Fake "Google Pay Enabled" Sites Targeting Sri Lanka Users
Real examples of fake Google Pay sites targeting Sri Lankan users and how to avoid them.
This article is for informational purposes only. These scams specifically target Sri Lankans who are unfamiliar with Google Pay.
How the Scam Works
The typical attack:
- Fake e-commerce site appears on search results or social media
- Prominently displays "Google Pay Accepted Here"
- Customer clicks Google Pay to pay
- Redirected to fake login page (looks like Google)
- Customer enters email and password
- Credentials are stolen; customer's account is compromised
- Scammer accesses Google account and linked payment methods
Real Sri Lankan Examples
Example 1: "Gadget Store Scam"
- Site: "SriLankaGadgets.lk" (fake, but looks official)
- Advertises: Brand new iPhones at huge discounts
- Features: Prominent Google Pay logo
- Victim outcome: Lost credentials and money
Example 2: "Utility Bill Collector"
- Site claims to be official payment portal for bills
- Displays: Authentic-looking logos including Google Pay
- Actually: Stealing credentials for bill payment accounts
- Victim outcome: Compromised utility accounts
How to Protect Yourself
Defense strategy:
- Never click "Google Pay" buttons on unfamiliar sites
- Go directly to official merchant websites (type URL manually)
- Check the URL in your browser (it should go to Google's domain, not the merchant's)
- Google will never ask for username/password in a payment flow
- Verify the site's legitimacy before attempting to pay
- Use credit cards with fraud protection on unknown sites
Frequently Asked Questions
How can I tell if a Google Pay redirect is fake?
The URL should change to accounts.google.com (or similar). If it stays on the merchant's domain or looks odd, it's fake. Stop and close the page.
What if I already entered my Google credentials on a fake site?
Change your Google password immediately using a trusted device. Enable two-factor authentication. Check your Google Account activity for unauthorized access.
Are Sri Lankan banks using Google Pay on their official sites?
Some major banks support Google Pay integration on their sites. Always verify by contacting the bank directly, not through a third-party site.
Is Google Pay safer than credit cards?
When used on legitimate sites, yes—it adds a layer of protection. But on fraudulent sites, it's just as risky because the site itself is the problem.
How do I report a fake Google Pay site?
Report to Google Security (support.google.com/accounts/answer/3367301), the brand being impersonated, and the Cyber Crime Division.