ISLAMABAD – After Gulberg Green Islamabad, NCCIA has unearthed another international online fraud in Bahria Town Phase VIII , Rawalpindi . Majority of scammers belongs to Malyaisia and China. A couple of months ago, NCCIA had busted an international involved in financial online fraud . The Gulberg Call Centre was also run by Chinese and Taiwanese fraudsters.
These fraudsters impersonised themselves as banks representatives or the police officers and trap them through telephone calls to harass their targeted persons and then force them to transfer money in their accounts through online transactions.
NCCIA FIR registered in Bahraia Town Rawalpindi Phase VIII said the agency has registered a case against 130 individuals over their alleged involvement in an organised cyber fraud network operating from KASA Tower, Bahria Town Phase VIII, Rawalpindi, according to First Information Report (FIR) No. 182/26. According to the FIR, the alleged network targeted Malaysian nationals through a sophisticated scam involving fake bank customer service representatives, individuals impersonating Malaysian police officers, threats of criminal proceedings and the transfer of money through digital payment services and cryptocurrency channels. The case was registered under Sections 13, 14 and 16 of the Prevention of Electronic Crimes Act (PECA), 2016, as amended in 2025, read with Sections 34, 383, 419, 420 and 109 of the Pakistan Penal Code (PPC). The FIR states that the investigation began following a source report and the subsequent completion of NCCIA enquiry No. 2610/26. After obtaining search and seizure warrants from the competent court in Rawalpindi, NCCIA officials conducted a raid at the premises in Bahria Town Phase VIII. According to the investigating agency, preliminary technical examinations of digital devices and the operational setup indicated that the premises were allegedly being used to conduct cyber-enabled financial fraud against Malaysian citizens. The FIR alleges that individuals working at the premises contacted Malaysian nationals through Voice over Internet Protocol (VoIP) applications while impersonating bank customer service representatives. Victims were reportedly informed that suspicious or unauthorised transactions had been detected in their bank accounts. The callers allegedly transferred the victims to other individuals posing as Malaysian police officers. Some individuals reportedly wore police uniforms and used an office-style background during video calls to make their claims appear genuine. According to the FIR, the victims were threatened with allegations of money laundering, criminal cases and legal proceedings and were allegedly pressured into transferring money.
Investigators further allege that the proceeds were received through Malaysia’s Touch ‘n Go eWallet service and subsequently converted into cryptocurrency through different channels. The FIR describes an alleged organisational hierarchy within the network. A Malaysian national identified as “Jack” was reportedly operating from Cambodia and allegedly directing the operation from abroad. Mohamad Shawalludin was identified as the alleged local supervisor or boss, while Hew Wei Lun was described as the manager responsible for the call centre’s operations. The document also refers to several Pakistani nationals allegedly using the assumed names Sohail, Rich, Martin and B, who are suspected of facilitating the operation. In addition, the FIR mentions a Chinese national reportedly residing in Sector D-12, Islamabad, who allegedly received cryptocurrency from the operators and provided equivalent amounts in Pakistani currency in cash. The identities and individual roles of these alleged facilitators, along with the complete financial trail, remain subject to investigation.
The FIR lists 130 individuals and includes their passport particulars. However, the registration of a case does not establish that every person named knowingly participated in the alleged offences. Their individual roles and the extent of their involvement will be determined during the investigation. The legal provisions cited in the FIR include offences relating to electronic and cybercrime, common intention, extortion, cheating by personation, cheating and dishonestly inducing the delivery of property, and abetment. According to the NCCIA case record, the 130 individuals arrested in connection with the alleged cyber fraud operation are Malaysian nationals. Their visas had reportedly expired, and they were allegedly residing in Pakistan without valid immigration status while carrying out cybercrime activities. The allegations regarding their immigration status and involvement in cybercrime remain subject to verification and further legal proceedings. The case was registered after an Istighasa report was submitted through Head Constable Gulzeb and permission was obtained from the competent authority. Sub-Inspector Amjad Bilal of NCCIA Rawalpindi is identified in the document in connection with the registration proceedings, while the investigation has been assigned to Sub-Inspector Liaqat Ali. According to the FIR, the investigation will examine the alleged roles of the overseas controller, local supervisors, call-centre personnel, financial facilitators and cryptocurrency handlers, as well as the identities of other individuals who may have assisted the operation. The FIR does not specify the total amount allegedly defrauded, the confirmed number of victims, the value of cryptocurrency involved or the amount of money recovered during the raid. The allegations remain subject to further investigation and judicial proceedings. The registration of an FIR does not constitute a determination of guilt, and the responsibility of each accused person must be established through evidence and due legal process. Source: FIR No. 182/26, NCCIA Circle Rawalpindi.
