Scammers are reportedly sending messages stating that a credit card has been suspended due to “suspicious activity,” often mentioning well-known banks to make the alerts appear credible. Recipients are instructed to reactivate their cards by clicking a link and providing sensitive personal information, including National Identity Card (NIC) numbers. These messages typically warn that the card will be permanently cancelled if the information is not submitted within 24 hours, creating a sense of urgency. Fraudsters then gain access to victims’ bank accounts, trick them into sharing One-Time Passwords (OTPs), and steal funds.
In another reported method, some victims have received WhatsApp video calls from individuals impersonating Assistant Superintendents of Police. The callers claim that a criminal in custody has used the victim’s identity to obtain credit cards from multiple banks and commit large-scale fraud. They quote NIC and bank account details obtained from previous scams to intimidate the victims. Under threat of arrest, some victims have transferred significant amounts of money to the fraudsters.
Sri Lanka CERT strongly urges the public to exercise caution and never share personal or financial information, including NIC numbers, card details, passwords, or OTPs, through unknown or unverified links received via SMS, email, or online messages. People are advised to verify any suspicious communication directly with their banks or relevant authorities using official contact details before taking action. Suspected fraud should be reported immediately to the bank.
