, SMS bombing is an offense. The law covers several areas applicable to this activity: Cyberstalking (Section 24):
SMS bombing may seem like a "fun" way to annoy a friend, but in the eyes of Pakistani law, it is a criminal act of harassment. As digital literacy grows, the authorities are becoming more adept at tracing these scripts back to their originators, making "anonymous" bombing a risky gamble for the sender.
While often dismissed as harmless pranks, SMS bombing in Pakistan is a form of cyber-harassment that carries significant legal and security risks. How SMS Bombers Work sms bomber pakistan
The transmission of harmful or unsolicited information for commercial or illegal purposes is also restricted. Federal Investigation Agency (FIA) Cybercrime Wing
The script automatically requests login codes or password resets from dozens of these services simultaneously. The victim's phone then becomes unusable as it is flooded with hundreds of legitimate OTP messages from various companies. The Legal Landscape in Pakistan Prevention of Electronic Crimes Act (PECA) 2016 , SMS bombing is an offense
SMS bombers do not typically send messages from a single phone. Instead, they exploit the OTP (One-Time Password) APIs of various legitimate Pakistani services, such as: E-commerce platforms (e.g., Daraz, Foodpanda) Banking and Fintech apps (e.g., Easypaisa, JazzCash) Ride-hailing services (e.g., Bykea, Indriver)
Sending unsolicited messages with the intent to coerce, intimidate, or harass any person is punishable by up to three years in prison or a fine of up to one million rupees. Unauthorized Access (Section 3): While often dismissed as harmless pranks, SMS bombing
is the primary body responsible for investigating these complaints. The Impact on Victims
Modern Android and iOS messaging apps have built-in spam protection that can automatically move repeated OTP requests to a "Spam" folder. Contact Your Service Provider:
Most smartphones allow you to silence all notifications except for those from your saved contacts. Report to the FIA: You can lodge a formal complaint at the FIA Cybercrime portal Use Spam Filters: