Scammers impersonate buyers in online ads and use fake payment links IRIS, banks and Revolut to steal personal information and money. How the fraud works and what citizens should be aware of.
30 October 2026 | greek News & Radio FL – Citizen Information and Protection
An ordinary for sale ad can turn into a financial trap in a matter of minutes.
You have decided to sell a mobile phone, a piece of furniture, an electrical appliance or even your car. You publish your ad on Facebook Marketplace, Car.gr, Bazaraki or another buying and selling platform.
An interested buyer soon appears.
He does not negotiate the price, does not ask for specific information about the product, and seems determined to complete the deal immediately.
"I'm buying it. Send me your mobile phone and I'll transfer the money to you now via IRIS or Revolut."
The proposal sounds completely normal.
A few minutes later, however, you receive an SMS, a message on Viber or Messenger with a link.
The message informs you that the money has been sent and that you must click the link to approve its collection.
This is exactly where fraud may be hidden.
The trap behind the message
The link the prospective seller receives may lead to a fake website, designed to look like the official page of a bank or payment service.
A notification appears there asking the user to enter their online banking account login details.
A one-time verification code (OTP) may then be requested, which is sent to the mobile phone.
The unsuspecting citizen believes that he is completing the process of collecting the money.
In reality, however, it may give fraudsters the information they need to gain access to their account or make unauthorized transactions.
The Greek Police have repeatedly warned about electronic fraud in purchases and sales, about fake payment receipts and about the theft of bank details through misleading links.
What's really going on with payments? IRIS
The IRIS service allows direct money transfers between registered users, without the need to disclose the IBAN.
For a normal transfer between individuals, the mobile phone number connected to the service is sufficient.
Payments to professionals can also be made by VAT number or by scanning the corresponding QR code.
To receive a regular payment IRIS you don't need to reveal your buyer's codes e banking nor approve any outgoing transfer.
If you are already registered, you can check the collection directly through your bank's application.
Revolut also has legitimate payment links, but that doesn't mean every link a stranger sends you is safe. Verification should be done through the official app, without entering bank codes on unknown websites.
The warning signs you shouldn't ignore
Fraudsters often follow similar methods to gain the trust of their potential victims.
- Excessive haste: The buyer insists that you complete the transaction immediately.
- Suspicious link: It asks you to visit an unknown website to collect the money.
- Request for codes: It asks you for e-banking details, PIN, card details or OTP code.
- Pressure and threats: It claims that the payment will be canceled if you do not act immediately.
- Fake confirmation: It sends you a photo or transfer receipt, without the credit having appeared in your actual bank account.
None of the above elements should be taken lightly.
How to protect your money
The most basic advice is simple:
Never enter bank codes in a link sent to you by an unknown buyer.
Always check the payment through your bank's official application, which you open.
Do not ship the product if you have not confirmed that the money has actually been credited to your account.
Do not rely solely on photos of payment receipts, as they can be forged.
If someone insists on following an unusual payment process, stop the transaction and report the suspicious profile to the platform.
What to do if you have already given your codes
If you have clicked on a suspicious link and entered personal or banking information, you need to act immediately.
Contact your bank via the official phone number and inform them that your information may have been compromised.
Request that the necessary measures be taken to protect your accounts and cards.
Change your passwords from a secure device, according to your bank's instructions.
Check recent transactions and immediately report any movement you don't recognize.
Keep copies of messages, phone numbers, links, and conversations with the alleged buyer. They may prove useful in the authorities' investigation.
Where can you report fraud?
In GREECE
Hellenic Police Cybercrime Prosecution Directorate.
Telephone: 11188
Email: ccu@cybercrimeunit.gov.gr
Electronic complaints can also be submitted through the government platform gov.gr.
In Cyprus
Cyber Crime Sub-Directorate of the Cyprus Police.
Telephone: +357 22 808200
Citizens' hotline: 1460
Email: Cybercrime@police.gov.cy
It is important to report even attempted fraud so that the competent authorities can identify and investigate such activities.
Information is the best defense
Technology has made our daily lives much easier. Electronic transactions allow us to buy and sell products quickly, without having to travel.
At the same time, however, opportunities are created for those who attempt to exploit the trust and lack of familiarity of some citizens with new technologies.
Particular attention is needed by the elderly and people who do not frequently use banking applications.
Remember: When it comes to withdrawing money, you should not reveal your personal bank codes.
A simple update can prevent a serious financial loss.
The greek News & Radio FL invites its readers in Greece, Cyprus and the Greek Diaspora to share this information with their families and friends.
We protect our money. We protect our people. Prevention starts with proper information.
Information – Prevention – Citizen Protection
Greek Police: Instructions to citizens on online fraud
National Bank: Official information about IRIS payments
Revolut: Instructions for protection against electronic fraud
Cyprus Police: Official cybercrime reporting service
