Key Takeaways
- The Pakistan Telecommunication Authority (PTA) has proposed mandatory identity verification for foreign SIMs and eSIMs.
- The regulations aim to curb financial fraud, cybercrime, and security risks.
- Telecom operators would be required to develop and implement KYC mechanisms for inbound roamers.
The Pakistan Telecommunication Authority (PTA) has proposed new regulations aimed at enhancing security and curbing financial fraud through mandatory identity verification for foreign SIMs and eSIMs operating on Pakistani mobile networks.
Under the proposed International Roaming (Inbound) Regulations, 2026, international roaming connections used for 90 days or more within any 180-day period would be classified as permanent roaming, potentially exposing such connections to suspension or blocking if operators cannot establish their legitimate temporary use.
The PTA has identified several risks associated with untraceable foreign SIMs and eSIMs, including spoofed calls, SMS-based phishing, extortion, and e-commerce fraud. The authority also flagged concerns about social-media accounts allegedly being used for fake news, hate speech, and other unlawful activities.
The proposed regulations seek to bring international roaming services and travel SIM/eSIM aggregators under the PTA’s regulatory oversight. Currently, inbound international roaming connections can access Pakistani cellular networks without undergoing local Know Your Customer (KYC) verification, raising concerns over the use of untraceable foreign SIMs and eSIMs for fraudulent activities.
The draft framework requires telecom operators to develop and implement a KYC mechanism to capture and verify the identity of inbound roamers. The proposed information requirements include passport or travel-document details, nationality, roaming SIM/eSIM identifiers, home operator details, and, where available, arrival date and expected duration of stay.
Verification could be carried out through activation procedures, welcome SMS links, a PTA-approved digital portal, or coordination with immigration and border-control authorities. Alternative arrangements would be prescribed where SMS-based verification is technically unfeasible, including for data-only eSIMs.
The draft also proposes compulsory PTA registration for travel SIM/eSIM aggregators operating in Pakistan. Registered entities would have to disclose their underlying network providers and distribution channels, designate a local focal person, and share information about SIM/eSIM issuance, activation, KYC particulars, and usage with the authority.
Telecom operators would be required to deploy monitoring systems to identify permanent roaming and suspicious traffic patterns, maintain specified roaming records for at least 12 months, and submit periodic reports to the PTA. Where suspicious or abusive use is detected, operators could seek subscriber information from foreign home operators, with the draft prescribing response periods of 72 hours, or 24 hours in cases involving an imminent security or fraud risk.
The proposed rules also provide for a centralised database of blocked inbound roamers to prevent users whose connections have been suspended from accessing Pakistani networks through another operator. Operators would be required to block or suspend roaming services where illegal or abusive activity is established.
