.
3. Listen to the voice. A flat tone, odd pauses or a wrong accent for that person are warning signs.
4. Find the original. Open the person's verified account or the channel they work for. A real endorsement would be there.
5. Check the offer, not the face. Any share trading offer must come through an SECP-licensed broker. SECP says the list of licensed brokers is on the Pakistan Stock Exchange and Pakistan Mercantile Exchange websites.

Good fakes pass the first three checks. Steps 4 and 5 still work, because a scammer cannot post on a real person's verified account.

Test a voice call that asks for money

When a call in a familiar voice asks for money, hang up and call the person back on the number already saved in your phone. Never use a number the caller gives you.

Ask a question only the real person would know. A cloned voice can copy how someone sounds. It cannot copy what they remember.

A family code word for emergencies works the same way, and costs nothing.

The same rule covers calls from a "bank" or "PTA". PTA has said that neither it nor banks will ever call to ask for your ATM PIN, OTP or account details. The wider pattern is covered in reporting a fake call or SMS scam.

Report a deepfake scam to NCCIA, PTA and the platform

Report in three places. NCCIA investigates the crime, PTA acts on the phone number, and the platform removes the ad. If money has moved, call your bank first.

NCCIA, the National Cyber Crime Investigation Agency

NCCIA's own FAQ page lists four ways to complain: the Pakistan Citizen Portal, the online form at complaint.nccia.gov.pk, email to helpdesk@nccia.gov.pk, or a visit to the nearest Cybercrime Reporting Centre. Its helpline is 1799. For a formal complaint it asks for a written application with your name, address, city and contact number, a CNIC copy, and a copy of your evidence.

NCCIA also says that, under S.R.O. 05/2020, you must visit a reporting centre in person to verify the complaint. Overseas Pakistanis can name a relative in Pakistan to follow the case. The full process is in how to report a cybercrime in Pakistan.

PTA

PTA's complaint portal has a category for mobile numbers used in fraudulent activity. Report the number that called you or ran the group. PTA's public notice also gives 0800-55055.

Facebook, Instagram, YouTube and TikTok

Use the three dots on the ad or post and choose report. Facebook's help centre says you can report a profile or Page pretending to be you or someone else, even without a Facebook account.

What to do if you already paid

Call your bank or wallet helpline within the hour and ask them to stop or trace the transfer. Ask for a complaint number in writing. Then file with NCCIA and keep every screenshot, link and receipt.

The bank's own deadlines for a fraud reply are set out in bank fraud complaint deadlines, and the steps to get money back are in getting a refund after online banking fraud.

Do not pay anyone who offers to "recover" your money for a fee.

What Pakistani law says about deepfakes

Pakistan has no separate deepfake law, but the Prevention of Electronic Crimes Act 2016 (PECA) already covers most uses. Using another person's identity information without permission, electronic fraud, and fake sexual images are all offences, and victims can apply to have the content blocked or removed.

• Section 16, misuse of identity information: up to three years, a fine of up to Rs 5 million, or both.
• Section 14, electronic fraud: up to two years, a fine of up to Rs 10 million, or both.
• Section 21, placing a face over a sexual image or video: up to five years, a fine of up to Rs 5 million, or both, and up to seven years for a minor.

Sections 16 and 21 let a victim apply to "the Authority" for removal. Since 2025, PECA defines that as the Social Media Protection and Regulatory Authority, not PTA. We could not confirm on an official page that it is taking applications yet. NCCIA says section 29(1) makes it the investigating agency, so start there.

Common questions

What is a deepfake?

A deepfake is a video, picture or voice made or changed by AI software so it looks or sounds like a real person saying something they never said.

Where do I report a deepfake video in Pakistan?

Report it to NCCIA on 1799 or at complaint.nccia.gov.pk, report the ad on the platform, and report any phone number used to PTA.

Can a scammer clone my voice from social media?

Yes. A short clip of clear speech can be enough, so trust a call-back to a saved number, not the voice.

Is a celebrity investment app real if the video looks real?

Not on that basis. Check that the broker is licensed by SECP. SECP says the licensed list is on the PSX and PMEX websites.

Do I need to visit NCCIA in person?

NCCIA says yes for verification, under S.R.O. 05/2020. You can start online, but a reporting centre visit is required. Overseas Pakistanis can nominate a relative in Pakistan.

How we verified this

What we checked, where we read it, and what we could not confirm.

Last checked on 6 October 2026. We read NCCIA's homepage and FAQ page at nccia.gov.pk, which list the 1799 helpline, the four complaint routes and the documents needed. We read the SECP press releases of 4 October 2024, 22 May 2025 and 21 November 2025 on deceptive social media investment schemes. We read sections 2, 14, 16 and 21 of PECA 2016, as amended, in the consolidated text on pakistancode.gov.pk. We also read PTA's notice on fraud calls and Facebook's impersonation help page. We did not test any deepfake detection tool.