Most car rental scams in Pakistan that catch overseas bookers share one move: a glossy photo of a clean Corolla, Fortuner or Land Cruiser, a WhatsApp number, and a request to send an “advance” before anyone has seen the vehicle. The photo proves only that someone found a photo. It does not prove the car exists, that the advertiser controls it, or that a business stands behind the offer. What does count as evidence is duller and far more useful: a registration number you can check on a provincial Excise portal, a live photo taken on request with today’s date in shot, a company you can find in the SECP register, a physical address that answers the phone, and a payment route that leaves a trail. If a supplier cannot give you those before money moves, treat the listing as unproven, however good the pictures look.
Below: the common patterns, the checks you can run from London, Dubai or Toronto in about twenty minutes, how to pay without giving up leverage, and where to report it if things go wrong.
Decision summary: what each piece of evidence actually proves
Before the detail, here is the short version. Sort everything a supplier sends you into one of three bins: decorative, suggestive, or verifiable.
| What you are shown | What it proves | Weight |
|---|---|---|
| Listing photos, brochure-style images | That the advertiser has access to images | None on its own |
| A WhatsApp profile with a logo and “verified” wording | That someone set up a profile | None |
| Reviews screenshotted into the chat | Nothing you can test | None |
| A registration plate in a photo | A number to check, not a result | Low until checked |
| Excise record matching make, model and colour | That the vehicle is registered as described | Moderate |
| A live photo or short video on your request, with a named detail in frame | That the person has physical access to that car now | Moderate |
| SECP-registered company name plus a findable office | That a business entity exists and can be traced | Moderate to strong |
| Written confirmation naming vehicle class, dates, price, cancellation terms and payee | What you were promised, in a form you can use later | Strong |
No single row makes a supplier safe. Several verifiable rows pointing the same way make one credible. Zero verifiable rows and a deadline to pay is the pattern to avoid.
Car rental scams Pakistan-wide: how fake rent a car ads are built
The mechanics are not sophisticated, which is why they keep working. Fake rent a car ads usually combine four ingredients.
Borrowed photos
Images are lifted from manufacturer sites, dealer listings, other rental firms’ social pages, or even foreign-market adverts (look for left-hand-drive interiors or non-Pakistani number plates). Some are cropped to hide a watermark; some are mirrored to defeat a quick visual match. Real local fleets tend to be photographed in the same yard, on the same afternoon, by the same slightly impatient person; a gallery of studio shots is a small warning sign.
A WhatsApp-only front
The number is the business. There is no landline, no address that survives a map search, no company name beyond a brand that sounds like every other brand. If the number goes quiet after payment, there is nothing left to chase.
The advance-payment hook
Rent a car advance payment fraud relies on a plausible story. “Peak season, cars are going fast.” “The owner needs a token to hold the vehicle.” “Send the security deposit now so we can release the car at the airport.” The amount is often small enough that the victim writes it off. A second request frequently follows: a “driver allowance”, an “insurance top-up”, a “toll advance”. Together they are the business model.
Pressure and a changing payee
Watch for a request to pay a personal account whose name does not match the business, then a different personal account “because the first one has a limit”. A legitimate supplier can explain who receives your money and why. A scam tends to rotate payees because accounts get reported and frozen.
Reverse-image checking a listing in five minutes
A reverse-image search will not tell you a listing is genuine. It is very good at telling you a listing is not. If the “our Prado, available this weekend” picture turns up on a Japanese auction site, a Dubai dealer’s page and three unrelated Pakistani social accounts, you have your answer.
- Save the image at full size. Screenshots of screenshots lose detail. On WhatsApp, open the image and save it rather than cropping from the chat view.
- Run it through Google Lens. On a computer you can upload a file, drag the image into the search box, or right-click an image in Chrome and choose Search with Google Lens, as described on Google’s own help page for searching with an image. Results include matching and similar images and the websites that carry them.
- Look for the obvious owner. A manufacturer press image or dealer stock photo is not “our car”. Also check steering-wheel side, plate format and background signage.
- Repeat for two or three images. Careful fraudsters mix one genuine local photo in with borrowed ones.
A clean result is not proof either; the image may simply be new or edited.
Ask for evidence that cannot be downloaded
The single most effective test is also the cheapest: ask for something that only a person standing beside the car can produce. Make the request specific enough that an old photo cannot answer it.
- A photo of the front of the car with the number plate readable, taken today.
- A second photo of the odometer or dashboard with the ignition on.
- A short video walking round the vehicle, with the supplier saying your first name and the date.
An honest operator may grumble, then do it. Someone running borrowed images will stall, send another old photo, or say the car is out but “an identical one” is available. An identical car you have never seen is exactly the problem you started with.
Registration check via the Excise portals
Motor vehicle registration in Pakistan is provincial, run by each Excise and Taxation department. Several departments offer an online lookup where you enter the registration number and see the official record. What you get back varies by province and can change, but the aim is the same: does the record match the car you are being offered?
- Punjab (Lahore, Rawalpindi, Faisalabad, Multan): the Punjab Excise, Taxation and Narcotics Control Department lists “Online Verification of Registered Vehicles” among its services, pointing to its MTMIS portal.
- Sindh (Karachi, Hyderabad and the rest of the province): the Excise Sindh online vehicle verification service asks for the vehicle category (four or two wheelers) and the registration number “exactly as shown on the number plate”.
- Islamabad Capital Territory: the Excise and Taxation Department, Islamabad carries a “Check Vehicle Detail” option and warns that only its website and its official app are legal sources of its information.
What a match does and does not tell you
If make, model, year and colour line up with the car in your live photo, you know the plate belongs to a real vehicle of that description. You do not know that the person messaging you owns it or has the right to rent it out. Plenty of genuine rental operators run vehicles registered to a family member or to a fleet partner, so a name mismatch is not automatically fraud. A model mismatch is a different matter. If the plate on the “2022 Fortuner” comes back as a small hatchback, stop there. Use the department’s own portal, reached from its official site, never a verification link someone sends you in a chat.
How to verify a rent a car company in Pakistan before you pay
A car is only half the question. The other half is whether there is a business you could hold to its word. To verify a rent a car company in Pakistan from abroad, work through three layers: legal entity, physical presence, and consistency.
Legal entity: the SECP register
Companies incorporated in Pakistan are registered with the Securities and Exchange Commission of Pakistan. SECP’s company name search lets you search by exact name, by names beginning with a term, or by names including a string. Ask the supplier for its full registered name, not its trading brand, then search for it.
Bear in mind what the tool is for. It is built around name availability, SECP describes its output as a system-generated confirmation, and the final word rests with the Registrar of Companies. A matching name suggests an entity by that name exists, not that it is the one messaging you, and many small, legitimate rental businesses are sole proprietors or partnerships that will not appear at all. So:
- Found in SECP, and the supplier’s documents use that exact name: good sign, keep going.
- Not a company, but openly says it is a sole proprietor with a named owner and an address: acceptable, provided the next two layers hold up.
- Claims to be a “Pvt Ltd” but no such company appears: a clear red flag. Honest businesses do not invent a legal status.
Physical presence: the address test
Ask for the office or yard address. Check map imagery for real premises rather than a residential gate or empty plot. Call a publicly listed number for that address, not the WhatsApp number. If family live in the same city, ask them to walk past; for an overseas booker that is often the most decisive check, and it costs a cup of tea.
Consistency: does the story hold together?
Line up the business name on the SECP result, the bank account, the quote and the signage; then the plate on the photo, the Excise record and the confirmation. One mismatch with a sensible answer is normal. Three is a pattern.
Safe payment: keep your leverage until the car exists
Payment is where losses happen, and where you have the most control, whoever you book with:
- Do not pay anything before you have written terms. A confirmation should state the vehicle class, dates, pickup point, total price, what is included (driver, fuel, tolls, overnight allowance), the deposit amount and how it is returned, and the cancellation terms. Our sister company Hajj Umrah Taxi has a clear checklist of what a booking confirmation should include and the red flags that suggest a scam; the logic transfers directly from Makkah pickups to Lahore car hire.
- Pay the business, not a person. “The manager’s brother’s account” is not a business account.
- Prefer methods with a dispute route. A card payment through a proper checkout usually gives you a dispute route with your card issuer, subject to its rules; a direct bank transfer or a mobile-wallet send to a stranger usually does not. Pakistan’s instant payment system, Raast, is the State Bank of Pakistan’s real-time system; real time is as convenient for fraud as for honest payments, so be sure of the recipient.
- Keep advances proportionate. A modest deposit against a confirmed booking is common. The full rental plus a large deposit weeks ahead, to a supplier you have never used, is not. Never pay to “release” a car at the airport; a real handover can take documents and payment at the same moment.
- Keep everything: the ad, the chat, the number, payee details and receipts.
Booking for parents who will travel alone? Our sister service Pakistan Taxi has a walk-through on booking and paying for someone else’s ride, including who should receive the driver details.
Reporting fraud: NCCIA, FIA and your bank
People still search for “FIA complaint online fraud”, and the FIA’s name is the one most Pakistanis know. The picture has changed. Cybercrime investigation now sits with the National Cyber Crime Investigation Agency (NCCIA), which, as this explainer from Journalism Pakistan sets out, took on the responsibilities previously handled by the FIA’s cybercrime wing, with a mandate tied mainly to the Prevention of Electronic Crimes Act (PECA).
The FIA still runs its own public complaint portal for unlawful activity within its jurisdiction. Whichever you use, keep the reference number, and check the agency’s official site on the day rather than trusting a link in a forwarded message, because procedures change.
What to do, in order
- Call your bank or wallet provider first. Speed matters more than anything else. Ask them to attempt a recall or freeze on the receiving account and give you a reference.
- If the bank response is unsatisfactory, the State Bank of Pakistan’s Sunwai complaint portal, which covers general banking and Roshan Digital Accounts, is the next step.
- File the cybercrime complaint with the ad link, the phone number, the payee account details, timestamps and your screenshots.
- If you paid from abroad, also tell your home bank or card issuer, which has its own fraud process.
Be realistic: recovery after an instant transfer is uncertain. The checks earlier in this guide will do far more for you than any complaint afterwards.
Why this matters more when you are booking from abroad
Residents can drive past an office or hear when a caller is reading a script. Overseas bookers lose those shortcuts, and fraudsters know it. The UK government’s FCDO travel advice for Pakistan says credit card fraud is common, tells travellers to beware of scams, and advises using reputable, licensed companies where you call and the operator contacts the driver. It also notes that British nationals of Pakistani origin have been targeted by criminals because they are often seen as wealthier than locals. That is a reason to make your checks before you land, not at the arrivals kerb at 3am.
Build verification into your plan a few weeks out, when you can walk away from a supplier that fails a check without being stranded. Our guide to booking a taxi in Pakistan from the UK covers the wider planning timeline for exactly that reason.
Self-drive listings carry the most risk
Scams cluster around self-drive offers because of the deposit, which is easy to demand in advance “to hold the car”. If you need to drive yourself, insist the deposit is taken at handover against a written agreement and receipt, and returned against an inspection sheet you both sign.
Also ask whether self-drive is the right product. A car with a driver removes both the deposit exposure and the navigation problem, and our comparison of self-drive versus a car with driver in Pakistan sets out when each one makes sense. Where self-drive is the right answer, the iDrive self-drive car rental page explains that eligibility, deposit, mileage allowance and insurance excess are confirmed in writing before any hire, rather than published as blanket figures.
A pre-payment checklist you can screenshot
Run this before any money leaves your account. If you cannot tick at least the first six, keep looking.
- Reverse-image search on at least two listing photos, with no suspicious matches.
- A live photo or video of the actual car with a readable plate and a detail you asked for.
- Excise record for that plate matching make, model and colour.
- Full business name, and either an SECP match or an honest explanation of the business’s legal form.
- A physical address you have checked independently, plus a number other than WhatsApp.
- Written terms covering vehicle class, dates, price, inclusions, deposit and cancellation.
- A payee whose name matches the business.
- A payment method with a dispute route, or an advance small enough that you could lose it.
- All chats, numbers and receipts saved somewhere other than your phone.
Example: the Lahore plate on a “Fortuner” comes back from the Punjab record as a Toyota of the right year, the live video matches, and a cousin confirms the office. That supplier has earned a deposit. If the plate returns a Suzuki, it has earned nothing.
How iDrive handles the proof problem
iDrive is a booking platform that connects customers with independent vehicle owners, drivers and fleets. The useful question is what evidence you get and when. iDrive’s booking pages state that partners are vetted through the provincial police character certificate system and that the driver’s photo and the vehicle registration are sent to you before travel, which gives you a plate to check on the same Excise portals described above. Vehicles are booked by class rather than by a specific photographed car, and availability and final details are confirmed through the booking process rather than promised by a picture.
If you are organising transport before you fly, start with our overview of booking Pakistan transport from abroad, or go straight to plan and request your journey and compare what you receive against the checklist on this page. Apply the same standard to us that you would to anyone else.
Questions people ask
Is a rent a car company with lots of Facebook reviews safe?
Not necessarily. Reviews and follower counts can be bought or copied. Use them as a starting point, then run the plate, company and address checks, which are much harder to fake.
Can I check who owns a car from its number plate?
Provincial Excise portals let you verify a registration record; the fields shown differ by province. A match confirms the vehicle is registered as described, not that the advertiser has the right to rent it out.
Where do I report car rental fraud in Pakistan?
Contact your bank first, then file a cybercrime complaint with the NCCIA, which took over the FIA cybercrime wing’s work. The FIA’s complaint portal remains for matters within FIA jurisdiction.
Is it normal to pay an advance for car hire in Pakistan?
A proportionate deposit against written terms is common. Full payment weeks ahead to an unverified personal account, or a deposit to “release” a car at the airport, is not.
