Soneri Bank operations manager arrested for allegedly selling citizens’ CNIC data to scammers

The National Cyber Crime Investigation Agency (NCCIA) Lahore has arrested an operations manager of Soneri Bank’s Arifwala

LAHORE:  The National Cyber Crime Investigation Agency (NCCIA) Lahore has arrested an operations manager of Soneri Bank’s Arifwala branch over allegations of selling sensitive personal information of citizens and bank customers to criminal networks involved in financial fraud.

The accused has been identified as Irfan Ashraf, who was serving as the operations manager at the bank’s Arifwala branch. According to the NCCIA, he allegedly misused his access to confidential identification records to provide citizens’ personal information to fraudsters in exchange for money.

Investigators believe the information was subsequently used by criminal networks to establish fake bank accounts, obtain SIM cards through fraudulent means and carry out various forms of online financial crime.

Alleged Misuse of NADRA Verification Access

Additional Director NCCIA Lahore Atif Ameer told Minute Mirror that the accused had access to the National Database and Registration Authority (NADRA) database for legitimate banking verification purposes.

However, according to the official, the manager allegedly exploited this access for personal financial gain beyond his authorised professional responsibilities.

The investigation is examining how the confidential information was accessed, transferred and supplied to individuals allegedly involved in fraudulent activities. The case has also raised concerns about the protection of citizens’ personal information and the potential misuse of sensitive data by individuals entrusted with handling it.

Rs150 Per CNIC Record, More Than 100 Records Daily

According to the initial findings shared by the NCCIA, the accused allegedly charged Rs150 for providing information associated with an individual’s Computerised National Identity Card (CNIC).

Investigators further claim that he supplied data relating to more than 100 individuals daily to members of the suspected scam network. Based on the agency’s preliminary estimates, the accused was allegedly earning approximately Rs1.5 million per month through the activity.

Authorities suspect that the buyers used the information to facilitate identity-related fraud, create fraudulent accounts and target unsuspecting citizens through online scams, investment schemes and impersonation attempts.

The NCCIA is working to establish the full extent of the alleged operation, including the number of people whose information may have been compromised and the identities of those who purchased or used the records.

Devices and Records Examined as Probe Expands

Following the arrest, the NCCIA reportedly seized electronic devices, bank-related records and logs associated with the accused’s NADRA verification access. Investigators are examining this material to determine the scale of the alleged data leak and identify other individuals who may have participated in the network.

A case has been registered under relevant provisions of the Prevention of Electronic Crimes Act (PECA) and the Pakistan Penal Code, according to the information provided by the agency. Further investigation is underway, and additional arrests may follow if the allegations are substantiated.

NCCIA Announces Scrutiny of Bank Staff

Additional Director Atif Ameer said the agency had initiated a special audit of bank employees who possess access to NADRA verification facilities. The initiative aims to identify potential misuse of official access and strengthen safeguards against the unauthorised disclosure of citizens’ confidential information.

The agency has warned that bank officials found involved in the illegal sale of personal data will face legal action.

The case highlights the risks associated with the misuse of privileged access to sensitive databases. Such information, when obtained and circulated without authorisation, can expose citizens to identity theft, financial losses and other forms of cybercrime.

The investigation will now focus on tracing the alleged buyers, determining the number of affected individuals and establishing the extent of the suspected criminal network. The allegations against the accused remain subject to the legal process.