Based on current reporting from GASA, Group-IB and national authorities.
Instagram store fraud
Fake shops advertise high discounts, take payment upfront, and the goods never arrive.
🚩Check store age and reviews; look for a physical address; avoid bank transfer to a person.
An Instagram store selling electronics at 70% off.
Business email compromise
Fraudsters spoof a supplier's email and redirect invoice payments to their own account — a costly scam for Bahraini SMEs.
🚩Confirm changed bank details by phone using a known number; check email address for look-alike typos.
A supplier email announcing 'our bank details have changed'.
Phishing & OTP theft
Fake bank and government messages push victims to fake login pages that harvest OTP codes.
🚩Banks and government never ask for OTP by link; open official apps directly.
An SMS saying your eKey or bank account needs 're-verification'.
Parcel & customs fee SMS
A text claims a parcel is held by customs and a small fee must be paid through a link. The page copies the real courier and steals card details. It lands because people are genuinely expecting a delivery.
🚩Pay only inside the courier's official app or website; a fee demanded for a parcel you already received is a fake.
'Your parcel is held at customs — pay the fee within 24 hours.'
Money mule job offers
Social-media and WhatsApp adverts promise easy pay for receiving and forwarding money. The funds are stolen from other victims, so the account holder becomes part of the crime chain — and banks close those accounts.
🚩No real employer pays you to move money through your personal account; never receive or forward funds you cannot explain.
'Earn extra income — just receive a transfer and forward it, keep a commission.'
🛟 Been scammed? First hour checklist
Freeze your cards immediately — call your bank's 24/7 hotline.
Tell the bank's fraud team you have been scammed.
Report via the official channel above — get a case reference.
Save every message, screenshot and transaction ID as evidence.
Your bank will never ask for your OTP, PIN or password by phone, SMS or WhatsApp. Hang up and call the number on the back of your card or your bank's official app.
✅
Official portals only
eKey and government services run through official Bahrain portals — never through links in messages. Report cyber incidents to the National Cyber Security Center.
📲 Add CyberAware GCC to your home screen for instant access — even offline.
On iPhone/iPad: tap the Share button in Safari, then Add to Home Screen.