Online Task Investment Scam — Full Reporting & Recovery Guide

Before We Begin — A Harsh Reality We Must Understand Together

This guide is not a guarantee that you will get all your money back.
It is not a promise of instant recovery.

The money you lost most likely moved through several bank accounts and was then converted into cryptocurrency within minutes. Because of this, no officer, no organization, no hacker, no recovery agent — not even HackAware — can promise you full recovery.

But here is the truth you can hold on to:

By reporting through the correct legal channels, action will be taken against the scammers, and there is a chance — even a small one — that part of your money may be recovered.

Do not lose hope.

And remember:

This guide shows you the only legitimate and safe reporting process available in Sri Lanka.
There is no shortcut.
There is no secret method.
There is no alternative safe path.

If anyone claims otherwise, they are trying to scam you again.

Watch the Recovery Guidance Video in Your Language

For your ease, we have created the same recovery guidance in three languages.
You may watch the video, read this guide, or ideally use both together for the clearest understanding.

The written guide contains every detailed step, while the videos help you grasp the emotional and psychological parts more easily.

Choose whichever format helps you most — but remember, the written guide below has all the essential instructions you will need.

English Video

Sinhala Video

Tamil Video

You Were Not Scammed Because You Were Foolish

If you are reading this, you or someone close to you has been caught in an online task investment scam. Your heart may be racing. You may feel guilt, confusion, anger, or shame.

Please understand this:

You were not scammed because you were foolish.
You were scammed because these operations use layers and layers of psychological manipulation designed by professionals to emotionally trap you.

The system is engineered to:

  • Build trust
  • Create urgency
  • Manipulate emotions
  • Show fake success
  • Make you comply
  • Pressure you to reinvest
  • Keep you trapped in the loop

These scams trick smart, educated, strong people every single day.

You got caught because you are human — and humans can be manipulated.

You are not alone.
And HackAware is here to guide you through this safely.

Law Enforcement May Not Understand the Depth of This Scam

Most officers in Sri Lanka are familiar with traditional financial fraud — but not the psychological depth of online task scams.

They may think:

  • “This is just a simple scam.”
  • “You made a mistake.”
  • “Why did you deposit again?”

They may not understand:

  • The grooming
  • The group pressure
  • The fake members
  • The negative-balance loop
  • The emotional manipulation
  • The reinvestment trap
  • The psychological pressure techniques

To help them understand the scale:
You may show them HackAware’s videos on YouTube and social media. Every video we publish explains exactly how these scams operate, and showing these to officers often helps them recognize the pattern and take your complaint more seriously.

If you have a friend or relative in law enforcement, reach out for guidance.
If not, follow this guide step by step — it will take you through the full process.

Step 1: Collect All Evidence

You must do this before blocking, confronting, or reacting emotionally.

Scammers erase evidence instantly when they sense danger.

Save the essential evidence:

  • Direct private chat threads
  • Deposit instructions
  • Negative balance screenshots
  • Withdrawal rejections
  • Voice notes
  • Call logs
  • All deposit slips
  • All bank transfer confirmations
  • Bank account numbers used
  • Website screenshots
  • Selected group messages showing manipulation

Do NOT waste time on:

  • Group names
  • Usernames
  • Profile photos
  • Display numbers

These are fake.

Step 2: Leave or Stay in the Group — But Do NOT Engage

You may stay temporarily to gather evidence, or leave immediately — either is fine.

But:

Do not reply to anyone.
Do not argue.
Do not react.

They may threaten you, guilt you, or emotionally pressure you.
Do not fall for it.
Just keep the app aside.

Step 3: Contact Your Bank

Banks cannot promise recovery, but they can:

  • Try to freeze receiving accounts
  • Alert other banks
  • Provide documentation for your case
  • Mark your account for fraud

Tell them clearly:

“I was manipulated in an online task investment scam.”

If you shared login details, reset:

  • Bank passwords
  • Email password
  • Remove unknown devices
  • Enable 2FA everywhere

Step 4: File Your Police Report — The Legal Foundation

This is one of the most important steps.

Where to report:

  • Below LKR 1M → Local Police Station
  • LKR 1M–25M → SCIB
  • Above LKR 25M → FCID

However, here is something important:

Even if your amount is smaller, you can still try to report to FCID.
In our experience:

  • If you show this is a large organized scam
  • If you gather other victims
  • If the combined loss is high
  • If you have strong evidence

FCID may still take your case.

It is worth trying — even if they decline, at least you tried.

Collaborating with other victims helps:
If you can safely connect with real victims:

  • Combine your evidence
  • Present a larger total loss
  • Arrive together at FCID

This often increases the chances of acceptance.

Include in your report:

  • Full timeline of the scam
  • Negative balance loop details
  • All deposits
  • All bank accounts used
  • Screenshots of manipulation
  • Website details
  • Any ID documents you shared
  • Any login information exposed

You must receive the police acknowledgement slip.
Do not leave without it.

Step 5: FINCSIRT Reporting — Essential for Banking Coordination

After filing your police report, you must report to FINCSIRT.

FINCSIRT helps coordinate between:

  • All major Sri Lankan banks
  • Fraud detection teams
  • Law enforcement
  • Financial intelligence units

FINCSIRT Excel File Requirement:
FINCSIRT requires a specific Excel sheet.

You can obtain it from:

  • FINCSIRT’s official website
  • HackAware’s Online Task Scam Reporting Guide
  • The download link on this page (if enabled)

Your FINCSIRT email must include:

  • Completed Excel file
  • Evidence
  • Deposit slips
  • Bank account numbers
  • Police acknowledgement slip

Send everything to: [email protected]

Without this step, your case stays isolated.

Step 6: Protect Yourself From Identity Misuse

If you shared:

  • NIC
  • Passport
  • Driver’s license
  • Selfies
  • Verification photos

Include this clearly in your police report.

This protects you if scammers use your identity later.

Step 7: Beware of Recovery Scams — 100% Fake

Anyone who asks for money to “help recover your funds” is a scammer.

Fake agents may pretend to be:

  • HackAware
  • CID / FCID
  • Bank officers
  • Interpol
  • Cyber investigators
  • Payment gateway teams

They will promise:

  • Recovery fees
  • Unlocking wallets
  • Crypto tracing
  • Reversing deposits

Every one of these is a scam.
No legitimate authority charges victims for recovery.

Do NOT Stay Silent — Not Reporting Helps Scammers

If you don’t report:

  • You stay unprotected
  • Victims cannot be linked
  • Authorities cannot act
  • Scammers continue freely

Reporting protects both you and future victims.

You Are Not Alone — And We Are Here for You

We know you have lost a lot — money, trust, emotional stability, peace of mind.

We cannot promise you full recovery,
but we can promise this is the only legitimate path toward justice.

If you need:

  • Guidance
  • Clarification
  • Emotional support
  • Someone to talk to

HackAware is here for you.
Our communication lines are always open.

Stay sharp. Stay safe. Stay HackAware.