The Pakistan Telecommunication Authority (PTA) has proposed mandatory identity verification for foreign SIMs and travel eSIMs operating on Pakistani mobile networks. The proposed rules also introduce a 90-day threshold for international roaming connections to address financial fraud, cybercrime, and security risks.

According to the draft International Roaming (Inbound) Regulations, 2026, foreign roaming connections used for 90 days or more within any 180-day period would be classified as permanent roaming. Telecom operators could suspend or block these connections if they cannot verify that the users have a legitimate reason for temporary use.

PTA Proposes KYC Checks and 90-Day Limit for Foreign Roaming SIMs in Pakistan

The proposed framework aims to bring international roaming services and travel SIM/eSIM providers under the PTA’s regulatory oversight.

PTA Seeks Mandatory Identity Verification

The PTA has raised concerns that foreign SIM cards and eSIMs can currently access Pakistani cellular networks without completing local Know Your Customer (KYC) verification.

According to the authority, this gap could allow criminals to use unverified connections for illegal activities while avoiding the identity checks required for locally issued SIM cards.

The PTA has identified several risks associated with these connections, including spoofed calls, SMS-based phishing, extortion, e-commerce fraud and other cybercrimes. It has also expressed concerns about the alleged use of social media accounts linked to such connections for spreading fake news, hate speech and other unlawful content.

The growing use of foreign SIMs as alternatives to locally registered connections could also weaken regulatory oversight. The authority has highlighted the potential use of these connections in machine-to-machine (M2M) and Internet of Things (IoT) devices, along with possible revenue losses for Pakistani telecom operators and the national exchequer.

Telecom Operators to Verify Foreign Users

Under the proposed regulations, mobile network operators would have to develop and implement a system to identify and verify people using inbound international roaming services.

The required information would include passport or travel document details, nationality, SIM or eSIM identifiers, the user’s home mobile operator and, where available, the arrival date and expected duration of stay.

Operators could complete the verification process through activation procedures, welcome SMS messages containing verification links or a PTA-approved digital portal. They could also coordinate with immigration and border-control authorities.

The draft also recognises that SMS-based verification may not work for every connection. Operators would therefore need alternative arrangements for cases where the technology is not suitable, including data-only eSIMs.

These measures are intended to make foreign roaming connections more traceable and help authorities identify users involved in suspicious activities.

Travel eSIM Providers to Register With PTA

The proposed framework would also require travel SIM and eSIM aggregators operating in Pakistan to register with the PTA.

These providers, which offer mobile connectivity to international travellers, would have to disclose their underlying network operators and distribution channels. They would also need to appoint a local representative or focal person to coordinate with the authority.

Registered providers would be required to share information about SIM and eSIM issuance, activation, KYC details, and usage when required under the proposed rules.

The PTA also plans to strengthen monitoring requirements for telecom operators. Companies would have to establish systems to identify permanent roaming connections and suspicious traffic patterns.

Operators would also need to retain specified roaming records for at least 12 months and submit periodic reports to the regulator.

Faster Response to Fraud and Security Risks

The draft regulations propose a mechanism for telecom operators to request subscriber information from foreign home operators when they detect suspicious or abusive activity.

Foreign operators would generally have 72 hours to respond to such requests. In cases involving an immediate security threat or fraud risk, the proposed response period would be 24 hours.

The framework also proposes a centralised database of blocked inbound roaming connections. This would help prevent users whose connections have been suspended from accessing Pakistani networks through another operator.

Telecom companies could suspend or block roaming services when credible information establishes that a connection has been involved in illegal or abusive activities.

Restrictions Proposed for IoT and M2M SIMs

The PTA has also proposed restrictions on the use of M2M and IoT SIM cards for ordinary consumer services, including voice calls, SMS messages, and general-purpose internet access.

These connections are primarily intended for communication between machines and connected devices. The proposed rules would allow the authority to approve genuine industrial and machine-connectivity applications on a case-by-case basis.

The measure aims to prevent specialised connectivity services from becoming an alternative route for bypassing the identity-verification requirements that apply to regular mobile users.

What the Proposed Rules Mean for Users

If implemented, the new regulations could introduce additional verification requirements for foreign visitors using roaming SIMs and travel eSIMs in Pakistan. Providers and telecom operators would also face greater compliance and monitoring responsibilities.

The proposed 90-day threshold could affect long-term roaming connections, particularly those that remain active in Pakistan for extended periods without sufficient evidence of legitimate temporary use.

However, the proposed rules do not require operators to automatically block every foreign SIM or eSIM after 90 days. The proposed framework allows operators to consider whether the connection has a legitimate temporary purpose.

The PTA says the proposed regulations aim to improve security, protect consumers, and bring Pakistan’s international roaming framework closer to international telecommunications practices.

The measures remain proposals under the draft regulations. Their final implementation will depend on the regulatory process and the rules ultimately adopted by the authority.