Common digital payment scams targeting Nepali users in 2026 — eSewa fraud, fake QR codes, OTP vishing, phishing, and SIM swap attacks explained | BandhuFintech
Digital payments in Nepal have grown explosively — and so have the scams. Fraud cases involving eSewa, Khalti, ConnectIPS, and mobile banking have surged over 340% since 2022 according to Nepal Police Cyber Bureau data. This guide exposes every major scam targeting Nepali users right now, shows you exactly how each one works, and gives you the precise knowledge to never fall victim to one.
The rapid digitization of Nepal's financial system — accelerated by the post-pandemic shift to cashless payments — has brought enormous convenience to millions of Nepali households. But it has also created an expanding attack surface for cybercriminals who specifically design their tactics to exploit the trust Nepali users place in familiar brands like eSewa, Khalti, NMB Pay, and ConnectIPS. Understanding these scams in precise detail is your first and most important line of defense.
๐ Table of Contents
- Why Nepal Is Increasingly Targeted by Payment Fraudsters
- Scam #1 — Fake OTP / Vishing Calls (Most Common)
- Scam #2 — Fake QR Code Swap at Shops & Temples
- Scam #3 — Phishing Links and Cloned Payment Apps
- Scam #4 — Fake Online Sellers (Hamrobazar, Facebook, OLX)
- Scam #5 — SIM Swap / Account Takeover Fraud
- Scam #6 — Lottery, Lucky Draw & "You've Won!" Scams
- Scam #7 — Fake Job Offer & Advance Fee Fraud
- Scam #8 — "Wrong Transfer" Refund Manipulation
- Master Protection Checklist
- Where to Report Digital Payment Fraud in Nepal
- Frequently Asked Questions
- Conclusion — Stay Safe, Stay Smart
Why Nepal Is Increasingly Targeted by Payment Fraudsters
Nepal's digital payments ecosystem has grown from under 5 million registered digital wallet users in 2019 to over 20 million in 2026. eSewa alone processes over Rs 500 billion in transactions annually. This scale of money flow is enormously attractive to organized fraud networks — many of which now operate cross-border from India, Southeast Asia, and West Africa with locally recruited agents inside Nepal who understand cultural norms and speak Nepali fluently.
Several factors make Nepali users particularly susceptible to digital payment fraud in 2026. Financial literacy around digital security remains low outside Kathmandu's tech-savvy demographic. Many first-generation smartphone users — rural households, senior citizens, and small business owners — have adopted mobile wallets without receiving adequate security education. App interfaces that prioritize ease of use over security friction mean that a scammer who obtains an OTP can drain a wallet in under two minutes. And critically, unlike credit card fraud in Western markets, most digital wallet transactions in Nepal are irreversible once confirmed — making recovery of stolen funds extremely rare.
๐ Who Is Most at Risk?
- First-time digital wallet users — often targeted within weeks of account opening when habits and expectations are still forming
- Small business owners and shopkeepers — targeted by fake QR code swaps and payment manipulation tactics
- Young people active on social media — targeted via Facebook, Instagram, and TikTok with fake job offers, lottery scams, and investment fraud
- Senior citizens and rural users — targeted by phone-based vishing attacks that impersonate eSewa or bank customer service
- Hamrobazar and Facebook Marketplace buyers and sellers — targeted by advance payment and fake receipt fraud in nearly every product category
- Job seekers — targeted by fake overseas job placement agencies demanding upfront "processing fees" via digital payment
Scam #1 — Fake OTP / Vishing Calls (Most Common in Nepal)
Fake OTP / Vishing (Voice Phishing) Calls
⚠ Critical RiskThis is the single most reported digital payment scam in Nepal, accounting for over 55% of all wallet-related fraud complaints at Nepal Police Cyber Bureau. The scammer calls you — sounding professional and urgent — claiming to be a representative of eSewa, Khalti, your bank, or even Nepal Rastra Bank. The entire goal of the call is to get you to read out your OTP, and once you do, your money is gone in seconds.
๐ Exactly How This Scam Works — Step by Step
- You receive a call from a number that may appear as a local Kathmandu number (01-XXXXXXX) or a mobile number you don't recognize.
- The caller identifies themselves as "eSewa Customer Care," "Khalti Security Team," "NMB Bank Fraud Department," or even "Nepal Rastra Bank."
- They create urgency: "Your account has been compromised," "Your wallet is about to be suspended," "We detected unauthorized access and need to verify your identity," or "You have won a cashback of Rs 5,000 that needs to be activated."
- They ask you to confirm your registered mobile number, name, and date of birth — information that feels harmless to share and builds your trust.
- They then say: "For verification, we are sending you an OTP. Please read it to me to complete the security process."
- The moment you receive and read out the OTP, the scammer — who has already opened your wallet login screen — enters it and completes a transfer or changes your PIN.
- Within 60–120 seconds, your entire wallet balance is transferred to a mule account. The call then disconnects.
๐ฉ Red Flags to Spot Immediately
- Any caller — regardless of who they claim to be — asking for your OTP. No legitimate organization ever asks for your OTP over the phone. Ever.
- Urgent tone designed to prevent you from thinking clearly ("Your account will be locked in 10 minutes if you don't verify now")
- Caller knows your name, registered mobile number, or partial account details — this information is often purchased from data breaches and is used to build false credibility
- The call comes at an unusual hour — early morning, late evening, or during a festival when you may be distracted
- Background noise of a call center — suggesting an organized operation, not a genuine one-to-one support interaction
- They ask you to keep the conversation confidential ("Please don't tell anyone about this security alert")
๐ก️ How to Protect Yourself
- Hang up immediately if anyone asks for your OTP — no exceptions, no matter how credible they sound
- Proactively call eSewa's official number (9801-888-8-11) or your bank's official helpline to verify if there is any actual issue with your account
- Remember that OTPs are one-time codes generated for your use only — sharing them with anyone, even a "support agent," is the equivalent of handing over your PIN
- Set a daily transaction limit on your eSewa/Khalti wallet to minimize damage if an OTP is ever compromised
- Enable login notifications so you immediately know if someone accesses your account from a new device
Scam #2 — Fake QR Code Swap at Shops, Temples, and Markets
Fake QR Code Swap
High RiskThe QR code scam has proliferated rapidly across Nepal's growing merchant payment ecosystem. As more shops, vegetable vendors, temples, and street markets display eSewa and Khalti QR codes, fraudsters have developed a simple but devastatingly effective tactic: physically replacing or covering the merchant's genuine QR code with a fake one linked to the scammer's personal account. Your payment goes to the fraudster, not the merchant.
๐ How This Scam Is Executed
- The scammer visits a shop, market stall, temple donation box, or petrol station — anywhere a QR code payment is accepted.
- They print a professional-looking QR sticker linked to their own eSewa or Khalti wallet and physically place it over the merchant's genuine QR code.
- Customers scan what they believe is the merchant's code and complete payment without noticing anything unusual.
- The merchant, if not diligently checking payment notifications, may not realize for hours or days that all QR payments are going to a fraudster's account.
- A particularly sophisticated variant involves placing a fake QR at temple donation points or charity boxes — places where donors scan quickly without verifying the recipient name.
๐ฉ Red Flags to Spot
- The merchant name displayed on your payment confirmation screen does not match the actual shop name — always verify this before hitting "Confirm"
- A QR code sticker that appears to be placed over another sticker — look for peeling edges or misaligned placement
- The merchant is not checking their phone to confirm receipt of your payment
- QR code at a charity, temple, or donation point that shows an individual's name rather than an organization name
- Multiple different QR codes visible at the same counter — only one should be there
๐ก️ How to Protect Yourself
- Always read the merchant name on your payment confirmation screen before pressing "Pay" — this takes two seconds and prevents 100% of QR swap scams
- Ask the merchant to show you a received notification on their phone after your payment — legitimate merchants will do this without hesitation
- At temples and donation points, verify with a priest or temple staff that the QR code is authorized by the institution
- If the recipient name shows an individual's name (e.g., "Ram Bahadur") at a shop or institution, be suspicious and verify verbally with the merchant
- Report any suspicious or tampered QR codes to the merchant immediately and to eSewa/Khalti's fraud hotline
Scam #3 — Phishing Links and Cloned Payment Apps
Phishing Links and Cloned Apps
High RiskPhishing attacks targeting Nepali digital payment users have become considerably more sophisticated in 2025–26. Scammers now create near-perfect replicas of eSewa's login page, Khalti's website, or bank internet banking portals. These fake pages are distributed through SMS messages, Facebook posts, Viber groups, and email, and they harvest your login credentials silently in the background while appearing to process a legitimate login or transaction.
๐ How This Attack Works
- You receive an SMS or Facebook message: "Your eSewa account has been flagged. Verify immediately to avoid suspension: http://esewa-verify-nepal.com/login"
- The URL looks plausible at first glance — it may contain the word "esewa" or "khalti" but the actual domain is fake (e.g., esewa-nepal.com, khalti-verify.net, esewapay.app).
- The website looks identical to the real eSewa or Khalti login page — logo, colors, layout — often copied pixel for pixel from the legitimate site.
- You enter your mobile number and password. The scammer's server captures both instantly.
- The fake page then asks for your OTP "to complete verification" — intercepting the OTP generated by the real eSewa when the scammer tries to log into your actual account with your stolen credentials.
- Armed with your username, password, and OTP, the scammer logs in and empties your wallet.
๐ฉ Red Flags to Spot
- Any URL that is not exactly esewa.com.np or khalti.com — scammers use variations like esewa-nepal.com, esewaapp.com.np.co, or khalti-verify.net
- The link was sent to you unsolicited via SMS, Facebook message, Viber, or email — legitimate payment companies never ask you to click a link to "verify" your account
- The page shows a padlock icon but the URL is still wrong — HTTPS does not mean a site is legitimate
- Login page requests more information than usual — date of birth, transaction PIN, or security questions immediately after login
- Unusually slow loading or error messages after you enter credentials — these often indicate your data is being captured and forwarded
๐ก️ How to Protect Yourself
- Only access eSewa by typing esewa.com.np directly in your browser or using the official app from Google Play / Apple App Store — never through a link
- Bookmark the official URLs of all payment services you use — make this the only way you access them
- Never download APK files from WhatsApp, Telegram, or any website claiming to offer "updated" versions of payment apps
- Check that your phone's browser shows the exact correct domain before entering any password — take 3 seconds to look
- If you accidentally entered credentials on a suspicious site, change your password immediately from a trusted device and call your payment provider's official helpline
Scam #4 — Fake Online Sellers on Hamrobazar, Facebook, and OLX Nepal
Fake Online Seller / Advance Payment Fraud
High RiskNepal's online classified platforms — particularly Hamrobazar, Facebook Marketplace, and OLX Nepal — have become fertile ground for advance payment fraud. Scammers post attractive listings for high-demand items (smartphones, laptops, motorcycles, land) at prices 20–40% below market value, collect a deposit or full payment via eSewa or Khalti, and then disappear. The item never arrives and the seller is never contactable again.
๐ How This Scam Is Structured
- A convincing listing appears on Hamrobazar or Facebook — often an iPhone, gaming laptop, or imported electronic item at an irresistible price. The photos are real but stolen from legitimate listings or international e-commerce sites.
- When you contact the seller, they respond promptly and professionally, answering your questions about the item with apparent knowledge.
- They explain they are "going abroad soon," "shifting from Kathmandu," or "selling on behalf of a friend" — creating urgency and explaining why the price is low.
- They ask for an advance payment via eSewa or Khalti ("just to confirm your booking and hold the item") before you can see or collect it.
- Once the payment is made, responses slow down, then stop entirely. The listing is deleted. The number is switched off or blocked.
- A more sophisticated version involves scammers posing as army or police personnel being "posted abroad" who need to sell items quickly — exploiting the trust these roles carry in Nepali society.
๐ฉ Red Flags to Spot
- Price is significantly below market value — if it seems too good to be true in Nepal's market, it almost certainly is
- Seller is unwilling to meet in person or insists on delivery only — always insist on meeting for any transaction above Rs 5,000
- Seller's profile was recently created or has minimal activity history
- They request advance payment before you have seen, tested, or handled the item
- Seller claims to be military, police, doctor, or foreign-based — professions used to manufacture credibility
- They pressure you to decide quickly ("Another buyer is coming tomorrow — you need to send the booking amount today")
๐ก️ How to Protect Yourself
- Never send advance payment to someone you have not met in person for physical goods — this rule eliminates virtually all online seller fraud
- Always meet in a public place — a bank branch, police station premises, or a busy market — for any cash or digital transaction involving a stranger
- Use Hamrobazar's or Facebook's reported seller review features and check the seller's profile creation date and activity
- Reverse-image-search product photos to check if they are stolen from another source
- For high-value items (motorcycles, electronics), insist on seeing the original purchase documents and verifying ownership before any payment
Scam #5 — SIM Swap and Account Takeover Fraud
SIM Swap / Account Takeover
⚠ Critical RiskSIM swap fraud is technically complex but devastatingly effective. The scammer convinces your mobile operator (NTC or Ncell) to transfer your mobile number to a new SIM card in their possession — effectively stealing your phone number. Since your number is the primary authentication factor for eSewa, Khalti, and mobile banking, controlling your number gives the scammer full access to your financial accounts.
๐ How SIM Swap Is Executed
- The scammer researches your personal details through social media, data breaches, or by calling you pretending to be from NTC/Ncell and asking "verification questions."
- Armed with your full name, citizenship number, and approximate address (often publicly available or easily obtained), they visit an NTC or Ncell franchise or use a corrupt employee to request a SIM replacement, claiming the original SIM was lost or damaged.
- Your SIM card is deactivated. Your phone shows "No Service" or "SIM not registered." Most victims assume it is a network outage.
- The scammer now receives all calls and SMS messages intended for your number — including OTPs from eSewa, Khalti, your bank, and email recovery codes.
- They initiate password resets on all your financial accounts, receive the OTPs, and change your credentials before transferring your entire balance.
- The whole process from SIM swap to fund transfer takes as little as 20–30 minutes — long before you realize what is happening.
๐ฉ Red Flags to Spot — Act Immediately if You Notice These
- Your phone suddenly shows "No Service," "SIM Not Registered," or "Emergency Calls Only" with no obvious network reason
- You stop receiving calls and SMS messages unexpectedly — especially if others report calling you but you do not receive the call
- You receive an SMS from NTC/Ncell confirming a SIM replacement you did not request
- Password reset emails arrive for accounts you did not initiate
- You are logged out of eSewa or banking apps on your device unexpectedly
๐ก️ How to Protect Yourself
- Set a SIM lock / PUK PIN with NTC or Ncell — this requires additional authentication before any SIM replacement can be processed
- Use an authenticator app (Google Authenticator, Authy) rather than SMS-based OTP for critical accounts where the option is available
- If your phone loses signal unexpectedly, immediately call your operator from another phone to check if a SIM swap was requested
- Minimize personal information on public social media profiles — date of birth, citizenship numbers, and home address are all data points used to impersonate you to operators
- Contact NTC (1498) or Ncell (9801) immediately if you suspect SIM swap — they can freeze the ported number within minutes
Scam #6 — Lottery, Lucky Draw, and "You've Won!" Scams
Lottery / "You've Won!" Scams via Viber, Facebook & WhatsApp
Medium–High RiskDespite being one of the oldest scam formats in the world, lottery and lucky draw fraud continues to claim thousands of Nepali victims every year. The appeal of winning a significant cash prize or mobile phone proves consistently effective, particularly when the scam is dressed in the visual branding of legitimate Nepali companies — telecom operators, banks, or popular brands whose names are used without permission to add false credibility.
๐ How This Scam Operates
- You receive a message on Facebook, Viber, or WhatsApp — often appearing to come from a contact whose account was hacked — announcing you have won a prize: "Congratulations! You have been selected as the winner of NTC's 25th Anniversary Lucky Draw. Prize: Rs 5,00,000 or iPhone 15 Pro."
- You are directed to a fake website or asked to contact a "claim agent" via WhatsApp.
- The "agent" confirms your win enthusiastically and explains that you must pay a small "tax," "processing fee," or "customs duty" — typically Rs 2,000–25,000 — via eSewa or Khalti before the prize can be released.
- Once you pay the initial fee, they request another fee for "documentation," then another for "insurance," in a series of escalating demands.
- No prize ever materializes. When you stop paying or start asking questions, the scammer disappears.
๐ฉ Red Flags to Spot
- You cannot win a competition you never entered — any unsolicited "win" notification is fraudulent by definition
- Any prize that requires upfront payment before collection is a guaranteed scam — legitimate lotteries deduct taxes from winnings, never ask for payment first
- Official company communications never arrive via personal WhatsApp or Viber numbers
- The prize notification uses a fake or misspelled domain (e.g., ntc-award.com, ncell-prize.net)
- Pressure to keep your win confidential ("Do not tell family — this is a private selection")
๐ก️ How to Protect Yourself
- Apply a universal rule: any prize that requires you to pay money first is not a prize — it is a scam
- Verify any supposed company promotion directly on the company's official verified social media page or website before engaging
- Block and report the number or account immediately — this protects others in your contact list
- Educate elderly relatives and first-time smartphone users about this scam specifically — they are disproportionately targeted
Scam #7 — Fake Job Offers and Advance Fee Fraud
Fake Job Offer / Advance Fee Fraud (Especially Foreign Employment)
High RiskNepal's significant foreign employment sector has been systematically exploited by job scammers who understand the intense desire of young Nepalis to secure work in Malaysia, Qatar, UAE, South Korea, or Europe. These fraudsters pose as licensed recruitment agencies and collect advance fees — sometimes lakhs of rupees — via eSewa and Khalti before vanishing, leaving victims without money or jobs. This scam destroys livelihoods and in extreme cases has led to human trafficking situations.
๐ How This Scam Is Set Up
- An attractive job offer is posted on Facebook, TikTok, or received via WhatsApp — specific salary figures in USD or AED, real company name references, professional-looking flyers.
- When you apply, you receive a professional-looking "appointment letter" via email — easily fabricated with free tools.
- You are asked to pay "visa processing fees," "document attestation fees," "PDOS (Pre-Departure Orientation Seminar) fees," or "insurance premiums" via eSewa, Khalti, or bank transfer.
- After initial payment, more fees are invented — medical exam fees, embassy fees, ticket booking deposits — until you have exhausted your budget or borrowed money.
- The promised departure date passes. Communication stops. The number goes dead.
๐ฉ Red Flags to Spot
- The recruitment agency is not licensed with the Department of Foreign Employment (DoFE) Nepal — always verify at dofe.gov.np before paying anything
- Any agency asking for advance fees beyond the legally permitted amount (DoFE has set maximum permissible service charges by country)
- Job offer salary is unrealistically high for the stated role and destination country
- Pressure to pay quickly with threats that "the position will be filled by someone else if you delay"
- Communication only via WhatsApp or Facebook — no office address, no verifiable phone number, no registration certificate shown
๐ก️ How to Protect Yourself
- Always verify the recruitment agency's DoFE license number at dofe.gov.np before paying any fee — this is the single most important step
- Never pay more than the legally permitted service fee for your destination country — the DoFE website lists the current maximum fee for each country
- Insist on a physical office visit and see the agency's original DoFE license certificate before signing anything
- Report suspicious agencies to the DoFE complaint hotline at 1142 or file a complaint online at dofe.gov.np
Scam #8 — The "Wrong Transfer" Refund Manipulation Scam
"Wrong Transfer" / Refund Manipulation
Medium Risk — Growing FastThis increasingly common scam exploits people's basic honesty. A scammer sends you a small amount of money via eSewa or Khalti — Rs 500 to Rs 2,000 — then contacts you apologetically claiming it was a "wrong transfer" and asks you to return it. The trap: they use a stolen payment method to send you the money, so when you send it back from your own wallet, the original transfer gets reversed and you lose both amounts. You end up losing money for being helpful.
๐ How the Manipulation Works
- You receive an eSewa or Khalti notification: "Rs 1,500 received from Sita Sharma."
- Shortly after, you get a call or message from someone claiming to be Sita Sharma: "I'm so sorry, I transferred money to the wrong number. Can you please send it back? I'm in urgent need."
- Being honest, you send Rs 1,500 back to the number they provide (which is different from the original sender — a detail easy to miss).
- The original Rs 1,500 you received was sent from a stolen or compromised account. The real account owner reverses the transaction or the payment platform refunds it.
- You have now sent Rs 1,500 of your own money to the scammer and the original received amount has been reversed — net loss of Rs 1,500 to Rs 3,000.
๐ฉ Red Flags to Spot
- You receive money from an unknown number without any prior arrangement
- The person asking for a refund wants you to send to a different number than the one that originally transferred to you
- The caller is extremely urgent and emotionally pressuring — "My sick mother needs this money," "This is my last Rs 1,500"
- They discourage you from using the platform's official "refund" or "dispute" mechanism
๐ก️ How to Protect Yourself
- Never return money to a different account than the one it came from — always use the payment platform's official refund/dispute channel
- If you receive an unexpected transfer, contact eSewa or Khalti's customer service directly to handle any legitimate refund request through official channels
- Do not be pressured by urgency or emotional appeals — a legitimate wrong transfer can be processed calmly through official customer service
Master Protection Checklist — Secure Your Digital Payments in Nepal
Print this out. Share it with your family. These are the foundational rules that protect you against every single scam described in this guide — and most others you will ever encounter.
๐ก️ Your Complete Digital Payment Safety Checklist
Account Security
- Set a strong, unique PIN for eSewa and Khalti — never reuse your phone unlock PIN
- Enable fingerprint / face lock on all payment apps
- Set a daily transaction limit on your wallets (Rs 5,000–10,000 for most users)
- Enable login notifications so you know immediately if someone accesses your account
- Never save your payment app password in your phone's browser or notes app
- Regularly review your transaction history for unauthorized entries
- Log out of payment apps on shared or borrowed devices immediately after use
Transaction Habits
- Always verify merchant name on QR payment screen before confirming
- Never share your OTP with any caller, regardless of who they claim to be
- Double-check recipient mobile number before sending any amount
- Meet in person before paying for physical goods from unknown sellers
- Use only official apps — no APK files, no third-party app stores
- Never send money to "return a wrong transfer" — use official channels only
- Type official URLs directly — never follow links from SMS or social media
If You Suspect Fraud
- Do not hang up first — note the number and report it immediately
- Call eSewa (9801-888-8-11) or Khalti immediately to freeze your account
- Contact Nepal Police Cyber Bureau at 1-44-23-10-00 within 24 hours
- Document everything — screenshots, call logs, transaction IDs
- Call your bank immediately if bank account is involved — request a freeze
- File an online complaint at cybercrime.police.gov.np
- Warn your contacts if your account or number has been compromised
Where to Report Digital Payment Fraud in Nepal
Speed is critical when reporting digital fraud. Most digital wallet transactions cannot be reversed after 24 hours. The faster you report, the higher the chance of any recovery. Here are all the official channels:
๐ Nepal Police Cyber Bureau
The primary authority for all cybercrime including digital payment fraud. File online complaint at their portal or visit in person.
๐ 1-44-23-10-00 ๐ cybercrime.police.gov.np ✉ cybercrime@nepalpolice.gov.np๐ฑ eSewa Customer Support
Report unauthorized transactions, account compromise, or phishing immediately. They can temporarily freeze your account.
๐ 9801-888-8-11 ๐ esewa.com.np/support ๐ง info@esewa.com.np๐ Khalti Help Center
Contact immediately for suspicious transactions, unauthorized access, or QR fraud involving Khalti payments.
๐ 9801-878-787 ๐ khalti.com/support ๐ง support@khalti.com๐ฆ Nepal Rastra Bank (NRB)
Regulator for all payment service providers. For systemic fraud or unresolved complaints with a payment company, escalate to NRB.
๐ 01-4410158 ๐ nrb.org.np ๐ง bfrd@nrb.org.np๐ก NTC / Ncell (SIM Swap)
If your SIM was swapped fraudulently, call immediately to deactivate the ported SIM and restore your number to your control.
๐ NTC: 1498 ๐ Ncell: 9801 (toll-free)๐ก️ Your Bank
For fraud involving mobile banking, internet banking, or cards — call your bank's 24-hour hotline to freeze accounts immediately.
NMB: 01-4782900 Nabil: 01-4444466 (Check your bank's card for hotline)⏱️ Critical Time Windows — Act Fast After Fraud
- Within 30 minutes: Call your payment provider (eSewa/Khalti) and bank to freeze accounts — this is the only window where a transaction may be halted before settlement
- Within 24 hours: File formal complaint with Nepal Police Cyber Bureau — the earlier the complaint, the higher the priority assigned to the case
- Within 72 hours: File complaint with NRB if the payment provider is unresponsive or unhelpful
- Within 7 days: File a police case at your nearest district police office with all documentation — required for any potential legal recovery process
- Important reality check: Recovery of funds from digital wallet fraud is unfortunately rare in Nepal — prevention is overwhelmingly more effective than post-incident action
Frequently Asked Questions
Can I get my money back after being scammed on eSewa or Khalti in Nepal?
Recovery of scammed funds from digital wallets in Nepal is unfortunately very difficult. Once a transaction is completed and the receiving account is emptied (which scammers typically do within minutes), the money is effectively gone. eSewa and Khalti's terms of service generally disclaim liability for user-authorized transactions — including those made under manipulation. Your best chance is to report within 30 minutes before the funds clear to a bank withdrawal. Nepal Police Cyber Bureau has successfully recovered funds in some organized fraud cases, but individual recovery rates remain below 10%. This is why prevention is overwhelmingly more important than remediation.
How do I know if a QR code at a shop is genuine or fake?
The definitive check happens on your payment app's confirmation screen before you press "Pay." Your app will display the merchant name registered with eSewa or Khalti. If that name matches the shop you are standing in, the QR is genuine. If the name is an individual's name, a different business name, or anything that doesn't match — do not pay and alert the merchant. Physically, look for signs of a sticker placed over another sticker — peeling edges, slight misalignment, or a sticker that looks newer than the surrounding material are all warning signs.
Is it safe to use eSewa and Khalti in Nepal in 2026?
Yes — eSewa and Khalti are fundamentally secure platforms with strong encryption and fraud detection systems. The overwhelming majority of fraud involving these platforms results from user-side vulnerabilities — sharing OTPs, clicking phishing links, or installing fake apps — rather than any breach of the platforms themselves. Used correctly — with strong PINs, transaction limits, no OTP sharing, and official apps from legitimate stores only — they are safe and convenient. The security responsibility is shared between the platform and the user, and user education is the critical missing piece for most fraud victims.
What should I do if I accidentally shared my OTP with a scammer?
Act immediately without waiting to see if anything happens. Call eSewa's support line (9801-888-8-11) or Khalti's support (9801-878-787) right away and tell them you may have shared your OTP with an unauthorized party — request a temporary freeze of your account. Then change your wallet PIN and password from a trusted device. Check your transaction history for any unauthorized transfers. File a complaint with Nepal Police Cyber Bureau at 1-44-23-10-00. Even if no transaction has occurred yet at the moment you call, freezing the account buys time and may prevent any loss from occurring.
How do scammers know my name and phone number when they call?
This is a question many fraud victims ask — and the answer is unsettling but important to understand. Your personal information including name, phone number, and sometimes partial account details can be obtained by scammers through several channels: data breaches from other platforms (many Nepali e-commerce and food delivery platforms have experienced data leaks), purchased data from informal markets, information scraped from social media profiles, or details obtained through previous social engineering of other victims whose contact lists include you. The scammer's knowledge of your name does not mean your payment account is compromised — it is simply information gathered to build credibility during the call.
Are there any digital payment safety apps or features I should enable in Nepal?
Several practical measures are available and underused by most Nepali users. Within eSewa and Khalti, enable transaction notifications via SMS so you see every debit and credit instantly. Set a daily transaction limit appropriate to your typical usage — this caps any potential damage. Enable biometric lock on the app so a stolen phone cannot be immediately accessed. At the device level, ensure your phone screen lock is active with a PIN that is different from your wallet PIN. For SIM security, visit your NTC or Ncell service center and request a SIM lock / port protection — this adds an additional verification requirement before any SIM swap can be processed.
Conclusion — Stay Informed, Stay Protected
Digital payment fraud in Nepal is not a minor inconvenience — it is a well-organized, sophisticated criminal enterprise that destroys savings, disrupts lives, and in some cases finances more serious crimes. But it is also almost entirely preventable. Every single scam described in this guide shares a common thread: the scammer needs your active participation — your OTP, your click on a fake link, your advance payment to a stranger, your trust in an unsolicited caller.
Withhold that participation and you are invulnerable to all of them. The rules are few and they are simple:
- Your OTP belongs to you alone — it never goes to another person's ears, ever
- Read the merchant name before every QR payment — two seconds that could save thousands
- Official URLs only — type esewa.com.np and khalti.com yourself, every time
- No advance payment to strangers — meet in person or do not transact
- Too good to be true = scam — apply this rule universally and without exception
- When in doubt, hang up and call the official number — every legitimate institution will support this approach
- Share this knowledge — the most vulnerable members of your community (parents, grandparents, rural relatives using wallets for the first time) need this information most urgently
BandhuFintech will continue publishing updated guides as new scam variants emerge in Nepal's rapidly evolving digital payments landscape. Bookmark this page and share it freely — protecting Nepal's digital economy is a community responsibility.
If you have personally encountered a scam variant not covered in this guide, share it in the comments below. Your experience could help protect other readers. For the most current fraud alerts, follow Nepal Police Cyber Bureau's official Facebook page and NRB's consumer awareness announcements.
The contact numbers, regulatory information, and fraud statistics in this article are accurate as of July 2026. Digital scam tactics evolve continuously — always verify the latest alerts through official channels.
Discussion