Phishing in Nepal: Spot Fake Links, SMS and QR Codes
Fake prize, parcel and bank messages target Nepalis daily. Learn the 5-second check.
By DigitalNepal · Updated 2026-09-15
Phishing is a fake message + urgency + a link. The link steals your login or installs malware. Every scam - prize, parcel, job, KYC - follows this shape.
Steps
1Inspect the sender
Banks and ISPs never send links from personal numbers or Gmail addresses.
2Read the URL carefully
esewa-care.com is not esewa.com.np. Look for misspellings and extra words.
3Resist urgency
'Account blocked in 2 hours' is the hook. Real companies give written notice, not panic SMS.
4Never enter OTP on linked pages
No legitimate process asks you to enter an OTP on a page opened from SMS.
5Verify through the official app
Open the real app by typing its address yourself and check for the claimed notice.
Good to know: If you entered credentials on a fake page, change the password from the official app immediately and enable 2FA.
FAQ
Are QR codes safe?
QR stickers in shops get replaced by scammers. Confirm the merchant name shown before paying.
Was this page helpful?
Related guides
Fake Job Scams: How Nepalis Get Trapped (and How to Check)
Telegram tasks, abroad-job offers and 'pay first' tricks - the full breakdown.
OTP Scams in Nepal: The Exact Scripts Fraudsters Use
KYC calls, prize links, fake delivery OTPs - recognise every version and shut it down.
Facebook Hacked? Recover Your Account the Right Way
Someone else is posting from your account or you are locked out. Act in the first hour.
Password Safety: Simple System You'll Actually Follow
Strong unique passwords without memorising 50 of them - the realistic approach.