BroadNet
pakistan
Pakistan · PTA

A2P SMS regulations in Pakistan.
Compliance with the PTA.

A2P SMS in Pakistan is regulated by the PTA (Pakistan Telecommunication Authority). Corporate and brand SMS is sent under a registered sender-ID "mask", provisioned through the mobile operators (Jazz, Zong, Telenor and Ufone); unregistered masks and grey-route traffic are blocked. Anti-spam obligations flow from the PTA's SOPs and PECA, marketing requires consent and an opt-out, and a Personal Data Protection framework is still being finalised.

By the numbers
4
Cellular operators (Jazz, Zong, Telenor, Ufone)
Mask
Registered sender-ID required for brand/corporate SMS
PECA 2016
Cyber-crime law engaging unsolicited/unlawful messaging
Carrier-grade infrastructure, operating since 2003.

Who regulates A2P SMS in Pakistan?

Telecom services in Pakistan are regulated by the Pakistan Telecommunication Authority (PTA) under the Pakistan Telecommunication (Re-organization) Act, 1996. The PTA issues Standard Operating Procedures (SOPs) and directives for bulk/commercial SMS and anti-spam, and unsolicited-communication offences can also engage the Prevention of Electronic Crimes Act, 2016 (PECA). Rules are enforced through the licensed cellular operators.

  • Regulator: PTA (pta.gov.pk).
  • Anti-spam / cyber offences: PECA 2016.
  • PTA issues SOPs and directives for bulk SMS.
  • Enforced through the operators (Jazz, Zong, Telenor, Ufone).

Sender-ID (mask) registration

Corporate and brand A2P messages are delivered under a registered alphanumeric sender-ID "mask" that identifies the business. Masks are provisioned through the mobile operators (Jazz, Zong, Telenor and Ufone), typically via a corporate SMS agreement and supporting company documents; the mask should reflect the registered brand. Unregistered masks and traffic arriving over international grey routes are liable to be blocked.

  • Brand/corporate SMS uses a registered sender-ID mask.
  • Masks are provisioned through the operators.
  • Mask should match the registered brand name.
  • Unregistered masks and grey-route traffic are blocked.

Promotional vs. transactional messages

As across the region, marketing/promotional SMS carries the strictest consent and content obligations, while transactional/service messages — OTPs, banking alerts, delivery and account notifications — are tied to an existing customer relationship. Both are sent under a registered mask, but promotional traffic must respect consent, opt-out and any timing guidance the operators apply, and should be kept separate from transactional flows.

  • Promotional: consent, opt-out and content rules apply.
  • Transactional/service (OTP, alerts): existing-relationship messages.
  • Both delivered under a registered sender-ID mask.
  • Keep marketing and transactional traffic on separate masks.

Content and anti-spam rules

PTA anti-spam rules target unsolicited bulk messaging, fraud and prohibited content; subscribers can report spam and nuisance messages to the operators and the PTA. Content must be lawful and non-deceptive, and categories such as fraudulent, obscene or otherwise unlawful messaging are prohibited and can engage PECA. Operators filter non-compliant and unregistered traffic, and persistent spammers face blocking.

  • Unsolicited bulk SMS, fraud and unlawful content are prohibited.
  • Subscribers report spam to the operators and the PTA.
  • Unlawful messaging can engage PECA 2016.
  • Operators filter non-compliant and unregistered traffic.

Consent, opt-out and unsolicited messages

Marketing should be sent to recipients who have consented, with a clear, free way to opt out, and opt-out requests must be honoured. The PTA has historically operated do-not-disturb / anti-spam mechanisms allowing subscribers to block promotional messages, and unsolicited marketing to those who have opted out is treated as spam. Maintain suppression lists and auditable consent records.

  • Obtain consent before promotional sends.
  • Provide a free, honoured opt-out.
  • Subscribers can block promotional traffic via operator/PTA mechanisms.
  • Keep suppression lists and consent records.

Data protection: framework in progress

Pakistan does not yet have a single comprehensive data-protection statute in force; a Personal Data Protection Bill has been under development and is expected to introduce consent, purpose-limitation, data-subject-rights and cross-border-transfer obligations once enacted. In the meantime, treat consent and data-handling as best practice and confirm the current legal position, as the framework is evolving.

  • No single comprehensive data-protection law yet in force.
  • A Personal Data Protection Bill is under development.
  • Expected: consent, purpose limitation, data-subject rights.
  • Confirm the current position — the framework is evolving.

Enforcement and operator landscape

The PTA enforces through operator-level blocking of unregistered masks and non-compliant/grey-route traffic, spam-complaint handling, and directives to the cellular operators; serious offences can be pursued under PECA. Pakistan has four cellular operators — Jazz, Zong, Telenor Pakistan and Ufone — and reaching all subscribers means registering the mask with each. Confirm current registration fees, documents and timelines with your operator at onboarding.

  • Enforcement: mask/traffic blocking and spam-complaint handling.
  • Serious offences pursued under PECA 2016.
  • Four operators: Jazz, Zong, Telenor Pakistan, Ufone.
  • Confirm current fees, documents and timelines at registration.
DiagramSender ID registration, step by step
  1. Submit your KYC packTrade licence, authorisation letter and sample messages
  2. BroadNet files the applicationWith the operators or the regulator, as the market requires
  3. Review and approvalTypical lead time7-14 business days
  4. Send under your brandYour approved sender ID on every message
Pakistan
PakistanOther BroadNet marketsBroadNet HQ, Dubai
Technical facts

Technical facts for Pakistan

Network codes, message lengths and sender-ID rules in one table. Segment lengths are the GSM standard values (3GPP TS 23.038).

Technical facts for Pakistan
Mobile country code (MCC)410
Dialling code+92
Operators (MCC-MNC)
  • Jazz (Mobilink) · 410-01
  • Telenor Pakistan · 410-06
  • Zong · 410-04
  • Ufone · 410-03
SMS length, GSM-7 (Latin alphabet)160 characters in a single SMS; 153 per part when concatenated
SMS length, UCS-2 (Arabic, Cyrillic and other scripts)70 characters in a single SMS; 67 per part when concatenated
RegulatorPTA (Pakistan Telecommunication Authority)
Sender-ID rulesPTA sender ID (mask) registration mandatory. English and Urdu both supported. Operator-aligned content filters apply.
Sender-ID lead time7-14 business days

Sources

Last reviewed

How we write and review content

Related markets

Compare A2P SMS rules across the region.

Each market pairs a regulatory playbook with its live coverage and operator-direct routing detail.

Browse full country coverage

Pakistan rules: promotional vs. transactional SMS

CapabilityPromotional / marketingTransactional / service (OTP, alerts)
Registered sender-ID mask required
Prior consent required—
Free opt-out required—
Local licensed routing (no grey routes)
Subject to operator/PTA spam blocking—
Existing customer relationship expected—
FAQ

Common questions

Do I need to register a sender ID to send A2P SMS in Pakistan?
Yes. Corporate and brand A2P messages are sent under a registered alphanumeric sender-ID "mask", provisioned through the mobile operators (Jazz, Zong, Telenor and Ufone). The mask should reflect your registered brand. Unregistered masks and traffic arriving over international grey routes are liable to be blocked, so register with each operator you need to reach.
Who regulates commercial SMS in Pakistan?
The Pakistan Telecommunication Authority (PTA) regulates telecom services and issues the SOPs and anti-spam directives that govern bulk/commercial SMS, enforced through the cellular operators. Unsolicited-communication and fraud offences can also engage the Prevention of Electronic Crimes Act, 2016 (PECA).
What's the difference between promotional and transactional SMS?
Promotional (marketing) SMS carries the strictest consent, content and opt-out obligations, while transactional/service messages — OTPs, banking alerts, delivery and account notifications — are tied to an existing customer relationship. Both are sent under a registered mask; keep the two flows on separate masks with separate consent records.
Can I use a cheaper international (grey) route?
Not safely. The PTA and the operators block unregistered masks and grey-route A2P traffic, which damages deliverability and can expose the sender to enforcement. A carrier-grade local route under a registered mask protects deliverability and keeps traffic inside PTA rules.
Is there a data protection law for SMS in Pakistan?
Not yet a single comprehensive one. A Personal Data Protection Bill has been under development and is expected to introduce consent, purpose-limitation and data-subject-rights obligations once enacted. Until it is in force, treat consent capture and careful data handling as best practice and confirm the current legal position before relying on it.
How do subscribers stop unwanted messages?
Subscribers can report spam and nuisance messages to the operators and the PTA, and the PTA has operated do-not-disturb / anti-spam mechanisms letting users block promotional traffic. Sending marketing to someone who has opted out is treated as spam, so maintain suppression lists and honour opt-outs promptly.

Test first. Go live with confidence.

Test access on request, reply within one business day. Pay-as-you-go in production. Volume pricing from 1M messages/month.