The National Cyber Crime Investigation Agency (NCCIA) has conducted raids on two call centres in Karachi’s PECHS area and taken more than 70 individuals into custody as part of an investigation into alleged fraudulent schemes targeting citizens in the United States. According to NCCIA, the operations were linked to offers involving new credit cards and low-interest financial services, with investigators examining the activities carried out through the call centres.
According to an NCCIA spokesperson, both premises were being operated by the same organization. The agency registered two separate cases and nominated 79 individuals in connection with the investigation, including 48 people in one case and 31 in another. The cases were registered under relevant provisions of the Prevention of Electronic Crimes Act (PECA) and Pakistan Penal Code (PPC). NCCIA stated that the call centres were operating from residential locations, which made it difficult to identify that commercial activities were being conducted from those premises. During the operation, NCCIA said investigators recovered a live and specially designed Customer Relationship Management (CRM) system that was allegedly being used by the organization to manage and record information related to US-based customers. The agency said the seized CRM system, along with computers, data records, and other digital material, could provide important evidence regarding the alleged network structure, customer database, operational methods, and individuals connected with the activities under investigation. The recovered digital material has been secured and is undergoing forensic examination.
According to details included in the registered cases, investigators stated that the call centre agents allegedly collected sensitive information, including Social Security Numbers, mobile phone numbers, dates of birth, and banking and credit card details, by presenting themselves as representatives of regulated financial institutions in the United States. The FIRs stated that the collected information was transferred through a local server-based CRM system to the call centre operators, who allegedly shared it with connected merchants for processing unauthorized charges. NCCIA said the forensic review of the CRM system and other digital devices would help investigators understand the broader structure, customer targeting methods, financial channels, and other individuals who may be linked to the case.
The investigation has been registered under multiple sections of PECA, including provisions related to unauthorized access to information systems or data, unauthorized copying or transmission of data, access to critical infrastructure information systems, electronic forgery, electronic fraud, unauthorized use of identity information, and spoofing. Additional sections of the PPC related to abetment and common intention have also been included in the cases. NCCIA said further action will depend on the findings of the ongoing forensic analysis and investigation process.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
