Nepal Police's Cyber Bureau has been receiving thousands of online fraud complaints every year, and the number keeps climbing sharply — from a little over four thousand complaints a few years ago to close to eight thousand within just the first eleven months of a recent fiscal year. A large share of these scams do not start on some obscure dark corner of the internet; they start with an ordinary Messenger chat that looks completely normal until money changes hands and the other person disappears.
This guide walks through the exact patterns Nepal Police and cybersecurity researchers have identified as the most common Messenger scams targeting Nepali users right now, how to spot a fake buyer or hacked friend before you lose money, and exactly what to do if your own account gets compromised or you need to report a scam.
1. The Fake Buyer and Seller Scam
This is currently one of the most reported scam patterns in Nepal, and it almost always starts the same way: an unbelievably cheap listing for a phone, gadget, or branded item shows up on Facebook or TikTok, and a message arrives through Messenger from someone claiming to be the seller. They create urgency, insist you pay the full amount upfront through a QR code transfer before they will "reserve" or ship the item, and the moment the money lands, they block you entirely, with the product never arriving.
The reverse version of this scam works just as often: a "buyer" contacts a genuine seller, agrees to purchase an item, and sends a fake or doctored payment confirmation screenshot claiming the transfer already went through, pressuring the seller to ship the item immediately before actually verifying the money has landed in their account. Both directions of this scam rely on the same trick — creating enough urgency that you skip the one step that would expose the fraud: verifying the money or the goods before completing your side of the deal.
2. Lottery, Prize, and Parcel Scams
A message arrives out of nowhere announcing that you have won a lottery, a free iPhone, or a parcel from abroad, often dressed up with official-looking logos or claims of being from a well-known company or telecom provider. To "release" this prize or parcel, you are asked to pay a customs fee, a processing charge, or a small delivery cost — and once that payment goes through, the promised prize never materializes and the sender vanishes.
The single most reliable rule for spotting this scam is remembering that legitimate lotteries, giveaways, and parcel deliveries never require the winner to pay money upfront to receive something they supposedly already won. Any message combining an unexpected prize with a request for an upfront fee, regardless of how official the branding looks, should be treated as fraudulent by default.
3. The Hacked Friend Account Scam
This scam is particularly effective because it exploits genuine trust rather than a stranger's promise. A message arrives from someone already in your friends list — a real relative, coworker, or old classmate — explaining an urgent situation and asking you to send money quickly, often through a QR scan or a bank transfer to an account that may not even belong to the actual friend. In reality, that friend's Facebook or Messenger account has been compromised, and the scammer is now messaging everyone on their friend list simultaneously with the same urgent request.
The giveaway is almost always a combination of urgency and a subtle change in how the message is written — different phrasing, unusual word choices, or a request that feels slightly out of character for that person. The single most effective defense is refusing to send money based on a chat message alone: call the person directly, on their known phone number, before transferring anything, even if the request seems to come from someone you trust completely. If you cannot reach them by phone, treat the request as suspicious until proven otherwise.
4. Romance Scams and Fake Investment Pressure
A newer contact on Messenger builds what feels like a genuine friendship or romantic connection over days or weeks, often through a profile with attractive photos and a life story designed to seem relatable. Once trust is established, the conversation shifts toward either a direct request for money to cover an emergency, or a recommendation to invest in a cryptocurrency platform, "watch ads and earn" app, or trading scheme that the new contact claims has been earning them significant returns.
These schemes frequently show a small, real payout early on specifically to build confidence before asking for a larger "recharge" or investment, at which point the app or platform stops paying out and often becomes completely unreachable. Genuine romantic connections and real financial opportunities do not require secrecy, urgency, or upfront payments to strangers you have only spoken with through a chat app, and any relationship that pushes toward either outcome quickly deserves real skepticism.
5. Red Flags That Apply Across Every Scam Type
Nearly every Messenger scam relies on the same handful of psychological pressure points, regardless of which specific story is being used. Urgency is the biggest one — a demand that you act immediately, before you have time to verify anything, is one of the strongest signals something is wrong. A request to pay first, before receiving goods, confirmation, or a service, is another consistent pattern across fake buyers, lottery scams, and investment schemes alike.
Poor grammar, inconsistent phrasing, or a tone that does not quite match how the supposed sender normally writes are subtle but genuinely useful signals, especially for hacked-account scams where the writing style shifts noticeably. Any request for an OTP, PIN, password, or banking login credential should be treated as an automatic red flag, since no legitimate buyer, seller, bank, or wallet provider will ever need that information sent through a chat message.
6. What to Do If Your Own Account Gets Hacked
If you suspect your Facebook or Messenger account has been compromised, the first step is attempting to log in and immediately change your password, since regaining control before the attacker locks you out entirely is far easier than recovering an account you have already lost access to. If you can still access your account, review and remove any unfamiliar logged-in sessions or devices in your security settings, and enable two-factor authentication immediately if it was not already active.
If you have already been locked out, Meta's official account recovery process, accessible through the Facebook or Messenger help center, is the correct path — never trust a third party contacting you claiming they can "recover" your account for a fee, since this is itself a common secondary scam targeting people who have just been hacked. Once you regain access, post a clear warning to your friends list explaining that your account was compromised and that any money requests sent during that period did not come from you, since some contacts may have already received fraudulent messages before you regained control.
7. How to Report a Scam on Messenger
Messenger has a built-in reporting feature specifically for this purpose: opening the suspicious conversation, tapping the contact's name or the information icon at the top, and selecting the option to report the conversation lets you flag the account directly to Meta for review, alongside the option to block the sender from contacting you again. Reporting rather than simply blocking is worth the extra few seconds, since it helps Meta's systems identify and act on accounts running the same scam against other users.
For scams involving actual financial loss, filing a complaint with Nepal Police's Cyber Bureau is the appropriate next step, since they are the designated government authority handling online fraud complaints nationally and have been actively tracking and acting on the organized scam networks operating through social media platforms. Acting quickly matters — the faster a fraudulent transfer is reported, the better the chance of freezing funds before they move further through the financial system.
Final Thoughts
Every scam pattern covered here relies on the same basic trick: making you feel like you have to act immediately, before you have time to verify what is actually happening. The single habit that defeats nearly all of them is simple to state and genuinely effective in practice — pause before sending money or personal information to anyone through Messenger, verify the person or the claim through a separate channel like a phone call, and remember that legitimate buyers, sellers, prizes, and friends will always still be legitimate a few minutes later, after you have taken the time to check.
Discussion