Webdesk: As more of daily life moves online, Pakistan's cybercrime law has become increasingly relevant to social media users, businesses and ordinary internet users. The Prevention of Electronic Crimes Act, 2016, known as PECA, criminalises a wide range of activities involving information systems and digital communications.

The law was amended in 2025, changing parts of the framework and creating the National Cyber Crime Investigation Agency (NCCIA).

One commonly reported category is online harassment and cyberstalking. Section 24 covers conduct such as repeatedly contacting someone despite their clear refusal, monitoring their digital communications or distributing their photograph or video without consent in circumstances covered by the law. An adult victim case can carry up to three years in prison, a fine of up to Rs 1 million, or both. Higher penalties can apply when the victim is a minor.

The law also addresses sexually explicit material involving adults. Section 21 covers conduct including transmitting sexually explicit images or videos to harm, threaten, blackmail or damage someone's reputation. The punishment can extend to five years in prison, a fine of up to Rs 5 million, or both. Where the victim is a minor, imprisonment can extend to seven years with a fine of up to Rs 5 million.

Offences involving children carry particularly severe penalties. Section 22 deals with child pornography and can result in seven to 20 years' imprisonment and a fine of at least Rs 1 million. Separate provisions address online grooming, sexual exploitation and using digital systems to facilitate the kidnapping or trafficking of minors.

Other offences include unauthorised access to information, identity misuse, electronic forgery, electronic fraud, malicious code, spamming and spoofing. Their penalties differ according to the offence and circumstances.

For example, unauthorised use of identity information can carry up to three years' imprisonment and a fine of up to Rs5 million, while malicious code can carry up to two years and a fine of up to Rs 1 million.

The law also covers more serious conduct. Glorification of offences can carry up to seven years' imprisonment and a fine of up to Rs 10 million, while cyber terrorism can carry substantially heavier penalties. Hate speech committed through an information system can also attract imprisonment and fines.

Another important change came in 2025 with Section 26A, which makes the intentional dissemination of information known to be false or fake and likely to cause fear, panic, disorder or unrest punishable by up to three years' imprisonment, a fine of up to Rs 2 million, or both.

The key point is that not every unpleasant or offensive online interaction automatically amounts to a cybercrime. The specific facts, intent, evidence and applicable section of the law matter.

For anyone facing online abuse, blackmail, identity misuse or another suspected cyber offence, keeping screenshots, messages, account details and other digital evidence can be important when making a complaint through the appropriate authorities.

Pakistan's cybercrime laws are not limited to hacking. They increasingly cover the ways digital technology can be used to threaten privacy, dignity, security and personal safety, making basic knowledge of the law an important part of staying safe online.