In a significant cybersecurity advisory, National Cyber Emergency Response Team (National CERT), working in coordination with NADRA, has identified and successfully disabled nine fraudulent domains over the past month that were impersonating official NADRA services and attempting to mislead Pakistani citizens. These deceptive sites were crafted to mimic legitimate government platforms, with the intention of harvesting sensitive personal information from unsuspecting users. National CERT and NADRA officials have cautioned citizens to exercise heightened vigilance when accessing online services, especially when personal data is at stake. The agencies reaffirmed their commitment to monitoring digital threats and taking swift action against malicious cyber activities aimed at Pakistan’s populace.
The fraudulent domains that were taken down include a variety of misspelled or deceptive web addresses designed to create confusion among internet users. These include visa-nadra-gov-pk.shafaftech.com, visa.nadra.gov-pak.com, visa.nadra.gov.pk-com.io, and visa.nadra.gov.pk.gofly.com.gofly.com.pk, along with other sites such as visa.nadra.gov.pk.e-visa.pk, nadraverisys.com, nadraservices.uk, nadracardscenter.co.uk, and nadralive.xyz. Each of these domains was set up with the intent to simulate official NADRA services, potentially tricking users into believing they were interacting with genuine government portals. Through diligent digital threat hunting and analysis, National CERT and NADRA were able to identify the malicious infrastructure behind these domains and coordinate with relevant hosting providers to take them offline, thus reducing the risk of personal data compromise.
Officials have emphasized that these threats serve as a reminder of the importance of verifying the authenticity of websites before entering any personal information, particularly when such platforms claim to offer vital services such as visa assistance or national identity services. Cybersecurity experts have reiterated that official NADRA services are accessible only through verified government domains, specifically those ending in nadra.gov.pk. Citizens are strongly advised to avoid clicking on links received through unsolicited emails, text messages, or social media platforms if they are unsure of their origin. Instead, users should type official website addresses directly into their web browsers or access them through trusted bookmarks to ensure once they reach a legitimate portal.
The collaboration between National CERT and NADRA demonstrates a proactive approach to safeguarding Pakistan’s digital ecosystem and protecting citizens from online fraud. According to the advisory, the monitoring and analysis of cyber threats remain ongoing, with both organizations pledging to continue their efforts to detect and dismantle malicious operations as they emerge. National CERT has also encouraged individuals and organizations to report suspicious websites and cyber incidents to help authorities respond more effectively and strengthen overall cyber resilience. This public alert seeks to raise awareness about the increasing prevalence of online scams and the importance of exercising caution when engaging with digital platforms that handle personal or sensitive data.
Citizens are reminded that safeguarding personal information is a shared responsibility and that awareness and caution online can significantly reduce the likelihood of falling victim to cyber fraud. By staying informed about current threats and understanding how to distinguish between legitimate and deceptive web services, individuals can better protect themselves in an increasingly interconnected digital landscape. National CERT and NADRA continue to work collaboratively to mitigate risks, protect critical digital services, and ensure that online environments remain secure for all users.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
