📱
Real Scam Messages in the Gulf — SMS, WhatsApp & Email Examples
The exact scam messages hitting Gulf phones and inboxes right now — bank OTP texts, fake traffic fines, customs fees, WhatsApp investment groups and government-app phishing. If you received one of these: do not click, do not pay, do not reply. Here is what each looks like, why it is fake, and what to do.
⚔️ WE FEAR NO ONE · لا نخشى أحدًا
🏦 Fake bank OTP / account-lock SMS
Example: “Alert: your account has been locked after a new login. Verify to restore: yourbank-verify[.]online” — A real bank never sends a restore link by SMS and never asks for your one-time password outside its app. The page copies the bank login and steals your password plus the live OTP you type in.
🚗 Fake traffic fine SMS
Example: “Saher: you have an unpaid traffic fine of 500 SAR. Pay now to avoid doubling: saher-pay[.]info” — Real fines appear inside the official app or portal (Tadbir/Absher in Saudi Arabia, the police apps in each country). They are never paid through a link in an SMS, and real .sa official services never use random domains.
📦 Customs / parcel fee text
Example: “ARAMEX: your package is held at customs. Pay the 12 AED clearance fee: aramex-track[.]xyz” — Couriers collect fees inside their official app or on delivery; they never email or text payment links from lookalike domains. Check tracking only through the official site or app you downloaded yourself.
📈 WhatsApp “investment opportunity” group
Example: “Free signals group — 200% guaranteed profit, minimum deposit 500 USD, withdraw anytime” — then the group shows fake profit screenshots and a fake trading app. Real investment never guarantees profit, never starts with a cold WhatsApp invite, and your “profit” is a number on a screen you cannot withdraw.
📶 Telecom rewards / points-expiry SMS
Example: “Etisalat: your 2,450 rewards points expire today. Redeem: etisalat-rewards[.]top” — Telecom operators never send redemption links from non-official domains. The fake page asks for your phone number, OTP and payment “delivery fee”. Redeem points only inside the official app.
🪪 Government app / digital-ID phishing (UAE Pass, Absher, Tawakkalna)
Example: “UAE PASS: your digital ID is suspended, verify identity now: uaepass-verify[.]info” — Government apps never suspend you by SMS and never ask for your OTP outside the official app. If a page asks for your ID number plus the SMS code, it is a hijack attempt: your digital ID is the key to your official records.
👨👩👧 WhatsApp “family member in trouble”
Example: “Dad, it is me. I broke my phone, this is my new number. I need 3,000 AED urgently for rent — transfer now, I will explain later” — The number is spoofed or cloned and the voice may even be AI-copied. Call your family member on their real number and ask a question only they know before sending anything.
🛡️ The one rule that stops almost all of these: never act on the link, number or urgency in the message. Open the official app or website yourself and check there.
🚨 Report it officially
Every Gulf country has an official reporting channel. Reporting through the official route is what triggers action — use the Report page for the right portal and number in your country.
Find my country’s channel →