Pakistan Single Window CEO Syed Aftab Haider has disclosed that more than 10,000 Goods Declaration forms were tampered with due to a longstanding vulnerability in the WeBOC system that dates back to 2015. Speaking at a media briefing, he explained that the flaw allowed users to modify GD forms without any backend validation, enabling manipulation of declared quantities and item descriptions. He said the issue was serious enough to warrant the registration of FIRs, and he had advised the Federal Board of Revenue to initiate legal proceedings against the individuals involved.
The system loophole reportedly remained undetected for years and was exploited by users altering GD entries via browser-based scripts, bypassing the need for intervention from WeBOC or PSW technical teams. Haider clarified that although PSW assumed operational control of WeBOC in 2022, it lacks the authority to make backend changes without approval from Pakistan Customs, which retains control over the system’s architecture.
A March report by The Express Tribune revealed the large scale of tampering and raised concerns that the changes were made to evade substantial tax payments. Although Haider claimed that no government revenue was lost, the deliberate alteration of GD forms suggests financial motivations were at play, particularly since importers risked legal exposure through such actions. The scam has cast doubt on the integrity of GD forms, which serve as critical documents recording importers, agents, commodities, and associated duties.
According to PSW, the corrupt network avoided detection by not modifying the Harmonised System codes, instead targeting only the quantities and product descriptions. Haider also mentioned that WeBOC had not undergone a technical audit for several years, prompting PSW to initiate the hiring of external auditors to review the system’s security and performance. He emphasized that PSW’s role is limited to system management, while the design and approval authority lies with Pakistan Customs.
Commenting on a separate incident involving the clearance of smuggled vehicles as duty-paid, Haider noted that the breach occurred due to the misuse of user codes and was not linked to any WeBOC system malfunction. FBR has suspended the officers whose credentials were used in that case.
Haider also announced the upcoming launch of the Port Community System pilot project, scheduled for early August in Karachi and to be inaugurated by Prime Minister Shehbaz Sharif. Developed locally by PSW, PCS aims to automate and digitize all port-related transactions, offering real-time updates on vessel status, cargo flow, and berthing schedules to streamline coordination among port stakeholders. He stated that PCS would not directly speed up container clearance but would reduce paperwork and increase operational transparency.
He further highlighted the need to integrate port scanning systems nationwide. Currently, scanners at Karachi Port and the Torkham border are not electronically connected, which hampers efficient cargo monitoring. FBR is now working on integrating scanning equipment and deploying new systems to enhance the oversight of imported goods and reduce container dwell times.
