Here’s How ‘Online Theft’ was carried out using SIM Activated with Fake Finger

2026-02-17 - 14:02

KARACHI – A daring and highly sophisticated cyber heist, fraudsters in Karachi reportedly swindled millions of rupees from unsuspecting citizen using nothing more than a silicone-made artificial finger and stolen SIM card. The risky method sent shockwaves through the city, raising urgent questions about the security of biometric systems and mobile banking in Pakistan. According to officials from National Cyber Crime Investigation Agency (NCCIA), Karachi resident Farhan was first to notice something was terribly wrong when his mobile network suddenly vanished. Initially dismissing it as a minor technical glitch, he became alarmed when service did not resume and contacted his mobile operator. Investigations revealed chilling scenario, a new SIM had been activated under Farhan’s identity card number at a remote location, immediately deactivating his original SIM. This allowed criminals to intercept all bank verification messages, OTPs, and mobile alerts, effectively taking control of his finances. An NCCIA officer said investigations started as soon as complaint was lodged. Authorities have traced the culprits and are now pursuing legal action. The method was audacious, senior crime reporter Nadir Khan explained that the fraudsters deceived biometric verification systems using a silicone-made artificial finger. At franchise or retail point, this fake finger was able to pass fingerprint authentication, giving criminals access to SIM activation. Once the new SIM was active, the criminals gained entry to mobile banking and financial accounts, transferring millions of rupees in stages. As biometric systems are generally considered secure, relying solely on fingerprints is no longer safe. Modern systems worldwide use “liveness detection” to ensure fingerprints belong to real person rather than a fake model made from silicone or rubber. He stressed that multi-factor authentication is critical, combining fingerprint verification with facial recognition, one-time passcodes, and real-time data verification. “Cybercriminals are evolving rapidly, so our security systems must keep pace,” Dr. Nauman said. The incident highlights human negligence and lack of digital awareness. Officials emphasized that criminals exploit both system vulnerabilities and human carelessness. Citizens often submit identity card copies unnecessarily or share sensitive information online, making them easy targets. She urged the public to understand the sensitivity of their data and adopt protective measures. The fraud begins with criminals collecting personal information, full name, ID card number, and other details, through data leaks, phishing, or fake calls. Using this information, they craft a silicone or rubber fake finger to bypass biometric checks at SIM franchises. The moment the new SIM is activated, the victim’s network goes offline, and all OTPs and financial messages are redirected to the criminals. Experts warn that if mobile network suddenly disappears, showing “No Service” or “Emergency Calls Only,” it should never be ignored. Immediate contact with the mobile operator or visiting a franchise is essential. Citizens should also check periodically how many SIMs are registered under their ID card, using codes and online services available in Pakistan. Banking safety measures are equally crucial, SMS and email alerts must be active to detect unusual transactions, strong and unique passwords should be used, and two-factor authentication must be enabled wherever possible. Receiving an OTP without requesting it should prompt immediate contact with the bank, as it could indicate a hijacking attempt. Pakistan’s telecom and financial sectors must adopt international security standards, including anti-spoofing technology, AI-driven monitoring, and real-time alert systems. Systems should automatically flag and alert if multiple SIMs are attempted under the same ID in a short period, because, as this case proves, fraudsters are now capable of hijacking lives with a fake finger and a SIM card. Scam alert issued about illegal online trading platforms in Pakistan