Sri Lanka CERT warns public against fraudulent Poya Day bank offers

Sri Lanka CERT has issued a public warning regarding misleading social media messages circulating ahead of Vap Poya Day, which falls on Sunday, October 25. The fraudulent posts purport to originate from a leading Sri Lankan bank and advertise special gift offers to commemorate the religious observance.

The cybersecurity authority has confirmed that the bank in question has not authorized or issued any such promotional campaign. Citizens are urged to exercise caution when encountering unsolicited reward offers on social media platforms, particularly those claiming to represent financial institutions.

Such schemes typically aim to deceive users into revealing personal information, clicking malicious links, or engaging in fraudulent transactions. CERT recommends verifying any bank communications through official channels, including the institution's verified social media accounts or direct contact with customer service.

The warning underscores growing concerns about social engineering attacks and phishing attempts targeting Sri Lankan citizens during festive periods when engagement on social media platforms typically increases.