A widespread digital fraud campaign targeting Pakistani drivers has been uncovered, revealing how scammers are exploiting trust in e government services through TikTok sponsored advertisements. The scam falsely promises home based renewal of driving licenses by impersonating Punjab’s Driving License Information Management System. The activity gained momentum in late 2025 after users reported suspicious advertisements claiming that licenses could be renewed online without visiting traffic offices, using visuals and language closely resembling official government communication.
Investigators found that the fraud begins with paid TikTok promotions that appear highly convincing at first glance. These ads use official looking DLIMS logos, formal wording, and urgency driven messages encouraging users to act quickly. The accounts promoting these ads often show clear warning signs, including having no posted videos, no organic engagement, and recently created profiles. Clicking on the ads redirects users to counterfeit websites, frequently hosted on platforms like Netlify that allow fast and anonymous deployment. These cloned portals closely mimic the real DLIMS process, asking users to enter personal information, select license categories such as motorcycle, car, or heavy vehicles, and displaying fee structures identical to official rates to reduce suspicion.
The scam escalates once users are prompted to upload highly sensitive documents, including CNIC front and back images and passport sized photographs. This data is then used for identity theft, SIM misuse, unauthorized banking access, and illegal loan activity, all of which have been rising sharply in Pakistan. To increase pressure, the fake websites generate a fabricated token number along with a countdown timer, suggesting that a provisional license will expire unless immediate payment is made. A particularly deceptive tactic involves blocking screenshots or triggering device warnings, a feature not present on legitimate government portals, designed to prevent victims from preserving evidence. Payments are requested through mobile wallets such as JazzCash and routed to mule accounts under random personal names, after which funds are quickly withdrawn and become difficult to trace.
Authorities and cybersecurity observers note that this operation follows a broader pattern of government impersonation scams affecting services linked to NADRA, Ehsaas and BISP programs, passports, traffic fines, and license renewals. Social media platforms continue to play a central role in amplifying these schemes due to weak ad moderation and high user reach. Law enforcement agencies, including FIA and NCCIA, have recorded a significant rise in cyber complaints during 2025, with similar fake DLIMS portals previously identified and flagged as fraudulent. Officials warn that as more public services move online, criminal networks are adapting quickly to exploit public awareness gaps and digital trust.
Citizens are advised to remain cautious and verify all government related services through official domains ending in gov.pk or through verified applications such as Punjab Police platforms. Legitimate government departments do not advertise services through anonymous social media accounts, block screenshots, or request payments to personal digital wallets. Individuals who believe they may have been targeted are encouraged to report suspicious ads to social media platforms, file complaints with FIA Cyber Crime Wing through official channels, and monitor financial and identity records closely. With expanded online services and home delivery options becoming more common, vigilance and platform accountability remain critical to limiting the impact of such cybercrime operations.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
