NCCIA Busts Rawalpindi-Based Cybercrime Network Targeting Malaysians via Touch ‘n Go eWallet

Pakistan's National Cyber Crime Investigation Agency (NCCIA) has registered a case against 130 individuals over their alleged involvement in an organized cyber fraud network operating from KASA Tower, Bahria Town Phase VIII, Rawalpindi.

Key points

• NCCIA Arrests Father for Selling Explicit Videos of His Own Kids on Telegram.
• NCCIA Arrests 2 Fake Pakistan Army Officers Scamming Citizens.
• The FIR mentions a Chinese national reportedly residing in Sector D-12, Islamabad.
• The FIR alleges that individuals working at the premises contacted Malaysian nationals through Voice over Internet Protocol (VoIP) applications while impersonating bank customer service representatives.
• The document additionally refers to a number of Pakistani nationals allegedly using the assumed names Sohail, Rich, Martin and B.

According to the FIR available with ProPakistani, the alleged network targeted Malaysian nationals through a sophisticated scam involving fake bank customer service representatives, individuals impersonating Malaysian police officers, threats of criminal proceedings, and the transfer of funds through digital payment services and cryptocurrency channels. NCCIA Arrests 2 Fake Pakistan Army Officers Scamming Citizens.

As amended in 2025, read with Sections 34, 383, 419, 420 and 109 of the Pakistan Penal Code (PPC), the case was registered under Sections 13, 14 and 16 of the Prevention of Electronic Crimes Act (PECA), 2016.

In practice, the FIR states that the investigation began after a source report and the subsequent completion of the NCCIA enquiry. After obtaining search and seizure warrants from the competent court in Rawalpindi, NCCIA authorities conducted a raid at the premises in Bahria Town Phase VIII.

According to the investigating agency, preliminary technical examinations of digital devices and the operational setup indicated that the premises were allegedly being applied to conduct cyber-enabled financial fraud against Malaysian citizens.

For context, the FIR alleges that individuals working at the premises contacted Malaysian nationals through Voice over Internet Protocol (VoIP) applications while impersonating bank customer service representatives. Victims were reportedly informed that suspicious or unauthorized transactions had been detected in their bank accounts.

Meanwhile, the callers allegedly transferred the victims to other individuals posing as Malaysian police officers. Some individuals reportedly wore police uniforms and applied an office-style background during video calls to produce their claims appear genuine.

According to the FIR, the victims were threatened with allegations of funds laundering, criminal cases and legal proceedings and were allegedly pressured into transferring capital.

Investigators further allege that the proceeds were received through Malaysia's Touch 'n Go eWallet service and subsequently converted into cryptocurrency through different channels.

In practice, the FIR describes an alleged organizational hierarchy within the network. A Malaysian national identified as "Jack" was reportedly operating from Cambodia and allegedly directing the operation from abroad. While Hew Wei Lun was described as the manager responsible for the call center's operations, mohamad Shawalludin was identified as the alleged local supervisor or boss.

For context, the document additionally refers to a number of Pakistani nationals allegedly using the assumed names Sohail, Rich, Martin and B. This person are suspected of facilitating the operation. NCCIA Raids 3 Karachi Firms Over Alleged Sexually Explicit Content.

Furthermore, the FIR mentions a Chinese national reportedly residing in Sector D-12, Islamabad. This person allegedly received cryptocurrency from the operators and provided equivalent amounts in Pakistani currency in cash.

Notably, the identities and individual roles of these alleged facilitators, along with the complete financial trail, remain subject to investigation. The FIR lists 130 individuals and includes their passport particulars.

Nevertheless, the registration of a case does not establish that every person named knowingly participated in the alleged offences. Their individual roles and the extent of their involvement will be determined during the investigation.

In practice, the legal provisions cited in the FIR include offences relating to electronic and cybercrime, common intention, extortion, cheating by personation, cheating and dishonestly inducing the delivery of property, and abetment.

According to the NCCIA case record, the 130 individuals arrested in connection with the alleged cyber fraud operation are Malaysian nationals.

Their visas had reportedly expired, and they were allegedly residing in Pakistan without valid immigration status while carrying out cybercrime activities.

For context, the allegations regarding their immigration status and involvement in cybercrime remain subject to verification and further legal proceedings. NCCIA Arrests CSS Officer Over Harassment of Female ASP.

Meanwhile, the case was registered after an Istighasa report was submitted through Head Constable Gulzeb and permission was obtained from the competent authority. While the investigation has been assigned to Sub-Inspector Liaqat Ali, sub-Inspector Amjad Bilal of NCCIA Rawalpindi is identified in the document in connection with the registration proceedings.

As well as the identities of other individuals who may have assisted the operation, according to the FIR, the investigation will examine the alleged roles of the overseas controller, local supervisors, call-center personnel, financial facilitators and cryptocurrency handlers.

For context, the FIR does not specify the total amount allegedly defrauded, the confirmed number of victims, the value of cryptocurrency involved or the amount of funds recovered during the raid.

In practice, the allegations remain subject to further investigation and judicial proceedings. The registration of an FIR does not constitute a determination of guilt, and the responsibility of each accused person must be established through evidence and due legal process. Stay Connected with ProPakistani. Obtain the latest news and stories wherever you prefer. Follow on Google Discover. Follow on Google News Join WhatsApp. See more ProPakistani stories in Google Search and Top Stories.

In short, NCCIA Busts Rawalpindi-Based Cybercrime Network Targeting Malaysians via Touch 'n Go eWallet is the central thread here, and readers can expect follow-up reporting as the picture becomes clearer.