ISLAMABAD: In a shocking revelation, Pakistan Telecommunication Authority’s (PTA) online security system has allegedly suffered a major breach, leading to the theft of over one million International Mobile Equipment Identity (IMEI) numbers. Sources familiar with the matter disclosed that technical vulnerabilities in PTA’s Device Identification, Registration, and Blocking System (DIRBS) have allowed IMEIs from low-cost feature phones to be fraudulently assigned to smuggled premium smartphones, including iPhones and Samsung devices.
Industry insiders confirmed that Pakistan’s mobile phone manufacturing companies have raised alarms over this flaw, warning that it could result in billions of rupees in losses to the national exchequer. The Mobile Phone Manufacturing Association has formally notified PTA of the critical loophole and demanded urgent intervention to prevent further exploitation.
According to industry sources, the IMEIs of affordable phones priced around Rs2,000 are being illegally reassigned to high-end smuggled devices. This manipulation enables black-market dealers to bypass PTA’s security protocols and register illegal smartphones for use in Pakistan.
A confidential letter from the Mobile Phone Manufacturing Association, seen by TechJuice, highlights systemic failures in IMEI blocking mechanisms, resulting in the disconnection of legally imported smartphones owned by tax-paying consumers. Telecom companies have reported large-scale IMEI duplication, forcing them to replace devices for affected users.
Insiders claim that PTA officials were aware of these issues but failed to take corrective action. Moreover, allegations have surfaced that a key technical department employee has been receiving repeated contract extensions for the past seven years, raising serious concerns about conflicts of interest within the regulatory body.
Beyond the large-scale data breach, consumers have started reporting cases where their previously approved phones are suddenly being blocked.
A Rawalpindi resident recently shared his frustration after his Infinix Hot 10, purchased in 2022, was flagged as non-PTA compliant two years later. When he visited a repair shop in Saddar, Rawalpindi, he was told to contact Infinix’s franchise, where he was informed that he needed to pay Rs3,500 in PTA tax to unblock the phone.
“How can a phone that was PTA-approved at the time of purchase suddenly be blocked?” he questioned, urging experts to investigate.
Another user reported purchasing an Infinix Hot 40 with a PTA-approved sticker on the box. A month ago, they received a message from PTA claiming their IMEI was unregistered, but the message contained an IMEI with a missing digit. Assuming it was an error, they ignored it—until recently when one of the SIMs in their phone was completely blocked.
“This looks like large-scale corruption. How are legally purchased phones suddenly being marked as non-compliant?” they asked, demanding an official explanation.
Industry experts warn that the compromised data, reportedly accessible to both PTA and Customs, has fueled the unchecked smuggling of smartphones through airports and unofficial routes. Reports suggest that millions of iPhones and Samsung devices are entering the country illegally, with PTA-issued IMEIs being sold to legitimized these smuggled units.
If subjected to a full-scale audit, telecom networks could potentially expose one of Pakistan’s largest cyber frauds, with billions of rupees in revenue losses.
In response to these reports, TechJuice reached out to PTA officials for comments on the alleged IMEI manipulation, security lapses, and consumer complaints. However, as of the publication of this report, PTA has not responded to our request for clarification.
Given the scale of the breach, mobile phone manufacturers have urged the government and law enforcement agencies to launch an immediate high-level investigation into the matter. They have also demanded urgent system reforms to safeguard legitimate consumers and prevent further financial damage.