SECP Approves Corporate Intelligence Unit to Catch Ponzi Schemes Early

By Bilal Ahmed  |  Business Desk  |  October 15, 2026  |  Updated: October 15, 2026

The Securities and Exchange Commission of Pakistan has approved a new Corporate Intelligence Unit (CIU) — a dedicated surveillance cell whose entire job is to spot suspected Ponzi schemes, pyramid schemes and unauthorised deposit-taking before the first investor complaint lands on its desk. The decision was taken on Wednesday, October 14, 2026, and confirmed in Dawn’s print edition today.

If you have ever watched a WhatsApp investment group implode — promises of 20% monthly returns, a flashy app, and then silence — this is the unit that is supposed to catch those schemes in the cradle instead of arriving after the money is gone.

How the Unit Will Actually Work

The change here is the direction of travel. Until now, SECP has mostly worked complaint-backwards: someone loses money, files a complaint, and the regulator starts digging. The CIU flips that around. Its officers will actively scan open-source material — press coverage, Facebook and TikTok posts, Instagram and YouTube ads, paid digital campaigns — looking for companies that smell like deposit-taking fraud.

When the unit finds something suspicious, it does not raid anyone. It verifies first. A checked-out lead becomes a formal regulatory lead handed to the relevant SECP department — the ones with inquiry and enforcement powers — which then decides whether to investigate, penalise or shut the operation down.

There is also a coordination angle that matters more than it sounds. The CIU can pass verified information to the FIA, the National Cyber Crime Investigation Agency (NCCIA), the State Bank of Pakistan and the National Accountability Bureau. Fraud promoters love jurisdictional gaps — the guy taking “investments” on WhatsApp claims he is neither a bank nor a company — so four agencies reading from the same page is genuinely useful.

Why Section 20 Matters

The unit is being set up under Section 20 of the SECP Act, 1997, and placed inside the Chairman’s Secretariat rather than buried in a line department. That is administrative language for “this reports near the top.” Placement matters in Pakistan’s regulatory system: units tucked inside a deputy director’s office tend to starve for attention. A Chairman’s Secretariat unit has a direct line to the boss.

SECP Chairman Dr Kabir Sidhu described the unit as converting open-source information into verified regulatory leads — the point being to strengthen risk-based surveillance and, crucially, to prevent investor losses rather than just punishing them afterward. That prevention-first framing is new in SECP’s public language, and it is worth watching whether the enforcement record follows.

What It Is Watching For

The mandate names three problem areas, and each one has a familiar face in Pakistan:

Ponzi and pyramid schemes. The classic: early “investors” are paid from later ones, dressed up as forex trading, crypto mining or e-commerce profits. They almost always advertise on social media with rented luxury cars.

Unauthorised deposit-taking or lending. Companies registered for one business quietly taking deposits — or lending at exploitative rates — that they were never licensed to handle.

Activity beyond approved objectives. A company whose SECP registration says “software services” but which is out there collecting public money. The CIU is explicitly tasked with catching the gap between what a company is registered to do and what it is actually doing.

Why This Is Needed Now

Pakistan has a grim rhythm with these schemes. A slick app appears, a few thousand people put money in, local influencers promote it for a cut, and by the time anyone complains, the app is gone and the money is abroad. The victims are usually small savers — people who could least afford the loss.

My honest take: the complaint-driven model was never going to work against operators who advertise openly. If a company is running paid Facebook ads promising 15% monthly returns, a regulator should not need a victim’s complaint to start asking questions. The CIU is SECP admitting that publicly — and that is a real shift.

The other honest caveat: announcements are the easy part. The unit starts with a director and two officers. That is a small team against a very large internet. Whether the CIU becomes a genuine early-warning radar or just another committee on paper depends on staffing, data tools and — most of all — how fast verified leads turn into actual enforcement.

What Ordinary Investors Should Do

No unit, however good, replaces your own due diligence. A few practical rules that would have saved most victims of past schemes:

• Check the SECP register. A registered company is not the same as a licensed deposit-taker. Registration to sell software does not authorise taking public deposits.
• Guaranteed high returns are a lie. No legitimate investment guarantees 10–20% monthly. None. If the math worked, the promoter would be borrowing from a bank, not from you.
• Ads are not endorsements. A Facebook or TikTok ad proves only that someone paid for reach — platforms do not vet financial claims before showing them.
• Watch for the referral engine. If you are paid to recruit others rather than from any real business activity, that is a pyramid, whatever the app calls itself.
• Report early. The CIU is meant to act before complaints arrive — but a quick report to SECP or the NCCIA when you spot a scheme still helps others.

The Bottom Line

SECP has stopped waiting for victims to come to it and built a unit that goes looking for fraud first. The legal footing is there, the information-sharing pipeline to FIA, NCCIA, SBP and NAB is there, and the leadership framing is right. Now it has to show results — ideally measured in schemes stopped before they pay out their first “profit,” not penalties announced after the money has vanished.

Frequently Asked Questions