Online Safety for Women and Children in Pakistan: Deepfakes, Cyber Harassment and Reporting Guide

AI deepfakes, cyber harassment and online abuse are not merely “internet problems.” They can affect a person’s dignity, safety, education, work, finances and family life. In Pakistan, recent research documents complaints involving harassment, hacking, blackmail, non-consensual intimate images and abuse targeting children. Families need practical steps to prevent harm, respond without blame and report incidents through appropriate channels.

This guide brings together recent Pakistan-specific research, official reporting routes and a simple family safety plan. It is educational information, not a substitute for legal advice or emergency assistance.

Quick answer: What should you do if someone is threatened by a deepfake or cyber harassment?

1. Prioritise immediate physical safety and emotional support. Do not blame or shame the person targeted.
2. Preserve evidence safely: URLs, usernames, dates, messages, transaction details and screenshots where lawful and safe. Do not forward intimate images or circulate harmful material.
3. Secure affected accounts from a trusted device: change reused passwords, enable multi-factor authentication, check active sessions and recovery details.
4. Report the content to the platform and ask trusted supporters not to repost it.
5. For a formal cybercrime complaint in Pakistan, consult the National Cyber Crime Investigation Agency (NCCIA) complaint portal and its official complaint FAQs. For confidential support, the Digital Rights Foundation (DRF) lists its Digital Security Helpline at 0800-39393.

What recent Pakistan research tells us

Online abuse is underreported, and helpline or complaint data should not be mistaken for the total prevalence of abuse in the population. Nevertheless, recent figures show why prevention and survivor-centred support matter.

• 3,012 new complaints in 2025: DRF’s 2025 Digital Security Helpline report recorded 3,012 new complaints and 776 follow-ups. It reported 2,586 instances of cyber harassment and 159 cases involving minors. DRF said women reported 1,709 cases, compared with 1,279 reported by men. These are cases received by one helpline, not a national prevalence survey. Read DRF’s 2025 report summary.
• 5,041 cases over 18 months: A separate DRF report published in May 2026 analysed new cases received from May 2024 to December 2025, highlighting hacking, AI-generated image abuse, blackmail, sextortion and coordinated harassment. Read the report announcement.
• A national policy response: In March 2026, Pakistan’s Ministry of Human Rights and UNDP announced the country’s first National Strategy on Technology-Facilitated Gender-Based Violence. The launch statement cited 8 million new female internet users in 2024, 135,000 cybercrime complaints that year, and 826 cases proceeding to prosecution—a reported 0.6%. These figures refer to the stated 2024 data and should not be read as current 2026 totals. Read UNDP’s announcement.
• Women-focused cyber awareness: Pakistan’s National CERT offers SAFER—Security Awareness for Female Empowerment and Resilience—to help women recognise and respond to digital threats. See the official SAFER programme.

What are AI deepfakes and image-based abuse?

A deepfake is synthetic or manipulated audio, image or video that makes a person appear to say or do something they did not. Abusers may use AI to fabricate intimate images, impersonate someone’s voice, create fake evidence or pressure a target into sending money or more material. A fake image can still cause real harm even when it is fabricated. The target is not responsible for someone else’s decision to create or distribute abusive content.

Other common threats include account takeover, impersonation, doxxing (publishing private identifying information), cyberstalking, threats, malicious rumours, phishing, sextortion and grooming of children.

A practical digital safety checklist for families

1. Secure accounts and devices

• Use a unique password for each important account; a reputable password manager can help.
• Enable multi-factor authentication, preferably using an authenticator app or passkey where available.
• Review recovery email addresses, phone numbers, logged-in devices and connected apps.
• Install operating-system and app updates; use a screen lock and device encryption where available.
• Set social accounts to private where appropriate and limit who can see location, school, workplace, phone number and family details.
• Agree on a family phrase or second-channel verification method for unusual requests for money, secrecy or urgent action.

2. Teach children without frightening or shaming them

Children should know that they can tell a trusted adult if someone asks for private images, requests secrecy, offers gifts in exchange for contact, threatens them, or makes them uncomfortable. Explain that a person online may not be who they claim to be. Avoid punishment-first reactions: fear of losing a phone can stop a child from asking for help. Keep conversations age-appropriate and repeat them as apps and risks change.

For schools and community organisations, combine digital literacy with safeguarding procedures, clear reporting contacts, staff training and a plan for responding to disclosures. Do not ask a child to repeatedly recount distressing details to multiple adults.

3. Respond to suspected deepfake or intimate-image abuse

1. Do not engage with the blackmailer. Avoid paying or sending additional material; payment does not guarantee deletion.
2. Preserve the trail, not the abuse. Save account names, URLs, message timestamps and threats. Avoid downloading or sharing sexual images, especially if a minor may be depicted. Do not ask others to resend the content.
3. Report and restrict access. Use the platform’s reporting tools for non-consensual intimate imagery, impersonation, harassment or child sexual exploitation. Ask trusted people not to comment, repost or quote-post the material.
4. Secure the account. Change passwords from a trusted device, revoke unknown sessions, check email forwarding rules and alert contacts if impersonation is occurring.
5. Get support. Contact a trusted person, DRF’s Digital Security Helpline, or a qualified local professional. If there is a credible threat of physical harm, seek immediate local assistance.
6. Use formal reporting routes. Check the current NCCIA complaint procedure and preserve the complaint reference. Procedures and legal requirements can change, so rely on official sources for the latest instructions.

Where to report online abuse in Pakistan

• NCCIA formal cybercrime complaint: complaint.nccia.gov.pk. The agency’s official FAQ also lists the Pakistan Citizen Portal, email and visiting a Cybercrime Reporting Centre as routes. Verify the latest details and nearest office through NCCIA FAQs.
• Digital Rights Foundation: DRF’s website lists its Digital Security Helpline at 0800-39393 for support with online harassment and digital threats. Check its site for current hours and available services: digitalrightsfoundation.pk.
• PKCERT SAFER: Awareness and resilience resources for women: official SAFER programme.
• Platform reporting: Report directly to the service where the content or account appears. Save the report confirmation and any case/reference number.

Privacy caution: Do not send passwords, one-time codes, identity documents or intimate material to people who contact you claiming they can “remove” content. Verify support organisations and officials through their official websites. Avoid publicly posting a survivor’s name or details without their informed consent.

Law, rights and responsible reporting

Pakistan’s cybercrime framework has changed, including amendments to the Prevention of Electronic Crimes Act in 2025. The NCCIA identifies itself as the authorised agency for cybercrime inquiries, investigations and prosecutions under the amended framework. Because legal provisions, jurisdiction and procedures are fact-specific, consult the current official text and a qualified lawyer for advice about an individual case.

When discussing a case publicly, distinguish allegations from established facts, avoid identifying survivors or children, and do not republish intimate or manipulated images “to expose” the abuse. Publicity can unintentionally amplify the harm.

How Project Tahaffuz supports awareness

Project Tahaffuz promotes practical physical and digital self-protection for individuals and families, with particular attention to women and children. Use its resources as an awareness starting point and pair them with verified reporting routes and survivor-centred support: Project Tahaffuz: Self-Defence and Cybersecurity.

You can also read our related guide, AI Deepfakes, Cyber Harassment and Online Safety: A Practical Guide for Pakistani Families, and visit DMMS for more digital strategy and awareness resources.

Frequently asked questions

What should I do if an AI-generated intimate image of me is posted online?

Do not blame yourself or forward the image. Save relevant URLs, account details, timestamps and threats without spreading the material; report it to the platform; secure your accounts; and seek support from DRF or another trusted organisation. For a formal complaint, consult the NCCIA portal and current official instructions.

Can a deepfake be reported if it is not real?

Yes. Fabricated content can still be used for impersonation, harassment, blackmail or other harm. Describe what happened accurately, preserve the surrounding evidence and use the platform’s reporting options and appropriate official channels. The legal classification depends on the facts and applicable law.

Should a family pay someone who promises to delete a deepfake?

Be cautious. Scammers may demand payment or credentials and then exploit the victim further. Do not share passwords or one-time codes. Verify any service independently and seek help from trusted support organisations and the platform’s official reporting process.

How can parents protect children without banning the internet?

Use age-appropriate privacy settings, device updates, supervised access where suitable, open conversations and clear rules about images, strangers, location sharing and secrecy. Make sure children know they can report a problem without being automatically blamed or punished.

Where can I get help in Pakistan?

Start with the official NCCIA complaint portal for formal cybercrime reporting and Digital Rights Foundation for digital-safety support. Check each organisation’s official website for current processes and availability.

Sources and further reading

• Digital Rights Foundation: 2025 Digital Security Helpline report summary (14 April 2026)
• Digital Rights Foundation: Digital threats against at-risk communities (14 May 2026)
• UNDP Pakistan: National Strategy on Technology-Facilitated Gender-Based Violence (March 2026)
• National Cyber Crime Investigation Agency: official complaint FAQs
• Pakistan National CERT: SAFER programme

Editorial note: Statistics are attributed to the organisations that published them. Helpline data is not a population-wide prevalence estimate. Reporting routes and laws may change; verify current official guidance. This article is for general education and does not replace legal advice.