Today's Edition
By Mohamed Hamad Al Kuwaiti*
With the rapid expansion of the internet and, in particular, the widespread use of social media platforms, social media scams and impersonation have become among the most prominent threats targeting both individuals and institutions.
Fraudsters increasingly resort to deceptive tactics, impersonating trusted individuals or entities to convince victims to reveal personal information or transfer funds. They often rely on phone calls, emails, digital platforms, and social media channels to reach their targets. The danger lies in the difficulty of detecting these schemes early on, as victims usually realise the deception only after significant damage has occurred, making awareness and vigilance the first line of defence against such crimes.
Most fraud schemes rely on applying psychological pressure to push victims into making quick decisions before verifying the identity of the sender. The less time a person has to think, the greater the chances of the fraudster succeeding. These tactics include unsolicited messages from unknown individuals on social media requesting personal data, or enticing offers of quick wealth in exchange for small monetary transfers. Fraudsters may also present seemingly official requests for sensitive information, such as account numbers or passwords, even though reputable financial institutions do not request such details through social media.
Phishing remains one of the most widespread fraud methods on social platforms. Fraudsters send messages that appear to come from legitimate organisations, tricking users into clicking malicious links or downloading harmful files. Victims are then directed to fake pages designed to harvest their personal data for identity theft or financial fraud. Phishing messages often warn of account issues, claim the user has won a prize, offer free vouchers, or request personal information updates. To stay safe, users must avoid clicking suspicious links and should never share passwords or sensitive information through social messaging channels.
Another common tactic is website cloning, where fraudulent actors create replicas of legitimate banking or financial websites with slight alterations to the URL. These deceptive sites aim to trick users into entering their personal details. Fake websites often include fabricated registration numbers or contact information that direct users to overseas call centres posing as legitimate financial representatives. This underscores the importance of verifying company details through official registries, using secure login systems, and avoiding the sharing of personal information online without confirming the identity of the requesting party.
Financial advertisements are also exploited by untrustworthy entities to lure victims through misleading offers. Legitimate financial ads must be clear, fair, and non-misleading, and should provide accurate explanations of the product or service, associated costs, and potential risks. Users must evaluate whether an advertisement is understandable, transparent, and identifies the offering entity. If an ad appears questionable, whether before or after a purchase, the user should contact the relevant regulatory authority. By following these guidelines, individuals can better protect themselves and their assets in the rapidly evolving digital environment.
To further strengthen protection against social media scams, users must adhere to essential security practices. These include avoiding interaction with suspicious links or unsolicited messages, consistently verifying account identities through official channels before sharing any information, using strong passwords, and enabling two-factor authentication. Users should also block and report any request for personal or financial data without clear justification. Immediate reporting of fraud attempts, staying informed through awareness campaigns, and keeping up with emerging cyber fraud tactics all play a vital role in safeguarding privacy and ensuring user safety in an increasingly digital world.
*The writer is the Head of Cyber Security for the UAE Government
