Your phone buzzes. A message says your wallet will be locked in 24 hours unless you verify your account. The sender name looks right, the logo looks right, and the link is short and tidy. Thousands of people get a message like this every week, and the ones that work share the same trick: they make you act before you think.

You do not need special tools to beat it. You need about a minute and a few habits. Here is the routine we use in the newsroom.

Advertisement

The five checks

  1. Who is talking? Banks and e-wallet apps rarely text you a link to “verify” or “reactivate” an account. If the message asks you to log in through a link, treat it as a scam until proven otherwise.
  2. What is the hurry? A countdown, a lock, a prize, a refund. Urgency is the product being sold. Real providers give you time and a way to check inside their app.
  3. Where does the link go? Press and hold the link to preview the address. Look for extra words, odd endings or a misspelled brand. Shortened links hide the destination, which is why scammers like them.
  4. What is it asking for? An OTP, MPIN, password or card number is never something support needs from you. Nobody legitimate asks for your one-time code.
  5. Does it match the app? Close the message and open the official app yourself. If there is a real problem, it will show up there.

If a message fails even one of these checks, stop. You lose nothing by waiting, and you can always reach support through the app.

Green characters falling down a dark screen
Scam links often hide behind tidy-looking short addresses. Photo: Unsplash

What scammers do after you tap

Most fake pages are built to copy the real login screen, so you type your number and PIN into a form that belongs to someone else. A second page then asks for the OTP that was just sent to your phone. That code is the key to your account. Once it is entered, the money can move within minutes.

The OTP is the one thing you never share, with anyone, for any reason.

That is the whole defense in one sentence. If a stranger on a call, a chat or a page needs the code, the answer is always no.

Advertisement
  • Change your MPIN and password from the official app right away.
  • Contact support through the app’s help center and ask them to review recent activity.
  • Check your transaction history and any linked bank accounts or cards.
  • Take a screenshot of the message for your report, then delete it from your phone.

Speed matters more than embarrassment. Scam reports are common, and support teams handle them every day.

Report it so others do not fall for it

Forward the message to the provider’s official reporting channel and block the number. If money was taken, file a report with the proper authorities and keep your screenshots, transaction numbers and the exact time of the message. The more detail you give, the easier it is to trace.

One last habit: tell a family member. Group chats are where these messages travel fastest, and a thirty-second warning at home protects the people most likely to be targeted.