Skip to content
Back to course

8. Avoiding scams and staying safe online

Welcome to Lesson 8 — the final lesson in this course! You have learned how to use a smartphone, browse the internet, manage email and files, use search engines, and handle mobile money. Now you will learn the most important skill of all: how to protect yourself from scams and stay safe online. Knowing what tricks fraudsters use is your best defence.

Online and phone scams are not just a problem in distant countries — they are widespread in Ethiopia and growing fast. Fraudsters target people who are new to smartphones and mobile money because they may not yet know the warning signs.

Who gets targeted?

• New smartphone users who just registered for telebirr or CBE Birr.

• People who share personal information freely on social media.

• Anyone who responds to too-good-to-be-true messages or offers.

• Small business owners who accept digital payments.

What do scammers want?

• Your PIN or password (so they can empty your wallet or email).

• Your national ID number (for identity theft).

• Your money — either sent directly or stolen after tricking you.

• Access to your accounts and contacts.

Abebe received a phone call from someone claiming to work for telebirr. The caller said there was a problem with his account and asked for his 4-digit PIN to "fix" it. Abebe almost gave it — but remembered what he had learned: real telebirr staff never ask for your PIN. He hung up and called 994 to report the number. His money was safe.

Here are the most common scams you may encounter in Ethiopia. Recognising them is the first step to avoiding them.

1. Fake prize or lottery ("You have won!")

You receive an SMS, WhatsApp message, or Facebook post saying you have won a large sum of money — sometimes 50,000 Birr, sometimes a new phone. To claim your prize, you must first send a small "registration fee" or "tax." This is always a scam. No legitimate lottery or prize requires you to pay money to receive your winnings.

2. Fake customer service calls

Someone calls pretending to be from telebirr, a bank, or Ethio Telecom. They say your account has a problem and ask for your PIN, OTP, or password. Real organisations never ask for these over the phone. Hang up immediately.

3. Wrong-transfer trick

A stranger sends money to your mobile wallet, then calls to ask you to send it back. The original deposit was made using a stolen account and will be reversed later — leaving you to lose your own money. Never send money back to a stranger.

4. Phishing links

You receive a link by SMS or WhatsApp saying: "Your telebirr account will be closed. Click here to verify." The link takes you to a fake website that looks real. If you enter your phone number, PIN, or password there, scammers steal them. Always go directly to the official app — never click suspicious links.

5. Romance and friendship scams

Someone you met on Facebook or WhatsApp becomes very friendly over several weeks. They eventually ask to borrow money, invest together, or receive a package on their behalf. This is a scam; the friendship is fake.

6. Fake job offers

An SMS or Facebook post promises a high-paying job — no experience needed. To apply, you must pay a registration or training fee. Legitimate employers do not ask job seekers to pay fees.

7. SIM-swap fraud

A fraudster contacts your mobile operator pretending to be you and requests a new SIM card for your number. Once they have your SIM, they can receive your OTPs and take over your accounts. Protect yourself: put a SIM lock PIN on your phone and only request SIM changes in person at an official Ethio Telecom shop with your ID.

Golden rule: If something feels too good to be true, it almost certainly is a scam. No real organisation will ever ask for your PIN, OTP, or password over the phone or by SMS. When in doubt, hang up and call the official number directly.

Your personal information is valuable — protect it like you protect cash.

What counts as personal information?

• Full name, home address, kebele ID number, national ID number.

• Phone number and email address.

• Date of birth.

• Telebirr or bank account PIN, OTP, or password.

• Photos of your ID card or documents.

How to protect your personal information online:

1. Be careful what you post on social media

Avoid posting your full ID number, home address, or travel plans publicly. Scammers collect this information from Facebook and WhatsApp to build a profile and target you.

2. Use strong passwords for your email and social media

A strong password is at least 8 characters and mixes letters, numbers, and symbols. Do not use your name, birthday, or "password123". Example of a weak password: "sara1990". Example of a stronger password: "S@ra!90Addis".

3. Do not reuse passwords

If you use the same password for your email and Facebook and one account is hacked, the attacker can get into both. Use a different password for each important account.

4. Log out when using shared devices

If you use a computer at a café or library, always log out of email and social media when you are done. Do not save your password on a shared computer.

5. Lock your phone

Set a screen lock PIN, pattern, or fingerprint on your smartphone. If your phone is lost or stolen, a screen lock stops strangers from accessing your telebirr, email, and photos.

6. Do not photograph your ID card and share it in chats

Some scammers create fake profiles using stolen ID photos. Only send your ID photo through official, secure channels when a legitimate institution requires it.

Not every suspicious message is easy to spot. Scammers are getting more sophisticated. Here are clear signs that a message, link, or website may be a scam.

Red flags in SMS or WhatsApp messages:

• You have won a prize you never entered.

• Urgent language: "Your account will be closed in 24 hours."

• A link that does not come from an official domain (e.g. "telebirr-free.info" instead of the official telebirr app).

• Requests for your PIN, OTP, password, or ID number.

• Unusual grammar mistakes or spelling errors (though some scams are now well-written).

• Requests to forward the message to 10 friends to receive a reward.

Red flags on a website:

• The web address (URL) is slightly different from the real one — for example, "telebirrr.com" (three r's) instead of the official domain.

• The padlock icon in the browser address bar is missing (this means the site is not encrypted — though note that even some fake sites can have a padlock, so it is one signal, not a guarantee).

• The website asks for your PIN or full ID number.

• Poor design, broken images, or a mix of languages.

How to check if a link is safe before clicking:

• Read the full URL carefully before tapping it.

• If you are unsure, do not click — go directly to the official app or website instead.

• You can also ask someone you trust (a more experienced phone user) to check the link.

Almaz received a WhatsApp message: "Congratulations Almaz! You have been selected for a 30,000 Birr EthioTelecom loyalty reward. Click here: ethiotelecom-prize-2026.tk to claim." She noticed the link was not from the official Ethio Telecom domain (ethiotelecom.et) and deleted the message immediately.

Scenario

Sara receives this SMS: "URGENT: Your telebirr wallet will be suspended in 2 hours due to suspicious activity. To avoid suspension, call 0911 222 333 and provide your PIN and OTP to our agent." What should Sara do?

If you think you have been scammed, act quickly. The faster you respond, the better your chances of limiting the damage.

Step 1 — Stop the bleeding

• If you gave away your telebirr PIN: immediately call Ethio Telecom customer service on 994 (free) and ask them to freeze your account.

• If you gave away your email password: go to your email provider's website (e.g. gmail.com) and change your password immediately under Settings → Security.

• If you gave away your Facebook password: go to Facebook Settings → Security and Login → Change Password.

• If money was taken from your telebirr wallet: note the date, time, and amount, then call 994 to report it.

Step 2 — Change all affected passwords

Change the password for every account that used the same password as the one you shared. Also change your telebirr PIN, email, and social media passwords to something new and strong.

Step 3 — Report the scam

• Report to Ethio Telecom: call 994 or visit the nearest Ethio Telecom service centre.

• Report to Ethiopian police cybercrime unit: contact your local police station.

• Report on the platform: if the scam came via Facebook or WhatsApp, use the "Report" button on the message or account.

• Warning others: tell your family and friends so they are not targeted by the same scammer.

Step 4 — Learn and move on

Being scammed is not shameful — sophisticated fraudsters fool even experienced people. The important thing is to act fast, report it, and use the experience to become more careful.

Key numbers to save in your phone right now:

• Ethio Telecom customer service (free): 994

• CBE customer service: 8397 or +251-11-551-2200

• Telebirr in-app help: use the "Help" or "Contact Us" section inside the app.

Three habits that will protect you every day: 1. STOP — Before clicking a link or giving information, pause and think. 2. CHECK — Does this message or website look official? Is the URL correct? Did I ask for this? 3. ACT — If something seems wrong, do not proceed. Hang up, close the page, and call the official number (994 for telebirr).
Lesson recap — Avoiding scams and staying safe online: • Scammers target new smartphone and mobile-money users in Ethiopia using fake prizes, fake customer service calls, wrong-transfer tricks, phishing links, fake jobs, and SIM-swap fraud. • Golden rule: no real organisation ever asks for your PIN, OTP, or password over the phone or by SMS. • Protect your personal information: use strong, unique passwords; lock your phone screen; be careful what you share on social media. • Spot red flags: urgent language, requests for PIN/OTP, unfamiliar links, prizes you never entered. • If scammed: call 994 immediately to freeze your telebirr account, change all affected passwords, and report the scam. • Save 994 (Ethio Telecom, free) and 8397 (CBE) in your phone now. • Three habits: STOP, CHECK, ACT — pause before you click or share.

Check your understanding

1/7 · 79 XP

You receive an SMS: "You have won 50,000 Birr! Send 500 Birr registration fee to claim your prize." What should you do?