Colombo, Sri Lanka – July 30, 2025 – The Criminal Investigation Department (CID) has issued an urgent and escalating warning: a large number of complaints are currently being reported regarding fraudulent attempts to hack WhatsApp users’ accounts by sending fake calls and text messages in order to defraud them of money. This comprehensive post dives deep into the alarming surge of WhatsApp scams gripping Sri Lanka, equipping you with vital knowledge to safeguard yourself and your loved ones.
Investigations by the CID have revealed a cunning tactic: fraudsters are actively deceiving users into revealing their WhatsApp One-Time Password (OTP) numbers. These stolen OTPs are then immediately used to gain unauthorized access to accounts, enabling scammers to impersonate victims and send fake messages to their contacts, often soliciting urgent funds or promoting fraudulent schemes.
Beyond the prevalent OTP scam, we'll expose other insidious tactics currently circulating in Sri Lanka, including deceptive messages falsely bearing the names of high-ranking officials like the Acting Inspector General of Police (IGP) or reputable institutions such as Sri Lanka Customs and Dialog Axiata, as well as fraudulent investment and remote job offers. These sophisticated cybercrimes are leading to significant financial losses and data breaches across the island.
Accordingly, the police have strongly urged the public to remain vigilant against these scams, emphasizing that OTP numbers for online accounts should never be shared with anyone under any circumstances. This post provides essential, actionable advice from law enforcement and cybersecurity experts. Learn how to identify red flags in suspicious messages and calls, understand the common ploys used by scammers, enable crucial security features like two-step verification, and know precisely when and how to report fraudulent activity to Sri Lanka CERT and the CID. Don't fall victim – empower yourself with real stories, critical insights, and proven tips to navigate Sri Lanka's challenging digital landscape securely.
