“Because staying silent wasn’t an option.”

Who We Are

Sri Lanka’s Online Scam Reporting Platform

We are Sri Lanka’s only investigative scam reporting platform, dedicated to protecting everyday people from online scams, fraudulent websites, and digital fraud. Founded by independent researchers passionate about digital safety, we stand between individuals and the sophisticated threats of the online world. Our platform serves as a hub for scam investigation, education, and proactive action to safeguard the community.

Our Mission

Fighting Scams, Protecting the Community

Our mission is to investigate online scams, take down fraudulent domains, raise awareness, and protect our community through proactive, hands-on efforts. We started because there was a critical gap — no dedicated platform was standing between ordinary Sri Lankans and rapidly evolving digital threats. Every day, we work to ensure that people can navigate the online world safely.

“We believe that awareness is the first line of defense in cybersecurity.”

Our Vision & Values

Our vision is simple: a Sri Lanka where no one has to face online scams alone. Guided by principles of integrity, proactivity, and community-centered action, every initiative we take is aimed at making the digital space safer for everyone.

How We Investigate and Take Down Online Scams

We operate in a multi-dimensional, proactive way.

Investigation & Monitoring

Research and monitor online scams, fraudulent websites, and suspicious domains.

Scam Domain Takedowns

Investigate scam operations, track fraudulent activities, and coordinate with domain registrars, hosting providers, and authorities to remove malicious domains.

Education & Awareness Campaigns

Produce videos, articles, and social media campaigns to inform and empower our community about cyber risks and scam prevention.

Reporting & Collaboration

Share actionable intelligence with authorities, including cybercrime units and national CERT teams, ensuring scams are dealt with effectively.

Focus & Scope

Sri Lanka First, Global Awareness

While Sri Lanka is our primary focus, we also monitor scams and fraud patterns globally to anticipate emerging threats that could affect our community. Every investigation, takedown, and awareness initiative is part of our commitment to proactively fight scams and protect users online.

Impact

Raising Awareness and Protecting the Community

Since our inception, we have helped expose and remove thousands of fraudulent websites, reached millions through educational campaigns, and established critical connections with authorities to act on scam intelligence. Our work is dedicated to raising awareness in every way possible and ensuring the community is informed, empowered, and protected.

Why It Matters

At our core, we are more than just a reporting platform. We are a shield for the digital safety of Sri Lanka, a proactive force against online fraud, and a dedicated advocate for anyone who might otherwise fall victim to scams. Our work is driven by the belief that knowledge, awareness, and action can prevent harm, and that everyone deserves to navigate the online world safely.

Join the Mission

Join us in creating a safer digital space — stay alert, follow our updates, and help protect your community.

Share Our Content

Help spread awareness by sharing our posts

Report Scams

Submit suspicious links you encounter

Donate

Support our investigative work

Report a Threat Follow Us

FAQs

No, our focus is strictly on online scams. If a scheme cannot be definitively proven to steal money from users—such as certain investment operations or Ponzi-like schemes—we still investigate and analyze it. We provide detailed insights on the strategies used, highlight red flags, and compare them with classic Ponzi patterns, without labeling it outright as a scam.

You can report suspicious websites, fraudulent domains, or scam activity directly through report.hackaware.org. Every report helps our team investigate, gather evidence, and take necessary action to protect the community. Providing detailed information such as screenshots, website links, or communications from scammers helps us act faster and more accurately.

A scam domain is a website set up with the intent to defraud users, steal sensitive information, or facilitate financial fraud. Scammers often imitate legitimate websites, create fake investment platforms, or run phishing operations. By monitoring and analyzing these domains, we identify patterns of fraudulent behavior and provide actionable insights to protect users.

Once a scam or fraudulent website is identified, we gather evidence and coordinate with domain registrars, hosting providers, and relevant authorities to remove the malicious content. This process is thorough to ensure that the takedown is legitimate, effective, and prevents the scam from resurfacing elsewhere. Our goal is to minimize harm and protect the public from ongoing threats.

While our primary focus is Sri Lanka, we actively monitor global scam trends and online fraud patterns. Many scams target multiple countries simultaneously, and understanding global patterns allows us to anticipate emerging threats, providing better protection for our local community.

If something seems too good to be true, take a step back and evaluate carefully. Always take your time to verify offers, websites, or investment opportunities. Educate yourself on common red flags, avoid sharing sensitive information, and follow trusted sources for scam alerts. Remaining cautious, informed, and skeptical is your first line of defense.

Scammers continuously adapt, creating new fraudulent websites and strategies. By subscribing to our alerts and following our campaigns, you stay informed of emerging threats, learn to recognize red flags, and receive actionable advice to protect yourself and your community. Awareness is a key factor in preventing fraud.

Our investigations combine research, monitoring, and digital intelligence gathering. We analyze suspicious websites, track scam domains, examine communications, and detect patterns in fraudulent activity. We also leverage connections with local authorities and CERT teams to validate findings and coordinate appropriate responses.

Our investigations provide insights and highlight red flags, but we do not provide financial advice. Users should exercise caution and conduct independent verification before participating in any investment. We aim to equip the community with knowledge to make safer decisions and recognize potential risks.

The most common scams include phishing websites, fake investment platforms, Ponzi schemes, fraudulent online shops, and impersonation scams targeting social media users. Scammers often exploit trust, urgency, or greed to trick people into revealing sensitive information or sending money.

We produce videos, articles, social media campaigns, and public alerts to inform and empower our community. Our educational content highlights real-world examples, explains red flags, and teaches practical strategies for avoiding scams. Awareness and education are central to our mission.

If you suspect a scam but are unsure, reach out to us via our platform’s messaging channels. Provide as much detail as possible, including links, screenshots, and descriptions of the suspicious activity. Our team will review the information, provide guidance, and, where appropriate, investigate further to protect the community.

The takedown process depends on evidence, the responsiveness of domain registrars or hosting providers, and legal requirements. While we act as quickly as possible, some websites may remain online temporarily while verification and coordination take place. We always prioritize accuracy and effectiveness.

Yes. We maintain connections with cybercrime units, law enforcement agencies, and national CERT teams. These relationships allow us to report verified scams, coordinate takedowns, and ensure that actionable intelligence is used effectively to protect the public.

Businesses should implement strong cybersecurity practices, educate employees about phishing and fraud, monitor for unauthorized websites or domains, and verify online communications carefully. Regular audits, reporting suspicious activity, and following trusted cyber alerts also help safeguard organizational assets.

Yes, social media scams are increasingly common. These include impersonation accounts, fraudulent ads, fake investment opportunities, phishing messages, and fake giveaways. Users should verify accounts, avoid clicking suspicious links, and report fraudulent activity immediately.

Ponzi schemes promise high returns with minimal risk, often relying on new participants’ funds to pay earlier investors. Red flags include unrealistic profits, pressure to recruit others, secrecy, and vague explanations of the business model. Our investigations analyze these schemes and highlight warning signs without labeling uncertain cases outright as scams.

By analyzing scam operations, identifying patterns, and documenting strategies, our investigations provide insights that inform awareness campaigns and preventive measures. Public education, takedowns, and reporting to authorities collectively reduce the chances of similar scams recurring.

Yes. Community participation is essential. Users can submit reports, share suspicious websites, and provide information on scams they encounter. Every submission helps us investigate, track, and take action against online fraud.

Accuracy is a top priority. Our team conducts thorough investigations, cross-checks evidence, and collaborates with authorities when necessary. We only issue alerts after verifying threats to ensure that the public receives reliable, actionable information.

Contact Us