Pakistan's cybercrime agency arrested an independent journalist on the night of September 5, 2026, hours after he uploaded a vlog about who would coordinate the country's counter-terrorism authority. What happened next is a useful test of the 2025 amendments to the Prevention of Electronic Crimes Act (PECA).
What happened
Bilal Ghauri posted a vlog on the appointment of the National Counter Terrorism Authority (Nacta) national coordinator. According to Dawn's court reporting, the National Cyber Crime Investigation Agency (NCCIA) arrested him that night. The Digital Rights Foundation reports that the FIR invokes PECA Section 20 (offences against the dignity of a natural person) and Section 26-A (false and fake information).
The agency asked for 10 days of physical remand. A magistrate granted three. On September 10, after the agency cited difficulty accessing Ghauri's two-step-verified social media accounts, the magistrate added two more days. Ghauri's lawyer, Imran Shafiq, countered that the agency had already said the required recoveries had been made, and that it held his client's phone and laptop. On September 12, according to VoicePK, a court refused five more days of physical remand. It said the accused had already spent sufficient time in physical custody and that remand should not be treated as routine. Ghauri went to judicial custody, and a post-arrest bail application followed.
The Committee to Protect Journalists called the detention an attack on press freedom and demanded his release. His defence says no specific false statement in the vlog has been identified.
The strongest case for the law
The state's argument deserves a fair hearing. Coordinated falsehoods can cause real harm. Pakistan has seen viral rumours inflame communal tension and panic. A 2025 law that targets only intentional falsehoods, and only those likely to cause fear, panic or disorder, is narrower than a blanket ban on "false news". Many democracies also let investigators seize devices and question suspects. A dedicated cybercrime agency with specialist skills is a reasonable institutional choice.
Why the design still fails
The problem is what the text asks investigators and courts to decide. Journalism Pakistan's explainer summarises Section 26-A as criminalising information a person knows or has reason to believe is false and likely to create fear, panic or unrest, with up to three years' imprisonment, a Rs2 million fine, or both. Three of its key terms are elastic: "false or fake", "likely to cause", and "reason to believe". The last is a negligence standard sitting inside an offence that is described as intentional. That lets an investigator treat a commentator's disputed opinion or unflattering framing as a crime before any court has found a false statement.
The Ghauri case shows this in practice. A vlog about a public appointment is commentary on a public official's selection. Whether it is fair, sceptical or wrong is a matter for public rebuttal. If investigators can hold a journalist in physical custody for days while they work out what exactly was false, the process has become the punishment. Amnesty International warned when the amendments passed that their vague framing would chill what little was left of online expression, and that the bill was presented without consultation or debate.
The custody reasoning is also weak. Remand exists to obtain evidence that cannot be obtained otherwise. Two-step verification is a basic security feature that millions of ordinary users enable. Treating it as a reason to hold a person in custody creates a perverse signal: protecting your accounts becomes grounds for detention. Investigators can seek a court order for account data through lawful process without holding the account holder. The September 12 court's remark that physical remand should not be routine is the right corrective, but it came a week into the case.
The proportionate alternative
The 2025 amendments, gazetted on January 29, 2025 by the National Assembly of Pakistan, also created the NCCIA and a social media regulatory authority. Good policy would keep the parts that address fraud, impersonation and harassment, and fix the speech offence:
- Require an identified false statement of fact. The FIR should say which statement is false and why, before arrest.
- Require proof of actual harm or specific intent. Drop the "reason to believe" standard and the general "likely to cause unrest" trigger.
- Set a high bar for arrest. Notice and summons should be the default for a journalist whose work is public and whose identity is known.
- Treat commentary on public officials as protected. Rebuttal and correction, not custody, should be the remedy for contested claims about appointments and policy.
- Publish enforcement data. Pakistan's public should be able to see how often Section 26-A is invoked, against whom, and with what outcome.
What to watch
Ghauri's bail outcome and the court's reading of Section 26-A will matter beyond one vlogger. If the offence can be sustained on a disputed characterisation of a public appointment, every commentator covering security policy is exposed. If courts insist on an identified, provably false statement, the provision may be confined to genuine disinformation. Pakistan's tech sector also has a stake. Predictable, narrow rules for online speech are part of the environment that investors and platforms weigh when deciding where to build.