Sri Lanka Banks’ Association, LankaPay, and FinCSIRT have issued a joint alert regarding a surge in financial fraud cases, both domestically and internationally. 

The scams involve enticing online offers that lead unsuspecting mobile device users to click on malicious links and download harmful apps and files.

According to the alert, once these malicious apps are installed, scammers gain complete control over the victim's mobile device, allowing them remote access. 

This access extends to banking and payment apps installed on the device, facilitating theft from bank accounts and payment cards.

In a statement, the organizations urged the public to remain vigilant against such scams, emphasizing the perpetrators' use of social media platforms, websites, and online messaging services to execute fraudulent activities.

Moreover, the alert clarified that these incidents are not a result of security vulnerabilities in banking or payment apps, as these apps adhere to international security standards.

To mitigate the risk of falling victim to such scams, the public is advised to exercise caution and adhere to the following guidelines:

  

  1. Secure Devices: Regularly update mobile devices with the latest security patches and antivirus software.
  2. Use Official Channels: Only download apps from official app stores and avoid third-party sources.
  3. Stay Informed: Educate oneself about common online scams and fraud tactics to recognize potential threats.
  4. Report Suspicious Activity: Promptly report any unusual or suspicious activity to relevant authorities or financial institutions.

By remaining vigilant and following these guidelines, individuals can better protect themselves against falling prey to online financial scams.