According to Sri Lanka CERT, cybercriminals are exploiting the heightened online activity during the festive period to target unsuspecting individuals. These scams are designed to take advantage of seasonal goodwill, urgency, and increased digital engagement.
Authorities report a growing number of complaints involving fraudsters impersonating government institutions, public service departments, well-known supermarkets, and reputable businesses. These scams often promote fake discounts, special offers, financial rewards, and prize giveaways to lure victims.
Sri Lanka CERT also highlighted an increase in scams linked to online “Avurudu Kumari” competitions and similar festive promotions, which are used to collect personal data such as photographs and other sensitive information.
Additionally, scammers are distributing deceptive links that prompt users to make payments or reveal personal and financial details. Several victims have already reported unauthorized bank transactions and financial losses.
Sri Lanka CERT strongly advises the public to remain vigilant by avoiding suspicious links, refraining from sharing personal or banking information on unverified platforms, and never disclosing One-Time Passwords (OTPs) to unknown parties.
The agency emphasized that legitimate government institutions and recognized organizations do not request sensitive information through unsolicited messages or unknown links, urging the public to verify all such communications through official sources before taking action.
