Cybersecurity and Digital Threats in Pakistan

Cybersecurity refers to the practice of protecting systems, networks, and data from digital attacks, unauthorized access, and damage through preventive measures like encryption, firewalls, and policy frameworks. While the term Cybercrime encompasses illegal activities conducted via digital means, such as hacking, fraud, identity theft, and the dissemination of malicious content.

The population of Pakistan as of April 2025 is 254.28 million, with real-time estimates indicating a daily growth rate of approximately 1.58% (https://populationtoday.com/pk-pakistan/). Projections for mid-2025 suggest the population will reach 255.2 million, reflecting Pakistan’s position as the 5th most populous country globally (https://worldpopulationreview.com/countries/pakistan).

Below is a detailed breakdown of key demographic metrics and trends:

Let’s explore the demographic trends of Pakistani population. The median age 20.6 years, indicating a youthful population (https://www.worldometers.info/demographics/pakistan- demographics/). If we categorieze the population, it is interesting that 35.3% under 15 years, 60.2% aged 15–64, and 4.5% over 65 (2025 UN projections – https://en.wikipedia.org/wiki/Demographics_of_Pakistan).

As of early 2025, Pakistan’s Internet penetration rate stands at 45.7%, with 116 million internet users out of a population of 253 million. This reflects a steady growth trajectory, though challenges, such as, infrastructure limitations, digital divide (urban-rural divides) and cybercrime victims. Mobile broadband dominates, accounting for 142 million subscriptions (compared to 3 million fixed broadband connections -https://en.wikipedia.org/wiki/Internet_in_Pakistan). The median mobile internet download speed improved to 20.89 Mbps (+25.3% year-on-year), while fixed broadband speeds reached 15.53 Mbps (https://datareportal.com/reports/digital-2025- pakistan).

Pakistani’s are found of the following social media platforms:

Pakistan’s social media landscape: Platform-specific adoption trends:

Platform Active Users (2025) % of Population
Key Demographics

Facebook 60.4 million

23.5% Male-dominated (76.5%); largest age group: 18–
24 (40.5%) – https://napoleoncat.com/stats/social- media-users-in-pakistan/2025/

Messenger 49.9 million

21.5% 80.8% male; largest user group: 25–34 (37.8%) – https://napoleoncat.com/stats/social-media-users- in-pakistan/2025/

YouTube 55.9 million

22.1% Data incomplete, but ad reach suggests broad usage – https://datareportal.com/reports/digital- 2025-pakistan

Instagram 18.6 million

8.0% 64.9% male; largest age group: 18–24 (47.9%) – https://napoleoncat.com/stats/social-media-users- in-pakistan/2025/

TikTok Market share: 1.79%

N/A Rapidly growing, especially among younger demographics – https://gs.statcounter.com/social- media-stats/all/pakistan

As far as market Share is concerned, Facebook dominates with 95.95% of social media traffic, followed by TikTok (1.79%) and YouTube (0.86%) (https://gs.statcounter.com/social-media- stats/all/pakistan). Social media users skew heavily male (70.4% male vs. 29.6% female – https://datareportal.com/reports/digital-2025-pakistan).

Keeping in view the Pakistani population penetration on the Internet, the traditional criminal moves their heads towards cybercrime. Cybercrime is an emerging threat driven by rapid Internet penetration and limited regulatory frameworks. Key forms include hacking, financial fraud, cyberbullying, and identity theft.

Cyber-dependent crimes (e.g., hacking, malware) score 5/10 in Pakistan’s criminal markets, indicating moderate but growing activity (https://ocindex.net/country/pakistan). A 2023 study found that 42.85% of Pakistani university students experienced cyberbullying, with urban areas and higher socioeconomic groups more vulnerable (https://www.sciencedirect.com/science/article/abs/pii/S0160791X2100052X). Financial crimes, such as phishing and credit card fraud, are rising due to weak cybersecurity measures and unlicensed software use (https://www.academia.edu/39793853/Pakistans_Internet_Landscape_2018).

Here we are discussing the prominent cybercrimes happening in Pakistan along with its possible solution to prevent them.

Cyber Terrorism and Recruitment:

1. Cyberterrorism involves hacking critical infrastructure (e.g., government websites) or using social media to recruit for extremist groups. For example, Section 10 of PECA 2016 criminalizes cyberterrorism, with penalties up to 14 years imprisonment (https://www.globalvillagespace.com/cyber-crimes-and-cyber-security-in-pakistan/). The possible challenges are lack of advanced forensic tools and cross-border coordination (https://www.linkedin.com/pulse/pakistan-cybercrime-wing-ccw-fia-combating-digital-threats- tahir-kvjof). The right solution had been made and the new agency was formed names as National Cyber Crime Investigation Agency (NCCIA) with specialized training and unding (https://rsilpak.org/2025/2025-amendments-to-the-prevention-of-electronic-crimes-act-2016-an- introduction/) (https://tecspectrum.com/happenings/pakistan-cybercrime-bill-2025/). Fortunately the new DG was appointed on April 4, 2025. These steps will enhance international cooperation through treaties like the Budapest Convention (https://www.coe.int/en/web/octopus/-/pakistan) (https://www.icrc.org/en/document/pakistan-roundtable-ihl-cyber-security) and implement real- time monitoring of extremist content on social media (https://ipi.media/pakistan-amended- cybercrime-law-poses-new-threats-to-press-freedom/).
2. Online Harassment and Child Exploitation: Includes cyberstalking, non-consensual sharing of explicit content, and child pornography. Over 150 journalists were charged under PECA in 2024 for “defamation,” often linked to critical reporting (https://ipi.media/pakistan-amended- cybercrime-law-poses-new-threats-to-press-freedom/). The possible challenges are underreporting due to social stigma and weak enforcement. The possible solutions are establishing dedicated Cybercrime Reporting Centers with 24/7 helplines (e.g., FIA’s CCW 1991 helpline – https://www.linkedin.com/pulse/pakistan-cybercrime-wing-ccw-fia-combating-digital-threats- tahir-kvjof), launch public awareness campaigns on digital literacy and safe online practices (https://www.icrc.org/en/document/pakistan-roundtable-ihl-cyber-security) and enforce stricter penalties under PECA Section 21 (protection of women) and Section 22 (child abuse) (https://www.globalvillagespace.com/cyber-crimes-and-cyber-security-in-pakistan/).
3. Financial Fraud and Phishing: Scams like Business Email Compromise (BEC) and SIM card fraud. In 2025, a Pakistan-based group, HeartSender, caused $3 million in losses through phishing kits. The possible challenges are lack of secure payment gateways and public awareness. The possible solutions are mandatory two-factor authentication for banking transactions (https://www.globalvillagespace.com/cyber-crimes-and-cyber-security-in-pakistan/), collaborate with international agencies (e.g., Interpol) to dismantle cross-border networks (https://therecord.media/pakistan-cybercrime-busted-dutch-doj) and train financial institutions to recognize and report suspicious activity (https://www.linkedin.com/pulse/pakistan-cybercrime- wing-ccw-fia-combating-digital-threats-tahir-kvjof).
4. Misinformation and Fake News: Intentional spread of false information under Section 26-A of PECA 2025, punishable by 3 years imprisonment (https://tecspectrum.com/happenings/pakistan-cybercrime-bill-2025/). The possible challenges are vague definitions like “public fear” enable misuse against journalists (https://ipi.media/pakistan-amended-cybercrime-law-poses-new-threats-to-press-freedom/) (https://www.paradigmshift.com.pk/peca-amendment/). The possible solutions are promote fact- checking initiatives and media literacy programs (https://www.icrc.org/en/document/pakistan- roundtable-ihl-cyber-security) and ensure judicial oversight for content removal by the Social Media Protection Tribunal.
5. Identity Theft and Data Breaches: Unauthorized access to personal data for fraud. For example, hackers selling call records and email accounts (https://www.linkedin.com/pulse/pakistan-cybercrime-wing-ccw-fia-combating-digital-threats- tahir-kvjof). The possible challenges are weak data protection laws and poor compliance by private entities. The possible solutions are enact a Data Protection Act with penalties for breaches, encourage companies to adopt ISO 27001 cybersecurity standards (https://www.cissmp.com/index.php/CISSMP/article/view/94) and establish Computer Emergency Response Teams (CERTs) for rapid incident response (https://www.icrc.org/en/document/pakistan-roundtable-ihl-cyber-security) and officially Government of Pakistan announced the formation of countries 1st National Computer Emergency Response Team (CERT) on March 11, 2024
   (https://en.wikipedia.org/wiki/Pakistan_Computer_Emergency_Response_Team#:~:text=4%20R eferences-,History,Emergency%20Response%20Team%20(CERT).).
6. Hacking and Malware Attacks: Attacks on government and private systems, such as Distributed Denial of Service (DDoS) and ransomware are being in common in Pakistan and Pakistan ranks 14th in Asia-Pacific for cyber vulnerabilities (https://www.icrc.org/en/document/pakistan-roundtable-ihl-cyber-security). The possible challenges are outdated infrastructure and insufficient investment in cybersecurity. The possible solutions are upgrade national cybersecurity infrastructure with AI-driven threat detection (https://www.cissmp.com/index.php/CISSMP/article/view/94), conduct regular penetration testing for critical systems (https://www.linkedin.com/pulse/pakistan-cybercrime-wing-ccw-fia- combating-digital-threats-tahir-kvjof) and foster public-private partnerships to share threat intelligence.

In conclusion, Pakistan’s cyber landscape requires a balanced approach: robust legal frameworks (e.g., PECA 2025 amendments – https://rsilpak.org/2025/2025-amendments-to-the-prevention-of- electronic-crimes-act-2016-an-introduction/), institutional capacity-building (e.g., NCCIA – https://tecspectrum.com/happenings/pakistan-cybercrime-bill-2025/), and public education. However, safeguards against misuse, such as judicial oversight and clear definitions, are critical to protecting civil liberties (https://www.paradigmshift.com.pk/peca-amendment/). Also note that digital deception, for example, DeepFake and Digital Arrest are around the corners and law enforcement agencies have to watch them carefully.

…..

By Prof. Dr. Tariq Rahim Soomro,
Rector, Institute of Business Management (IoBM), Karachi, Chair IEEE Karachi Section, Cybersecurity Expert tariqsoomro@gmail.com, rector@iobm.edu.pk