Surge in scams raises alarm over financial fraud and data theft in Sri Lanka

By Darshana Sanjeewa Balasuriya 

Sri Lanka is witnessing a troubling surge in sophisticated scams, with fraudsters increasingly exploiting public trust, government identities, and digital platforms to steal personal and financial information. 

Police and authorities warn that these schemes are becoming more advanced, combining technology with deception to target unsuspecting citizens across the country. 

The Department for Registration of Persons yesterday issued an urgent public alert regarding a fraudulent group illegally using the department’s name and official contact details to steal personal and financial information. 

According to the department, scammers have been contacting individuals via its hotline number 0115226126—along with variations such as +94115226126—and mobile numbers 0771167739 and 0742756098 under false pretences. 

The department has been informed that these unauthorised parties have created a fake mobile application (APP) featuring official government logos. Fraudsters are reportedly using this app to trick the public into registering their personal details for “Digital Identity Cards” or “E-National Identity Cards.” The DRP clarified that it has not launched such an application and strongly advises the public not to share any sensitive information with individuals calling from these numbers or using such platforms.

Furthermore, a deceptive website, (https://drpgov-lk.com) has been identified as a phishing site designed to mimic the official departmental portal. 

The Commissioner General warned that this site is not affiliated with the government and is being used to solicit private data from unsuspecting users. Citizens are urged to avoid visiting this link or providing any details if prompted by similar-looking domains. 

Victims are reportedly being persuaded to register personal details for so-called “Digital Identity Cards” or “E-National Identity Cards.” 

The Commissioner General emphasised that the department is not currently conducting any registration for digital identity cards via external apps or unofficial websites. 

Meanwhile, the Sri Lanka Police have also raised concerns over a separate financial scam in which fraudsters impersonate SriLankan Airlines. In this scheme, victims are contacted via WhatsApp and tricked into downloading a malicious application named “Sri Lankan.apk.” 

Investigations reveal that once installed, the app functions as a banking trojan, enabling criminals to remotely access victims’ mobile devices. This allows them to intercept one-time passwords (OTPs), bypass biometric security features such as fingerprint and facial recognition, and transfer funds without the user’s knowledge. SriLankan Airlines has clarified that it does not conduct promotions or ticketing through WhatsApp or request customers to download third-party applications. 

The rise in such scams is not limited to digital fraud alone. On March 27, police warned the public about an increase in online shopping and courier-related scams, where fake websites resembling legitimate platforms are used to steal sensitive information. Consumers were advised to verify transactions directly through official contact channels and avoid clicking on suspicious links. 

Earlier, on February 25, authorities uncovered organised groups operating in Colombo that impersonated senior police officers to solicit money, food, and other assistance from hotels and private institutions. 

Citizens are urged to rely only on verified sources, avoid sharing personal or banking information with unknown parties, and report suspicious activities to the nearest police station or the Cyber Crimes Division.