Skip to content

Cross-border

Partnership · international
RESTRICTED // INTERNAL--:--:-- PKT
13proposals awaiting decision
Live
financial fraud report — 2026-10-30Karachi · openSIM-swap wave reported across three operatorsGujranwala · openRansomware detonation on logistics sector hostMardan · openNCCIA-C-2026-100680 financial fraudKarachiNCCIA-C-2026-100512 financial fraudKarachiPhishing kit hosted on domestic VPSPeshawar · openCredential-stuffing burst against e-commerceIslamabad · open
illustrative data
Partnership · international

Where the money leaves

Domestic enforcement stops at the border. Value does not. This desk exists to make the crossing lawful, documented and fast — and to say plainly when it is neither.

6 international railsMLA 90-day target

Open cross-border requests

live
8

Preservation, disclosure and takedown notices currently in flight.

Requests inside target

computed from due dates
63%

Derived from each request's own SLA clock. 3 are overdue.

Takedowns acted

this period
4

Persistence and disclosure are counted separately from removal.

Value at the border

reported
Rs 11.0 cr

IL illustrative — reported value, not recovered value.

Corridor share

of cross-border reports
34
Gulf
24
Europe
19
North America
12
South-East Asia
6
Africa
5
Other
Gulf34%48h SLA
Europe24%72h SLA
North America19%96h SLA
South-East Asia12%240h SLA
Africa6%240h SLA
Other5%480h SLA

Corridor brief — Gulf

highest value per report

Value concentrates in two exchange venues reachable under an existing cooperation path. The practical constraint is time: the freeze request is only useful while the asset is still on the venue, and the current median is 46 minutes from identification to filing.

Preservation goes first and disclosure second, always. A disclosure request without a preservation notice attached is the most common avoidable failure in this corridor — the data is gone by the time authority is granted.

Crypto off-ramps

venue reachability
reachableExchange ARs 4.1 cr
Freeze rail available
reachableExchange BRs 2.9 cr
Freeze rail available
no railExchange CRs 1.9 cr
No agreement — gap G03
no railOTC desk DRs 1.2 cr
No interface
reachableExchange ERs 88.0 lakh
Slow response
Gap G03 — 6 of 14 venues reachable.

Playbooks

approval and turnaround
RequestOwnerApprovalTargetState
Platform preservationLiaisonOfficer96h retentionoperating
Platform disclosureLiaisonDirector7-day targetoperating
INTERPOL notice / diffusionLiaison + NCBDirector + NCB2-day targetoperating
Mutual legal assistanceLegal wing + LiaisonDG / MoI / MoFA90-day targetslow
Crypto exchange freezeCrypto Tracer + LiaisonDirectorportal responsepartial

Requests in flight

SLA countdown
KindPartnerCaseDue inStatus
PreservationNADRANCCIA/CC/2026/3140··:··overdue
PreservationSuspect-register partnersNCCIA/CC/2026/3114··:··overdue
DisclosureState Bank of PakistanNCCIA/CC/2026/3134··:··overdue
DisclosureHash-blocking services / NGO helplinesNCCIA/CC/2026/3117··:··open
TakedownPlatforms (Meta, Google, TikTok, X, Telegram)NCCIA/CC/2026/3140··:··open
PreservationCourts (e-filing)NCCIA/CC/2026/3123··:··open
DisclosureState Bank of PakistanNCCIA/CC/2026/3114··:··responded
DisclosureTelecom operatorsNCCIA/CC/2026/3140··:··responded

Corridor governance

what is lawful here
Preservation before disclosure. Always, and in that order. Preservation asks a platform to keep what it already holds; disclosure asks it to hand data over. The first is faster and protects the second.
No direct foreign access. This platform never reaches into another jurisdiction's systems. Evidence arrives by treaty, by network or by provider policy — recorded with its instrument.
Transport is not acceptance. A platform acknowledgement is logged as transport. It never becomes “resolved”, and it is never counted as a success metric.
Requests counted: 8 · median response tracked separately from acknowledgement63% within target