🚨 Warning

The most common scams, and how to spot them

Scammers use the same tricks again and again. Once you know them, they can't catch you. Pick a scam to see an example, the warning signs and what to do.

Stop and thinkUrgency is the scammer's weapon. No real organisation gives you only a few hours.
Never share codesNever give SMS codes, passwords or card details to anyone, not even a friend.
Check another wayCall the person or company on a number you already know, not the one in the message.

12 scams you should know

1 / 12

Fake parcel text

SMSEmail

›

🧠 How it works

You get a text or email that looks as if it comes from the post office or a delivery company: your parcel “has been held” and you need to pay a small amount, e.g. €1–3, for customs or redelivery. The link takes you to a fake page that looks exactly like the real one and asks for your card details.

The aim isn't the couple of euros, but your card number, expiry date and CVV code, which are then used for much bigger purchases. Sometimes the page also asks for the code your bank sends you by SMS, with it, the scammer links your card to their own phone.

💬 Example⚠️ Scam

POSTA: Your parcel RR4829XK cannot be delivered due to an incomplete address. Pay the 1.49 EUR fee within 24 hours for redelivery:https://posta-ks.delivery-info.top/payment

🚩 Red flags

You haven't ordered anything, or you're not expecting a parcel from this courier.
It asks for a small, urgent payment “within 24 hours”.
The link isn't the official website: it has extra words, hyphens or strange endings like .top or .xyz.
The message comes from an ordinary number, often a foreign one, but be careful, the sender's name can be faked too.
The page asks for your full card details or the code from your bank.

✅ What to do

Don't click the link.
Only check your delivery on the courier's official website or app, typing the address in yourself.
Delete the message and block the number.
Warn your family, especially your grandparents, about this kind of message.

🆘 If you have already fallen for it

Call your bank straight away on the number on the back of your card and ask them to block it.
Check your recent transactions and dispute any you don't recognise.
Don't give anyone a code your bank sends you by SMS, even if someone calls you “from the bank”.
Report it to Kosovo Police (192) with screenshots of the message and the website.

‹

2 / 12

“Send me the 6-digit code”: WhatsApp or Viber account theft

WhatsAppViberTelegram

›

🧠 How it works

A friend or relative, whose account has already been stolen, messages you: “I sent you a code by mistake, can you send it back?” or “Vote for me in a competition, you'll get a code”. In reality, the scammer is registering your number on their own phone, and the app sends you the verification code.

If you give them the code, the scammer takes over your account, locks you out of it and messages all your contacts asking for money or new codes. This is how the scam spreads like a chain from one phone to the next.

💬 Example⚠️ Scam

Hi 😊 sorry, I accidentally sent a 6-digit code to your number. Can you send it back to me here quickly? It's urgent, I can't get into my account.

🚩 Red flags

Someone asks you for a code you got by SMS, nobody needs your code.
The SMS with the code itself says “Don't share this code with anyone”.
The request comes out of the blue and in a hurry.
The way your “friend” writes seems different from usual.

✅ What to do

Never give your verification code to anyone, not even your best friend.
Phone your friend with a normal call to check that it's really them messaging you.
Turn on the two-step verification PIN in WhatsApp: Settings → Account → Two-step verification.
Check in “Linked devices” that there are no unknown devices.

🆘 If you have already fallen for it

Sign back in to the app with your number and the new code you get by SMS, this kicks the scammer out.
If the app asks for a PIN you didn't set, follow the app's instructions; you may have to wait a few days before you get your account back.
Tell your family and friends straight away, by phone or on another app, not to reply to any requests for money.
If anyone has sent money, report it to Kosovo Police (192).

‹

3 / 12

“Mum, this is my new number”, and AI-cloned voices

WhatsAppViberSMSPhone calls

›

🧠 How it works

The scammer messages from an unknown number pretending to be your child or grandchild: their phone “fell in water”, so they have a new number. After a few warm messages comes the request: they urgently need to pay a bill or something online and their “banking app won't open”. They usually avoid calls (“I can't talk right now”) and ask for the money to go to a “friend's” account.

The newer version uses artificial intelligence: with just a few seconds of someone's voice from a social media video, scammers clone the voice of a relative and phone you crying or panicking (“I've had an accident”, “I need money now”). The voice sounds real, but the number, the rush and the request for money give the scam away.

💬 Example⚠️ Scam

Hi Mum, this is my new number, my phone fell in water ❤️ Save this number. Are you free? I need a bit of help, I have to pay a €380 bill today and my banking app won't open on my phone. I'll pay you back tomorrow, please.

🚩 Red flags

A new number and a request for money in the same conversation.
“I can't talk right now”, or a short, panicky call that doesn't give you time to think.
The money has to go to someone else's account or through a money transfer service.
A request for secrecy: “don't tell Dad”.
The voice sounds like your relative, but the call comes from an unknown number.

✅ What to do

End the conversation and call the person yourself on their old, familiar number.
Ask a question only the real person would know the answer to, not something that can be found on social media.
Agree on a family “secret word” to use only in emergencies.
Don't send money without speaking to the person on their known number.
Limit public videos featuring your children's voices and faces.

🆘 If you have already fallen for it

Call your bank straight away and ask them to stop or reverse the transfer, the sooner, the better.
Keep the conversation, the phone number and the details of the account you sent the money to.
Report it to Kosovo Police (192).
Report and block the number in the app, and warn your other relatives.

‹

4 / 12

Fake giveaway (iPhone, PS5)

InstagramTikTokFacebook

›

🧠 How it works

A profile that looks like it belongs to a shop, an influencer or a well-known brand posts: “We're giving away 10 iPhones! Follow, like and tag a friend.” A little later, the “winners” get a private message: they've won, but they need to pay for delivery, enter their card details or click a link to “confirm” their account.

The fake profile's name is often almost the same as the original, one extra letter, a dot or “_official” at the end. The goal is to steal money, data or your account itself.

💬 Example⚠️ Scam

🎉 CONGRATULATIONS! You've been chosen as the winner of an iPhone 17 Pro in our giveaway! To claim your prize, click the link in our bio and pay just €4.99 for delivery within 2 hours, otherwise the prize goes to the next winner.

🚩 Red flags

You “won” a giveaway you didn't even enter, or the win comes by private message.
You have to pay something to get a “free” gift.
The profile is new, has few posts, or its name has extra letters or symbols.
A very short deadline: “within 2 hours”.
It asks for a password, a code or your card details.

✅ What to do

Check the brand's official profile (older posts, number of followers) and see whether it really announced the giveaway, a verification badge on its own is no guarantee.
Don't pay anything and don't click the link.
Report the profile as a scam.
Tell a parent and your friends, so they don't fall for it too.

🆘 If you have already fallen for it

If you've given your card details, tell your parents and the bank straight away so the card can be blocked.
If you've given your password, change it straight away and turn on two-step verification (2FA).
Take screenshots of the profile and the messages.
Report the profile on the platform and, if you've lost money, report it to Kosovo Police (192).

‹

5 / 12

“Free” Robux, V-Bucks or diamonds

GamesYouTubeTikTokDiscord

›

🧠 How it works

Videos, comments or websites promise a “generator” that gives you free Robux, V-Bucks, diamonds or rare skins. To get them, you're asked for your username and password, to download an app or a “cheat”, or to complete “human verification” with surveys and your phone number.

Generators like this don't exist. At best you waste your time; at worst you lose your account and all your items, your device gets infected with malware, or your phone number gets signed up to paid services.

💬 Example⚠️ Scam

🔥 FREE ROBUX 2026 🔥 Enter your username and password, choose 10,000 Robux and click GENERATE. Complete the human verification (download 2 apps) and the Robux are added instantly! 100% works, no ban!

🚩 Red flags

It promises free currency that costs money in the game.
It asks for your game account password.
It asks you to download apps, “mods” or “cheats” from outside the official store.
The “human verification” never ends.
Comments full of “it works! 😍” from accounts that look fake.

✅ What to do

Never type your game password into any other website.
Only buy currency inside the game or with official gift cards, and only with your parents' permission.
Report the video, comment or website.
Turn on two-step verification (2FA) on your game account.

🆘 If you have already fallen for it

Change your game password straight away, and the password of the email you signed up with.
In the game's security settings, sign out of all devices.
If you've installed something, tell a parent, delete it and scan the device with an antivirus.
Only use the game's official help website to get your account back, don't trust “helpers” who message you privately.

‹

6 / 12

“I'll give you skins if…”, fake friendships in games

RobloxFortniteMinecraftDiscordInstagram

›

🧠 How it works

Someone in a game acts like a really good friend: they play with you, help you get through levels, pay you compliments and offer you gifts, skins, Robux, V-Bucks or a “premium” account. Then the requests start: give them your password “so they can add the gift”, move to Discord, Snapchat or a private chat, keep your chats secret, or send them photos.

This is called grooming: the person builds up your trust step by step so they can take advantage of you later. It might be a scammer who wants your account, or an adult with bad intentions. If this happens to you, it's not your fault, and an adult can help you.

💬 Example⚠️ Scam

hey ur really good at the game 😄 i wanna gift u the new legendary skin but i need to log into ur account to add it. send me ur password and come on discord we can talk more freely there. dont tell ur parents cos gifting skins isnt allowed lol

🚩 Red flags

Gifts for no reason from someone you only know online.
They ask for your password, a code or personal details.
They want you to move to a more private app.
They ask you to keep your chats secret from your parents.
They ask about your age, your school or where you live, or ask for photos.

✅ What to do

Never give your password to anyone, real gifts don't need it.
Set chat to “friends only” and only accept people you know in real life as friends.
When someone asks you to keep a secret, that's your sign to tell an adult.
Block and report the profile in the game.

🆘 If you have already fallen for it

If you've given your password, change it straight away, your email password too, and turn on 2FA.
Take screenshots of the chats and note down the username.
Tell a parent or teacher, they're there to help you, not to blame you.
If someone has asked you for photos, threatened you or suggested meeting up, report it to Kosovo Police (192).

‹

7 / 12

Blackmail with photos (sextortion)

InstagramSnapchatgamesDiscord

›

🧠 How it works

Someone whose profile looks like an attractive person your own age starts a friendly chat, pays you compliments and very quickly asks for private photos or a video call. Once they get a photo, or secretly record the call, they change immediately: they threaten to send it to your friends, family or school unless you pay or send more photos. Sometimes they even use fake images created with AI.

Scammers do this to lots of children at the same time, and they want to frighten you so much that you can't think clearly. It's not your fault. There is always a way out, and adults can help, including getting the content removed from the internet.

💬 Example⚠️ Scam

I've got your photo. If you don't send me €200 by 10 o'clock tonight, I'll send it to all your followers and your parents. I know who they are. Don't tell anyone.

🚩 Red flags

A stranger who gets very friendly very quickly.
They ask for private photos, a video call or to move to another app.
Threats with a short deadline, and demands for money or more photos.
“Don't tell anyone”, it's the scammer who is afraid of adults, not you.

✅ What to do

Never send private photos, even if the person seems genuine.
Stop the conversation and block any stranger who asks you for photos.
Tell an adult you trust, you won't get into trouble for asking for help.
Keep your profile private and don't accept friend requests from strangers.

🆘 If you have already fallen for it

Don't pay and don't send anything else, paying usually just leads to more demands.
Don't delete the conversation straight away: take screenshots of the profile, the username and the messages, but don't share the photos.
Block and report the account on the platform, platforms have special procedures for removing images of minors.
Tell a parent, teacher or another trusted adult straight away, and report it together to Kosovo Police (192).
Remember: you're the victim. You haven't done anything that can't be put right.

‹

8 / 12

Fake online shop with very low prices

FacebookInstagramTikTokwebsites

›

🧠 How it works

Social media pages or new websites sell branded trainers, phones, perfume or clothes at 70–90% off, often using paid ads that look professional. They ask for payment in advance by card, bank transfer or a money transfer service, and then send nothing, or send something completely different.

Often the comments are turned off or deleted, the page was set up just a few weeks ago, and there's no physical address, business number or clear returns policy.

💬 Example⚠️ Scam

⚡ CLEARANCE SALE ⚡ Original trainers only €19.99 (was €149)! Today only, just 7 pairs left. Order by private message, payment in advance by bank transfer, free delivery across Kosovo!

🚩 Red flags

A price much lower than anywhere else.
The page is new, has few posts and the comments are turned off.
Payment in advance only, by transfer to a personal account; cash on delivery isn't accepted.
Pressure: “today only”, “only 3 left”.
There's no address, business number or clear returns policy.

✅ What to do

Search for the shop's name together with the word “scam” or “reviews”, and read comments from real buyers.
Choose cash on delivery or payment by card, which you can dispute with your bank.
Never pay by transfer to a personal account or with gift cards.
Children shouldn't buy anything online without their parents.

🆘 If you have already fallen for it

If you paid by card, contact your bank straight away and ask for the payment to be reversed (chargeback).
Keep screenshots of the ad, the conversation and the proof of payment.
Report the page on the platform so it can't scam other people.
Report it to Kosovo Police (192).

‹

9 / 12

Fake job: “Earn €100 a day liking videos”

WhatsAppTelegramInstagram

›

🧠 How it works

A “recruiter” messages you about a work-from-home job: like videos on YouTube or TikTok, rate hotels or products, and earn €50–150 a day. At first they really do pay you a few euros, so that you trust them. Then they add you to a Telegram group and ask you to “deposit” money to unlock “VIP tasks” that pay more.

The earnings you see on the “dashboard” are just numbers on a screen. When you try to withdraw them, they ask for even more money for “taxes” or for the “next level”, until they disappear. Young people are sometimes asked to “lend” their bank account to move other people's money, this makes them part of a crime.

💬 Example⚠️ Scam

Hello! I'm Elira from the recruitment department. We have a flexible work-from-home job: like videos on YouTube and earn €3 per task, up to €150 a day. Only 15 minutes a day, no experience needed. Reply “YES” to start today! 💰

🚩 Red flags

A job you didn't apply for, offered by private message.
Very high earnings for very easy work.
You have to pay or “deposit” money in order to earn.
Communication only on WhatsApp or Telegram, with no contract and no company you can check.
They ask you to use your bank account for other people's payments.

✅ What to do

Don't reply, and block the number.
Never pay to get a job.
Never hand over your bank account, card or ID card for “transfers”.
Only look for jobs through well-known websites, and check whether the company really exists.

🆘 If you have already fallen for it

Stop any further payments straight away, money doesn't get “unlocked” by paying more.
Contact your bank and report the transfers.
Keep the chats, group names and phone numbers.
Report it to Kosovo Police (192), especially if your account has been used to move money.

‹

10 / 12

Investment and crypto scams with fake celebrity ads

FacebookYouTubeonline adsphone

›

🧠 How it works

You see an ad or a “news story” in which a famous person, an athlete, singer, businessperson or politician, supposedly explains how they got rich using an investment or cryptocurrency platform. The video is often a deepfake created with AI. Once you leave your phone number, a very polite “account manager” calls you and asks for an initial deposit, usually around €250.

On the platform you see quick but fake profits, so you put in even more money, sometimes even taking out a loan. They often ask you to install a remote access program (such as AnyDesk) “to help you”, and that's how they take control of your computer and your online banking.

💬 Example⚠️ Scam

BREAKING NEWS: Famous singer reveals the secret in a live interview: “With just €250 I earn €1,200 a week on the new AI platform.” The banks are trying to stop it! Sign up today before places run out ➜

🚩 Red flags

Guaranteed, quick profits, real investments always carry risk.
A famous person “recommends” the platform in an ad.
Pressure: “places are running out”, “the banks want to stop it”.
They call you often and ask you to install a remote access program.
To withdraw your profits, you have to pay “taxes” or a “commission”.

✅ What to do

Don't leave your phone number on websites like these.
Never install a remote access program because someone you don't know asks you to.
Before making any investment, talk to your bank or to someone you trust in your family.
Report the ad on the platform.

🆘 If you have already fallen for it

Stop all payments and contact your bank straight away.
If you've installed a remote access program, disconnect the computer from the internet, uninstall the program and change your passwords from another device.
Watch out for the “second scam”: anyone who promises to get your money back in exchange for a payment is also a scammer.
Report it to Kosovo Police (192) with all the evidence.

‹

11 / 12

Fake tech support: “Your computer has a virus!”

Browser pop-upPhone call

›

🧠 How it works

While you're browsing, a big window suddenly pops up, sometimes with an alarm sound, saying your computer is “locked” or “infected” and that you must call “Microsoft support” or “Apple support” straight away. On the phone, a “technician” asks you to install a remote access program, shows you fake “viruses” and asks for payment for the “repair”, or goes straight into your online banking.

Microsoft, Apple and other companies never show phone numbers in warning windows, and they never call you out of the blue about viruses.

💬 Example⚠️ Scam

⚠️ SECURITY WARNING ⚠️ Your computer has been locked due to suspicious activity (Error #DW6VB36). Your banking details are at risk! Do not turn off your computer. Call certified support immediately on the number shown on the screen.

🚩 Red flags

A warning that asks you to call a phone number.
An alarm sound, a countdown and a window that won't close.
A request to install a remote access program.
Payment with gift cards or cryptocurrency for the “repair”.

✅ What to do

Don't call the number and don't click anything in the window.
Close the browser: on Windows with Ctrl+Shift+Esc (Task Manager), on a Mac with Cmd+Option+Esc. If it won't close, restart the computer.
When you open the browser again, don't restore the previous pages.
Keep your system and browser up to date.

🆘 If you have already fallen for it

Disconnect the computer from the internet and uninstall the remote access program.
From another, safe device, change your email and banking passwords.
Contact your bank if you've paid, or if the “technician” saw your online banking.
Scan the computer with an antivirus and report it to Kosovo Police (192).

‹

12 / 12

Scam QR codes

Stickers in public placesEmailLetters

🧠 How it works

Scammers stick fake QR codes over real ones, in car parks, at charging stations, on café menus or posters, or send them by email or post (“scan to pay”, “scan to confirm your account”). The code takes you to a fake payment or sign-in page that steals your card details and passwords, or asks you to download a harmful app.

QR codes are risky because you can't see the address before you scan, so the check happens after scanning, before you open the link.

💬 Example⚠️ Scam

Sticker on a parking meter: “New parking app! Scan the QR code, register your card and pay for parking without coins. €50 fine for non-payment.”

🚩 Red flags

A sticker placed over another code, or one that looks as if it was added later.
A QR code in an email asking you to “verify” your account or password.
After scanning, the address doesn't match the name of the company or institution.
The page immediately asks for your card details or for you to download an app.

✅ What to do

Before opening it, read the address your camera shows after scanning.
For payments, use the official app or website, typing the address in yourself.
Don't scan QR codes from unexpected emails or messages.
If you see suspicious stickers, tell the owner or the institution.

🆘 If you have already fallen for it

If you've given your card details, call your bank straight away to block the card.
If you've given your password, change it and turn on two-step verification (2FA).
If you've downloaded an app, delete it and scan your phone.
Report it to Kosovo Police (192).

Practise spotting scams

Test yourself with realistic messages and fake web addresses.

🎣 Spot the scam 🔎 URL detective