A judicial magistrate in Karachi has remanded six suspects into the custody of the Federal Investigation Agency (FIA) following their arrest in connection with a cybercrime operation that involved the theft of credit card data through spoofed calls. The suspects were arrested by the FIA’s Cyber Crime Wing on January 7 after a raid at an illegal call centre located in Block 2, PECHS.
The suspects—Muhammad Kashif, Umair Karim, Noshad Karim, Mehtab Ali, Obaid Akram, and Haider Karim—were presented before Judicial Magistrate (East) Yusra Ashfaq on Thursday, where the investigating officer, Ameer Ali Khoso, requested a 14-day physical remand to facilitate further investigation. The magistrate, however, questioned the delay in presenting the suspects, noting that they had been arrested over a week ago. Khoso explained that the suspects were initially presented to a different court, but the case was returned due to jurisdictional issues.
In a separate development, the defence counsel filed a motion seeking to have the suspects discharged under Section 63 of the Criminal Procedure Code. However, the court rejected this request and instead remanded the suspects in FIA custody for an additional two days.
The case stems from a complaint filed by Nawab Khan, a resident of Saadi Town, who reported the illegal call centre operation to the FIA. According to the FIR, the suspects were using social engineering tactics and spoofed calls to illegally obtain sensitive financial data from foreign nationals, specifically credit card information. The call centre, described as operating without valid business documents, was allegedly involved in a large-scale data theft scheme, compromising the security of individuals’ financial accounts.
Cybersecurity experts have raised concerns about the growing trend of using spoofed calls as a method of gaining unauthorized access to sensitive data. In this case, attackers appear to have exploited a combination of phishing techniques and social engineering to manipulate victims into divulging their credit card details. The use of “spoofed” phone numbers—where attackers disguise their real identity by mimicking trusted entities—makes the scam even harder to detect.
FIA investigators are working to trace the full extent of the operation, including potential links to other cybercrime networks. Given the sophistication of the attack, experts advise individuals to be vigilant when receiving unsolicited phone calls, particularly those requesting sensitive personal or financial information. The FIA has also emphasized the importance of reporting any suspicious activities through its CERT (Computer Emergency Response Team) portal to aid in the ongoing investigation.
This case underscores the need for continuous vigilance in cybersecurity practices, particularly in safeguarding against phishing and social engineering attacks that target individuals’ financial and personal data. The FIA’s proactive efforts highlight the critical role law enforcement plays in addressing cybercrime and protecting citizens from emerging digital threats.
