Sri Lanka Police have issued an urgent public warning about a growing wave of online fraud targeting citizens through fake websites and deceptive text messages that impersonate the official GovPay government payment platform. Authorities are urging all members of the public to exercise extreme caution when receiving unsolicited messages about traffic fines or government payments, as scammers are becoming increasingly sophisticated in their methods to steal personal and financial information.
What Is the GovPay Scam?
The fraudulent scheme involves cybercriminals creating fake websites and sending text messages that closely mimic the appearance and branding of the official GovPay platform, which is the legitimate online portal used by Sri Lankan citizens to settle government-related payments, including traffic fines. These fake communications are designed to trick unsuspecting individuals into clicking malicious links and entering sensitive personal details, banking credentials, and payment information on counterfeit websites that look deceptively similar to the real thing.
Victims who fall for these scams may unknowingly hand over their bank account numbers, credit card details, national identity card information, and passwords directly to criminals. Once this information is obtained, fraudsters can drain bank accounts, make unauthorized transactions, and even use stolen identity details for further criminal activities.
How the Scam Typically Works
According to police warnings, the scam generally follows a predictable pattern that citizens should learn to recognize. Targets typically receive an unexpected text message or email claiming they have an outstanding traffic fine or government payment that must be settled immediately to avoid penalties, license suspension, or legal action. The message creates a strong sense of urgency designed to pressure the recipient into acting quickly without stopping to verify the authenticity of the communication.
The message contains a link that directs the user to a fraudulent website carefully crafted to look like the official GovPay portal. The fake site may use a similar color scheme, logo, and layout to the genuine platform, making it difficult for the average person to immediately identify it as fraudulent. Once on the fake site, users are prompted to enter their personal details and payment information, which is then captured by scammers in real time.
In some reported cases, victims have also received phone calls from individuals posing as police officers or government officials, further pressuring them to make immediate payments through the fraudulent links provided.
Red Flags to Watch Out For
Police and cybersecurity experts have highlighted several key warning signs that members of the public should watch for to avoid falling victim to these scams. Being aware of these red flags can make a significant difference in protecting yourself and your finances.
Always check the website URL carefully before entering any information. The official GovPay platform has a specific and verified web address, and any variation, misspelling, or unusual domain extension should be treated as suspicious. Scam websites often use URLs that look similar to the real address but contain subtle differences such as extra letters, hyphens, or different domain endings.
Be wary of unsolicited messages that demand urgent action or threaten serious consequences if you do not pay immediately. Legitimate government agencies typically follow formal procedures and do not pressure citizens through random text messages to make instant payments under threat of immediate penalties.
Never click on links sent through SMS or email without first verifying their legitimacy. Instead, open a new browser window and navigate directly to the official government website by typing the known address manually.
What to Do If You Receive a Suspicious Message
Sri Lanka Police are advising citizens who receive suspicious messages or encounter fake GovPay websites to refrain from clicking any links or providing any personal or financial information. Instead, individuals should report the incident immediately to the nearest police station or contact the Sri Lanka Computer Emergency Readiness Team, commonly known as Sri Lanka CERT, which handles cybercrime and online fraud cases across the country.
If you believe you have already fallen victim to this scam and have shared your banking or personal details on a fraudulent website, you should contact your bank immediately to freeze your accounts and prevent any unauthorized transactions. Filing an official police report as soon as possible is also strongly recommended to assist authorities in tracking down the perpetrators.
Staying Safe Online
This latest warning from Sri Lanka Police serves as an important reminder of the growing threat of cybercrime affecting citizens across the country. As government services increasingly move online, criminals are quick to exploit public trust in digital platforms for financial gain. Always verify the source of any payment request, use only official government websites for transactions, and share this information with family and friends to help protect the wider community from falling victim to these dangerous scams.