Types of fraud

Phishing (via SMS, e-mail, calls)

Targeted distribution of fake messages imitating official notifications from banks, payment systems, marketplaces, or government agencies.

QR code fraud

Using fake QR codes that lead to fraudulent payment pages or alter transfer details.

Social engineering

A method where fraudsters use psychological techniques to obtain confidential information, gain access to systems, or push the victim to perform certain actions

Fake websites and applications

Creation of copies of official websites and mobile applications to steal personal data or funds.

Messenger fraud

Fraud through popular messengers (Telegram, WhatsApp, Viber, etc.), often using fake accounts.

Financial Security: What Everyone Should Know


Social engineering

  • Pretending to be a bank employee, law enforcement officer, or government official to persuade the victim to provide card details.

  • Creating a sense of urgency

    — "Your account has been blocked, transfer money to a "safe" account".

  • Putting emotional pressure (fear, greed, sense of duty).

Phishing (via SMS, e-mail, calls)

  • SMS with a link to a fake website for entering login/password.

  • E-mail with a forged form or invoice for payment.

  • Calls (vishing), where a fraudster pretends to be from the bank's security service and asks for "confirmation data".

Fake websites and applications

  • A domain similar to the official one but with extra characters or errors.

  • No HTTPS certificate or a fake certificate.

  • A requirement to enter full card details, CVV code, and online banking passwords.

QR code fraud

  • Placing a fake QR sticker over the original one in a cafe, shop, or parking lot.

  • Sending a QR code via messenger "for payment" with altered account details.

Messenger fraud

  • A fraudster pretends to be a friend/relative and asks for an urgent money transfer.

  • Creation of fake groups or channels with "investment projects" and promises of high profits.

  • Selling non-existent goods/services with a demand for prepayment.

Поделитесь

Common fraud schemes, categorized for clarity

Popular fraud scenarios — learn to spot them right away

Practical recommendations

This section contains simple and effective tips to help you reduce the risk of fraud and keep your finances safe. By following these recommendations, you’ll be able to identify threats in time and protect yourself from malicious actions.

Never share codes, PIN, or CVV

Banks and payment systems never ask for your card PIN, CVV code, or one-time passwords from SMS or push notifications. If someone calls or writes to you with such a request — it is 100% fraudsters. Even bank employees, law enforcement, or government agencies do not need this information to help you.

Check the website address and phone number

Before entering your data, make sure the website uses HTTPS (a padlock in the address bar). Check the domain carefully (fraudsters often replace letters or use similar characters, for example: "bunk" instead of "bank"). When receiving calls, check the number — it is better to call back using the official bank number shown on the website or on your card.

Set transaction limits

Configure daily and one-time limits for your cards and accounts in mobile banking. Limits help minimize losses in case of card or account compromise. For large transactions, use prior confirmation (via call center or the app).

Set up transaction notifications

Enable SMS or push notifications for all incoming and outgoing transactions. Timely alerts will help you quickly detect unauthorized debits and block your card.

Use Face ID / two-factor authentication

Enable biometric authentication (Face ID, Touch ID) to log in to the mobile app and confirm transactions. Activate two-factor authentication (2FA) in online banking and email services. This creates an additional barrier even if your login and password are stolen.

Fraud Protection Algorithm

First Steps in Case of Fraud

First Steps in Case of Fraud

Emergency Measures

What to do immediately after contact with fraudsters: stop all communication, secure your funds, change your passwords, and record the evidence. Here you’ll find a step-by-step guide for the first hours and days, including what to do if money has already been withdrawn.

Read more

1. First steps (immediately, within 10 minutes)

Stop contact

  • Do not answer calls/messages, block the number/account.

Protect your money
  • Block the card/account in mobile banking or call the number on the back of your card / only on the official website.

  • Disable "fast payments"/transfers, temporarily lower limits.

Change passwords
  • Online banking, mobile app, email, messengers, marketplaces.

Record evidence
  • Take screenshots of correspondence, phone numbers, links, account names, call time, amounts, and transfer details.

  • Do not delete correspondence or notifications.

2.    Within 24 hours

Notify the bank
  • Via the app/official call center: describe the situation, request urgent blocking of tools, cancellation/dispute of suspicious transactions (if applicable).

  • Write down the case number and the employee's full name.

Check your devices and SIM
  • If you installed AnyDesk/TeamViewer/"antivirus from the operator" at the request of strangers — delete it.

  • Update your OS/antivirus, check your phone/PC for malware.

  • If you notice signs of "SIM-swap" (no network/SMS not received) — urgently contact your mobile operator, reissue the SIM, and set a secret service code.

Report to the service where you were scammed
  • Marketplace/social network/messenger/payment service — file a complaint against the seller/channel/bot, attach evidence, request blocking and assistance.

Contact law enforcement in your region
  • File a crime report (online or in person).

  • Attach screenshots, receipts, scammer contacts, and transfer details.

  • Keep the case number (notification slip) and the contact of the responsible officer.


3.   If the money has already been debited

Card/transfer via the bank
  • Immediately file a dispute (chargeback/transaction claim) — deadlines are limited, the sooner you act, the higher the chance.

  • Provide the bank with all materials: screenshots, numbers, links, statements, receipts.

Transfer to a third-party wallet/card
  • Ask the bank to send a request to the receiving bank to freeze the funds (if still possible).

  • At the same time — file a report with law enforcement.

Cash via ATM/terminal
  • Inform the bank of the place/time/amount; if available — keep the receipt and camera footage (if accessible through the location owner).

4.  If personal/payment data has been leaked

  • Issue a new card, cancel auto-payments, and re-link them.

  • Change passwords everywhere you used the old ones.

  • Check for unfamiliar devices/sessions in your service settings — end them.

  • Enable notifications for all transactions, set low default limits.

  • Activate credit activity monitoring (if available from your bank/credit bureau) and set up alerts.

Next Steps and Data Protection

Next Steps and Data Protection

Reports, Investigations, Restrictions

How to act if personal data has been leaked or money has already been lost: what to submit to the bank, how to assist the investigation, and which mistakes must be avoided.

Read more


1. What to tell the bank/in the statement (template)

"I request to register a report of fraudulent activity.

Date/time of the incident: ____.


Channel: call/SMS/messenger/website.


Amount and currency: ____.


Реквизиты операции (если есть): ____.

Transaction details (if available): ____.

Description: (briefly: how contact was made, what was requested, which website was involved).

Attachments: screenshots, numbers, links, receipts.

I request: to block the tools, prevent further debits, initiate a dispute/reversal of the transfer (if applicable), and provide the case number."

2.    How to assist the investigation

  • Keep original files and metadata (screenshots, PDFs, screen photos with date/time).

  • Do not edit correspondence, do not forward it in "pieces" — it is better to export the entire chat.

  • Record all new contacts from fraudsters, but do not engage in dialogue.

3.    What NOT to do

  • Do not transfer "refund fees," "insurance," or "taxes" — this is a continuation of the scam.

  • Do not share SMS/push codes, PIN, CVV, passwords, or card data.

  • Do not install software at the request of a "bank employee/law enforcement officer."

  • Do not go to "addresses for refunding money" and do not hand over documents to strangers.

  • Do not delete correspondence or notifications — these are important pieces of evidence.

Financial Security: What Everyone Should Know

Quick checklist (summary)

  1. Stop contact → Block card/account → Change passwords + enable 2FA.

  2. Record evidence.

  3. Bank: statement, dispute, case number.

  4. Platform/service: complaint and blocking of the fraudster's account.

  5. Law enforcement: report with attachments.

  6. Devices/SIM: check, remove software, reissue if necessary.

  7. Monitoring: notifications, limits, statement control.

Поделитесь