A. Background: (1) BFIC336 of 31.10.25 about Cybercrime: Mobile sim Hacking lead to taking Rs 8.5M from Bank and KC Recommendation & Action (2) Other relevant matters in para C.  

B. Updated Commentary

Further to KQU 4147 dated 9.4.25, being an important matter, we would inform you about News One You tube video $35 Billion Fraud Case: Shocking Claims About a Pakistani Mastermind NCCIA reveals New details (Attachment 272.1) in the ensuing paragraph, with emphasis in bold & Underline for quick reading.

2. Faheem Akram of Khanewal is accused of running labelsbank.com from August 2023 to August 2026. Authorities claim the site exploited a foreign postal system by issuing a uniform “ticket” for all packages, sidestepping normal pricing and security checks.

3. Investigators say 5.1 million of those tickets were sold, producing an estimated direct loss of $126 million (about 6 billion PKR) to the affected country. That scale underlines how a single technical loophole can cascade into massive financial damage.

4. The NCCIA and other agencies launched an intensive 20-day probe: 35 raids, 47 interrogations, analysis of 122 CDRs, over 50 IMEI trackings, and review of 120 surveillance videos. That round-the-clock effort appears aimed at mapping the full network quickly.

5. Probes into family-linked accounts revealed heavy activity—16 accounts used by relatives showed a turnover of roughly 20 crore in a short span. Authorities have frozen these accounts while tracing the funds and beneficiaries.

6. A separate but connected operation targeted a large call center in Gulberg, resulting in 60 arrests (53 men, 7 women) and seizure of numerous electronic devices. Suspects allegedly impersonated U.S. telecom representatives to facilitate fraud.

7. The case reportedly ties to an international FBI inquiry; NCCIA says it apprehended at least one suspect connected to that overseas investigation. This highlights cross-border dimensions and the need for multinational cooperation.

8. An FIR has been lodged and the NCCIA is pursuing action under cybercrime statutes. Many arrested individuals are in remand, and courts are being urged to treat the case as a deterrent to organized call-center fraud.

9. Officials assert the total loss to the postal system amounts to $35 billion—an extraordinary figure that, if accurate, would signal deep systemic vulnerabilities and a very large-scale exploitation over three years.

10. Authorities continue to investigate beneficiaries, freeze assets, and coordinate with international partners. More arrests and disclosures about the network’s structure are expected as the probe progresses.

C. More Related QCs

(a) FRQC249 of 22.9.25 about Cyber Attack: KC Recommendation as EU Airports faced & Disruption 

(b) FRQC247 of 10.8.25 about Cyber Attack disrupted Pakistan Petroleum’s (PPL) IT Systems for ransom & KC Recommendation

(c) FRQC214 of 22.4.24 about Pak Suzuki Data Leakage and KCR 

(d) CoQC648 of 29.5.25 about SECP Cyber Security Advisory & KCR 

(e) FRQC195 of 24.2.24 about Cyber Threats surge by 17% in 2023; Be careful

(f) Official work at field formations: KTBA concerned at involvement of ex-FBR staff 

(g) KTBA slams access to taxpayers’ information 

D. Kasbati & Co Recommendation

Owing to matters in para A to C, KC reiterate our recommendations that all the entities should be careful about their Data security, in order to avoid such extreme adverse eventuality, which may ruin the entity; or at least affect its Good name and Goodwill.

The IT team and Internal Auditor may also consider the same on an urgent basis

External Auditors data may also be affected in respect of the entity, etc, hence, they should also be careful. 

E. Multiplication: Although all Commentaries are limited to the Subscribed IDs, you are allowed to share this QC to Impart Knowledge to the maximum number of relatives, groups, etc to save their Data too.

F. Further Details & Services: Should you require any clarification or explanations in respect of the above or otherwise, please feel free to email info.kasbati@professional-excellence.com.