Common Scam Methods in Sri Lanka

                                                                                                                          
Common Scam Methods in Sri Lanka

1. Fake Online Marketplaces (e.g., Facebook, Instagram, WhatsApp)

   • Scammers post ads for products (e.g., phones, electronics, vehicles) at extremely low prices.

   • They ask for advance payments via FriMi, JustPay, or other apps but never deliver the product.

   • They may also send fake OTPs or links to steal banking details.

2. OTP (One-Time Password) Scams

   • Scammers call or message victims pretending to be from a bank, government agency, or delivery service.

   • They ask for OTPs sent to the victim's phone, claiming it’s for verification.

   • Once the OTP is shared, they gain access to bank accounts or payment apps.

3. Fake Job Offers

   • Scammers post fake job opportunities on social media or job sites.

   • They ask for personal information, bank details, or upfront payments for "training" or "registration fees."

4. Phishing Links

   • Scammers send SMS or WhatsApp messages with links pretending to be from banks, government institutions, or popular apps.

   • These links lead to fake websites designed to steal login credentials, OTPs, or card details.

5. Fake Lottery or Prize Scams

   • Victims receive messages claiming they’ve won a lottery or prize.

   • They are asked to pay a "processing fee" or share personal/banking details to claim the prize.

6. Impersonation Scams

   • Scammers pretend to be friends, family, or officials (e.g., police, tax department).

   • They create urgency, claiming the victim needs to transfer money or share sensitive information immediately.

7. Fake Investment Schemes

   • Scammers promote "get-rich-quick" schemes, such as cryptocurrency, forex trading, or pyramid schemes.

   • They promise high returns but disappear once they receive money.

8. SIM Swap Fraud

   • Scammers convince mobile service providers to issue a new SIM card linked to the victim’s number.

   • They use this to intercept OTPs and gain access to bank accounts or payment apps.

---

Tips to Protect Against Scams

1. Never Share OTPs or PINs

   • Legitimate organizations will never ask for your OTP or PIN. Treat these as confidential.

2. Verify Before Trusting

   • Double-check the identity of anyone asking for money or personal information.

   • Contact the organization directly using official contact details.

3. Avoid Clicking Suspicious Links

   • Do not click on links in unsolicited messages. Manually type the official website address.

4. Use Strong Passwords

   • Create unique, strong passwords for online banking and payment apps.

   • Enable two-factor authentication (2FA) wherever possible.

5. Be Cautious with Online Transactions

   • Only use trusted platforms for buying/selling goods.

   • Avoid making advance payments unless you’re sure of the seller’s credibility.

6. Monitor Bank Accounts

   • Regularly check your bank and payment app transactions for any unauthorized activity.

7. Educate Yourself

   • Stay updated on the latest scam tactics and share this knowledge with friends and family.

8. Report Scams

   • If you encounter a scam, report it to the Sri Lanka CERT|CC (Computer Emergency Readiness Team) or local police cybercrime units.

---

Examples of Scam Messages

• Fake OTP Message:
  "Your FriMi account has been locked. To unlock, share the OTP sent to your phone."
  (Never share the OTP!)

• Fake Job Offer:
  "Congratulations! You’ve been selected for a work-from-home job. Pay a registration fee of Rs. 5,000 to proceed."
  (Legitimate jobs don’t ask for upfront payments.)

• Fake Lottery:
  "You’ve won Rs. 10 million in a lottery! Call this number to claim your prize."
  (Ignore such messages.)