Call your bank's fraud line now — the number on the back of your card. Freeze the card and ask them to reverse any payments.
Screenshot texts, emails, caller numbers and payment screens. Change passwords and turn on 2-step verification.
Report through your country's official channel — see the report page.
Scam Domain Watchlist
Almost every GCC phishing scam ends with one step: you click a link. This page lists the ONLY official domains for each country and the lookalike patterns scammers copy, so you can check any link before you tap. Refreshed monthly.
The ONLY official domains
A genuine government message always comes from one of these — never from a random .com lookalike.
| Country · الدولة | Official domains only · النطاقات الرسمية فقط |
|---|---|
| 🇦🇪 UAE · الإمارات | u.ae · Dubai Police ecrime.ae · UAE Pass app (official stores only) |
| 🇸🇦 Saudi · السعودية | my.gov.sa · absher.sa · Absher / Tawakkalna apps (official stores only) |
| 🇶🇦 Qatar · قطر | hukoomi.gov.qa · Metrash2 app (official stores only) |
| 🇰🇼 Kuwait · الكويت | e.gov.kw |
| 🇧🇭 Bahrain · البحرين | bahrain.bh · Sahel app (official stores only) |
| 🇴🇲 Oman · عُمان | oman.om |
Lookalike patterns scammers use
Scammers rotate domains constantly — these are the structural tricks, not a live list. If a link shows any of these, treat it as a scam.
| Red flag · علامة الخطر | Example pattern · مثال على النمط |
|---|---|
| Extra words added to a real name (verify, update, renewal, secure) | uaepass-verify.com · absher-renewal.net · mygov-update.org |
| Wrong ending (.com / .net / .xyz instead of the official TLD) | absher.com · hukoomi.info · moi-qatar.org |
| Typos in the real name | mygov-sa.com · abshar.sa · uae-pas.com |
| Hyphens or numbers the real domain never uses | ecrime-2026.com · uaepass-verify1.com |
| “Official” login demanded through an SMS or WhatsApp link | “Account locked — log in here” link sent by SMS or WhatsApp |
- Do not tap it. Long-press (or hover) to see the real address.
- Compare the part right before the first slash with the official list above.
- If it is not an exact official domain, it is a scam. Close it and report.