Saudi Arabia Scams: Online, Banking & Investment Fraud Guide
Common scams in Saudi Arabia and how to report them via the National Portal, NCA, and your bank.
Emergency number: 911 — verify on official sources.
Last reviewed: 1 August 2026
Saudi Arabia faces online fraud including phishing targeting banking apps and digital wallets, investment scams, online shopping fraud, and job-offer scams. The National Cybersecurity Authority (NCA) is the primary cybersecurity body and accepts incident reports, cybercrime can be reported via the national portal, and the Anti-Cyber Crime Law provides strong enforcement.
Impersonation is the dominant tactic. Callers and texters pose as banks, the Saudi Central Bank (SAMA), Absher, or delivery firms, claiming your account needs 'verification', a government benefit awaits, or a package is held for a customs fee — all pretexts to harvest card numbers and OTPs. Fake 'bank fraud department' calls then talk victims through 'securing' funds, and smishing waves impersonate courier companies around online shopping seasons. Job fraud targets both residents and applicants abroad: forged offer letters from well-known Saudi companies, fake recruitment agencies charging visa and medical fees, and Hajj and Umrah season brings its own wave — fraudulent visa services, fake pilgrimage packages, and non-existent accommodation in Makkah and Madinah sold through social media.
Investment fraud spreads through Telegram and X (Twitter) groups pushing unlicensed forex and crypto platforms and fake 'stock tip' subscriptions, sometimes with forged CMA licences or impersonated finance personalities. Marketplace fraud on Haraj and similar classifieds includes non-delivery and fake payment confirmations. Report quickly: your bank first for any transaction, then the cybercrime channels — and remember that no bank, SAMA, or government office ever asks for your full card number, OTP, or Absher credentials by phone.
Common scams
- Phishing and smishing impersonating Saudi banks or government portals
- Investment and crypto fraud
- Online shopping non-delivery via fake sites
- Job-offer scams requiring upfront visa or processing fees
Tourist-specific scams
- Overcharging unofficial transport services
- Fake tour operators and overpriced services
- Fraudulent Hajj/Umrah visa services and pilgrimage packages sold via social media
Online shopping scams
- Phishing targeting Absher, banking apps, or email credentials
- Fake online shops and classified listings
- Social media account hijacking and impersonation
- Delivery-fee smishing impersonating courier companies
Job scams
- Fake recruitment requiring upfront visa, medical, or processing payments
- Task scams via messaging apps
- Forged offer letters impersonating well-known Saudi companies
Romance scams
- Dating-app and social media romance leading to financial requests
- Online partners claiming packages are held at customs needing fees
- Video-call blackmail ('sextortion') via social apps
Investment scams
- Fake forex and crypto trading platforms
- High-yield investment and pyramid scheme fraud
- Telegram 'stock tip' groups with forged CMA licences
How to report a scam here
- Contact your bank immediately if money was transferred
- Report cybercrime via the National Portal at my.gov.sa/en/services/398352
- Report cybersecurity incidents to the NCA at nca.gov.sa/en/report-incident/
- For emergencies, call 911
Local reporting & protection links
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Contact your bank straight away using its official hotline, the number on your card, or its app, never a number given to you by the person who contacted you. Saudi banks can attempt to hold or recall a fraudulent transfer if they are notified quickly, so the first hour matters most — and SAMA's consumer protection framework expects banks to act on prompt fraud reports, so escalate through SAMA's complaint channel if the response stalls. Explain that you were deceived into authorising the payment, ask for the receiving account to be reported, and request a reference number. Remember that sharing an OTP is treated as authorising the transaction, which weakens recovery — so say exactly what was shared and how the caller framed it. If you shared a one-time code or card details, ask for the card to be blocked and reissued and your banking password changed from another device, then file the cybercrime report so the bank has an official case reference.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
How do I report cybercrime in Saudi Arabia?
Report cybercrime via the national government portal at my.gov.sa/en/services/398352, or submit a cybersecurity incident to the National Cybersecurity Authority (NCA) at nca.gov.sa/en/report-incident/. For urgent matters, call 911.
Are job offers requiring upfront visa fees legitimate in Saudi Arabia?
Generally no. Legitimate employers and licensed recruitment agencies do not require candidates to pay visa processing or medical fees upfront. Verify any job offer through official channels and be suspicious of requests for advance payments.
What is the Anti-Cyber Crime Law?
Saudi Arabia's Anti-Cyber Crime Law criminalises unauthorised access, data interference, identity fraud, and online financial crimes. Violations carry significant penalties including imprisonment and fines, and enforcement is handled by the General Directorate of Investigation (Mabahith).
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance