Skip to content

Asset recovery

Recovery · restitution
RESTRICTED // INTERNAL--:--:-- PKT
13proposals awaiting decision
Live
financial fraud report — 2026-10-30Karachi · openSIM-swap wave reported across three operatorsGujranwala · openRansomware detonation on logistics sector hostMardan · openNCCIA-C-2026-100680 financial fraudKarachiNCCIA-C-2026-100512 financial fraudKarachiPhishing kit hosted on domestic VPSPeshawar · openCredential-stuffing burst against e-commerceIslamabad · open
illustrative data
Recovery · restitution

Money back to the people it was taken from

Held, attached and returned are three different states and must never be added together. This screen keeps them apart, because the difference is the whole story.

16 assetsSBP instruction required for payoutIL

Held

under a bank hold
Rs 1.6 cr

A hold is a request. It is not a recovery.

Attached

court-ordered
Rs 1.7 cr

Attached pending adjudication.

Returned or forfeited

final state
Rs 5.5 cr

The only figure that is genuinely recovered.

Claims matched

victim entitlement
Rs 72.9 lakh

24 claims · 4 paid.

Asset position

held → attached → returned
Held 15,705,658Attached 16,635,401Returned / forfeited 55,418,078
Held17.9%
Attached19.0%
Returned63.1%

Claims pipeline

matching → matched → paid
4
Matching
16
Matched
4
Paid

Payout requires a manual State Bank instruction — a bulk payout rail does not exist yet (gap G24). Until it does, every figure on the right of this chart is manual work.

Asset register

by value
CaseKindDescriptionValueHeld byStatus
NCCIA/CC/2026/3115Bank balanceBank balance identified in mule-chain analysisRs 83.6 lakhHBLheld
NCCIA/CC/2026/3147Point-of-sale terminalBank balance identified in mule-chain analysisRs 82.0 lakhHBLreturned
NCCIA/CC/2026/3143Crypto (BTC)Crypto (BTC) identified in mule-chain analysisRs 77.9 lakhHBLforfeited
NCCIA/CC/2026/3111VehiclePoint-of-sale terminal identified in mule-chain analysisRs 76.3 lakhMeezan Bankforfeited
NCCIA/CC/2026/3133Wallet balanceProperty identified in mule-chain analysisRs 71.5 lakhUBLforfeited
NCCIA/CC/2026/3140Point-of-sale terminalPoint-of-sale terminal identified in mule-chain analysisRs 69.9 lakhUBLattached
NCCIA/CC/2026/3150Bank balanceWallet balance identified in mule-chain analysisRs 66.5 lakhUBLreturned
NCCIA/CC/2026/3144Mobile handsetVehicle identified in mule-chain analysisRs 57.4 lakh1LINKreturned
NCCIA/CC/2026/3136Wallet balanceBank balance identified in mule-chain analysisRs 52.8 lakhHBLforfeited
NCCIA/CC/2026/3102PropertyVehicle identified in mule-chain analysisRs 49.7 lakhSadaPayattached
NCCIA/CC/2026/3128Crypto (USDT)Mobile handset identified in mule-chain analysisRs 46.7 lakhUBLattached
NCCIA/CC/2026/3141Point-of-sale terminalCrypto (USDT) identified in mule-chain analysisRs 44.5 lakhEasypaisareturned
NCCIA/CC/2026/3134Wallet balanceMobile handset identified in mule-chain analysisRs 35.3 lakhMeezan Bankheld
NCCIA/CC/2026/3102Crypto (BTC)Point-of-sale terminal identified in mule-chain analysisRs 25.2 lakh1LINKforfeited
NCCIA/CC/2026/3105Crypto (BTC)Property identified in mule-chain analysisRs 20.0 lakhEasypaisaheld
NCCIA/CC/2026/3127PropertyPoint-of-sale terminal identified in mule-chain analysisRs 18.2 lakhJazzCashheld

Claims matching

victim entitlements
Victim refAssetEntitlementStatusMatched
VIC-C24DBCast_01Rs 8.6 lakhmatched2026-10-12
VIC-FA691Cast_05Rs 7.2 lakhmatching2026-09-14
VIC-93B170ast_02Rs 7.1 lakhmatched—
VIC-E2758Cast_03Rs 6.3 lakhmatched—
VIC-193979ast_06Rs 5.6 lakhmatched2026-09-09
VIC-5C0782ast_16Rs 5.3 lakhmatched2026-10-22
VIC-5312E3ast_06Rs 4.9 lakhmatching2026-09-11
VIC-F9668Cast_03Rs 4.9 lakhpaid2026-09-15
VIC-744B03ast_11Rs 4.6 lakhmatched2026-10-13
VIC-269259ast_02Rs 4.6 lakhmatching2026-10-12
VIC-33EDAAast_04Rs 4.5 lakhmatched—
VIC-428955ast_01Rs 3.8 lakhmatched2026-09-16
VIC-AE134Aast_12Rs 3.3 lakhmatched2026-10-04
VIC-C7C617ast_09Rs 3.1 lakhpaid2026-10-09
VIC-1F7F7East_14Rs 2.9 lakhmatched2026-10-23
VIC-3EBFAFast_07Rs 2.9 lakhmatched2026-09-02
VIC-466DD8ast_04Rs 2.2 lakhmatching2026-10-29
VIC-54F371ast_08Rs 1.8 lakhmatched2026-09-17
VIC-F06F73ast_07Rs 1.7 lakhpaid2026-10-17
VIC-733071ast_13Rs 1.7 lakhmatched—
VIC-1BE47Dast_15Rs 1.4 lakhmatched2026-09-30
VIC-990779ast_08Rs 1.4 lakhpaid2026-09-05
VIC-2A9D4Fast_05Rs 1.1 lakhmatched2026-10-27
VIC-3BC03East_10Rs 1.1 lakhmatched2026-09-02

Reporting discipline

why the three states stay apart
Held is not recovered. Reporting held value as recovery is the most common dishonest figure in cybercrime reporting. It flatters the agency and misleads the victim.
Attachment is not restitution. A court order freezes the position. It does not put money in anyone's hand until an adjudication completes.
Payout is the only success. 4 claims have actually been paid. That is the number the public is entitled to see.