Cybercriminals are using these platforms to contact unsuspecting individuals while impersonating trusted organizations such as banks, law enforcement agencies, security departments, official institutions and high profile individuals. Their goal is to deceive victims into revealing sensitive banking information or transferring money under false pretences.

How the Scam Works

In many reported cases, victims receive an unexpected voice or video call from an unknown individual claiming to be a bank official, fraud investigator, security officer, or police officer.

The scammer may inform the victim that:

•            Their bank account has been compromised

•            Their bank card has been cloned or hacked

•            Suspicious transactions have been detected on their account

•            Their account is being used for criminal activities

These fraudsters sound professional and knowledgeable, and they manipulate victims by creating a sense of urgency and legitimacy, pressuring them to act immediately as means to secure their funds. Some victims have reported that the scammers even arrange conference calls involving additional individuals who falsely present themselves as police officers, supervisors, investigators, or members of a bank's security team.

The purpose of these tactics is to pressure the victim into acting quickly without verifying the information.

Information Commonly Requested by Scammers

Victims may be asked to provide:

•            Bank card numbers

•            Card expiry dates

•            CVV security codes found on the back of cards

•            One Time Passwords (OTPs) received via SMS

•            Internet banking credentials

•            Mobile banking credentials

•            Personal identification information

Once the fraudsters obtain this information, they can conduct unauthorized transactions, transfer funds, or gain access to banking services.

Important Facts to Remember

Banks, police services, regulators, and legitimate organizations will never ask customers to disclose sensitive banking information over a phone call, video call, WhatsApp call, Google Meet session, email, or any social media platform.

No legitimate institution should ask you to reveal:

•            Your PIN

•            Your OTP

•            Your CVV code

•            Your internet banking password

•            Your full card details

Anyone requesting this information should be treated as a potential fraudster.

How to Protect Yourself

To reduce the risk of becoming a victim:

•            Never share banking details during a call, regardless of who the caller claims to be

•            Do not trust caller names, profile pictures, or claims of authority without independent verification

•            End the call immediately if sensitive information is requested

•            Contact your bank using official contact numbers obtained from the bank's website, branch, or bank card

•            Be cautious when receiving unexpected calls through WhatsApp, Google Meet, or other online calling applications

•            Avoid sharing personal email addresses unnecessarily, as they may be used to initiate contact through online communication platforms

•            Report suspicious calls to the relevant authorities

What To Do If You Have Shared Information

If you have already provided banking information or suspect that your account may have been compromised:

1.           Contact your bank immediately and request that your card or account be secured.

2.           Monitor your account for unauthorized transactions.

3.           Change any affected passwords and credentials.

4.           Report the incident to the police and relevant cybersecurity authorities.

5.           Preserve evidence such as screenshots, call logs, phone numbers, usernames, email addresses, and messages.

Let us all work together to Secure Eswatini and Be Safe Online.