Most Pakistani business is now conducted electronically — offers on WhatsApp, purchase orders by email, agreements signed by scanning a page and sending it back.
The recurring question is whether any of it is binding. Usually yes. But the exceptions matter, and the difficulty is rarely validity — it is proof.
The framework
The Electronic Transactions Ordinance 2002 gives legal recognition to electronic documents, records and signatures. In substance:
- Information is not denied legal effect merely because it is in electronic form
- A requirement for writing can be satisfied by an electronic document accessible for subsequent reference
- A requirement for a signature can be satisfied by an electronic signature
- Electronic records are admissible in evidence, subject to the applicable rules
The Ordinance also provides for advanced or secure electronic signatures supported by certificates from accredited certification service providers, which attract stronger evidential treatment than a typed name or a pasted image.
There is, in other words, a hierarchy. A cryptographic signature from an accredited provider is not the same, evidentially, as a scanned signature — even though both may be valid.
Where electronic signing does not work
Some instruments still need traditional execution, and this is where businesses get caught:
Documents requiring registration. Sale deeds, gifts, mortgages and long leases of immovable property are executed before the sub-registrar with parties present and identified. See stamp duty and registration.
Instruments requiring stamping. Stamp duty is levied on instruments, and the mechanics of stamping assume a physical document. An electronically concluded agreement that attracts duty still attracts it, and an unstamped instrument is generally inadmissible until the deficiency and penalty are paid.
Negotiable instruments — cheques, promissory notes, bills of exchange — operate under their own regime.
Powers of attorney, particularly for property and for use abroad, which require attestation and, for overseas clients, execution before the Pakistani mission. See powers of attorney from abroad.
Wills, and testamentary documents.
Court filings and affidavits, which follow the court's own requirements.
Documents a foreign authority will receive — attestation chains assume physical documents. See sponsoring family on a Gulf residence visa.
Where you are unsure, the safe course is wet ink plus proper stamping. The cost of doing so is trivial compared with an unenforceable instrument.
When does a WhatsApp exchange become a contract?
More often than people expect. The Contract Act requires offer, acceptance, consideration, capacity and lawful object — none of which requires a formal document.
Courts and tribunals have accepted electronic exchanges as evidence of terms, and a message saying "agreed, send the goods" can be exactly that.
Two practical consequences.
For businesses: your salespeople are concluding contracts on their phones. Train them, limit their authority expressly, and say in your standard terms that only contracts signed by named persons bind you. See when your agent binds you.
For disputes: preserve the thread. Complete, in order, with the numbers and dates visible — not selected screenshots. Deleted messages help nobody, and a partial extract invites the argument that the important part was omitted.
Proving an electronic document
Validity is one question; proof is the one that decides cases.
The Qanun-e-Shahadat Order 1984, read with the ETO, governs admissibility of automated and electronic records. What makes an electronic document persuasive:
- Integrity — evidence the record has not been altered since it was made
- Attribution — evidence linking the signature or message to the person
- The system that produced and stored it, and its reliability
- Metadata, audit trails and delivery records
- A certificate from an accredited certification service provider, where the signature is a secure electronic signature
This is why e-signature platforms are worth using for anything significant: they produce a certificate of completion with IP addresses, timestamps, email verification and a document hash. A pasted image of a signature has none of that, and is easy to challenge.
Practical rules for signing electronically
- Use a proper platform for agreements of any value, and keep the completion certificate with the document
- Prefer a secure electronic signature with an accredited certificate where the document is important or likely to be contested
- Verify identity independently — send the link to an address you already held, and confirm by phone for high-value documents
- Check authority. For a company, is the signatory a director or authorised by resolution or power of attorney? Ask for the resolution
- Retain the audit trail as well as the PDF
- Say so in the contract: a clause confirming the parties agree to electronic execution, that counterparts and scanned signatures are effective, and that neither will challenge validity on that ground alone
- Stamp where duty applies, and register where registration is required
- Wet ink for the exceptions above
Fraud: the practical risk
The realistic threat is not that an e-signature will be held invalid. It is that someone forges one.
Business email compromise — a compromised mailbox used to send an altered agreement or new bank details — is the most common commercial fraud affecting Pakistani firms. The controls that defeat it are procedural: verify payment details by phone on a number you already held, require dual authorisation above a threshold, and never act on a change of bank details communicated by email alone.
See responding to a data breach and card and account fraud.
Forgery of a signature, electronic or otherwise, is an offence, and where it is done electronically PECA is engaged. See an FIA notice and how the agency works.
Record retention
Electronic records must be retained in a form that remains accessible and readable for the period the law requires — tax, company, employment and sector-specific. "Accessible" is doing work in that sentence: a file format nobody can open, or a cloud account nobody can log into after an employee leaves, is not retention.
Keep records under the company's control, not an individual's. See cloud contracts and data localisation and directors' duties and personal liability.
How the firm can help
We advise on whether a particular document can be executed electronically, prepare electronic execution and counterparts clauses, structure signing processes so documents are provable years later, deal with stamping and registration where required, and act in disputes about whether an agreement was concluded and by whom.
See corporate and commercial, or contact the firm.