By Abdullah Usman Morai | Sweden

In an era where our lives are increasingly lived online, where emojis replace expressions and text messages substitute conversations, Pakistan is facing a growing menace in the form of fake social media identities. From bustling cities to rural villages, people are being targeted by cloned Facebook accounts, fake WhatsApp numbers, and impersonated Instagram profiles—often with devastating emotional and financial consequences.

Every day, thousands of Pakistanis receive friend requests from names they recognize—family members, classmates, old neighbors. These accounts appear authentic, complete with photos, status updates, and mutual friends. But behind the digital mask lies a malicious scammer, exploiting relationships, emotions, and technology to deceive and defraud.

This is no longer a rare or isolated issue—it has evolved into a full-fledged cybercrime epidemic, exploiting trust in a digital age that is still learning to protect itself.

From Casual Chats to Costly Traps

The method is deceptively simple but alarmingly effective. Scammers first clone a real social media profile—copying profile photos, stealing names, and sometimes even duplicating friend lists. They then send friend requests to people who know the real person. What follows is a friendly message that sounds innocent enough:

“Salam! Kaise hain aap? Sab ghar mein khair hai?”

The conversation starts warmly. The tone mimics familiarity. But soon, a fabricated crisis is introduced—lost luggage, a visa issue, an emergency hospitalization, or a stolen wallet abroad.

Let’s consider a real example that recently made waves in Lahore.

Naveed Ahmed, a software engineer, had flown to Germany on a work assignment. Meanwhile, back in Lahore, his cousin received a Facebook friend request from a familiar-looking profile—Naveed’s name and face, just a slightly altered username. The messages began cordially and transitioned quickly to a plea for help. The fake “Naveed” claimed he had been mugged in Berlin and urgently needed Rs. 100,000 to manage his hotel and new passport. Out of concern, the cousin wired the money via an online transfer. Only later, during a family video call, did the real Naveed learn of the scam. The fraudster had vanished, the money was unrecoverable, and the damage—both financial and emotional—was irreversible.

This isn’t a one-off incident. In Hyderabad, Shabana Bibi, a middle-aged housewife, received a friend request from her niece supposedly living in Dubai. A few voice notes later (conveniently distorted to avoid recognition), she was convinced of an emergency and sent multiple EasyPaisa transactions totaling Rs. 25,000. The truth came out during Eid greetings—her niece had never contacted her, let alone asked for money.

The Anatomy of a Scam: Why It Works

These scams succeed not because people are foolish, but because they are human. They rely on emotional manipulation, cultural values of hospitality, and the strong bonds of family. The fraudster plays on urgency, panic, and guilt to push the target into fast action.

Some common tactics include:

• Cloning existing accounts using public photos, copied bios, and duplicated friend lists.
• Using affectionate or respectful language, like “Aap kaise hain?” or “Aunty sab theek hain na?”, to sound familiar and comforting.
• Avoiding video or voice calls, claiming “low battery” or “poor signal,” to maintain the deception.
• Introducing an emergency scenario and gradually steering the conversation toward financial help via mobile balance, EasyPaisa, JazzCash, or bank transfer.

These scams often target the elderly, housewives, or those not familiar with digital safety protocols. They prey on love, trust, and concern, turning relationships into vulnerabilities.

Why Overseas Pakistanis Are Especially Targeted

Scammers are smart about their targets. They often impersonate Pakistanis living abroad, for a very specific reason: people assume that those living in Europe, the Middle East, or North America might run into trouble more easily, and might genuinely need help in a foreign land.

Messages like:

• “My passport got stolen.”
• “I can’t reach the embassy.”
• “I need to pay a fine or risk deportation.”

These are convincing stories, especially for those who haven’t traveled and don’t know how systems work overseas. The victim, wanting to help their relative or friend in need, responds with speed instead of skepticism.

And once the money is sent, the profile is deleted, the phone number is unreachable, and the scammers move on to their next target.

The Larger Problem: A National Digital Trust Crisis

Beyond the personal tragedies, this issue reflects a deeper, more disturbing reality: Pakistan lacks strong digital literacy and cyber hygiene. Many users still don’t know how to check the authenticity of a profile or secure their own accounts. Public awareness is low, particularly in rural areas where internet usage is growing rapidly without proper education on safety.

This makes the nation ripe for exploitation.

Social media companies have protocols for reporting fake accounts, but these are often slow and ineffective for localized scams. Law enforcement agencies, too, are understaffed or undertrained when it comes to handling such digital crimes. Victims rarely get justice. Most are left with embarrassment, financial loss, and shattered trust.

How to Protect Yourself and Your Family

While authorities need to step up, individuals also have a critical role in prevention. Here are key steps that can make a difference:

1. Verify First, Act Later

Always verify requests for help. Make a call—preferably a video call—to confirm. If they dodge the call, treat it as a red flag.

2. Don’t Accept Duplicate Friend Requests

If someone you already know sends you a new request, contact them through their original number or account. Report and block the fake profile immediately.

3. Educate the Elderly and Vulnerable

Parents, grandparents, house staff, and less tech-savvy relatives are most at risk. Hold regular discussions about online safety and encourage them to consult you before responding to any suspicious messages.

4. Review Privacy Settings

Change your profile visibility from “Public” to “Friends Only.” Hide your friend list. Limit who can see your personal information or download your photos.

5. Enable Two-Factor Authentication

Use two-step verification on Facebook, WhatsApp, and Instagram to prevent account takeovers.

6. Use Strong, Unique Passwords

Avoid using names, birthdays, or common words. A mix of characters, numbers, and symbols is best.

7. Report and Raise Awareness

Don’t ignore a fake account. Report it. Alert others on your friend list. The more informed your circle is, the fewer people fall victim.

What the Authorities Must Do

Digital safety cannot be the responsibility of individuals alone. The state and relevant authorities must treat this as a cybersecurity emergency. Here’s what must happen immediately:

• Strengthen the FIA’s Cyber Crime Wing

Increase budget, recruit trained professionals, and establish specialized units in every major city to handle digital fraud cases with speed and seriousness.

• Launch Mass Public Awareness Campaigns

Use national TV, radio, mobile alerts, and community centers to educate citizens, especially in rural areas, about fake social media scams and online safety.

• Build a Rapid Reporting System

A simple SMS, WhatsApp, or online portal should allow citizens to report scams, fake accounts, or digital blackmail. A quick response can save others from falling victim.

• Partner with Tech Platforms

Develop real-time monitoring partnerships with Meta (Facebook, Instagram, WhatsApp) to immediately flag suspicious activities from Pakistan-based numbers or accounts using local names and photos.

• Crack Down on Telecom Fraud

SIMs used in scams must be traced, deactivated, and penalized. NADRA and PTA can coordinate to identify repeated abuse and issue penalties.

Trust Must Be Earned—Even Online

In Pakistani culture, trust is woven into the fabric of society. We honor relationships, extend generosity, and believe in helping others in times of need. But in the digital world, this trust is being weaponized against us.

Fake social media IDs are not just annoying distractions—they are weapons of deception. They exploit the very values that bind us as a society. As our dependence on technology grows, so must our responsibility to use it wisely, critically, and cautiously.

Every friend request, every message, every forwarded link—pause, verify, think.

It is time we treat our digital spaces like our homes—locked, secured, and protected from strangers. The threat is real, and so is the responsibility.

This is not just a personal issue. It is a collective national concern.

And it starts with you.

Read: Reading for Our Lives

__________________

Abdullah Soomro, penname Abdullah Usman Morai, hailing from Moro town of Sindh, province of Pakistan, is based in Stockholm Sweden. Currently he is working as Groundwater Engineer in Stockholm Sweden. He did BE (Agriculture) from Sindh Agriculture University Tando Jam and MSc water systems technology from KTH Stockholm Sweden as well as MSc Management from Stockholm University. Beside this he also did masters in journalism and economics from Shah Abdul Latif University Khairpur Mirs, Sindh. He is author of a travelogue book named ‘Musafatoon’. His second book is in process. He writes articles from time to

The post Fake Social Media IDs in Pakistan first appeared on Sindh Courier.

By Nazarul Islam

Retaliation is the lodestone of any deterrence strategy. The question is whom to strike back against and how hard?

Charging individual hackers with crimes rarely works because so many operate outside the reach of U.S. law enforcement. Eastern European governments have been particularly unwilling to stop cybercriminals from operating within their borders.

Economic sanctions are another tool — but they have yet to push Russia to deal with its local ransomware groups such as DarkSide and REvil. Other countries directly support such criminal activity; North Korea notoriously uses an army of cybercriminals to raise money for the totalitarian regime.

To raise the stakes for its adversaries, the United States could launch online counterattacks on a hacking group or its host country. Retaliation measures taken could become more severe when ransomware jeopardizes public safety or access to necessities like healthcare, food and gasoline.

This appeared to be what Biden was seeking to convey during his June meeting with Vladimir Putin, when he handed the Russian president a list of 16 critical infrastructure sectors that Biden declared off-limits.

Such resolve must be backed up by more than words. For deterrence to be credible, the U.S. needs to send clear signals that it is prepared to retaliate proportionately — especially if state-sponsored hackers take down a power grid or disrupt the operation of a dam. Under international law, such actions are considered “use of force” against another country, and that puts a military response on the table.

Some experts argue that private companies also should have the right to counterattack. Among the provocative ideas are reviving congressionally issued letters of marque, a permit given to merchant ships to search out pirates and take back stolen assets by force in the 18th century.

A modern version would incentivize corporations to act as “cyber scouts” and share information with U.S. agencies in return for some immunity from fines and protection against lawsuits. A “hack back” bill introduced in Congress in 2019 would have gone further, allowing the private sector to use hacking tools against cybercriminals in the name of “active defense.”

These policies could, however, create more danger than they prevent. Ransomware attacks are frequently misattributed in the days after they become public. Private parties could unintentionally start an international conflict or escalate existing tensions. But the fact that these ideas are being taken seriously speaks to how recent approaches have fallen short.

Another way to deter ransomware attacks would be to deny hackers any gains from their successes. Regularly backing up data and exercising recovery can help, but it is not foolproof. The FBI advises against paying ransoms, but there is no consensus on whether banning ransom payments outright makes sense.

When ransoms are paid, the same digital ledger technology that powers bitcoin, ethereum and other cryptocurrencies can aid efforts to follow the money. For instance, the FBI watched DarkSide transfer its Colonial ransom haul across digital accounts, then moved in to seize about half the ransom, roughly $2.3 million. In addition, law enforcement agencies can try to make it harder to use cryptocurrencies to launder ransoms or purchase illicit goods.

Just two months after the Colonial Pipeline shutdown, another group of hackers stole sensitive data from Saudi Aramco — the largest oil company in the world — in an attempt to extort $50 million. That reflects the pernicious nature of problem: Left unabated, the scourge of hacking for ransom will extract ever-larger costs and cause wider disruptions that threaten our economic and national security.

The United States cannot rely on a passive, defensive strategy. Deterrence will require undermining everything that makes ransomware attractive by making it harder for hackers to profit — and quickly striking back against those who try.

Nazarul Islam

The Bengal-born writer Nazarul Islam is a senior educationist based in USA. He writes for Sindh Courier and the newspapers of Bangladesh, India and America. He is author of a recently published book ‘Chasing Hope’ – a compilation of his 119 articles.

The post Anatomy of Ransomware Crimes – Part II first appeared on Sindh Courier.