Stay safe online: the complete guide

• Check the page’s age and historyUnder Page transparency, see when the page was created and how often its name changed. Be careful with new pages or pages that keep changing names.
• Choose cash on deliveryPay when the product is in your hands whenever you can. Think twice when the full price is asked in advance.
• Even a "delivery charge" — only after checkingCollecting small delivery charges and then disappearing is a known trick. Check the page and number first.
• Open the parcel in front of the courierCheck that the product is right before you pay or accept it; return it if it is not.
• Tell real reviews from fake onesIdentical praise everywhere, or comments turned off, is suspicious. Screenshot "reviews" are easy to fake.
• Compare the priceSee what the same product costs elsewhere. Half-price offers are usually a trap.

• Your PIN and OTP are yours aloneNo agent, customer care or officer asks for them. Hang up at once if anyone does.
• "I sent money to you by mistake" — check it yourselfCheck your balance in the app or by USSD, not in an SMS. If money really arrived, return it through the helpline, not by sending it yourself.
• Spot fake SMSReal transaction messages come from the company name (for example bKash), not from an ordinary mobile number.
• Keep app lock and notifications onUse separate locks for the phone and the app, and keep a notification for every transaction.
• Call the helpline at once after a wrong transferbKash 16247, Nagad 16167, Rocket 16216 — the sooner you call, the better the chance to stop the money.

• A name is not proofEven if the caller says police, army, bank or mobile operator, hang up and call the official number yourself.
• Lotteries and prizes are trapsYou cannot win a lottery you never entered. "Pay a fee to get your prize" is always fraud.
• "Your relative is in trouble" callsIf they ask for urgent money for an accident or arrest, first call that relative or family member yourself.
• Caller ID can be fakedA familiar name or number on the screen can still be someone else.

• Turn on two-factor authenticationTurn on 2FA for Facebook, WhatsApp and email, and use a different strong password for each account.
• If a friend asks for money, call themIf a friend asks for urgent money on Messenger, call them directly first.
• Never forward codes or links"A code went to your number by mistake, send it to me" — this is how WhatsApp and Facebook accounts are taken over.
• Fake login pagesIf a link asks for your password, check that the address really is facebook.com; when in doubt, open the app and log in yourself.
• Be careful with private photos and detailsDo not share private photos or videos with strangers. If someone blackmails you, do not pay — contact police cyber support.

• Be wary of paying for a jobReal employers do not charge registration, training or "security" fees.
• Jobs abroad and visasCheck the recruiting agency’s licence on the BMET website, and get a written contract before handing over your passport or money.
• "Earn by doing tasks" appsThey pay a little at first to win trust, then ask for a big "deposit" — and the app disappears.
• There is no guaranteed profit"20% a month" or "double your money" — under any name, crypto, MLM or other, it is a big risk.
• Profit for bringing new members — a pyramid schemeIf the only income is money from new members, it will collapse.

• Check the spelling of the addressbkash-offer.com or b-kash.net instead of bkash.com — one letter is enough to be a trap.
• Install apps only from official storesDo not install APK files sent to you outside the Play Store or App Store.
• No remote access appsIf someone says "let me fix it" and asks you to install AnyDesk or TeamViewer, refuse.
• Think before scanning a QR codeA QR code from an unknown source can lead to a fake payment page.
• The padlock is not enoughA site can be fake even with https; check the address and the business.

• No rent advance before seeing the placeSee the place yourself, talk to the owner and sign a written agreement before paying an advance.
• Buy tickets from official channelsBuy air, train and bus tickets from the official site or app or a known agency, and check the PNR.
• Check tour packagesFor unusually cheap packages, confirm the hotel and transport bookings separately.

• Do not trust payment screenshotsScreenshots are easy to edit. Check the balance and transaction in your own app before you ship.
• "I overpaid, please refund the rest"Usually nothing arrived, or it will be reversed — never refund before checking in your app.
• Couriers and returnsUse known couriers, and keep photos of parcels and tracking numbers.
• Add your business to CapscanWith a profile and real reviews, buyers can recognise and trust you.

• Agree on a family rule"Before sending money, call someone in the family" — this one rule stops a lot of fraud.
• Remind older relatives about PINs and OTPsWhen you set up mobile banking for them, explain with examples how fraud happens.
• Children’s and teenagers’ online friendsAsk them to tell you if a stranger asks for game items, gifts or photos — and listen without scolding.

If it already happened

Do not feel ashamed or afraid — acting fast improves the chance of getting money back.

1. Call the helpline at once. Give the provider you paid with (bKash, Nagad, Rocket, Upay or your bank) the transaction ID and the number. All helpline numbers →
2. Keep the evidence. Chats, links, payment messages and screenshots — delete nothing.
3. Change your passwords and PINs. If an account was hacked, recover it and turn on 2FA.
4. File a GD or a case with the police. You can file a GD online. If you are in danger now, call 999. How to file a GD online →
5. Warn others. Submit a complaint with evidence on Capscan so nobody else falls into the same trap. Submit a complaint →