Back to BlogBlog · Cyber Law

    Deepfakes Pakistani Law: PECA Explained

    Pakistan's cybercrime law does not specifically define the term "deepfake." However, several provisions of the Prevention of Electronic Crimes Act (PECA)—particularly Sections 20, 24, and the newly introduced Section 26A—may apply depending on how AI-generated fake content is created, shared, or used.

    A
    Admin
    July 30, 20265 min read
    Deepfakes Pakistani LawPECA 2025Cyber CrimeAI Generated ContentSection 26ASection 20 PECAFake InformationDigital PrivacyPakistan Law BotOnline Defamation
    Deepfakes Pakistani Law: PECA Explained
    In short

    Pakistan's cybercrime law does not specifically define the term "deepfake." However, several provisions of the Prevention of Electronic Crimes Act (PECA)—particularly Sections 20, 24, and the newly introduced Section 26A—may apply depending on how AI-generated fake content is created, shared, or used.

    Key takeaways
    • Pakistan has no law that specifically defines or criminalizes "deepfakes."
    • PECA Sections 20, 24, and 26A may apply depending on the nature of the AI-generated content.
    • Section 26A targets fake information that may cause fear, panic, disorder, or unrest.
    • Victims should preserve evidence, report the content immediately, and contact the relevant cybercrime authorities.
    • Courts will require reliable digital forensic evidence before determining liability.

    Deepfakes Pakistani Law: What PECA Actually Covers

    Artificial intelligence has made it easier than ever to create highly realistic fake videos, images, and audio recordings. Known as deepfakes Pakistani Law, these AI-generated files can imitate real people with remarkable accuracy, making it difficult for ordinary users to distinguish truth from manipulation.

    The rapid growth of deepfake technology has raised serious concerns worldwide. Deepfakes have been used to spread misinformation, damage reputations, commit online fraud, manipulate elections, create explicit fake content, and impersonate public figures.

    In Pakistan, many people assume there is a specific deepfake law, but this is not the case. The Prevention of Electronic Crimes Act (PECA), 2016, together with the Prevention of Electronic Crimes (Amendment) Act, 2025, provides the primary legal framework for addressing AI-generated fake content, even though neither law explicitly uses the word "deepfake."

    Understanding what PECA covers and where legal gaps remain is essential for individuals, businesses, lawyers, journalists, and anyone who uses digital platforms.

    What Is a Deepfake in Pakistani Law?

    A deepfake is digital content created or manipulated using artificial intelligence to make it appear that someone said or did something that never actually happened.

    Common examples include:

    • AI-generated fake videos
    • Fake voice recordings
    • Manipulated photographs
    • Synthetic news broadcasts
    • AI-generated political speeches

    While some deepfakes are created for entertainment or education, others are intentionally designed to deceive, harass, blackmail, or spread false information.

    Why Doesn't Pakistan Have a "Deepfake Law"?

    One of the biggest misconceptions is that Pakistan has enacted legislation specifically regulating deepfakes.

    In reality, neither PECA 2016 nor the 2025 Amendment contains the word "deepfake" or provides a legal definition of AI-generated synthetic media. Instead, law enforcement agencies rely on existing provisions that criminalize harmful online conduct, depending on the nature of the content and its intended impact.

    This means a deepfake itself is not automatically illegal. Its legality depends on factors such as:

    • Why it was created.
    • Whether it was shared publicly.
    • Whether it harmed another person.
    • Whether it caused fear, panic, or public disorder.
    • Whether it contained explicit or obscene material.

    Deepfakes Pakistani Law: Which PECA Sections Apply?

    Section 26A – False and Fake Information

    One of the most significant changes introduced through the Prevention of Electronic Crimes (Amendment) Act, 2025 is Section 26A.

    This provision makes it an offence to intentionally publish, transmit, or publicly exhibit information through an information system when the person knows or has reason to believe that the information is false or fake and it is likely to cause fear, panic, disorder, or unrest.

    For AI-generated deepfakes that are designed to spread misinformation or create public confusion, Section 26A may become the primary legal provision used by investigators. The law provides for imprisonment of up to three years and a fine of up to Rs. 2 million upon conviction.

    Section 20 – Offences Against the Dignity of a Natural Person

    Another important provision is Section 20 of PECA, which addresses online content that harms the reputation or dignity of a natural person.

    If an AI-generated video falsely portrays an individual in a defamatory or misleading manner, authorities may consider this section. However, legal experts should note that the constitutional validity of Section 20 has been challenged before the Supreme Court, meaning its future interpretation remains subject to judicial review.

    Section 24 – Explicit or Obscene Deepfakes

    Perhaps the clearest application of PECA relates to sexually explicit AI-generated content.

    Where a deepfake is used to create fake intimate images or videos involving an identifiable individual, Section 24 provides a stronger legal basis for prosecution because it specifically addresses offences against the modesty of a natural person. This provision has become increasingly relevant as AI tools make the creation of explicit synthetic media easier and more accessible.

    (Continued in the next part with legal gaps, what victims should do first, case law, FAQs, key takeaways, sources, and GEO checklist.)

    cont

    Where Does the Law Still Fall Short?

    Although the 2025 amendments strengthen Pakistan's response to online misinformation, legal experts continue to identify several gaps in the current framework.

    1. No Legal Definition of "Deepfake"

    Neither PECA 2016 nor the 2025 Amendment defines what constitutes a deepfake. As a result, investigators and courts must apply broader cybercrime provisions to AI-generated content rather than relying on a dedicated offence. This can create uncertainty, particularly where the content is manipulated but does not clearly fit within existing statutory language.

    2. Private Harm vs. Public Harm

    Section 26A primarily targets fake information that is likely to cause fear, panic, disorder, or unrest. A deepfake created solely to embarrass, harass, or emotionally harm an individual may not always fall within this provision, leaving victims to rely on other sections such as Section 20 or Section 24, depending on the facts.

    3. Platform Responsibilities

    Current legislation does not impose comprehensive obligations on social media platforms to proactively detect or label AI-generated content. Enforcement remains largely complaint-driven, meaning harmful content may remain online until a complaint is filed and processed.

    What Should a Victim Do First?

    If you believe you have become the victim of a deepfake, acting quickly can help preserve evidence and improve the chances of legal action.

    Step 1: Preserve the Evidence

    • Save screenshots.
    • Download the original video or image if possible.
    • Copy the URL.
    • Record the date and time.
    • Avoid editing the files.

    Step 2: Report the Content

    Where appropriate, submit a complaint seeking removal of false or fake content through the mechanism introduced under the 2025 amendments. During the transitional period, complaints may also involve the relevant authorities responsible for cybercrime enforcement and online content regulation.

    Step 3: Report the Crime

    Victims should contact the National Cyber Crime Investigation Agency (NCCIA) or the competent authority handling cybercrime complaints and provide all available digital evidence. Early reporting helps investigators preserve electronic records that may later become important evidence.

    Step 4: Seek Legal Advice

    Depending on the circumstances, victims may also have remedies under defamation law or other applicable legislation. A legal professional can advise on the most appropriate course of action.

    Digital Evidence Is Critical

    Unlike traditional crimes, cybercrime investigations rely heavily on digital evidence.

    Investigators may examine:

    • Device forensics
    • Upload metadata
    • Server logs
    • IP address records
    • Platform account information
    • Chat history
    • Chain of custody documentation

    The Supreme Court has also emphasized the importance of authenticity and proper verification of electronic evidence before it can be relied upon in court.

    "As artificial intelligence becomes more powerful, the law must evolve to balance innovation, freedom of expression, privacy, and protection from digital harm. Strong forensic evidence remains essential in any deepfake prosecution."

    Conclusion

    Artificial intelligence is transforming digital communication, but it is also creating new legal challenges. While Pakistan does not yet have a dedicated Deepfake Law, the Prevention of Electronic Crimes Act (PECA) provides several legal tools to investigate and prosecute harmful AI-generated content. As deepfake technology becomes more sophisticated, future legislation may introduce clearer definitions and stronger regulatory mechanisms. Until then, understanding the scope and limitations of PECA is essential for individuals, businesses, and legal practitioners navigating Pakistan's evolving cyber law landscape. Continue your legal research with Pakistan Law Bot.

    Frequently asked questions

    Is creating a deepfake illegal in Pakistan?

    Not automatically. The legality depends on how the deepfake is used and whether it violates provisions of PECA or other applicable laws.

    Does PECA mention the word "deepfake"?

    No. Neither the Prevention of Electronic Crimes Act, 2016 nor the 2025 Amendment contains a legal definition of "deepfake." Authorities instead rely on broader provisions addressing false information, reputation, cyberstalking, and explicit content.

    Which PECA section is most relevant to fake AI-generated content?

    Section 26A, introduced through the 2025 Amendment, is generally the primary provision addressing the intentional dissemination of false or fake information that may cause public fear, panic, disorder, or unrest.

    Can a victim request removal of a deepfake?

    Yes. The 2025 amendments introduce a complaint mechanism for seeking the removal or blocking of false or fake online information through the designated authority.

    Need legal help?

    Ask our AI assistant or connect with a verified Pakistani lawyer.

    Get free legal help
    Browse more
    All articles
    Newsletter

    Stay ahead with legal insights.

    Weekly digest: judgments worth reading, statute amendments, and one product update. No spam.