4. Spotting phishing, scams and fraud

What Is Phishing?

Phishing is when a criminal pretends to be a trusted person or organisation — your bank, TeleBirr, Ethio Telecom, a government office, or even a friend — in order to trick you into giving them your password, PIN, or money.

The word comes from 'fishing': the criminal casts a fake bait (a message or link) and waits for you to 'bite' by clicking and entering your details.

Phishing arrives through many channels:

• SMS (text messages) — a fake message that looks like it is from your bank or TeleBirr.

• WhatsApp or Telegram — a stranger (or a hacked contact) sends you a suspicious link.

• Email — a message pretending to be from Ethio Telecom, a delivery company, or a government body.

• Phone calls — a caller claims to be a TeleBirr agent or bank officer and asks for your PIN or OTP code.

• Social media — a fake Facebook or Telegram page that looks like a real business.

Phishing is not about being stupid. Even careful, educated people are tricked every day. Criminals are skilled at copying the look of real messages perfectly.

Warning Signs in a Message

Before you click any link or reply to any message, look for these red flags:

1. Urgency and fear — 'Your account will be closed in 24 hours!' or 'You have won 5,000 birr — claim now before it expires!' Real organisations rarely pressure you to act immediately.

2. Requests for your PIN, OTP, or password — No bank, TeleBirr, Ethio Telecom, or government office will ever ask you for your PIN or one-time password (OTP) through a message or call. Never share these — not even with someone who sounds official.

3. Suspicious sender — A text from '0911XXXXXX' (a regular mobile number) claiming to be your bank. A WhatsApp message from an unknown number. An email from 'telebirr-support@gmail.com' instead of an official domain.

4. Bad spelling or strange formatting — Many scam messages have unusual characters, extra spaces, or grammar errors. Sometimes they mix Amharic and English oddly.

5. Links that look almost right — A link like 'www.telebirr-et.com' or 'www.c0mmercialbank.com' (with a zero instead of 'o'). Always check the full web address carefully.

6. Unexpected prizes or offers — 'Congratulations! You are one of 10 lucky Ethio Telecom subscribers who won an iPhone.' If you did not enter a contest, you did not win one.

Common Scams in Ethiopia

Knowing the specific tricks that criminals use in Ethiopia will help you recognise them instantly:

1. Fake TeleBirr / M-Birr transfers — You receive a message saying money has been sent to you. There is a link to 'collect' it. Do not click — no real mobile wallet requires you to click a link to receive money.

2. The overpayment scam — Someone pays you for a service (e.g. selling something on Facebook Marketplace) and claims to have sent too much by mistake. They ask for the extra back before you check if the payment even arrived. Always verify your wallet balance directly before sending anything.

3. Fake job offers — 'Work from home. Earn 10,000 birr per week. Register now and pay a small fee.' Genuine employers in Ethiopia never ask you to pay to get a job.

4. Lottery and prize scams — 'You have won a lottery sponsored by Ethiopian Airlines / Safaricom / Ethio Telecom.' You are asked to pay a 'processing fee' or share your bank details to claim. Legitimate lotteries do not charge winners.

5. Emergency scams — A message appearing to be from a relative or friend: 'I am Abebe. I am in hospital. Please send 2,000 birr to this number urgently.' Always call the person directly to verify before sending money.

6. Fake investment platforms — 'Invest 500 birr and earn 5,000 birr in a week.' These are pyramid schemes. No investment legitimately returns 1,000 % in a week.

What to Do If You Have Been Scammed

If you realise you have clicked a fake link, given your details, or sent money to a scammer, act quickly — speed matters.

1. Change your passwords immediately — Start with your email, then TeleBirr, then any bank apps. Use a strong, unique password for each (see Lesson 1).

2. If you shared your TeleBirr PIN or OTP — Call TeleBirr customer care on 127 or dial *127# right now. Ask them to freeze your wallet and check for unauthorised transactions.

3. If you shared your bank details or card number — Call your bank's emergency number immediately. Most Ethiopian banks have 24-hour hotlines. Ask them to block your card and reverse any unauthorised transfers if possible.

4. Report the scam — Ethiopian Federal Police Cybercrime Investigation Unit (+251 11 551 0017). You can also report fake pages to Facebook, Telegram, or whichever platform was used.

5. Tell someone you trust — Shame often keeps victims silent. Talking to a family member or trusted friend is important — they may know others at risk from the same scam and can help you file a report.

Remember: being scammed is not your fault. These criminals are professionals. Reporting them protects others.