Incident 1
I received a call from a man claiming to be from a courier service, stating that he had to deliver a parcel to my home. He had my correct name, phone number, and address. When I told him that my staff would contact him, he said he would send an authorisation code, which my staff would have to repeat to receive the parcel.
Shortly afterwards, I received a message on WhatsApp stating that my WhatsApp account was being registered on a new number. I immediately declined the request and prevented a hacking attempt. When I called back the number, it was switched off. I asked the relevant authorities to trace it, but the call had been made using a computer.
Incident 2
A few days later, I received a WhatsApp message from the number of a senior colleague, saying he urgently needed Rs. 200,000 for an emergency. However, the English and the tone were unfamiliar to me. I called the colleague on WhatsApp, and someone else answered. I then called the colleague on his actual number and informed him of what had happened, which he was completely unaware of. The WhatsApp number was promptly blocked.
Incident 3
Two days ago, a very close friend received a call from an unknown number. As soon as he picked up, the man on the other end claimed that his son (correct name) had been booked by the police on charges of raping a 16-year-old girl, and that if he paid Rs. 500,000, his son would be released. By the time my friend called his son and discovered it was a scam, he was already suffering from a panic attack and could have had a major accident on the motorway.
Incident 4
A close acquaintance received a message stating that an e-challan had been issued and that he needed to pay Rs. 500 immediately, otherwise his car would be impounded. In a panic, he entered his credit-card details. Luckily, he noticed that an international transaction of Rs. 500,000 was being attempted. He cancelled the card immediately.
If someone you did not initiate contact with is pressuring you to act fast and send money or personal information through irreversible methods… it is most likely a scam
The above are some real-life examples of the rip-offs currently occurring in Pakistan. With increasing digital penetration and greater reliance on algorithms, digital scams are growing exponentially around the world. The following statistics highlight the scale of this menace:
- Total Scam Losses: In the 12 months leading up to late 2024, victims worldwide lost an estimated $1.03 trillion to online scams, according to a report by the Global Anti-Scam Alliance (GASA) and Feedzai.
- Overall Cybercrime Costs: If cybercrime were a country, its projected annual cost of $10.5 trillion by 2025 would make it the world’s third-largest economy after the United States and China. This figure represents total economic damage, including direct monetary losses from scams, theft of intellectual property, lost productivity, data compromise, and the costs of forensic investigations and system restoration.
- Prevalence: Nearly half of the world’s population reports encountering a scam at least once a week.
- Recovery Rates: Globally, only around 4 per cent of victims ever recover their lost money.
But then comes the question: what can be done? Given the all-pervasive nature of cyberspace — now the very soul of the 21st century — one cannot simply stop using mobile phones, tablets, computers, or the many other devices we rely on.
Based on my experience and after consulting experts, I am proposing the following 10-step plan to minimise the risk of falling victim to an online scam:
- Never Succumb to a Timeline: Scammers create artificial urgency to pressure victims into sharing confidential information. Remember: legitimate organisations never do this.
- Verify, Verify, Verify: Never click on or call unknown numbers, texts, emails, or links. Doing so can compromise your device instantly. Always contact the official helpline of the organisation purportedly sending the message.
- Recognise Red Flags: Free phones, 200 per cent crypto returns, lottery wins, free trips — these are all red flags. Do not respond to such messages.
- Use Difficult and Unique Passwords: Passwords are the keys to your digital world. The more complex and unique they are, the harder it becomes for scammers to breach your devices and apps.
- Install Reputable Security Software: Malware is a dangerous infection. Once it enters your system, it can cause severe damage. It is far better to pay a small annual fee for quality protection than suffer a much larger loss later.
- Enable Two-Factor Authentication (2FA): Even if passwords are difficult to remember, 2FA provides an extra layer of protection against digital intrusion.
- Never give OTPs or Verification Codes: Banks and legitimate organisations never ask for them. Never share these codes with anyone who calls or messages you.
- Pay with Credit Cards, Not Debit Cards: Credit cards offer strong fraud protection and do not expose your bank balance. Debit cards are directly linked to your account — if compromised, your money can be withdrawn instantly and irreversibly.
- Pay Cash When Possible: Excessive use of cards increases your exposure to scams.
- Never Give Remote Access: Sharing passwords or granting remote access to your device is inviting disaster. Never allow it.
I want to end this article with a one-line summary which, if remembered, can safeguard your digital world and keep you out of harm’s way:
“If someone you did not initiate contact with is pressuring you to act fast and send money or personal information through irreversible methods… it is most likely a scam.”
Stay vigilant. Verify everything independently and according to your own timeline — and you will be almost insulated from online crime.