According to initial findings, the breach targeted the bank’s Asaan Karobar Card system, a government backed scheme designed to support small businesses. Investigators believe the fraud went unnoticed for a long period, quietly growing in size and impact.
Sources say the bank’s system may have remained compromised for almost two months. During this time, funds were transferred without being deducted from cardholders’ accounts. In several cases, individual cards were used to process transactions of up to Rs5 million, raising serious red flags.
It is also alleged that some individuals cashed out large sums by swiping cards in exchange for hefty commissions, reportedly ranging between 30 and 70 percent. This points to an organized network rather than isolated misuse.
Once the issue surfaced, bank management moved quickly to hand over relevant data to the cybercrime authorities.
As part of the crackdown, more than 40 device owners from areas including Muzaffargarh, Multan, and Shujabad were taken into custody and referred to the Federal Investigation Agency (FIA). Formal cases have been registered, and investigations are ongoing.
Officials say the bank has completed an internal audit and prepared preliminary lists of individuals believed to be involved. The actual financial loss and responsibility, however, will be determined once investigations are finalized.
Meanwhile, the National Cyber Crime Investigation Agency (NCCIA) confirmed that loopholes in the Bank of Punjab’s system were exploited to siphon off millions of rupees under the Punjab government’s Asaan Karobar scheme.
The NCCIA stated that over 70 suspects have been arrested so far, and a formal case has been registered on the bank’s complaint. In total, 24 men and women have been named in the case, with more arrests expected as the investigation widens.
Authorities added that those involved come from multiple districts across Punjab, suggesting the fraud had a broad footprint. The case was registered based on the statement of Ali Ansar, a field collection officer of the Bank of Punjab, and inquiries are moving forward on several fronts.
As the probe deepens, the case highlights a clear warning: even well intended digital schemes can turn risky if system safeguards fall behind, underscoring the urgent need for stronger cyber defenses in the banking sector.
