Pakistan is spying on millions of its citizens using a Chinese-built internet firewall that censors social media and a phone-tapping system, in one of the most comprehensive examples of state surveillance outside China, Amnesty International said.
In a report released on Tuesday, the rights watchdog said that Pakistan’s growing monitoring network was built using both Chinese and Western technology and powered a large crackdown on dissent and free speech.
Pakistan has further tightened political and media freedoms in recent years, particularly after the military broke with then-Prime Minister Imran Khan in 2022, who was later jailed and thousands of his party activists declined.
Read: Data sale: NCCIA blocks several websites
According to Amnesty, Pakistan’s spy agencies can monitor more than 4 million mobile phones at a time through its Lawful Intercept Management System (LIMS), while a firewall known as WMS 2.0 that inspects internet traffic can block 2 million active sessions at a time.
It added that the two monitoring systems function in tandem: one lets intelligence agencies tap calls and texts while the other slows or blocks websites and social media across the country.
Amnesty technologist Jurre van Berge told Reuters that the number of phones under surveillance may be higher, as all four major mobile operators have been ordered to connect to LIMS.
“Mass surveillance creates a chilling effect in society, whereby people are deterred from exercising their rights, both online and offline,” the report said.
Read more: PTA blocks dozens of Indian websites, YouTube channels over misinformation
Amnesty said its findings draw on a 2024 Islamabad High Court case filed by Bushra Bibi, the wife of former premier Khan, after her private calls were leaked online.
In court, Pakistan’s defence ministries and intelligence agencies denied running or even having the capacity for phone tapping. When questioned, however, the telecom regulator acknowledged it had already ordered phone companies to install LIMS for use by “designated agencies.”
Pakistan’s technology, interior, and information ministries, as well as the telecom regulator, did not respond to questions from Reuters about the Amnesty report.
Foreign suppliers
Pakistan is currently blocking about 650,000 web links and restricting platforms such as YouTube, Facebook and X, Amnesty said.
The controls have hit hardest in the insurgency-hit Balochistan province, where districts have faced years-long internet blackouts, and rights groups accuse the military of disappearances and killings of Baloch and Pashtun activists, charges it denies.
According to Amnesty, they have reviewed licensing agreements, trade data, leaked technical files and Chinese records tying the firewall supplier to state-owned firms in Beijing.
It said that the firewall is supplied by the Chinese company Geedge Networks. The company did not respond to a request for comment.
Ben Wagner, Professor of Human Rights and Technology at Austrian university IT:U, has said that mobile call monitoring centers are common globally, but internet filtering for the public is rare. He adds that having both in Pakistan “constitutes a troubling development from a human rights perspective” and “suggests greater restrictions on freedom of expression and privacy will become more common as such tools become easier to implement.”
Also read: Telecom industry bemoans political uncertainty, low return
Amnesty said the firewall uses equipment from US-based Niagara Networks, software from Thales DIS, a unit of France’s Thales (TCFP.PA), and servers from a Chinese state IT firm. An earlier version relied on Canada’s Sandvine.
Niagara told Reuters it follows US export rules, does not know end users or how its products are used, and only sells tapping and aggregation gear.
Amnesty said that Germany’s Utimaco made the phone tapping system and deployed it through monitoring centres run by UAE-based Datafusion.
Datafusion told Amnesty that its centres are only sold to law enforcement and that it does not make LIMS, while AppLogic Networks, the successor to Sandvine, said it has grievance mechanisms to prevent misuse.
The other companies named in the report did not respond to requests for comment.