Three Minutes Before You Transfer: A Calm Check for Impersonation Scams

Separate the name from the channel

A fraudster may use a bank’s name, an official logo, or a claimed employee identity. That display is not proof. The Saudi Central Bank has warned about suspicious calls and messages that impersonate it and seek banking details or account updates through unknown numbers and links.

Do not debate the sender. End the exchange, open the organization’s app yourself, or call the number published on its official website. Do not use the contact details supplied inside the message.

The three-minute pause

Minute one: name the request—an OTP, password, transfer, app installation, or link click. Minute two: notice urgency, threats, secrecy, or a promised gain. Minute three: verify through an independent channel before money moves.

• Never disclose a password or one-time verification code.
• Do not transfer to a new account merely because the name or profile image looks familiar.
• If the message threatens immediate suspension, close it and open the official app directly.
• Keep the reference number or evidence needed for a report without exposing sensitive data publicly.

A link is not a licence

SAMA’s unlicensed-activities page lists warning signs including no official licence, implausibly attractive offers, quick or guaranteed returns, unofficial social channels, and pressure for a rapid decision. A polished site or familiar logo does not replace checking the relevant regulator’s register.

This article does not investigate any particular platform or determine legality. Check the official register, contract, and regulator that apply on the date of a decision.

When a link looks suspicious

Saudi Arabia’s National Cybersecurity Authority launched Tahqaq to help people check circulated links before visiting them through the Haseen portal and the official WhatsApp channel named by NCA. It is a supporting safety tool, not permission to send money; a clean link does not establish licensing or suitability.

If you disclosed banking information or made a suspicious transfer, contact your bank immediately through its official channel and follow its instructions. Avoid posting account details or unredacted screenshots while seeking help.