Verify CNIC Online by CNIC Number (2026)

Q: Can I verify someone's CNIC without their knowledge?

Practically yes for public-tier verification, since the SMS or portal query doesn't notify the CNIC holder. However, for many legitimate verification purposes (employment, tenancy, business transactions), asking the person directly and verifying in their presence is more appropriate. Surreptitious verification raises privacy and ethical questions even where it's technically possible.

Q: Is there a cost to public CNIC verification?

Minimal. SMS verification through 7000 costs the standard outbound SMS rate from your operator (typically Rs. 1-2). Online portal verification through Pak Identity is free for individual users. Business-tier Verisys verification has per-query charges negotiated with NADRA. For occasional personal verification needs, costs are negligible.

CNIC verification — confirming whether a given CNIC number is genuinely valid in NADRA's database — is a distinct activity from renewal, tracking, or personal identity management. Verification matters for businesses confirming customer identity, employers vetting employee documentation, individuals confirming the authenticity of CNICs presented to them in transactions, and various other situations where the legitimacy of a CNIC number itself is the question. Pakistan provides specific CNIC verification services through NADRA's online infrastructure, though the level of detail returned varies based on who is doing the verification and for what purpose.

When CNIC verification matters

Specific situations creating verification needs:

Business KYC processes — banks, telecom operators, mobile wallets and other regulated services verify customer CNICs as part of Know-Your-Customer compliance.
Employment verification — employers confirming candidate CNICs before finalising hiring. The verification helps catch identity fraud cases.
Property transaction — buyers and sellers in property deals often verify each other's CNICs alongside other due diligence. Helps avoid completing transactions with imposters.
Tenant verification — landlords verifying potential tenants' CNICs before lease arrangements. Provides confidence about who you're renting to.
Domestic worker verification — households engaging full-time domestic help often verify CNICs as part of background checking.
Legal proceedings — verifying CNICs cited in legal documents and submissions for authenticity.
Personal due diligence — before substantial financial dealings with new contacts, individuals sometimes verify the other party's CNIC for confidence.
Lost CNIC discovery — if you find a lost CNIC and want to verify it's genuinely active before returning to NADRA or rightful owner. Helps distinguish a lost legitimate card from a fake.

Types of CNIC verification available

Different verification levels with different access patterns:

Public SMS verification (7000) — basic verification available to anyone with a mobile phone. Returns minimal information: primarily confirmation that the CNIC is registered. Limited detail protects privacy of CNIC holders.
Pak Identity portal verification — online verification through NADRA's portal with similar limited public-level information return.
Business-tier verification — regulated businesses (banks, telecom, etc.) have access to more detailed verification through NADRA's Verisys system. Returns name, father's name, photograph, and other verification details. Requires registered business agreement with NADRA.
Biometric verification — for in-person verification, biometric matching against NADRA's database provides the strongest verification. Used at bank counters, BISP collection points, telecom SIM activation, and other high-security verification scenarios.
Verisys (Verification System) — NADRA's specialized verification platform for authorised business partners. Different access tiers based on the verifying entity's authorisation level.
FRC-based verification — Family Registration Certificate verification confirms family structure recorded in NADRA, useful for inheritance and other family-relationship contexts.

SMS verification through 7000

Open SMS application on your phone
Any Pakistani mobile network with active SMS service works. The shortcode 7000 is universal across operators.
Compose new message to 7000
Recipient: 7000 (four digits, no country code or other prefix). Like 8171 for BISP, 7000 is a national shortcode.
Type the CNIC number to verify
13 digits with no spaces or dashes. The CNIC must be valid format; format errors return 'invalid query' rather than verification result.
Send the message
Standard outbound SMS charge from your operator applies (typically Rs. 1-2). Some operators may have specific pricing for verification queries.
Wait for response
Response typically within seconds to minutes. Returns whether the CNIC is registered and active, with limited personal information for privacy.

What public verification reveals and what it does not

Privacy boundaries on public-tier verification:

Reveals: existence and active status — confirms whether the CNIC number corresponds to an actual registered person and whether the registration is currently active.
May reveal: registered name in some configurations of the verification service. The exact information returned varies by current policy.
Does not reveal: full personal details — date of birth, exact address, family structure, marital status, and other detailed information are not exposed through public verification.
Does not reveal: photograph — facial verification requires business-tier or biometric verification, not available through public SMS.
Does not reveal: current programme enrolment — whether the CNIC holder is enrolled in BISP, tax filer status, or other programme participation is not exposed through general verification.
Privacy by design — the limitation is deliberate. Pakistani identity data is sensitive; public-tier verification is designed to confirm legitimacy without enabling broader privacy violations.
For more detailed verification, the verifying party needs to be a registered business with NADRA's Verisys service, OR conduct in-person biometric verification, OR rely on documentation cooperation from the CNIC holder themselves.

Business-tier verification (Verisys)

For organisations needing fuller verification capability:

Registration with NADRA — businesses sign formal agreements with NADRA to access Verisys. Includes data protection commitments, audit requirements, and tiered access based on business type.
Authorised verifiers — banks, regulated financial institutions, telecom operators, specific government departments, and authorised business users get Verisys access for their legitimate verification needs.
API-based integration — Verisys exposes verification as API endpoints for businesses to integrate into their own onboarding and verification workflows.
Returns richer information — name, father's name, address, photograph, biometric matching results. Specific fields depend on access tier and the verification request type.
Per-query charges — Verisys is fee-based for businesses. Charges vary by verification type and volume.
Audit and compliance obligations — businesses must maintain audit logs of verification queries and use the data only for authorised purposes. Misuse can result in access revocation and legal action.
Not available to individuals — Verisys is specifically for registered business users, not for personal verification needs.

CNIC verification — common questions

I want to verify my prospective tenant's CNIC. What can I see through public verification?

Limited information. Public verification via SMS to 7000 or online portal returns whether the CNIC is registered and active. It doesn't show photograph or full personal details. For tenant verification beyond basic legitimacy, the practical approach is asking the tenant to show you the physical CNIC alongside corroborating documents (recent utility bill, employment evidence, references). Combining physical CNIC inspection with public verification confirms both the document and database legitimacy.

Can I verify someone's CNIC without their knowledge?

My business needs to verify customer CNICs in bulk. How do we get Verisys access?

Apply through NADRA's business engagement channels. Initial steps typically include: business registration documents, justification of need (use case), data protection commitments, integration capability demonstration. Approval timeline varies from weeks to months depending on business type. Regulated entities (banks, telecoms) have streamlined paths; other businesses face more scrutiny. Visit nadra.gov.pk or contact NADRA directly for current application procedures.

What happens if I try to verify a fake CNIC number?

The verification returns 'not registered' or 'invalid' indicating the number isn't in NADRA's database. Real CNIC numbers follow structural rules (check digits, valid province codes) and random 13-digit strings often fail those structural checks before even reaching the database lookup. So fake CNICs typically fail at the format level; some sophisticated fakes pass format checks but fail database lookup.

Can verification confirm that the CNIC holder is who they claim to be?

Not at the public verification level. Public verification confirms the CNIC's legitimacy in the database but doesn't bind it to a specific person claimed to be the holder. Confirming that the person in front of you actually IS the CNIC holder requires biometric verification (fingerprint match), photograph comparison, or both. Many verification scenarios (bank counter, BISP collection) combine CNIC presentation with biometric matching for this reason.

Is there a cost to public CNIC verification?

Closing note on identity protection

CNIC verification capabilities reflect Pakistan's balance between identity system utility (preventing fraud, enabling KYC) and individual privacy. Public-tier verification provides useful confirmation without exposing sensitive personal data; business-tier verification provides deeper capability for legitimate organisational needs with appropriate controls.

For CNIC holders, the verification system also has personal protection value: occasional self-verification (checking that your own CNIC remains active and not blocked) confirms your documentation is in order. Some users do this annually as part of general personal administrative review.

Verification services, available channels and access tiers described above reflect NADRA's verification infrastructure as of early 2026. Specific services evolve over time — current details are best confirmed through NADRA's official channels rather than relying on guide specifics that may have changed.