How do you know when an online opportunity is really a trap?

A scam often asks you to act before you have time to verify the story. It might be a job offer with an urgent registration fee, a loan that requires an upfront payment or a message pretending to come from someone you trust. Pause, check the request through an independent channel and never share your PIN, password or one-time code.

Not every unfamiliar offer is fraudulent, and a polished website or social media page is not proof that it is genuine. What matters is whether the details stand up when you check them outside the message or advert.

Start with the request, not the promise

Look at what the person wants you to do. Are they asking you to pay immediately, move a conversation away from an official platform or send private documents before explaining why they need them? Are they discouraging you from contacting the organisation directly?

Pressure is a warning sign, especially when it is combined with secrecy. A genuine deadline can exist, but it should still be possible to verify the offer through a reliable source. Search for the organisation’s official contact details yourself rather than using only the number in the message.

The Economic and Financial Crimes Commission’s scam guide describes several fraud patterns, including employment and phishing scams. The examples below show what to look for in everyday situations.

Job offers that demand money first

A message says you have been shortlisted for a job you barely remember applying for. The sender asks for a training, medical or processing payment before the interview. They may use a company logo and claim the position will disappear if you delay.

Check the vacancy on the employer’s own website or contact its recruitment team using a verified channel. Ask for the role, location and written terms. Be cautious with any request to pay an individual account, especially when the sender will not let you confirm the arrangement with the employer.

Do not send your identity document, bank details or a selfie with an ID to an unverified recruiter. A legitimate employer may need information later in a hiring process, but you should know who is collecting it, why and how it will be protected.

For an overseas role, verify the employer and any visa requirements using the relevant government’s official website. A promised job or visa is not guaranteed simply because a recruiter has sent an offer letter.

Loans and investments that sound too easy

A lender advertises a loan with no checks and asks you to transfer a release fee first. An investment promoter promises unusually high returns with no risk and says you must pay before the day ends. Both situations deserve careful checking.

Read the terms and identify the organisation behind the offer. Check the relevant regulator’s official register where one is available, and contact the organisation through details you found independently. Registration alone does not guarantee an investment is safe or that the person contacting you represents the registered business.

Do not borrow money or recruit friends simply because someone shows you screenshots of payouts. Screenshots can be misleading or fabricated. If you cannot explain how the returns are generated or how to withdraw your money, do not rush into the offer.

Marketplace and delivery tricks

A seller may offer a phone at a price far below comparable listings, then insist on an immediate bank transfer before allowing you to inspect it. A supposed delivery agent may request an extra fee through a link sent by SMS. A buyer can also send a fake payment alert and pressure a seller to release goods before the money arrives.

Check payment in your own banking app or through your bank’s official channel, not just in a screenshot or text message. Use the marketplace’s established payment and dispute process where appropriate, and meet in a safe public place if an in-person inspection is agreed. No payment method removes every risk.

Our guide to shopping online without losing your money explains how to check sellers and delivery terms before you pay.

Someone pretending to be your friend or bank

A WhatsApp message from a familiar profile may say your friend needs urgent help and has a new account number. The friend’s account could have been taken over, or the picture could have been copied. Call them on a number you already have or use another known way to reach them before sending money.

A caller may claim to be from your bank and ask for your card PIN, password, one-time code or approval of a notification. End the call and contact the bank using the official app, its website or the number on your card. Do not call back using a number supplied by the caller without checking it independently.

If someone asks you to install an app or share your screen to fix an account problem, be especially careful. Remote access may expose sensitive information. The Nigerian Communications Commission has warned consumers about financial fraud through telecoms services.

Fake websites, links and account requests

Check the address carefully before signing in, but remember that a padlock or HTTPS only means the connection is encrypted. It does not prove the site or seller is honest. A fake domain can look very close to the real one, and an advert can appear in search results without being an endorsement.

Instead of following an unexpected link, open the service’s app or type a familiar address yourself. Avoid giving an unknown site your login details, especially after arriving from a message promising a prize or threatening to close your account.

Use a different password for each important account and turn on two-factor authentication where available. This reduces some risks, but you still need to reject unexpected login prompts and keep verification codes private.

What to do if you have already paid or shared details

Act quickly, without paying a second person who promises to recover your money. Contact your bank or payment provider through a verified channel and explain what happened. Ask what steps are available to secure the account and whether the transaction can be investigated. Recovery is not guaranteed.

If you entered a password, change it from a trusted device and change it anywhere else you reused it. Review account sessions and recovery details. If you gave a code or approved a sign-in request, tell the affected service and follow its recovery process. If your SIM is missing or unexpectedly stops working, contact your mobile provider promptly.

Keep evidence such as transaction references, messages, phone numbers, usernames and screenshots. Report the incident to the appropriate authorities through their official channels. Avoid posting sensitive evidence publicly, and do not alter or invent details to make the report look stronger.

A simple check before you act

Ask yourself four questions: Who is asking? What exactly do they want? Can I verify the request without using their link or number? What happens if I wait? If you cannot answer them confidently, pause. A few minutes spent checking can protect both your money and your personal information.