A plain guide to checking an app against the SECP and the exchange.

A wallet provider can trace a transfer without knowing the app's name

When a reader sends money to a mobile wallet number shown inside an investment app, the wallet provider records that transaction against the wallet's own ledger. The record includes the amount, the time, the sending and receiving wallet identifiers, and the device or IP details available at each end. What the wallet provider does not automatically know is the trading name of the app that displayed the deposit instructions.

The app's interface may show one brand, while the wallet receiving the deposit is registered to a different name or to an individual. That mismatch matters when a reader later files a complaint. The wallet provider can trace the funds through its own system, but the regulator has to connect the wallet account to the advertised platform before the trail becomes useful as evidence.

Because wallet providers keep records for a fixed period under their data retention rules, a reader who waits too long to report a payment may find that the trail has been truncated. The moment a deposit is made, the reader should save the transaction reference, the wallet number, and a screenshot of the app screen that instructed the payment. These three pieces together are what an investigator needs to begin.

A trading-right holder is not the same as the brand on the app

The Pakistan Stock Exchange publishes a list of brokerage firms that hold trading right entitlement certificates. Each certificate is issued to a legal entity, and that entity may operate under a different name in the market. An investment app can display a brand that sounds similar to a listed firm's name, or use a logo that resembles one, without the listed firm having any connection to the app.

A reader who checks an app against the exchange's list by looking only at the brand on the home screen may be misled. The correct check involves comparing the full legal name of the entity that the app says will execute the trades. If the app does not name an entity, or names one that is not on the list, the app's claim to be linked to a brokerage firm is not supported by the register.

Some apps claim that their parent company holds a trading right, while the app itself is operated by a different firm. The exchange's list does not record parent-subsidiary relationships, and a trading right held by one entity does not automatically extend to an app run by another. The reader should not assume that a shared office address or a common director creates a licence link.

A task app's withdrawal queue moves only when new deposits arrive

Task and package apps typically require a deposit before a reader can start earning from tasks. The app's system may show a balance that grows with each completed task, but that balance is not held in a separate account for the reader. The money shown is a claim against the platform's own pool of incoming deposits.

When a reader asks to withdraw, the platform may place the request in a queue or ask for a further deposit to reach a higher level. The queue moves only when other users deposit money into the same system. If new deposits slow down, withdrawals slow down. The platform does not generate income from the tasks themselves; it redistributes money from one user to another.

A reader who is told to invite friends to speed up a withdrawal is being asked to bring in the next depositor. The friend's deposit becomes the source of the reader's payout, minus any fee the platform keeps. This is why a withdrawal can be approved on screen but remain unpaid for weeks: the platform is waiting for enough new money to arrive.

An SECP alert is published after the regulator has already received complaints

The Securities and Exchange Commission of Pakistan does not issue an investor alert the moment a platform begins operating. An alert appears only after the regulator has gathered information, usually from investor complaints, and has determined that the platform is not authorised to offer the services it advertises. By the time the alert is public, the platform may have already collected deposits from many readers.

The alert is a backward-looking document. It records what the regulator knew on the date of publication, not what the platform is doing at the moment the reader opens the alert. A platform that is not yet in the alerts table may still be taking deposits, and a platform that is in the alerts table may have changed its name or wallet number the next week.

Because the alert follows the complaints, a reader who waits for an alert before checking a platform is always behind the platform's current pitch. The safer order of operations is to check the trading-rights list first, then look at the alerts table, and only then consider whether the platform's promises match the regulator's published record.

A wallet receipt shows a transfer, not a service agreement

When a reader sends money to a wallet number provided by an investment app, the wallet receipt confirms that the reader's funds reached that wallet. The receipt does not confirm what the recipient promised to do with the money. The app's terms, its advertised returns, and its withdrawal rules are not recorded in the wallet transaction.

A reader who later disputes the transaction with the wallet provider will be asked for evidence of the agreement. The wallet provider can see the transfer, but it cannot see the app's screen, the task list, or the promised withdrawal amount. If the reader did not save screenshots of the app's instructions, the dispute will rest on the reader's word against the platform's ledger.

This is why the regulator's complaint form asks for more than a wallet receipt. The reader is expected to provide the app's name, the wallet number used, the amount sent, the date, and any messages from the platform's support team. A wallet receipt alone is a record of money movement, not a record of what the app owed in return.

A platform can be absent from the alerts table and still be unauthorised

The SECP's investor alerts table lists platforms that the regulator has named in a public warning. The table is not a complete list of every unauthorised platform operating in Pakistan. A platform that is not in the table may simply be too new, too small, or too careful to have come to the regulator's attention yet.

The absence of an alert does not mean the platform is authorised to trade shares or to take deposits. The only positive register for share trading is the Pakistan Stock Exchange's list of trading-right holders. If a platform is not on that list, it cannot legally execute trades on the exchange, regardless of what the alerts table says.

A reader who checks only the alerts table and finds nothing may wrongly conclude that the platform is safe. The correct check starts with the trading-rights list. If the platform is not there, it is outside the exchange's authorised system. The alerts table is a record of what the regulator has already flagged, not a clearance certificate for everything else.