πŸ”Ž Investigation Guide

How To Check An Unknown SIM Registered On Your CNIC

Noticed a number, a call, or a message that suggests a SIM is active on your identity that you didn't register yourself? Here's exactly how to confirm it, decide whether it's actually a problem, and shut it down through official channels β€” start to finish.

πŸ“© Run An Official Check β€” SMS 668
Low Concern

An old SIM you forgot about, still showing as active.

Worth Checking

A family member's SIM registered on your CNIC without saying.

Act Immediately

An operator or SIM entry you have never heard of at all.

Why This Happens

Understanding "Unknown SIM" Reports

An "unknown SIM" simply means a mobile number shows up as registered against your CNIC that you don't personally recognise activating. It's a more specific and more urgent version of a general SIM check β€” instead of casually reviewing your own list, you're starting from a concrete signal that something might already be wrong, whether that's a suspicious call, an unexpected verification code, or simply being told you've hit PTA's registration limit when you don't believe you should have.

The good news is that Pakistan's biometric SIM-registration system, run by PTA in coordination with NADRA, makes this far easier to resolve than it would have been a decade ago. Because every SIM is tied to a verified fingerprint match against a specific CNIC, there's always an official, checkable answer β€” you're never left guessing, and the process for confirming and removing a genuinely unauthorized SIM follows a clear, repeatable path.

The Framework

Three Phases: Identify, Verify, Respond

Chasing down an unknown SIM feels overwhelming mainly because people try to do everything at once. Breaking it into three distinct phases makes the whole process manageable β€” and each phase below has its own section further down this page. This structure also mirrors, roughly, how the operators and PTA themselves process a report internally: they first pull your record, then assess whether it's genuinely irregular, and only then take corrective action β€” so working the same way on your end keeps your report aligned with how it will actually be handled.

πŸ”
Phase 1

Identify

Run the official PTA lookup to see your real, current list of registered SIMs β€” not a guess.

βœ…
Phase 2

Verify

Work through a short decision process to confirm whether an entry is genuinely unauthorized.

🚨
Phase 3

Respond

Block, report, and escalate through the correct official channels, in the right order.

Background

The Most Common Reasons A SIM Turns Out To Be "Unknown"

Before diving into the investigation itself, it helps to know what usually causes this situation, since the cause often determines exactly how urgently you should act.

Family or household registrations. By far the most common explanation. A parent, sibling, or spouse without their own CNIC β€” or a minor β€” often has a SIM registered under a relative's identity instead of their own, sometimes without a detailed explanation being given at the time.

Forgotten old lines. A SIM bought years ago for a short-term need β€” a trip, a temporary job, a device β€” and never formally deactivated will still appear as registered, even if you haven't touched it since.

Franchise or point-of-sale errors. Less common, but a duplicate or mistaken registration during a SIM replacement or swap can leave an extra entry on your CNIC that neither you nor the operator intended.

Identity misuse. The scenario people worry about most, but statistically the least frequent β€” a CNIC copy obtained through loss, theft, or a data breach used to activate a SIM without the owner's knowledge, sometimes for fraud, spam operations, or to intercept one-time passcodes.

Knowing which category is most likely in your case shapes how you approach Phase 2 below. A recent CNIC loss combined with an unfamiliar operator points toward taking the process seriously from the start; a vague memory of "maybe registering something for my cousin two years ago" points toward a quick family conversation before anything more formal.

Behind The Scenes

How Operators Actually Process A Report

Understanding what happens on the operator's side once you report a SIM makes the whole process feel less like a black box. When you flag a number as unauthorized, the operator typically cross-checks the original activation record β€” including the biometric match logged at the time of registration β€” against your report. If the fingerprint match doesn't correspond to you, or the franchise location and timing raise questions, that record becomes part of the evidence supporting your claim.

This is also why an emergency block and a full deactivation are treated as two separate steps rather than one instant action. The block stops the number from being usable almost immediately, protecting you from further misuse while the underlying registration record is reviewed properly. The formal deactivation, which actually removes the SIM from your CNIC count, follows once that review confirms the report.

It's a useful mental model to keep in mind during Phase 3: the emergency block gives you fast protection, but the paper trail β€” the reference number, the formal complaint, the follow-up β€” is what actually closes the case.

Before You Investigate

Signs Worth Taking Seriously

You don't need all of these to justify running a check β€” even one is reason enough. But if several apply at once, treat the investigation as more urgent. Think of this list as a triage tool, not a strict qualifying bar: the goal is simply to decide how quickly you move to Phase 1 below, not to talk yourself out of checking.

You've received an OTP or verification code you didn't request

Especially for a banking app, mobile wallet, or social media account tied to a number you don't recognise using.

Calls or messages referencing accounts you don't recognise

Debt collectors, loan apps, or delivery services contacting you about something that isn't yours.

Your CNIC was recently lost, stolen, or physically shared

Even a temporary loss creates a window where a copy could be misused for registration.

You were denied a new SIM for exceeding the CNIC limit

Being told you already have "too many" SIMs when you don't believe that's true is a strong signal to check.

A relative mentions a number you've never heard of

Sometimes the first clue comes from someone else noticing a call from "your" number that you never made.

You're getting spam or scam calls that seem to know personal details

This can indicate a SIM registered in your name is being used to make outbound calls that reference your identity.

An old franchise visit involved a SIM replacement or swap

A mistake during that process can occasionally leave a duplicate registration behind without you noticing at the time.

If none of these apply and you're simply curious, that's a perfectly good reason to check too β€” a periodic audit doesn't need a trigger event to be worthwhile.

Phase 1

Identify β€” Run The Official PTA Check

This step is non-negotiable and comes before everything else: you need your real, current list of registered SIMs from PTA directly, not an assumption based on memory or a caller's claim. Both of the following are free and return identical underlying data.

Fastest

SMS Your CNIC

Send to 668

Type your 13-digit CNIC with no dashes and text it to 668. The reply lists every SIM on your identity, grouped by operator, usually within seconds.

Most Detailed

Use The Web Portal

cnic.sims.pk

Open cnic.sims.pk, enter your CNIC, and pass the verification step for a fuller, printable record β€” useful if you'll need documentation later.

Compare the full list you get back against what you actually recognise. Anything you can't immediately place moves you into Phase 2.

Pay attention to more than just the operator name. Both methods typically return an activation date and a current status (Active, Suspended, or Blocked) for each entry β€” these two extra details are what let you tell a genuinely unfamiliar SIM apart from an old one you simply forgot about, so don't skip past them once your result arrives.

Phase 2

Verify β€” Is It Actually Unauthorized?

Before assuming the worst, work through this short decision process. Most unfamiliar entries turn out to have a simple explanation, and confirming that first saves you from an unnecessary complaint process.

Does the activation date fall within the last few years, and could it match a SIM you bought for yourself or a family member?
YesIt's very likely a legitimate, forgotten registration. Confirm with any family members before proceeding further.
NoContinue to the next question β€” this narrows things down further.
Has your CNIC ever been lost, stolen, or shared with someone outside your immediate household?
YesThis raises the likelihood of misuse β€” move to Phase 3 and treat it as a priority.
NoContinue to the final question below.
Is the SIM's status shown as "Active" and tied to an operator you've genuinely never used?
YesTreat this as unauthorized. Proceed directly to Phase 3 below.
NoIf it's Blocked or Suspended already, it may be a closed-out old line β€” contact the operator to confirm before assuming risk.
Have you noticed any unexpected OTPs, bank alerts, or loan-related contact tied to this number?
YesTreat this as high-priority β€” the SIM may already be in active use for fraud. Move to Phase 3 immediately and consider alerting your bank.
NoStill worth reporting as unauthorized through Phase 3, but this is a lower-urgency case than active financial misuse.

Working through these questions honestly, rather than jumping straight to the worst-case conclusion, is what keeps this process efficient. Most people who run through this decision tree end up in the "likely legitimate" category β€” but for the smaller number who don't, moving quickly into Phase 3 genuinely matters. If you're still unsure after all three questions, treat the entry as unauthorized by default and proceed to Phase 3 β€” a report that turns out to be a false alarm costs you a short phone call, while ignoring a genuine problem can cost considerably more.

Phase 3

Respond β€” What To Say And Do

Once you've confirmed an entry is genuinely unfamiliar, move quickly but methodically. Here's roughly what to say when you call the operator's helpline, followed by the full action sequence.

Sample call opening

"I've found a SIM registered on my CNIC through PTA's 668 service that I did not activate myself. I'd like to report it as unauthorized and request an immediate block, along with a reference number for my complaint."

01

Reply to your 668 result, or call the relevant operator's helpline, to request an emergency block on the number.

02

Ask explicitly for a written or reference-numbered acknowledgment of your report β€” don't rely on a verbal confirmation alone.

03

File a formal complaint with PTA so there's an independent, timestamped record beyond the operator's own system.

04

If you suspect identity misuse beyond a single SIM β€” attempted loans, impersonation, financial fraud β€” escalate to the NCCIA Cybercrime Wing.

For the complete step-by-step process specifically for removing the SIM once it's confirmed unauthorized, see our dedicated guide: Remove An Unauthorized SIM From Your CNIC.

One more thing worth doing at this stage: keep a simple written record as you go β€” the date you first noticed the issue, who you spoke to at the operator, and any reference numbers you were given. If the case needs to be escalated to PTA or NCCIA later, having this timeline ready makes the follow-up conversation considerably faster.

Setting Expectations

What Happens After You Report It

Day 0

Emergency block requested

The number typically stops working for calls and SMS almost immediately.

Day 1–2

Operator investigates

They review the registration record and your report against their own logs.

Day 3–7

Formal deactivation

If confirmed unauthorized, the SIM is fully removed from your CNIC record.

Day 7+

Re-check to confirm

Run the 668 or portal check again to verify the entry no longer appears.

These timeframes are typical, not guaranteed β€” more complex cases involving suspected fraud can take longer, particularly if NCCIA becomes involved. If you don't see resolution within roughly two weeks, follow up directly with the reference number from your original complaint.

It's also worth re-running your PTA check periodically during this window rather than only once at the end. Seeing the status move from Active to Blocked to fully removed gives you concrete confirmation at each stage, rather than relying entirely on what you're told over the phone.

⚠️ Legal note: This process is for checking and reporting SIMs on your own CNIC only. Investigating another person's SIM registrations without their consent is an offence under the Prevention of Electronic Crimes Act (PECA) 2016. If someone claiming to be from an operator or PTA calls asking you to read out your CNIC or share an OTP to "verify" or "unblock" a SIM, treat that as a scam attempt β€” legitimate verification never works that way.

Going Forward

Reducing The Chance Of This Happening Again

Once your immediate issue is resolved, a handful of habits make a repeat incident considerably less likely.

Never share a physical or photo copy of your CNIC unnecessarily

Only hand it over to verified franchises or institutions that genuinely require it.

Re-check your SIM list after any CNIC loss or renewal

This is the single most common window for registration errors or misuse.

Formally close SIMs you no longer use

An old, unclosed SIM is easier to mistake for something suspicious later.

Run a quick audit every few months

Catching an issue early is always easier than untangling it months later.

Agree on a household naming habit

If several family members share SIMs under one CNIC, keep a simple shared note of who has what to avoid future confusion.

Be skeptical of unsolicited "verification" calls

No legitimate operator or PTA representative will ask you to read out your CNIC or an OTP over the phone.

Questions

Frequently Asked Questions

How do I check for an unknown SIM on my CNIC?

Text your 13-digit CNIC to 668, or use PTA's cnic.sims.pk portal β€” both return your complete, current list of registered SIMs across every operator.

What if the unknown SIM belongs to a family member?

Confirm with them directly before reporting anything β€” many "unknown" entries turn out to be a relative's line registered under a shared CNIC.

Can I block an unknown SIM myself without calling the operator?

You can initiate the process by replying to your 668 result, but a full block and deactivation typically requires the operator or PTA to complete it.

Is there a cost to reporting an unauthorized SIM?

No β€” reporting through the operator, PTA, or NCCIA is free. Be wary of any third party charging a fee to "resolve" this for you.

What if I suspect the SIM is being used for financial fraud?

Contact your bank immediately to flag any linked accounts, alongside reporting the SIM itself to the operator, PTA, and NCCIA.

How long does it take to remove an unauthorized SIM?

Simple cases are often resolved within about a week; cases involving suspected fraud or NCCIA escalation can take longer.

Will I be told who registered the SIM in my name?

Not always β€” operators may share limited details, but a full identity trace typically requires formal escalation through PTA or NCCIA.

Can an unknown SIM be removed without visiting a franchise in person?

In many cases yes β€” the initial report and block can be done by phone or SMS, though some operators may ask for in-person verification for final closure.

Is this different from checking how many SIMs I have in total?

It's related but more targeted β€” a general count tells you the total, while this process focuses specifically on identifying and resolving one unfamiliar entry within that list.

One More Time

The Short Version

Start by identifying your real, current SIM list through PTA's official 668 shortcode or the cnic.sims.pk portal β€” never guess. Work through the verification questions honestly before assuming the worst, since most unfamiliar entries have an ordinary explanation. If something genuinely doesn't check out, respond quickly: request an emergency block, get a reference number, file a formal PTA complaint, and escalate to NCCIA if fraud is suspected. Keep a simple record as you go, and once resolved, a few small habits β€” closing old SIMs, guarding your CNIC copies, and periodic re-checks β€” make a repeat incident far less likely.

Don't guess β€” confirm it in under a minute

Run the official PTA check before jumping to conclusions or taking action.

Text 668 Now