STAYING SAFE

CNIC privacy and the check sites

Sites promising to reveal a name, address or SIM list from a CNIC number are not legitimate services. Here is what can genuinely be checked, which official channels exist, and why handing your number to a lookup site is a bad idea.

UPDATED 2 SEPTEMBER 2026 · 6 MIN READ

Search for anything CNIC-related and you will hit a wall of sites promising to reveal a name, an address, a family tree or a list of registered SIMs from nothing but a number. Almost none of them are what they claim.

What is actually in NADRA’s database

NADRA holds a comprehensive citizen record: names, family links, addresses, biometrics, photographs. It is one of the largest identity databases in the world.

It is also not public. There is no open API, no searchable directory, and no legitimate route by which a general-purpose website can query it on your behalf. Access is limited to authorised institutions under specific legal arrangements.

So what are those lookup sites doing?

Broadly, one of three things:

  1. Making it up. Many return plausible-looking but entirely fabricated results — a generic name, a district guessed from the prefix, a fake SIM count — because the visitor cannot verify them.
  2. Recycling leaked data. Some serve records from old breaches. The data may be real, out of date, and unlawfully held.
  3. Harvesting. The lookup form is the product. You supply a real CNIC, sometimes with a phone number, and that becomes the site’s inventory.

None of these are worth handing a real identity number to, and the third actively harms the person whose number you enter — which may not be you.

A SIMPLE TESTIf a site offers to return personal details for any CNIC rather than one you can prove you own, it is not operating legitimately. Real verification services always tie the query to the person making it.

The legal position in Pakistan

This is not a grey area. The Prevention of Electronic Crimes Act 2016 (PECA) criminalises unauthorised access to an information system, and the unauthorised copying or transmission of data held in one. A service that pulls personal records against an arbitrary CNIC is doing exactly that, whether it queries a live system or serves data taken from an earlier breach.

Separately, the national identity database is not open to public query by design; access is restricted to authorised institutions under specific arrangements. A public website is not one of them.

The practical consequence for you: entering a real CNIC into one of these sites hands identity data to an operator working outside the law. If the number is not yours, you are exposing someone who never agreed to it.

The checks that are real

A few genuine self-service checks do exist. What they have in common is that they verify you before returning anything about you:

  • SIMs registered in your name. The Pakistan Telecommunication Authority operates the official service for this. It answers for your own number, from your own device.
  • Your NADRA application status. Available through NADRA’s own channels using the token or tracking reference you were given at the centre.
  • Your own record. Available at a NADRA Registration Centre with your card and biometrics — in person, because that is how they confirm it is you.

Anything outside these, offered by a third party for an arbitrary number, should be assumed fake.

What this site does, precisely

Worth stating plainly, because we are a CNIC-related site and you should hold us to the same standard:

  • We decode the structure of the first five digits into a province, division, district and — where documented — a named registration zone. That is public administrative information about the numbering scheme, not about people.
  • The decoding runs entirely in your browser. The lookup tool sends nothing to a server; there is no server-side lookup to send it to.
  • We hold no personal records of any kind and could not identify a cardholder if we wanted to.
  • A prefix is shared by hundreds of thousands of people. It is categorically not identifying information.

Our privacy policy sets out what we do collect, which is limited to standard analytics and advertising data, and the sources and ethics page carries our standing commitment never to add a SIM-information, number-tracking or person-lookup feature to this site.

Protecting your own number

  • Share a CNIC image only with institutions that need it, and prefer channels where you can see the recipient.
  • Be wary of “verification” requests arriving by SMS or WhatsApp. Legitimate bodies do not collect CNIC images through messaging apps.
  • Check your registered SIMs periodically through the official PTA service. Unrecognised connections are worth acting on quickly.
  • Do not enter a real CNIC into a site that promises to reveal personal details. There is nothing to gain and a real number to lose.
IF YOU JUST WANT THE DISTRICTThat much you can work out from the number itself, with no lookup service and no privacy cost. The guide to the thirteen digits explains the whole structure, and the lookup tool does the decoding locally.

COMMON QUESTIONS

Can I find someone's name and address from their CNIC number?

Not legitimately. NADRA's identity database is not public, and services claiming to return personal details from a CNIC number are either fabricating results or handling data obtained improperly.

Entering a real CNIC into such a site exposes it without gaining anything reliable.

How can I check which SIMs are registered on my CNIC?

Through the official channel operated by the Pakistan Telecommunication Authority, which returns results only for your own number and only to a device you control. Third-party sites offering the same check for any number are not operating within the rules.

What can this site tell me about a CNIC number?

Only the structure. It decodes the first five digits into a province, division, district and — where documented — a named local zone. It holds no personal records and cannot identify anyone.

Nothing you type into the lookup tool is sent anywhere; the decoding happens entirely in your browser.

Is it safe to share a photo of my CNIC?

Treat it like a bank card. Share it only with institutions that have a genuine reason to hold it, and prefer channels where you can see who is receiving it. A CNIC image is a common ingredient in identity fraud.

CONTINUE READING

READING THE NUMBERCNIC Number Format: What All 13 Digits Actually MeanA Pakistani CNIC number is 13 digits in a 5-7-1 pattern. This guide breaks down every part: the five-digit regional prefix, the seven-digit family and serial block, and the final check digit that also encodes gender.THE CODING SCHEMEHow CNIC Regional Codes Work: Province, Division, District, ZoneThe first five digits of a CNIC are a nested location code: province, then division, then district, then a local registration zone. This guide explains the scheme, how reliable each layer is, and why NADRA has never published the full table.REVERSE LOOKUPHow to Find the CNIC Code for Any District in PakistanGoing the other way: start from a district or city name and find its CNIC prefix. Covers the big cities, how to search the register, and why one city can have several codes.READING IT CORRECTLYWhy Your CNIC Code Doesn't Match Where You LiveThe regional prefix on a CNIC records where the card was registered, not where the holder lives. Here is why the two drift apart, what the prefix can and cannot prove, and why it is not a domicile certificate.

USE THE REGISTER

Look up a CNIC codeComplete district code listAll guides

Sources. Administrative data adapted from Wikipedia (CNIC, Administrative units of Pakistan, Districts of Pakistan) under CC BY-SA 4.0, with changes; prefix mapping cross-checked against public administrative and community-compiled lists. Reviewed 2026-09-02. Full sources, accuracy and ethics. Unofficial reference — not affiliated with NADRA, and not proof of identity or domicile.