A QR code on your electricity bill can now save you money, and that is exactly why scammers are copying it. In May 2026 the Power Division publicly warned that fake subsidy links and QR codes are circulating online, designed to steal CNIC details, OTP codes and personal data under the pretext of bill relief. Here is how the scam works, how to tell real from fake, and what to do if you have already clicked.
The official warning
The Power Division's warning, covered by Dawn and other major outlets, said fraudsters are circulating suspicious links and fake QR codes connected to electricity bill subsidies. Victims are walked through a form that collects personal details, then asked for a six-digit verification code, the OTP that lets someone else take over an account or complete a registration in your name. Law enforcement agencies have been informed, but the safest defence is knowing what the real process looks like.
How the scam works
- You receive a link or QR code on WhatsApp, Facebook or SMS claiming to offer a subsidy, relief package or bill discount.
- The page looks official and asks for your CNIC, mobile number and bill reference number.
- It then asks for the six-digit code sent to your phone. That code is the key: with it, the scammer can verify things as if they were you.
- Some versions also ask for a "processing fee" through a wallet or bank transfer.
Real vs fake: the quick checklist
- Real: the QR code is printed on your own paper bill by your DISCO.
- Real: it opens css.pitc.com.pk, the official PITC portal, check the address bar.
- Real: verification is free and only ever asks for your reference number, CNIC and the OTP on the official site itself.
- Fake: any subsidy link that arrives via WhatsApp, SMS, email or social media.
- Fake: any page asking for a fee, bank details, card number or wallet PIN.
- Fake: lookalike addresses, extra words, odd spellings or unfamiliar domains instead of pitc.com.pk.
For the legitimate process from start to finish, see our step-by-step guide: how to check your subsidy eligibility with the bill QR code.
One more habit to drop: posting your bill online
A photo of your bill shared in a public group exposes your reference number and your QR code. With those, someone else can attempt registrations linked to your connection. Share bill photos only with people you trust, and crop or cover the QR code if you must post one publicly.
If you already entered your details
- Stop at the OTP. If you have not shared the six-digit code, you are probably fine, close the page and do not respond to follow-ups.
- Told them the OTP? Watch your SIM and accounts for unusual activity and inform your mobile operator.
- Shared a bank or wallet detail? Call your bank's helpline immediately and have the account monitored or blocked.
- Report it. Use the FIA's National Cyber Crime Reporting portal, and warn anyone you forwarded the link to.
Roman Urdu: khulasa
Asli QR code sirf aap ke apne bill par chapa hota hai aur css.pitc.com.pk kholta hai. WhatsApp ya SMS par aane wala koi bhi "subsidy link" jaali hai. Hukumat subsidy ke liye koi fees nahi leti, aur chhe hindson ka OTP code kabhi kisi ko na batayein. Shak ho to link band karein aur apna bill hamesha official zariye se check karein.
Check your bill the safe way
Whenever you want to see your latest amount, units or due date, skip the forwarded links entirely, check your electricity bill online with just your reference number, free and with no sign-up.