Sri Lanka Scams: Online, Financial & Tourist Fraud Guide
Common scams in Sri Lanka and how to report them via Sri Lanka CERT, the Consumer Affairs Authority, and your bank.
Emergency number: 119 (police), 112 (emergency) — verify on official sources.
Last reviewed: 1 June 2026
Sri Lanka has seen a significant rise in digital fraud alongside the growth of mobile internet access. Phishing targeting bank accounts, fake job offers, online marketplace scams, and investment fraud are prevalent. Sri Lanka CERT (cert.gov.lk) is the official body for cybersecurity incident reporting, while the Consumer Affairs Authority (CAA) handles consumer rights complaints. The police emergency line is 119. For tourists, classic tuk-tuk overcharging and gem scams remain common in popular areas. Reporting quickly — especially to your bank — gives the best chance of limiting financial losses. Sri Lanka's Cybercrime Investigation Division of the CID is the specialist unit for digital crime investigations.
Common scams
- Bank and mobile banking phishing
- Fake job offers requiring upfront payments
- Investment and pyramid scheme fraud
- Online shopping non-delivery
Tourist-specific scams
- Tuk-tuk driver overcharging and detour scams
- Gem and jewellery 'special deal' scams
- Fake tour operators and unofficial guides
- Overpriced souvenir shops via driver commissions
Online shopping scams
- Phishing impersonating banks or mobile operators
- Fake online shops and social media marketplace scams
- Lottery and prize notification scams
Job scams
- Fake overseas domestic-worker and employment offers requiring upfront fees
- Task scams via messaging apps
Romance scams
- Social media and dating-app romance with escalating financial requests
Investment scams
- Fake forex and cryptocurrency trading platforms
- Ponzi and pyramid schemes targeting community networks
How to report a scam here
- Contact your bank immediately if money was transferred fraudulently
- Report cybersecurity incidents to Sri Lanka CERT at cert.gov.lk/report_incident or call +94 11 269 1692
- Report consumer fraud to the Consumer Affairs Authority at caa.gov.lk
- Contact Sri Lanka Police on 119 or at the Cybercrime Investigation Division of the CID
Local reporting & protection links
- Cybercrime reporting
- Consumer protection
- Police
- CID Cybercrime Division — Call +94 11 243 2746 for digital crime investigations
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Contact your bank immediately using the official number on your card or their website. Sri Lanka's banks can attempt to intercept or recall fraudulent transfers if notified quickly. No legitimate bank will ask for your full account credentials, OTP, or PIN via phone or text.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
How do I report a cybercrime in Sri Lanka?
Report to Sri Lanka CERT via cert.gov.lk/report_incident or call +94 11 269 1692. For criminal investigations, contact the CID Cybercrime Investigation Division. For consumer fraud, contact the Consumer Affairs Authority at caa.gov.lk.
Are gem sellers in Sri Lanka a common scam?
Yes. Visitors are frequently approached — sometimes via tuk-tuk drivers or 'friendly locals' — and directed to gem shops offering supposed special deals. Gems are typically overpriced or fake. Avoid purchasing gems from unsolicited recommendations.
What is Sri Lanka CERT?
Sri Lanka CERT (Computer Emergency Readiness Team) is the official government cybersecurity body under the Ministry of Digital Economy. It handles cyber incident reporting and provides guidance to victims of online crime.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance