TURNIT

Warning · IMEI · DIRBS · PECA 2016

IMEI patching, CPID and lifetime approved: what those terms really mean

By Ghulam Muhayuddin · updated · roughly 7 min read

If you buy or repair phones in Pakistan you have heard the vocabulary: patched, CPID approved, lifetime PTA approved, JV. A seller says the phone is approved, the price is well below a properly registered unit, and the SMS check comes back looking fine.

This article explains what is actually happening in those cases, why it stops working, and what it exposes you to. I am not writing it to moralise — I am writing it because people lose real money to this, and because the technical reality is genuinely misunderstood.

Ad slot — leave empty until AdSense is approved

What patching actually is

PTA's own documentation describes it directly: patching is an illegal process where a device's software is modified to re-program device IMEIs, letting it work temporarily on mobile networks without proper registration. Terms like CPID approved or lifetime patched are used to make buyers think a device is officially approved when the IMEI has simply been reprogrammed.

Technically, what has happened is that the device's NV storage has been rewritten to carry a different number — usually one belonging to a device that is properly registered. The phone then presents itself to the network as that other device.

That is the part worth sitting with. A patched phone is not approved. It is impersonating a phone that is.

This is why patched devices get blocked without warning. Nothing about the phone changed on the day it stopped working — DIRBS simply detected the duplication. The failure was built in from the start; only its timing was uncertain.

How DIRBS finds them

DIRBS operates on a whitelist. Every device connecting to a Pakistani network is checked against the registered database continuously, not once at purchase. Two things give a patched device away:

  • Duplication. The same IMEI appearing on two devices simultaneously is a clear signal, and it is exactly what patching produces.
  • Model mismatch. The registered record for an IMEI includes brand and model. A patched phone reports its real hardware while carrying someone else's number, and the two do not line up.

That second point is also your best defence as a buyer. When you send an IMEI to 8484, do not just look for the word approved — check that the brand and model in the reply match the phone in your hand. A mismatch there tells you what you are holding.

Diagram showing a registered IMEI record for one brand and model against a physically different device, illustrating the mismatch that reveals patching
The check most buyers skip. A patched device reports its real hardware while carrying another device’s number, and the two do not line up.

The legal exposure

IMEI duplication or cloning is a punishable offence under Pakistani law. PTA states that action can be taken by the Federal Investigation Agency under the Prevention of Electronic Crimes Act, 2016, against those using or selling patched devices.

Note the wording: using, not only selling. A buyer who did not know may be in a much more sympathetic position than the seller, but the device itself remains illegal to operate.

For anyone doing repair work, this is worth being clear-eyed about. Offering IMEI patching as a service is not a grey area or a licensing technicality. It is the specific activity the law names.

Ad slot — leave empty until AdSense is approved

Checking a device properly before you buy

  1. Dial *#06# on the phone itself. Do not accept a number written on the box or read out by the seller.
  2. Send that number to 8484 from any phone, or check through PTA's verification tool.
  3. Compare brand and model in the reply against the actual device. This is the check that catches patching.
  4. Check both IMEIs on a dual-SIM phone.
  5. Be suspicious of a price well below market for a properly registered unit. The gap is usually the unpaid duty.

If a seller discourages you from doing any of this, that is your answer.

What legitimate options exist

For an unregistered device you own, the lawful route is registration through PTA's DRS portal — submit the IMEI and required documents, and pay the assessed duty. It costs more than a patch. It also does not stop working.

For a device whose own IMEI was lost during a flash, that is a repair rather than a patch, and it is covered separately in the guide on restoring your own IMEI.

For a device that is already patched and blocked, there is no technical fix that makes it legitimate. The IMEI it carries belongs to another device.

Frequently asked questions

My patched phone has worked for a year. Is it fine?
It is undetected, which is not the same thing. DIRBS checks continuously and detection timing varies. Nothing about the device improves with time.
The seller said it is CPID approved. Is that a real category?
PTA names these terms specifically as marketing language used to make patched devices sound official. There is no CPID approval status in the registration system.
Can I get a refund if I bought a patched phone?
That depends on your purchase terms and the seller. Documenting the SMS verification result showing the model mismatch is the most useful evidence you can have.
Is a blocked device completely useless?
It works on Wi-Fi. It will not connect to a Pakistani mobile network.
Does this apply outside Pakistan?
The DIRBS system is Pakistan-specific, but IMEI reprogramming is illegal in many countries under their own laws. Check your local regulations rather than assuming.

This article describes how to identify patched devices and what the law says about them. It deliberately contains no instructions for reprogramming an IMEI, and I do not offer that as a service.