No Subsidy, Only Scam: Authorities Warn Against Electricity Bill QR Code Trap Designed to Steal Your Data
By Sayed Abdullah | May 24, 2026
- How the fake electricity subsidy scam works
- The four-step trap you need to recognise
- What the Power Division says about protecting your data
- Why Pakistan's digital landscape makes such scams so effective
Here we go again. Just when you think the scams targeting ordinary Pakistanis can't get more creative, someone figures out a way to weaponise the one thing every household dreads: the electricity bill. The Power Division has now issued an urgent public advisory warning of a sophisticated digital scam that promises electricity subsidies — the kind of financial relief every family desperately wants to hear about — but delivers something far more sinister. Data theft. Pure and simple.
And honestly, if you're not paying close attention, it's easy to see why someone might fall for this. The scammers are not sending crude text messages full of spelling errors anymore. They're using fake QR codes. They're building unofficial platforms. They're asking for a six-digit verification code — the kind of thing you've been trained by your bank and your mobile operator to provide without thinking. The whole operation is designed to feel legitimate. That's what makes it dangerous.
How the Trap Works — Step by Step
The Power Division's advisory laid out the scam's mechanics in unusually clear detail, and it's worth understanding exactly how this thing is structured because the layers are what make it convincing. First, you receive a message — it could be on WhatsApp, it could be on social media, it could even be printed on a flyer stuck to a lamppost — telling you to scan a QR code or click a link to access an electricity subsidy. The government is finally giving relief, the message implies. Just scan here.
That's step one. Step two: you scan or click, and you land on a platform that looks official enough — maybe it has a government logo, maybe it uses the right colours. You're asked to input your consumer details: name, address, reference number, perhaps your CNIC. Step three: you're prompted to enter a six-digit verification code. The scammers frame this as a security measure, a way to confirm your identity. In reality, it's the final piece they need to harvest your personal data. Step four: your information is gone, collected by criminals who now have enough to commit identity fraud, access other accounts, or sell your details to the highest bidder.
The Power Division could not have been clearer in its warning. "This entire mechanism is illegal, unauthorized, and deliberately designed for data theft," a spokesperson said. The government is not running any QR code-based electricity subsidy scheme. If someone tells you they are, they are lying to you.
What You're Actually Giving Away
Let me be blunt about what's at stake here. When you hand over your electricity consumer details and your CNIC information and a verification code — even one that seems harmless — you're not just giving up a few numbers. You're handing over the digital keys to your identity. With that combination, a skilled fraudster can attempt to access your mobile wallet, apply for loans in your name, hijack your social media accounts, or even impersonate you in official transactions. In Pakistan, where digital literacy remains uneven and where a single CNIC copy can unlock a disturbing amount of bureaucratic access, the damage from a data breach can take years to undo.
Law enforcement agencies have been alerted, and the Power Division says criminal networks behind the campaign are being actively pursued. But catching cybercriminals takes time, and in the meantime, the best defence is simple awareness. If someone asks you to scan a QR code or click a link to claim an electricity subsidy, don't do it. Walk away. Tell your parents about this. Tell your neighbours. Tell anyone who might not be reading these advisories on their own.
The Bigger Problem: Scams Are Getting Smarter
This electricity bill scam is not an isolated incident. It is part of a much larger trend of digital fraud that has been accelerating in Pakistan as more services move online. Just last week, the Pakistan Telecommunication Authority warned WhatsApp users about the risk of losing access if their SIM cards were unverified — a reminder that the boundary between our digital and physical identities has essentially collapsed. When your phone number is your bank account login, your electricity bill portal access, and your WhatsApp identity all at once, a single point of failure can cascade into a complete personal security crisis.
The scammers understand this better than the average citizen does. They know that Pakistanis are hungry for financial relief, that electricity bills are a source of genuine anxiety, and that the promise of a subsidy is almost impossible to ignore. They exploit that desperation with carefully constructed traps that look official enough to bypass suspicion. The Power Division's advisory is necessary, but advisories only reach the people who are already paying attention. The real challenge is reaching the elderly uncle in a small town who just got his first smartphone and doesn't yet know that not every QR code is safe to scan.
The practical takeaway is simple but worth repeating: legitimate government subsidies are not distributed through random QR codes or links sent over WhatsApp. Your electricity distribution company has official communication channels — their website, their customer service centres, their verified social media accounts. If you receive a message about a subsidy that doesn't come through those channels, it's fake. Delete it. Report it. And for the love of your data, do not scan it.
🔗 Also Read: PTA Announces Blocking of WhatsApp Access on Unverified SIMs
Have you or someone you know encountered a QR code scam like this? What do you think the government should be doing beyond issuing advisories to actually catch these criminals? Let me know in the comments.
Sayed Abdullah is the founder of Prime Pakistan. Based in Karachi, he writes about technology, digital security, and the everyday scams that affect ordinary Pakistanis. Read more.
Frequently Asked Questions
Q: Is the government actually giving electricity subsidies through QR codes?
A: No. The Power Division has confirmed that no such programme exists. Any message claiming to offer subsidies via QR code is fraudulent.
Q: What happens if I already scanned the code and entered my details?
A: Contact your electricity distribution company immediately and consider filing a report with the FIA's cybercrime wing. Monitor your accounts for any suspicious activity.
Q: How can I verify if an electricity-related message is legitimate?
A: Only use the official website, mobile app, or customer service centre of your electricity distribution company. Ignore messages from unofficial sources.
0 Comments