Mobile Wallet Fraud in Pakistan: JazzCash, Easypaisa & Beyond

By any chance, did you happen to read my last article, "The Rise of Digital Banking in Pakistan — and How Fraudsters Are Exploiting It". In case if you have missed it, then here is the link for you to have a look at a very detailed article on the rise of digital banking in Pakistan.

Pakistan’s digital payments have exploded. In Q3-FY25 alone, retail digital payments hit ~2.4 billion transactions; mobile apps + wallets handled ~1.7 billion of those. Branchless wallet users reached ~68.5 million in that quarter—making wallets an enormous target surface for fraudsters. In today's article we will discuss four critical aspects of mobile making in Pakistan: 

• The scale of mobile wallets in Pakistan and why scammers target them. 
• The most common, Pakistan-specific fraud patterns (with recent advisories/cases).
• Exactly what to do—step-by-step—if you get scammed or spot a scam. 
• Practical, low-effort settings to harden your JazzCash/Easypaisa account today.

Fraud patterns hitting Pakistani wallet users:

Fake courier / parcel OTP & link-bait: One the most common, and I must say, most used fraud is the fake courier/ parcel OTP and link-bait fraud. The process is simple. Everyone loves to shop and no one has ample time to go and do shopping physically (plus lets be honest since COVID the online shopping is booming). So, scammers send SMS/WhatsApp “courier” messages asking innocent people to enter or share a one-time code (OTP) or click a payment link. That link allows the scammer to access the customer wallet, leading to financial transactions. PTA has issued multiple alerts about this exact pattern because lets me honest none of the courier companies need any sort of an OTP to proceed with the shipment.

“Bank/SBP verification” & vishing calls: This is the second most common type of financial fraud happening in Pakistan. In this fraud, fraudsters contacts the customer as a bank representative and he will tell you that your bank account has been blocked and will only be unblocked if the customer provides him with the MPIN/OTP “to unblock” his account. Now, this is very troublesome situation for someone who gets such kind of a call. But this needs to be understood that both JazzCash and Easypaisa or any other banking institute, no one will ever ask for your MPIN/OTP—ever as this is against the regulatory obligations of State Bank. 

Remote-access app traps (AnyDesk, etc.): This is not a very common fraud but it happens. A caller convinces you to install a screen-sharing app to “fix” an issue, then hijacks your session to move funds from your mobile applications. And this is exactly why screen sharing or remote access connecting applications should not be installed and if installed then no access should be given to anyone at any cost. Local authorities continuously warn users to avoid such requests.

Loan-app shakedowns & wallet collections: Unlicensed loan apps push illegal collections into wallets, threaten/shame borrowers, and drain balances. SECP has cracked down (141+ illegal apps blocked/flagged) and maintains an official whitelist—use it to verify any app. SBP also ordered banks/EMIs not to provide rails to unauthorized digital lenders. SECP Pakistan; State Bank of Pakistan.

After these details, I must say, I am very eager to share how to protect your financial wallets:

Never share MPIN/OTP—period. (Official stance from both providers.) JazzCashHome easypaisa

Enable biometrics in JazzCash/Easypaisa app and set a strong MPIN (not your DOB/1234). (See your app settings.)

Kill unknown SIMs on your CNIC: Visit cnic.sims.pk or SMS your CNIC (no dashes) to 668. Block any number you don’t use. cnic.sims.pkThe Nation

Decline unrecognized payment requests. If you get a “Pay/Approve” pop-up you didn’t initiate—reject it. Dawn

Don’t install screen-sharing apps at someone’s request. Hang up; call your provider directly. AnyDesk

Merchants: verify funds in your own app/portal—don’t trust screenshots. Watch for post-payment reversal attempts. App

If you’ve been scammed: the Pakistan-specific escalation path

Act within minutes—speed improves recovery odds. Freeze & report to your wallet by calling JazzCash: Call 4444 (Jazz) / 051-111-124-444 (other networks). Also use in-app support/helpline. JazzCash and Easypaisa: Call 111-00-3737 or report via in-app chat. Home easypaisa. Collect evidence: screenshots of SMS, in-app history, caller numbers, any links/receipts.

File an official complaint (banking regulators) 

State Bank “Sunwai” Consumer Portal (for wallet/bank disputes). bankingmohtasib.gov.pk. Banking Mohtasib Pakistan (if unresolved after lodging with the provider). sunwai.sbp.org.pk

Report cybercrime: NCCIA (National Cyber Crime Investigation Agency) helpline 051-9106691 / online intake (as announced Apr 2025). (FIA’s legacy portal/helplines may still appear; NCCIA is the government’s new focal agency for cybercrime). Arab News

Merchants hit by “reversal/receipt” fraud: lodge an FIR with supporting CCTV & transaction logs; cite the wallet transaction ID(s). App

Policy & ecosystem moves you should know

SECP vs. illegal loan apps: 141+ flagged/blocked; ongoing surveillance & new Digital Lending Guidelines for licensed NBFCs. SECP Pakistan

SBP to banks/EMIs: Don’t provide payment rails or data access to unlicensed digital lenders. State Bank of Pakistan

PTA on SIM misuse/OTP scams: repeated public advisories; use 668 and cnic.sims.pk to secure your identity. The News International; The Nation

While e-commerce has opened exciting opportunities for Pakistani buyers and sellers, it has also given rise to new forms of fraud that cannot be ignored. From fake sellers and delivery scams to counterfeit products and phishing attacks, the risks are real and growing. Strengthening awareness is the first line of defense. By verifying sellers, using secure payment methods, and reporting suspicious activity, consumers can protect themselves while also discouraging fraudsters. The future of Pakistan’s digital marketplace depends on building trust — and that trust begins with informed, vigilant users.