Emergency Scam Response
IIf you suspect you’ve been scammed, what you do next matters more than anything. Scammers rely on panic and confusion, and many victims lose even more money simply because they react too quickly or in the wrong order. Acting calmly and following the correct steps can help protect your money, secure your accounts, and support official investigations.
This guide explains what to do immediately, how to protect your finances, and the proper way to report scams in Sri Lanka.
For certain scam types, we also provide detailed, step-by-step reporting guides. You can refer to them here:
Specific Scam Reporting Guides:
1. Document Everything
This should always be your first step
Before blocking anyone or leaving any group, you must collect all evidence. Once scammers sense suspicion, they often delete chats, change group names, or remove you from groups, which can permanently erase key proof.
Save the following:
- Chat messages, contact numbers, usernames, group names
- Payment receipts and bank transfer slips
- Website URLs, social media accounts, and app profiles
- Screenshots of instructions, conversations, or suspicious links
- Bank account numbers provided by the scammer
- Voice notes, call logs, emails, or advertisements
Keep everything in one folder or PDF, because authorities and banks often request all evidence together.
⚠️ Important:
Scammers regularly use fake or stolen NICs, photos, and names. Do not assume any identity documents they shared are real.
2. Stop All Communication
Once your evidence is saved, stop interacting with the scammer. Continuing the conversation exposes you to more manipulation, emotional pressure, or attempts to steal more information.
Block their number, email, or social media profile as soon as you’re done collecting proof. If you are in a WhatsApp, Telegram, or Facebook group, leave quietly without confronting anyone, as confrontation may trigger harassment or evidence destruction.
3. Protect Your Financial Information (if money was sent)
If you sent money or revealed financial details, contact your bank immediately. Banks can sometimes freeze or flag suspicious accounts, especially if the scammer has not yet withdrawn the funds.
Ask your bank to:
- Attempt a reversal if the transfer is still pending
- Freeze or monitor the recipient’s account
- Block and replace your card if card details were exposed
- Check for unusual or unauthorized activity
- Connect you with their Fraud or Dispute Unit
If you used mobile wallet apps (Frimi, Genie, PayHere, Tap-to-Pay, Crypto apps), request a fraud freeze or dispute through their support teams. These services can act faster than traditional banks in some cases.
⚠️ Note:
Reversals are not always possible, especially for voluntary transfers. However, reporting early increases the chances of freezing the scammer’s account before funds are moved.
4. Fill the FINCSIRT Excel File
FINCSIRT uses this spreadsheet to notify multiple banks and freeze suspicious accounts quickly. Filling it correctly ensures your case reaches the right institutions without delay.
You must include:
- All scam-related bank account numbers
- Bank names and branch details
- Dates and times of each transaction
- A short description of what happened
To make this easier, you can download the official FINCSIRT spreadsheet using the link below.
5. File a Police Complaint
Report the incident to your nearest police station. The officers there will guide you on the correct process and direct you to the appropriate division if needed.
Where to report based on the scam type and amount involved:
Money/Bank Fraud
Crypto-related fraud
When filing your complaint:
- Bring digital or printed evidence
- Share all account numbers and transaction details
- Explain how the scammer contacted you and what they asked you to do
- Request the official police complaint acknowledgement slip — FINCSIRT requires this
Police reporting gives your case legal standing and helps formal investigations begin.
6. Send Everything to FINCSIRT
Email your documents to:
📩 [email protected]
Attach:
- Your completed FINCSIRT Excel file
- Screenshots and chat evidence
- Transaction slips or confirmations
- Your police complaint acknowledgement
FINCSIRT will coordinate with banks to freeze flagged accounts and stop further misuse. This process does not guarantee fund recovery, but it significantly increases the chances of preventing additional fraud and identifying scam networks.
7. Additional Reporting (Optional but Helpful)
After filing your main reports, you can also share the details with us. This helps with awareness, pattern tracking, and domain takedown requests.
Report to HackAware.org
Submit your case at hackaware.org/report
We review every submission and use it to identify emerging scams, warn the public, and support investigative takedown requests.
You may also report to:
Sri Lanka CERT | CC
[email protected]
8. Secure Your Accounts (For additional safety)
If you entered your password on a suspicious website or shared login details, you must secure your accounts. Scammers often attempt secondary logins or credential stuffing after the first contact.
Do the following:
- Change passwords for email, banking, and social media
- Enable Two-Factor Authentication (2FA) wherever possible
- Review login activity and remove unknown devices
- Reset any passwords you reused across multiple accounts
Reused passwords are one of the most common ways scammers gain deeper access. Updating them now prevents future breaches.
9. Inform Others (Safely)
After completing your reports, consider warning others so they don’t fall for the same scam. Sharing what happened helps raise awareness and protects your community.
If you share publicly:
- Do not reveal your NIC, phone number, email, or financial details
- Remove personal information before posting screenshots
- Only share facts that help others identify similar scams
Spreading awareness reduces the success rate of scam networks.
10. Monitor & Follow Up
For several weeks after reporting, you should continue monitoring your accounts. Scammers may attempt follow-up attacks or use your information in other ways.
Watch for:
- Unexpected password reset emails
- New login attempts from unknown locations
- Calls pretending to be “bank officers” — always hang up and call the official hotline listed on the bank’s website
- Suspicious activity involving your NIC
Unauthorized SIM registrations or loans are uncommon but possible when scammers obtain personal details. Monitoring ensures you can act quickly if anything unusual appears.
11. Avoid Future Risk
Strengthening your digital habits helps prevent future scams. Many victims are targeted more than once because scammers share or sell their contact information.
Improve your digital safety by:
- Using unique passwords for every service
- Storing them in a secure password manager
- Keeping your devices and apps updated
- Learning common scam red flags through our Scam Checklist
Small changes in digital hygiene can significantly reduce your vulnerability.
12. Beware of “Recovery Scams”
After the initial scam, scammers — or new criminals — may target you again by pretending they can recover your money. These are known as secondary scams, and they specifically target victims who are desperate or searching for help.
Common lies include:
- “We can recover your money for a fee.”
- “We are from CID / Interpol / a cybersecurity team.”
- “We need your bank details or remote access to verify the case.”
Never pay anyone for “recovery assistance.” Legitimate authorities, including banks and police, do not charge victims for investigations.
Summary
Being scammed is painful, but what you do next plays a major role in limiting the damage. Act quickly, document everything, and follow the proper Sri Lankan reporting pathway to increase your chances of protection.
There is no guaranteed way to get your money back, but filing reports, alerting banks, and securing your accounts significantly improves your safety — and helps prevent the scammers from harming others.