Two weeks ago, a woman in Multan — let’s call her Shabana — received a text from an ordinary 0345 mobile number: “BISP: Mubarak ho! Apke 25,000 rupay manzoor ho gaye hain. Raqam hasil karne ke liye is number par rabta karein.” She had been waiting months for her Benazir Income Support payment, and Rs 25,000 sounded like an answer to her prayers. She called the number. The man on the line was polite, official-sounding, and seemed to know her name. He asked for her CNIC number, then a “registration fee” of Rs 500 via EasyPaisa, then her account OTP “to release the funds.” Within the hour, her own wallet was empty — and the number was switched off. It was a textbook bisp sms scam: a fake promise of government money, used to steal very real money from the people who can least afford to lose it.
The Benazir Income Support Programme’s Kafaalat scheme pays a quarterly installment of Rs 14,500 to eligible families across Pakistan. That genuine, life-changing money is precisely why criminals impersonate the program. Millions of recipients — many of them women in rural areas with limited digital literacy — are waiting for a payment message. A fake SMS costs the scammer nothing to send, and a single victim who trusts it can lose their savings in minutes.
Your entire defense rests on one simple, absolute fact: genuine BISP messages come only from the shortcode 8171, and they never contain links. Memorize that, and nearly every version of this scam collapses the moment you look at the sender’s name. The rest of this guide shows you exactly what the fakes look like, how the con unfolds message by message, and how to check your real payment status safely.
The telltale signs of a BISP SMS scam
Run any suspicious message against this list. A single match is enough to delete it:
- It arrives from a regular mobile number (0345-XXXXXXX, 0300-XXXXXXX) instead of the shortcode 8171.
- It contains a link — any link at all. Genuine 8171 messages never include links, registration portals, or “click here” buttons.
- It promises Rs 25,000, Rs 30,000, or any amount other than the real quarterly Kafaalat installment of Rs 14,500.
- It asks you to call back a mobile number, reply on WhatsApp, or contact an “agent.”
- It demands a “registration fee,” “processing fee,” “file charge,” or “tax” sent via EasyPaisa or JazzCash.
- It asks for your OTP, bank PIN, ATM PIN, or account password for “verification.”
- It claims you can register for BISP online, through a website link, or via WhatsApp.
- The wording feels off — strange Roman Urdu, random English words in caps, excessive exclamation marks, or threats that your payment will be “cancelled today” if you don’t act.
How the con works, message by message
These scams are run like call centers, with scripts refined over thousands of attempts. Here’s the playbook, exactly as it typically unfolds.
Message one — the hook. An SMS arrives from an ordinary mobile number, dressed up to look official: “BISP 8171: Apko 25,000 ki raqam manzoor ho gayi hai. Tafseel ke liye rabta karein 03XX-XXXXXXX.” The amount is deliberately generous — Rs 25,000 sounds far better than the real Rs 14,500, and greed plus need does the rest. Some versions threaten instead: “Your BISP account will be blocked, call immediately.” Both emotions — hope and fear — work equally well for the scammer.
The call — building trust. When you ring the number, someone answers who sounds like a government officer: calm, polite, unhurried. They’ll ask for your CNIC number and then pretend to “check the system,” perhaps putting you on hold for dramatic effect. Then the good news: yes, your payment is approved, your name is on the list. Victims consistently describe this moment as the point where their doubts melted — the scammer sounded so certain.
The fee — the first theft. Now comes the catch. There’s a “registration fee,” “verification charge,” or “agent commission” — usually Rs 300 to Rs 1,000 — that must be sent via EasyPaisa or JazzCash before the Rs 25,000 can be “released.” It’s framed as standard government procedure. It is nothing of the sort: BISP registration and payments are completely free, and no genuine process has ever required a fee sent to a personal mobile wallet.
The escalation. If you pay the first fee, the script doesn’t end — it escalates. Now there’s a “tax” to clear. Then a “bank processing charge.” Each fee is small enough to seem plausible and always positioned as the final step. Victims have been bled through four or five rounds before realizing no payment is ever coming.
The OTP variant — the faster theft. In the more dangerous version, the scammer skips fees entirely and asks for the OTP sent to your phone “to link your BISP payment to your account.” That OTP is actually the confirmation code for a wallet transfer or bank transaction the scammer initiated in the background. The second you read it out, your money moves. This is why BISP, the banks, and every wallet company repeat the same warning: never share an OTP with anyone, for any reason.
The disappearance. Once the money is gone — whether taken as “fees” or drained via OTP — the number goes dead. Messages stop being answered. By the time the victim reaches a real BISP office, the trail is cold and the SIM, usually unregistered or fraudulently registered, is abandoned.
The official 8171 check (and what a real message looks like)
Forget everything the scammer told you. Here is how verification actually works, straight from BISP’s own procedures:
- Check the sender first. Genuine BISP messages come only from the shortcode 8171. A message from any 03xx mobile number claiming to be BISP is fake — no exceptions, no edge cases.
- Look for links. Real 8171 messages never contain links. If there’s a URL in the message — a “registration portal,” a “check status” page, anything — it’s a trap designed to steal your data or install malware.
- Check the amount. The Benazir Kafaalat quarterly installment is Rs 14,500. Any message promising Rs 25,000, Rs 30,000, or any other figure is lying to you. This is the fastest arithmetic test you have.
- Verify yourself, directly. Send your CNIC number (without dashes) by SMS to 8171, or check your status on the official portal at 8171.bisp.gov.pk. This is the only legitimate way to confirm eligibility and payment status. Don’t let a stranger do the “checking” for you over a phone call.
- Know how registration really works. BISP registration and the NSER survey are free and done in person only, at a BISP Tehsil Office. There is no online registration, no WhatsApp registration, and no agent who can “add your name” for a fee. Anyone offering otherwise is running a con.
- Remember what BISP never asks for. BISP will never ask for your OTP, your bank or ATM PIN, your account password, or any fee. Anyone asking for these — by SMS, call, or WhatsApp — is a criminal, regardless of how official they sound.
- Guard your payment at the center. When you collect your installment, count the full Rs 14,500 before you leave the payment center. Some agents illegally deduct “commission” or “service charges” from recipients. That deduction is unlawful — report it to the BISP helpline at 0800-26477 immediately.
A genuine 8171 message is plain, short, link-free, and states the correct Rs 14,500 installment. Anything longer, richer, or more “helpful” than that deserves your suspicion, not your trust.
What to do if you already paid or clicked
If you’ve already sent a “fee” or shared an OTP, don’t waste energy on shame — these scripts are professionally designed and they catch thousands of people. What matters now is speed.
First, stop the bleeding. Do not send another rupee, no matter what the scammer promises — “one final fee to release everything” is how they keep victims paying through five rounds. If you shared an OTP or PIN, call your bank or mobile wallet’s helpline immediately and ask them to freeze the account. Minutes matter here; a fast freeze can stop a transfer that’s still in flight.
Next, confirm your real status. Call the BISP helpline at 0800-26477 (toll-free) and ask about your actual payment — you’ll usually find your genuine Rs 14,500 installment is either already available or scheduled, completely independent of the scammer’s fantasy Rs 25,000.
Preserve the evidence. Screenshot the fake SMS, save the scammer’s number, keep any call logs and wallet transaction records. Don’t delete anything in frustration — investigators need exactly this material. And warn your household: scammers frequently target the same family twice, trying a relative’s number once the first victim stops responding.
How to report
Reporting a fake BISP message takes a few minutes and protects people who haven’t been targeted yet.
For the cybercrime itself, contact the National Cyber Crime Investigation Agency (NCCIA): call the toll-free helpline 1799, available 24/7, or file an online complaint at complaint.nccia.gov.pk. Have the scammer’s number, screenshots of the messages, and any transaction records ready.
Also report the fake message directly to BISP on their helpline 0800-26477 — they track impersonation campaigns and use the reports to warn recipients. If a payment-center agent deducted money from your installment, report that to the same helpline; those deductions are illegal and BISP acts on these complaints.
Finally, report and block the number on your phone and in WhatsApp so it can’t reach you again, and consider telling your neighbors — in many villages, one warning from a trusted person stops a scam wave cold.
Sources
- BISP 8171 Fake SMS Alert 2026 — PakGovSchemes
- BISP Benazir Kafaalat 8171 Guide — AwamHelp
- BISP Notifies Users of Fraudulent Messages — 8171PassGov
- How to Report Online Fraud Complaint in Pakistan — NextUpNews
Last reviewed: October 2026
This article is for education only and is not financial or legal advice.