Opening a CDC Account and Actually Starting to Trade in Pakistan

Most guides to the stock market start with why you should invest. We have one of those — how to start investing in the Pakistan Stock Exchange covers whether you should be doing this at all, how to choose a broker, and what a sensible first purchase looks like. This article is about the plumbing: the accounts, the identifiers, the documents, and what mechanically happens to your money when you press buy.

The plumbing deserves its own article because it is where the unglamorous risk lives. The worst losses Pakistani retail investors have taken were frequently not bad stock picks. They were custody failures — shares that turned out to be sitting in the wrong kind of account when a broker went under. Understand the machinery once, and that entire category of loss becomes avoidable.

Your shares are rows in a database

Buying a share on the PSX does not get you a certificate. It gets you an entry in a ledger maintained by the Central Depository Company — the CDC — which has held Pakistan's listed shares in electronic, book-entry form since 1997. That is one of the few pieces of market infrastructure worth being genuinely grateful for. In the paper era, transfers took weeks, certificates got lost in the post, and forged scrips circulated freely enough that buyers had to worry whether the paper itself was real. Dematerialisation killed that entire class of fraud.

It also created a distinction most new investors never absorb: your broker and your custodian are different organisations. The broker executes orders. The CDC holds the shares. When your broker sends a statement saying you own 500 shares of HBL, that is an assertion; the CDC's ledger is the fact. Nearly everything that goes wrong at the account level comes from not knowing the difference — so the most useful habit this article can give you is checking the ledger yourself, which we will come to.

The three places your shares can sit

When you open a brokerage account, your shares end up in one of three places, and the difference matters more than anything on a price chart.

A sub-account in your name, under your broker's CDC participant account. This is the standard arrangement. The shares are legally your property, ring-fenced from the broker's own assets. The broker operates the sub-account — moving shares in and out to settle your trades — which is convenient and, with an honest broker, fine. This is what almost everyone should have.

A CDC Investor Account, held directly with the CDC. Under CDC's Investor Account Services you deal with the depository itself, pay a modest annual fee, and your broker cannot move a single share without your instruction. Selling takes an extra step because you must transfer shares to the broker for settlement. That friction is the point. If you plan to buy and hold for years and trade a handful of times, the inconvenience is cheap insurance.

The broker's own house or omnibus account. Here your shares are pooled under the broker's name, and your claim on them is an entry in the broker's private records — not the CDC's. If the broker fails, you are in practice queuing with its other creditors. When brokerage defaults have burned Pakistani retail clients, this arrangement is usually how. No legitimate reason exists for a retail client's long-term holdings to sit here. If a broker resists opening a sub-account in your name, that is not a quirk. Leave.

Sahulat: the short queue for small investors

The SECP introduced the Sahulat Account because full brokerage onboarding demands income documentation that a student, a household saver or a first-jobber often cannot produce. Sahulat strips the process down: CNIC, a bank account, basic details, digital verification — and you can be onboarded remotely in a day or two without salary slips or tax returns.

The trade-off is a ceiling on how much you can invest through it. The cap has been revised since launch, so confirm the current figure with your broker rather than trusting any number you read — including here. But the design intent is clear: it is a starter account. If your portfolio grows past the limit, you upgrade to a full account by completing the documentation you skipped.

For a genuinely small first portfolio, Sahulat is the right answer, and the simplified onboarding is not a red flag — it is a regulated scheme with its own rulebook. The red flag is a broker offering full-sized accounts with no verification at all, which we will get to.

NCCPL, your UIN, and the tax you never file

Two more acronyms, both worth knowing.

The National Clearing Company of Pakistan Limited — NCCPL — settles trades between brokers and assigns every investor a Unique Identification Number (UIN), tied to your CNIC. Open accounts with three brokers and you still have one UIN. The regulator sees your aggregate activity, which is precisely the point: the UIN is what makes wash trades and benami accounts findable.

The UIN also does you a large practical favour. Since 2012, NCCPL has computed and collected capital gains tax on listed shares at source. You do not calculate CGT trade by trade; it is worked out centrally and deducted. The rates depend on your filer status and holding period, and they get adjusted in nearly every Finance Act — so verify the current schedule with the FBR or your broker rather than memorising this year's figures. What you should memorise is the principle: being a non-filer is expensive on the PSX, and becoming a filer is usually the highest-return paperwork a new investor can do.

The paperwork, and how long it actually takes

For a full brokerage account, expect to provide:

• Your original CNIC (NICOP or POC if you are overseas)
• A bank account in your own name — the IBAN goes on file, and dividends land there directly
• Proof of income — a salary slip, a tax return, or bank statements; which one, and how much scrutiny, varies by broker and account size
• A zakat declaration (the CZ-50 affidavit) if you claim exemption from at-source deduction
• A KYC questionnaire and biometric or NADRA verification — the step that feels bureaucratic and is actually the system checking you exist

A complete file typically opens in around three to seven working days; Sahulat in one or two. When it drags, the sticking point is almost always income proof — brokers are required to ask, and a broker who does not ask is telling you something about their other clients.

Overseas Pakistanis: the Roshan Digital route

Since September 2020, non-resident Pakistanis can open a Roshan Digital Account with a Pakistani bank entirely remotely — no consulate visit, no attestation queue — and link a brokerage account to it. Funds invested through RDA are repatriable by design, which solved the single biggest structural objection overseas investors had.

Red flags, and how to check a broker actually exists

Before signing anything, do two checks that take ten minutes:

1. The SECP publishes a list of licensed securities brokers. Your broker must be on it.
2. The PSX publishes its list of TRE certificate holders — the firms actually entitled to trade on the exchange. Your broker must be on that too.

Not on both lists means not a broker, whatever the website says. Beyond that, the recurring patterns before retail disasters are consistent enough to state as rules: never deposit money into an individual's personal bank account; never accept "guaranteed monthly profit" — that is not broking, it is the same machinery we describe in why most stock tips lose money with a licence-shaped logo on top; and never sign blanket authorisations letting the broker trade your account at discretion.

Then build the one habit that beats every red-flag list: verify your holdings with the CDC directly. Sub-account holders can register for CDC's online access and SMS alerts and see their own positions straight from the depository — no broker in the loop. Compare it with your broker's statement every month or two. If the two disagree, believe the CDC, and start asking hard questions the same day.

What actually happens when you press buy

Your order goes into the PSX's electronic trading system and is matched anonymously against the best opposite order. The trade is confirmed the same day, but settlement runs on T+2: buy on Monday and the shares land in your sub-account on Wednesday, when the cash actually leaves. NCCPL nets obligations between brokers in the middle. That was the cycle as of mid-2026 — the US moved to T+1 in 2024 and settlement conventions do change, so check PSX notices rather than assuming.

Practically, for a first order: use limit orders, not market orders — in anything but the most liquid names, a market order is an invitation to be filled at whatever the thin side of the book offers. Shortlist liquid, boring companies with the screener, and read the stock page — say OGDC's — properly first; how to read a stock page covers what deserves your attention and what is decoration.

Before that first order, you should be able to answer five questions without opening a chat with your broker:

1. Is my broker on both the SECP and PSX lists — checked by me, not asserted by them?
2. Are my shares in a sub-account or investor account in my own name, and what is its number?
3. Can I log into the CDC's portal and see my holdings without my broker's help?
4. Which bank account will my dividends land in?
5. What is my UIN?

If any answer is "I don't know", you are not ready to trade — you are ready to be a cautionary tale. The market taking your money through bad decisions is the deal you signed up for. Letting the plumbing take it is optional.