How to Avoid Fake Offers and Phishing Links: An Online Safety Guide for Families in Nepal
“Claim your anniversary gift,” “You are a lucky winner,” “Update your KYC immediately,” and “Click this link to receive cashback” are messages many people in Nepal now receive through WhatsApp, Facebook Messenger, SMS, and other social platforms. Many of these messages may be phishing scams. Their goal is to rush you into opening a link and giving away passwords, OTPs, bank or wallet information, or access to your social-media accounts.
A message such as “Wai Wai Anniversary Festival Gifts” may be a phishing attempt, especially if it comes from an unfamiliar number, is sent repeatedly, or includes an unusual web address. A familiar brand name, logo, or attractive giveaway does not make a message official. Scammers can copy well-known branding and designs to appear trustworthy.
This article does not accuse any particular brand of wrongdoing. Its purpose is to help citizens, families, and businesses in Nepal recognise and avoid common forms of online fraud.
What Is a Phishing Scam?
Phishing is a type of fraud in which criminals pretend to be a bank, eSewa/Khalti, courier company, government office, popular brand, Facebook, or even someone you know. They usually send a link that leads to a fake website. That website may ask for your login details, mobile number, OTP, card details, or other private information.
Sometimes the link opens a page that asks you to choose a gift, pay a small “delivery fee,” or verify your account. The real aim is not to provide a gift. It is to steal your personal information or money.
Warning Signs of a Suspicious Offer Message
Treat a message as suspicious when you see one or more of the following signs.
1. An unfamiliar or unusual web address
Even if a message uses a recognised brand name, read the URL carefully. It may have a misspelling, strange subdomain, or unrelated extension such as .top, .xyz, or .click. A domain extension alone does not prove a scam, but an unfamiliar web address that does not match the brand is a strong warning sign.
2. Pressure to act immediately
Phrases such as “claim within five minutes,” “your account will be blocked,” or “send your OTP now” are meant to stop you from thinking carefully. Legitimate organisations may set a deadline for an offer, but they will not ask you for your password, OTP, card PIN, or wallet PIN through chat.
3. An offer that sounds too good to be true
Be cautious when a message promises an expensive phone, cash, a very large discount, or a free gift without clear campaign rules, an official campaign page, or verifiable details. Requests to pay a small “delivery charge” before receiving a prize are also common scam tactics.
4. A message sent from a friend, customer, or business account
Facebook and WhatsApp accounts can be hacked. A malicious link may therefore come from a person or business you know. Do not trust a link only because it was sent from a familiar account. Call the person or verify the message through another safe channel.
5. Requests for OTPs, passwords, or remote access
Your OTP, ATM PIN, CVV, wallet PIN, password, and verification codes are private. A bank, digital wallet, social-media platform, or genuine retailer should never ask for them in a chat. Be especially careful if someone asks you to install a screen-sharing or remote-control app on your phone.
What to Do When You Receive a Suspicious Link
Do not open the link. Do not call or reply to the number in the message to verify it.
Verify only through official sources. Check the brand’s verified social-media page or type its official website address directly into your browser. Do not use the link in the message.
Block, report, and delete the message. Facebook, Messenger, WhatsApp, and most SMS apps provide reporting options. Do not forward suspicious links to other people.
Keep evidence. If you suspect fraud or have lost money, save the chat, phone number, profile link, URL, transaction ID, and screenshots. Take screenshots before deleting anything.
Act quickly if you shared any details. Contact your bank or wallet provider through its official support channel, change your passwords, sign out of all active sessions, and enable two-factor authentication (2FA).
Where to Report Cyber Fraud in Nepal
Nepal Police Cyber Bureau provides a reporting process for online financial fraud, fake or hacked social-media IDs, and other cybercrime. The Bureau asks complainants to provide relevant URLs and clear screenshots. You can also visit a nearby police office or contact the Cyber Bureau in Bhotahity, Kathmandu. Read the official reporting process at the Nepal Police Cyber Bureau cybercrime report page.
If there is an immediate risk to your money, contact your bank or wallet provider’s official helpline first to secure your account or card. Then preserve the evidence and file a report.
How to Keep Children and Families Safer Online
Create one simple rule at home: Stop, check, then click.
Teach children to ask a parent before clicking game-reward, free-diamonds, scholarship, giveaway, or influencer links.
Use a different, strong password for every important account. Never reuse the same password for Facebook, email, and your bank or wallet.
Turn on 2FA wherever it is available, preferably with an authenticator app or security prompt.
Keep your phone, laptop, browser, and apps updated.
Install apps only from Google Play Store, Apple App Store, or the developer’s official website.
Make online safety a regular family discussion. Ask, “Did you receive any strange message or link today?” People should feel comfortable speaking up quickly, without embarrassment or fear.
Why Consider K7 Total Security and Mobile Security?
Careful online behaviour is the first line of defence. No antivirus can fully protect someone who shares an OTP or password with a scammer. However, a reliable security solution can add an important layer of protection against malicious websites, malware, spyware, and some phishing attempts.
For families that use Windows laptops or desktops, K7 Total Security can be a suitable security option. Its security and parental-control features can help block risky or harmful websites. According to K7’s official product information, its parental controls can filter harmful websites and block malicious or dangerous websites. Choose the K7 Total Security licence that suits your device count and requirements.
For children and family members who use Android phones, a trusted mobile-security option such as K7 Mobile Security can add a layer of protection against app- and web-based risks. Before purchasing, check the number of supported devices, Android or iOS compatibility, renewal period, and features you need. Computer Planet can assist with genuine K7 licences and basic setup guidance.
Computer Planet’s Message: A Careful Click Is Your Best Protection
Do not open a link simply because it displays a popular logo, a familiar name, or a promise of a large gift. Online security is not just about software. It comes from good habits, updated devices, strong passwords, 2FA, and trusted security tools working together.
Share this simple rule with your family today: Never share an OTP, do not open unfamiliar links, and verify suspicious messages through official channels.
Frequently Asked Questions
Is every .top domain a scam?
No. A domain extension alone does not prove that a website is fraudulent. However, you should not open a link that uses an unfamiliar address or does not match the brand’s genuine website. Verify the offer through the official website or a verified social-media page.
I opened a link but did not share any information. What should I do?
Close the page. Check whether any file or app was downloaded, update your browser and apps, and run a security scan on your device. If you entered a password or OTP, change the password immediately.
Can I forward a scam message to warn others?
You can raise awareness by sharing a screenshot and safety advice, but do not re-share the live malicious link. Sharing it may put more people at risk.