Learn the Signs
Never share your OTP
A one-time code proves it is you. Anyone who asks for it is trying to be you.
- Banks and apps never ask for your OTP by phone, chat or SMS reply.
- If someone pressures you to read a code out, end the contact.
- Call the bank using the number printed on your card or official app, not a number the caller gives you.
- If you already shared a code, contact your bank immediately and change your passwords.
Check a link before you tap it
Scam links copy real names. Slow down and check where they really go.
- Read the full web address, not just the start. Look for swapped letters or extra words.
- Be wary of urgent messages: prizes, blocked accounts, parcel fees.
- Type the official site into your browser yourself instead of tapping the link.
- Never enter passwords on a page you reached from an unexpected message.
Spotting a fake job offer
Real employers do not charge you to start work.
- Be suspicious of high pay for easy work, or jobs that appear from a stranger's chat message.
- Never pay fees for training, visas, uniforms or 'deposits'.
- Search the company name and contact it through its official website.
- Do not travel abroad for a job you could not verify with the official employer.
Dangerous files on Telegram
Know which file types can run code on your computer.
- Programs: .exe, .scr, .bat, .cmd, .msi, .lnk, .js, .vbs, .jar, and .apk on Android. Never open these from a chat.
- Archives: .zip, .rar, .7z. Scammers hide programs inside them, sometimes with a password so antivirus can’t look inside.
- Watch for double names like invoice.pdf.exe. In Windows, turn on “File name extensions” in File Explorer so you can see the real ending.
- If you must receive a document, ask for a normal PDF or photo, and confirm with the sender by phone first.
Download apps only from official sources
Fake installers copy the real logo and look identical.
- Use your phone’s official app store, or type the official address yourself (for Telegram: telegram.org).
- Do not click ads at the top of search results for software downloads.
- Never install “premium”, “cracked” or “modded” versions of apps.
- Keep Windows Security or another antivirus turned on and updated.
When a contact’s message feels wrong
A familiar name can be a stolen account.
- Be careful with unexpected files, links or requests for money, even from people you trust.
- Check by phone call or in person, not by replying in the same chat.
- Don’t forward the file to others “to check”.
- Tell your contact so they can secure their account.
Lock down your Telegram account
Four settings make takeover much harder.
- Turn on Two-Step Verification: Settings → Privacy and Security → Two-Step Verification. Use a password you don’t use elsewhere.
- Check Settings → Devices and end any session you don’t recognise.
- Never give your login code to anyone, even someone claiming to be Telegram.
- In Privacy and Security, limit who can add you to groups and who can see your phone number.
Opened a bad file: first steps
Speed matters. Work from a clean device.
- Disconnect the device from the internet.
- From another device, change passwords: email first, then banking, social media, Telegram.
- End all other Telegram sessions and turn on Two-Step Verification.
- Scan with antivirus or reinstall the system, and call your bank if you use banking apps.
Spotting investment fraud
Guaranteed profit is the biggest warning sign.
- No real investment guarantees high returns with no risk.
- Be wary of chat groups showing screenshots of big profits, and of people pushing you to decide fast.
- Never pay “tax”, “unlock” or “withdrawal” fees to get your own money out.
- Check that the company is licensed with the national financial regulator before sending any money.
Romance and friendship scams
Trust is built slowly, then used to ask for money.
- Never send money to someone you have not met in person.
- Be careful if they refuse video calls, or quickly move you to a private app.
- Run a reverse image search on their photos.
- Stop and talk to a trusted person if they ask for money, gift cards or crypto.
Fake officials, banks and delivery calls
Real organisations don’t demand money or codes by chat.
- If someone claims to be police, a bank or a courier and threatens you, hang up.
- Call back using the official number from the website, your card or the app, not the number they gave.
- Never transfer money to a “safe account”.
- Tell family members, especially older relatives, about this trick.
Fake online shops
Too-low prices and personal bank accounts are red flags.
- Compare the price with other shops. A huge discount is a warning.
- Prefer cash on delivery or a trusted payment method with buyer protection.
- Be careful if the only payment option is a transfer to a personal account.
- Search the shop name plus the word “scam”, and check how old the page is.