What Is NCCIA? PECA 2025 Cybercrime Law Explained

What Is NCCIA? How PECA 2025 Changed Cybercrime Investigation in Pakistan

If you've been contacted by the National Cyber Crime Investigation Agency (NCCIA) — or you're trying to file a complaint and keep seeing references to "FIA Cyber Wing" that don't match what you're experiencing — you're not alone. In 2024 and 2025, Pakistan's entire cybercrime enforcement system was restructured, and most information available online still hasn't caught up.

This guide explains exactly what NCCIA is, how it's different from the agency it replaced, what legal powers it holds under the amended Prevention of Electronic Crimes Act (PECA), and what that means if you're a complainant, a witness, or someone facing an investigation.

What Is NCCIA?

The National Cyber Crime Investigation Agency (NCCIA) is Pakistan's dedicated federal agency for investigating, inquiring into, and prosecuting cybercrime. It was established on May 3, 2024, under Section 51 of PECA, and became fully operational in April 2025. Unlike its predecessor, which operated as one wing inside a larger agency, NCCIA is a standalone "body corporate" headed by a Director General who holds the exclusive powers of an Inspector General of Police.

NCCIA's mandate covers offenses such as:

• Online harassment, blackmail, and cyberstalking

• Financial fraud committed through digital channels (OTP fraud, fake investment schemes, phishing)

• Hacking and unauthorized access to accounts, devices, or systems

• Identity theft and impersonation

• Circulation of non-consensual private images or videos

• Defamatory or unlawful online content

• Large-scale data breaches and ransomware attacks

NCCIA vs the Old FIA Cyber Wing — What Actually Changed

For nearly two decades, cybercrime in Pakistan was handled by the FIA's Cyber Crime Wing (CCW), created in 2007. That wing has now been dissolved, and its cases, staff, and infrastructure have been folded into NCCIA. Here's what's materially different:

The most important change for anyone involved in a case is Section 30 of the amended PECA, which gives NCCIA exclusive jurisdiction over cybercrime matters. In practice, this means regular police stations and the old FIA channels can no longer independently register or investigate cybercrime cases — everything routes through NCCIA. If you've been told to go to a police station for a cybercrime complaint, that advice is outdated.

What Is the PECA (Amendment) Act 2025?

The Prevention of Electronic Crimes Act was first passed in 2016, but the 2025 amendment restructured how it's enforced. Two changes matter most to the public:

1. Section 29(1) formally designates NCCIA as the authorized law enforcement agency for all inquiries, investigations, and prosecutions under PECA.

2. Section 30 grants NCCIA exclusive jurisdiction, removing ambiguity about which agency handles a given case.

The amendment also strengthened rules around the removal of unlawful online content, giving NCCIA and related bodies more direct authority to request takedowns from platforms — which is why response times for content-removal complaints have generally become faster than under the old system, though not guaranteed.

NCCIA's Structure and Where Offices Are Located

NCCIA operates through a headquarters and a network of regional Cybercrime Reporting Centres (CCRCs):

• Headquarters: National Police Foundation Building, Sector G-10/4, Islamabad

• Lahore Office: House No. B-8, G Block, Main Boulevard, Gulberg-II, Lahore

• Additional CCRCs operate in Rawalpindi, Faisalabad, Gujranwala, Multan, Quetta, and other major cities

Each CCRC is headed by a Deputy Director and staffed with investigators, digital forensic experts, and legal officers. For Lahore residents, this means your complaint — and any subsequent investigation, summons, or hearing — is most likely to be handled through the Gulberg-II office rather than Islamabad headquarters, unless the case is escalated.

How to Contact NCCIA (Official Channels)

• Online complaint portal: complaint.nccia.gov.pk

• Pakistan Citizen Portal: web.citizenportal.gov.pk

• Email: helpdesk@nccia.gov.pk

• Helpline: 1799 (general guidance; does not itself register an FIR)

• In person: Nearest CCRC office

If you live outside Pakistan, NCCIA requires you to nominate a focal person — typically a relative residing in Pakistan — to pursue the case on your behalf at a CCRC, unless you route your complaint through INTERPOL or your local Pakistani embassy/consulate.

Why This Matters If You're Involved in a Case Right Now

Whether you're filing a complaint or have been summoned as part of one, understanding NCCIA's current legal standing changes your strategy:

• As a complainant: You now have one clear, exclusive channel to pursue — no more uncertainty about whether police, FIA, or another body should be handling your case.

• As someone under investigation: NCCIA's DG-level authority means summons and investigative actions carry more institutional weight than under the old CCW structure. Legal representation at the earliest stage — even before an FIR is formally registered — matters more now, not less.

• As a business: Data breach and corporate cybercrime cases now fall squarely under NCCIA's exclusive jurisdiction, which affects how quickly you can expect action and which office to coordinate with.

Frequently Asked Questions

Is NCCIA the same as FIA? No. NCCIA replaced FIA's Cyber Crime Wing in 2024 and now operates as an independent agency with its own Director General, though it still coordinates with FIA on cases that overlap with other federal crimes.

Does NCCIA have exclusive jurisdiction over all cybercrime in Pakistan? Yes, under Section 30 of the PECA (Amendment) Act 2025, NCCIA holds exclusive jurisdiction over cybercrime inquiries, investigations, and prosecutions.

Can a police station register a cybercrime FIR? Generally no. Cybercrime complaints should be filed directly with NCCIA through its portal, helpline, or nearest CCRC office.

Where is the NCCIA office for Lahore-based complaints? Gulberg-II, Main Boulevard, Lahore. Most Lahore-based cybercrime cases are handled through this office.

Do I need a lawyer to file an NCCIA complaint? It's not legally required, but legal assistance helps ensure your complaint meets forensic evidentiary standards and is less likely to be delayed or dismissed for incomplete documentation — particularly for financial fraud, blackmail, or business-related cases.

How is a complaint filed if I live abroad? You must nominate a focal person residing in Pakistan to represent your complaint at a CCRC, or route it through INTERPOL or your nearest Pakistani embassy/consulate.