Every Hajj and Umrah season, fraudsters follow the pilgrims. The most dangerous scam is also the simplest: selling a pilgrimage package, permit or visa that does not exist. The Saudi Ministry of Hajj and Umrah is clear — Hajj bookings, visas, permits and payments are handled only through the official Nusuk platform (nusuk.sa and hajj.nusuk.sa) and the Nusuk app. No third-party agent, WhatsApp offer or social-media advert can book Hajj for you. Anyone who says otherwise is trying to steal your money.
This guide follows the official guidance of the Saudi Ministry of Hajj and Umrah. See also our Saudi Arabia scam alerts page and the official reporting routes for the Kingdom.
How Hajj and Umrah scams work
- Fake packages outside Nusuk. Fraudsters advertise "guaranteed Hajj seats" or discounted Umrah packages on WhatsApp, Telegram, Facebook and Instagram. You pay a deposit, and the package never materialises. Some victims only discover the fraud at the airport.
- Cloned booking websites. Sites that copy the Nusuk look ask for card details or a "registration fee". Official Saudi government sites end in .sa — check the domain before entering anything.
- Messages impersonating the Ministry or Nusuk. Texts and calls claim your permit needs "verification", a fee is due, or your booking will be cancelled — then ask for an OTP or card number. The Ministry, Nusuk and your bank never ask for your one-time password by call, SMS or WhatsApp.
- Fake permits and "priority visas". Umrah permits and the digital Nusuk Card appear inside the official app once your booking is approved. Never pay a third party to "arrange" them.
Use only the official pilgrimage app
- Download the Nusuk app only from the official Apple App Store or Google Play — check the developer name and the nusuk.sa domain.
- Book packages, complete procedures and pay only inside the official platform. The Ministry does not take booking payments by bank transfer to a person, gift cards or crypto.
- Your Umrah permit and digital Nusuk Card appear automatically in the app after approval. There is no separate "card" to buy.
- If an offer or disconnection-style threat is real, it will appear in your account inside the official app — never act on a link in a message.
Red flags to trust
- A price far below official package rates, or "last seat" pressure to pay within minutes.
- Payment demanded by direct bank transfer, cryptocurrency or a personal account.
- An agent who cannot show a verified booking inside the Nusuk app.
- Messages from numbers you do not recognise asking for OTP codes, passport photos or card details.
- Any website that is not on a domain ending in .sa.
What to do if you have been scammed
- Contact your bank immediately and ask it to freeze your cards and block the payment.
- Keep every message, receipt, screenshot and transaction ID as evidence.
- Report to the Saudi Ministry of Interior e-Crime platform, and inform the Ministry of Hajj and Umrah through its official channels ([email protected] / 920002814).
- Warn family and friends — pilgrimage scams spread fastest inside trusted groups.
How to report it
In Saudi Arabia, report cyber fraud through the Ministry of Interior's official e-Crime platform, and contact the Ministry of Hajj and Umrah directly about pilgrimage scams. The current official reporting links are listed on cyberawareuk.com/report — open them from the site, never from a message you received.
Emergency
Saudi Arabia police emergency: 911. If money has been taken or a pilgrim is being pressured while a fraud is in progress, call 911 first — no bank or authority will penalise you for reporting quickly.
Remember: the only official road to Hajj is Nusuk. If an offer is not inside the Nusuk app, it is not real.