Fraudulent SMS and WhatsApp messages mimic official police notices to steal personal and banking information
By The Pulseline News Desk
The Sri Lanka Computer Emergency Readiness Team (SLCERT) has issued a nationwide warning over a sophisticated cyber scam targeting motorists through fraudulent SMS and WhatsApp messages disguised as official police notifications.
According to SLCERT, the scam involves messages falsely informing recipients that traffic violations have been detected through CCTV camera systems. Motorists are then instructed to pay alleged fines through a fraudulent website carefully designed to imitate the Government’s official “GovPay” payment platform.
Cybersecurity officials say the scam is aimed at deceiving the public into revealing sensitive financial and personal information, including credit and debit card details, One-Time Passwords (OTPs), National Identity Card numbers, and other confidential data.
The warning comes amid growing concerns over the increasing use of impersonation scams and fake government-branded websites to exploit public trust in digital payment systems.
SLCERT cautioned that unsuspecting victims attempting to make payments through the fake platform could unknowingly hand over banking credentials directly to cyber criminals.
Officials noted that the fraudulent websites are designed to appear authentic, using official logos, government-style layouts, and urgent payment instructions to pressure users into acting quickly without verifying the legitimacy of the message.
Authorities are urging the public to exercise extreme caution when receiving unsolicited traffic fine notifications through SMS or messaging applications.
As part of its advisory, SLCERT outlined several safety measures for motorists and the general public:
- Avoid clicking suspicious links received via SMS or WhatsApp.
- Verify the authenticity of websites before making online payments.
- Never share banking or personal information with unknown platforms.
- Do not disclose OTP codes to third parties under any circumstances.
- Report suspicious activity immediately to Sri Lanka CERT or the Police.
SLCERT also clarified the official procedure for settling traffic fines through the GovPay system, reminding motorists that payments should only be made after a police officer issues a formal traffic fine ticket and an official notification is provided.
The agency stressed that legitimate authorities do not randomly request payments through unofficial links or unverified digital platforms.
Cybersecurity experts warn that scams involving fake payment portals and impersonation tactics are becoming increasingly common as more public services move online. Criminal networks often rely on urgency and fear to manipulate victims into sharing information before they have time to verify the source.
The latest warning highlights the growing challenges faced by authorities in protecting the public from digital fraud, particularly as online payment systems become more widely used across the country.
SLCERT urged citizens to remain vigilant and report suspicious communications promptly, emphasizing that public awareness remains one of the strongest defenses against cybercrime.
Leave a comment