The 5 Golden Rules of Personal Cyber Safety.
Over 90% of digital victims in Sri Lanka fall prey to psychological persuasion rather than technical device exploitation. Memorize and share these five non-negotiable rules to keep your entire family secure.
Never Share Any 6-Digit SMS Code
No friend, relative, teacher, or bank official ever needs an SMS verification code sent to your phone.
Scammers frequently hijack an acquaintance's WhatsApp account, then message you claiming: 'I mistakenly sent my verification code to your number, please send it back!' The moment you send that 6-digit code, the scammer logs into YOUR WhatsApp on their device and locks you out.
Banks Will NEVER Ask for Your OTP or PIN
Anyone calling claiming to be from your bank requesting an OTP to 'reverse a transaction' is the actual thief.
Fraudulent callers use spoofed numbers or claim to be from the 'Fraud Unit' of Commercial Bank, BOC, People's Bank, or Sampath Bank. They claim a suspicious charge was made and offer to cancel it if you provide the OTP sent to your phone. Sharing that OTP authorizes their unauthorized withdrawal.
Enable WhatsApp Two-Step Verification
Add an unbreakable secondary PIN that only you know to your WhatsApp account.
Two-step verification requires a 6-digit passcode that you create. Even if an attacker somehow intercepts your SMS code, they CANNOT complete registration without your personal secret PIN.
Beware of 'Deposit First' Online Jobs & Loans
Legitimate employers never demand an upfront deposit to release your earned wages.
Scammers create Telegram and WhatsApp groups offering Rs. 15,000 to Rs. 30,000 per day for simple tasks like 'liking YouTube videos' or 'submitting hotel reviews'. They pay a tiny reward initially, then demand a deposit of Rs. 50,000+ for 'VIP Level Tasks' before disappearing with your money.
Verify Urgent Distress Messages via Voice Call
Always hear the familiar voice of your relative before transferring emergency money.
Criminals compromise social media accounts and blast urgent messages to friends and relatives saying: 'I am in hospital/police custody, please transfer Rs. 20,000 urgently to this account.' Victims transfer funds in panic without verifying.
Already Encountered a Cyber Incident?
Report the incident immediately to Sri Lanka CERT and the Police Cyber Crime Division. Do not delete screenshots or chat logs because they serve as admissible legal evidence.