A sessions court has ordered the National Cyber Crime Investigation Agency (NCCIA) to investigate alleged unauthorised transactions worth Rs4.8 million from a Gul Plaza fire victim’s bank account.
The court directed the agency to submit its investigation report within 45 days.
Shopkeeper Claims Funds Were Transferred Without Consent
Shopkeeper Muhammad Shahzad approached the court under Sections 22-A and 22-B of the Code of Criminal Procedure.
He sought registration of a case over the disputed transactions from his account at a private bank.
Shahzad said his shop at Gul Plaza was destroyed in a fire.
The Sindh government later provided him Rs7 million in financial assistance to help rebuild his business.
According to his application, Rs1 million was transferred to an account belonging to Muhammad Safdar on June 26.
Another Rs3.8 million was transferred to an account belonging to Samiullah the following day.
Shahzad said he did not authorise either transaction.
He also denied sharing his banking credentials or password with anyone.
Bank Gives Different Account
The private bank presented a different position before the court.
It said the disputed transactions were conducted through its digital banking application.
The bank said its internal investigation showed that the transactions originated from the applicant’s own device.
It also maintained that the transactions were completed using confidential banking credentials.
The competing claims prompted the court to order a formal investigation.
NCCIA Ordered to Preserve Digital Records
After hearing the complainant, the bank, NCCIA representatives and other parties, Additional District and Sessions Judge (South) Abdul Zahoor Chandio directed the NCCIA director general to conduct a comprehensive investigation.
The investigation will be conducted under the Prevention of Electronic Crimes Act (Peca) and other applicable laws.
The investigating officer was ordered to preserve all records connected to the disputed transactions.
The court also directed the banks holding the beneficiary accounts to preserve relevant records.
The bank where Shahzad maintained his account was similarly ordered to secure all transaction and account-related records.
State Bank Asked to Review Security Compliance
The court also involved the State Bank of Pakistan in the matter.
The central bank was directed to examine the case from a regulatory perspective.
It must determine whether the banks involved complied with applicable digital banking security requirements.
The State Bank must also establish whether any regulatory proceedings have already been initiated or are required.
A report is to be submitted within 45 days.
Court Highlights Digital Banking Security
The court said the matter was not limited to recovering the disputed money.
It stressed that public confidence in the banking system depends on effective protection against unauthorised electronic transactions.
The court also noted that Pakistan’s regulatory framework requires banks to maintain appropriate security controls for digital banking services.
The NCCIA and State Bank investigations are expected to determine how the disputed transactions were executed and whether any banking security requirements were breached.
