Pakistan's National Cyber Crime Investigation Agency (NCCIA) took journalist Muhammad Bilal Ghauri into custody in the early hours of 6 September 2026. The FIR (No. 143/2026) invokes Sections 20 and 26-A of the Prevention of Electronic Crimes Act (PECA). According to Journalism Pakistan's account of the remand hearing, it rests on an X post and a 16-minute YouTube vlog from 5 September about Maj Gen Faisal Naseer's appointment as national coordinator of the National Counter Terrorism Authority (NACTA). A judicial magistrate granted three days of physical remand against the ten the agency sought. He was later released on bail against Rs100,000 surety bonds, as reported on 16 September. The charges are allegations that no court has tested.
The case for the law
The government's argument deserves a fair hearing. Pakistan has faced coordinated online disinformation, including during security incidents. Falsehoods that spread faster than a correction can cause real harm, and a state is entitled to prosecute deliberate fabrication that incites panic. Officials defended the 2025 amendments on exactly these grounds, as Digital Rights Foundation's tracking of the amendment debate records. A dedicated cybercrime agency is also better placed than ordinary police to handle digital evidence.
What the Ghauri case shows
The problem is not that the state may prosecute lies. It is that Section 26-A, inserted by the PECA Amendment Act 2025, lets an investigating agency decide what counts as false. As described in Global Voices' analysis of PECA's use, the provision carries up to three years' imprisonment and a fine of up to Rs2 million for spreading false information.
Ghauri's defence lawyers told the court that neither the FIR nor the remand request identified the specific statement in the vlog that was false. They said he had discussed a publicly issued government notification. They also said he was taken into custody without an inquiry notice or any chance to explain his position. The FIR was registered on behalf of the state through an NCCIA technical assistant, so the agency that investigated the commentary also stood as its complainant. Ghauri told the court his commentary concerned NACTA's institutional performance, not Naseer personally.
If those accounts hold, the offence has shifted from publishing a provably false fact to publishing commentary an official dislikes. A statute that works this way chills criticism of appointments to security bodies, which is the kind of public-interest scrutiny a free press exists to provide. The Committee to Protect Journalists calls the detention a 'disturbing attack on press freedom' and places it in an escalating pattern. It cites the NCCIA's 29 July 2026 summons of Asad Ali Toor over alleged 'false or fake information'. It says the information minister did not respond to its request for comment.
The record that precedes it
The vagueness concern is not new. In April 2022 the Islamabad High Court struck down PECA's Section 20 on cyber defamation, because the phrase 'harms the reputation' was too subjective to meet constitutional standards. Digital Rights Foundation's legal analysis of the 2025 amendments cites that ruling (PFUJ v. President of Pakistan, Writ Petition No. 666/2022). It argues the new term 'aspersion', defined as 'spreading false and harmful information which damages the reputation of a person', revives the same defect. The Ghauri FIR invokes both Section 20 and Section 26-A, which suggests the 2022 problem has returned in a new form.
The drafting process compounded the risk. Lawyers told the Islamabad High Court that the amendments, passed in a matter of days, contain incorrect section numbering and contradictory definitions, including a doubly defined 'complainant'. They argued the Act violates Articles 19 and 19A of the Constitution. Petitions from journalist bodies are pending before the Islamabad High Court, as the DRF page above notes.
Why the numbers matter
Global Voices reports that the NCCIA registered 8,357 inquiries in 2025, and that 670 cases had been filed under PECA by June 2025. It also cites a 2021 report finding that in PECA's first five years, 16,905 inquiries produced only 496 cases, about 3%. A low conversion rate is not proof of abuse, since many inquiries are properly closed. But it shows that for most people, the process is the punishment: a midnight arrest, remand and legal costs, whatever a court eventually decides. Ghauri's bail ended his detention, not the case.
A narrower rule
A proportionate version of Section 26-A would be easy to describe. It would require the prosecution to identify the specific false statement in the FIR. It would require proof of knowledge of falsity and of a concrete, imminent harm, not a vague 'likely to cause unrest'. It would require an inquiry notice before arrest and judicial scrutiny before remand. And it would keep officials from acting as complainants in cases about speech aimed at them or their institutions. Satisfying those conditions would still let Pakistan act against real disinformation. It would also stop the offence from reaching analysis of a public appointment, which should be treated as protected commentary.
The Islamabad High Court's pending review is the best chance to set those limits. Until it does, the Ghauri case shows what a broadly drafted offence can do in an enforcement agency's hands.