Google Pay & Alipay Scam Messages: How Sri Lankans Are Targeted
Understanding and avoiding payment app scams targeting Sri Lankan users.
This article is for educational purposes only. Scammers impersonate Google Pay and Alipay to steal credentials and money.
Common Google Pay & Alipay Scam Messages
- "Your account has been compromised. Verify now."
- "Unusual activity detected. Click to confirm."
- "Your payment failed. Update card details."
- "Congratulations! You've won a voucher."
- "Limited time: Double your rewards."
- "Click to claim unclaimed refund."
How These Scams Work
The typical attack sequence:
- User receives message appearing to be from Google Pay or Alipay
- Message contains a malicious link (shortened URL or fake login page)
- User clicks and enters credentials, card details, or OTP
- Scammer gains access to account or payment information
- Money is transferred or fraudulent transactions occur
- User discovers the theft too late
Protection Strategy
To protect yourself:
- Never click links in unexpected messages
- Official apps send notifications within the app, not via SMS
- Google/Alipay will never ask for passwords or OTP via message
- Always open the app directly, not through message links
- Enable two-factor authentication
- Set up suspicious activity alerts on your account
Frequently Asked Questions
How can I tell if a message is really from Google Pay?
Legitimate notifications come through the app itself, not SMS or email links. Google Pay will never ask for your password or OTP.
What if I already clicked the link?
Don't enter any credentials. Close immediately and log into your account directly through the official app to check for issues.
Does Google Pay work in Sri Lanka?
Google Pay is available in Sri Lanka for some users, but availability depends on your bank. Check with your bank directly.
Is Alipay safe in Sri Lanka?
Alipay itself is legitimate, but not all Sri Lankan merchants accept it. Be wary of sites claiming Alipay acceptance if they seem suspicious.
What should I do if I entered credentials?
Change your password immediately through the official app. Contact your bank. Enable app lock if available and monitor your transactions.