FinCSIRT

FinCSIRT FinCSIRT - Financial Sector Computer Security Incident Response Team : Sri Lanka

🔒 Your PIN is for YOUR eyes only!Not your partner. Not your best friend. Not even your parents or children. Sharing your...
21/08/2026

🔒 Your PIN is for YOUR eyes only!

Not your partner. Not your best friend. Not even your parents or children. Sharing your PIN even with people you trust most puts your money at risk. 🚫

💳 Memorize it, don't share it.
🔐 Never write it down where others can find it.
🙅 Politely decline if anyone asks for it even someone claiming to be from your bank.

Your PIN is the last line of defense between your money and fraud. Keep it that way.

📧 8.3 billion phishing emails in just one quarter. That's not a statistic, that's a war being fought in your inbox every...
14/08/2026

📧 8.3 billion phishing emails in just one quarter. That's not a statistic, that's a war being fought in your inbox every single day.

The numbers mean one thing: the odds of encountering a phishing attempt are no longer a matter of if, but when. Staying vigilant, questioning unexpected emails, and never clicking unverified links isn't paranoia, it's survival. Stay alert, stay secure. 🛡️

14/08/2026
💰 Cybercrime is now the world's third largest economy, bigger than most nations.This isn't a distant threat. Every phish...
31/07/2026

💰 Cybercrime is now the world's third largest economy, bigger than most nations.

This isn't a distant threat. Every phishing email clicked, every weak password, every unverified link is a contribution to an industry that generates trillions annually at the expense of individuals and organizations like yours. Cybersecurity is no longer optional, it's a necessity. Stay alert, stay secure. 🛡️

🚨 Sharing this official advisory from the Sri Lankan Police — please take a moment to read and stay alert.
30/07/2026

🚨 Sharing this official advisory from the Sri Lankan Police — please take a moment to read and stay alert.

රජයේ නිළ GovPay වෙබ් අඩවියට සමාන ලෙස ව්‍යාජ වෙබ් අඩවි නිර්මාණය කර මහජනතාව මුලා කර මුදල් වංචා කිරීම සම්බන්ධව.

ශ්‍රී ලංකාවේ රජයේ සේවාවන් වෙත ඩිජිටල් ගෙවීම් පහසුකම් සැලසීම සඳහා නිර්මාණය කරන ලද ආරක්ෂිත හා ඉතා පහසුවෙන් මාර්ග ගත ක්‍රමවේදය ඔස්සේ ක්‍රියාත්මක කිරීමට GovPay යෙදුම භාවිතා කරනු ලබයි.
රිය පදවන්නන් විසින් රථවාහන වැරදි සිදුකල අවස්ථා වලදී පොලිසියෙන් නිකුත් කරනු ලබන ස්ථානීය දඩ පත්‍රිකා වලට අදාල දඩ මුදලද මෙම ක්‍රමවේදය ඔස්සේ ගෙවීම් කිරීම සඳහා මහජනතාවට අවස්ථාව ලබා දී ඇති අතර මෙම ක්‍රමවේදයට සමාන ලෙස ව්‍යාජ වෙබ් අඩවි නිර්මාණය කර මහජනතාව මුලා කරමින් මුදල් වංචා කල අවස්ථාවන් ගණනාවක් ශ්‍රී ලංකා පොලිසිය විසින් අනාවරණය කරගෙන ඇත.

පසුගිය දින කිහිපයේදී ද මේ අන්දමින් ශ්‍රී ලංකා පොලිසිය නමින්, වේග සීමා උල්ලංඝණය කිරීම් හා එවැනි රථවාහන වැරදි සිදු කල බවට දැනුම් දී, දඩ මුදලක් ගෙවන ලෙස පවසමින් ව්‍යාජ කෙටි පණිවිඩ මහජනතාව වෙත ලැබෙමින් පවතින බවට තොරතුරු ලැබී ඇත.

ශ්‍රී ලංකා පොලිසිය රථවාහන වැරදි සම්බන්ධයෙන් කටයුතු කිරීමේදි අදාල රථවාහන වැරැද්ද සිදු කල පුද්ගලයාට අදාල ස්ථානයේදීම සිදුකල වරද සම්බන්ධයෙන් දැනුම්දීමක් සිදුකර ස්ථානීය දඩ පත්‍රිකාවක් නිකුත් කිරීම හෝ වරදට අදාලව නඩු පැවරීම සිදු කිරීම දැනට සිදුවන ක්‍රියාවලිය වේ.

ආවේක්ෂණ කැමරා උපයෝගී කරගෙන පොලිසිය විසින් යම් අවස්ථාවක රථවාහන වැරදි හඳුනාගැනීමක් සිදු කල අවස්ථාවකදී වුවද ඒ සඳහා ක්‍රියාත්මක වීමේදී කෙටි පණිවිඩ යොමු කර අදාල පුද්ගලයන්ගේ බැංකු ගිණුම් තොරතුරු ලබා ගැනීමක් කිසිසේත් සිදු නොකරන අතර මේ සම්බන්ධයෙන් මහජනතාව දැනුවත් වීම අත්‍යවශ්‍ය වේ.

මේ සම්බන්ධව අවධානය යොමු කරන ලෙසත් කිසි විටක මෙවැනි ව්‍යාජ සබැඳි හරහා සම්බන්ධ වී රැවටීම් වලට ලක්වී මුදල් වංචාවන්ට හසු නොවන ලෙස ශ්‍රී ලංකා පොලිසිය විසින් දැනුම් දෙනු ලබන අතර මෙවැනි වංචනික ක්‍රියාවකට යම් අයෙකු මේ වන විටත් භාජනය වී ඇත්නම් ඒ සම්බන්ධව අදාල පොලිස් ස්ථාන වෙත පැමිණිලි කිරීමට කටයුතු කරන ලෙස වැඩිදුරටත් දන්වා සිටී.

සැ.යු :- GovPay යනු ඔබේ නිල බැංකු යෙදුම් (Banking Apps) හෝ මූල්‍ය තාක්ෂණ යෙදුම් (Fintech Apps) හරහා පමණක් ක්‍රියාත්මක වන ගෙවීම් සේවාවකි.

කෙටි පණිවිඩ (SMS) හෝ වෙනත් කිසිදු නිල නොවන මාර්ග හරහා ලැබෙන ගෙවීම් සබැඳි (payment links) භාවිතා කිරීමෙන් කරුණාකර වළකින්න.
----------------------------------
அரசின் உத்தியோகபூர்வ GovPay இணையதளத்தை ஒத்த போலி இணையதளங்களை உருவாக்கி பொதுமக்களை ஏமாற்றி பண மோசடியில் ஈடுபடுதல் தொடர்பாக.

இலங்கையில் அரச சேவைகளுக்கான டிஜிட்டல் கட்டண வசதிகளை பாதுகாப்பாகவும், மிகவும் எளிதாகவும் இணையவழியில் மேற்கொள்ளும் நோக்கில் GovPay கட்டண முறைமை அறிமுகப்படுத்தப்பட்டுள்ளது.

வாகன சாரதிகள் போக்குவரத்து விதிமீறல்களை மேற்கொள்ளும் சந்தர்ப்பங்களில், பொலிஸாரால் வழங்கப்படும் இடத்திலேயே விதிக்கப்படும் அபராதப் பத்திரங்களுக்கான அபராதத் தொகையையும் இந்த முறைமையின் ஊடாக செலுத்துவதற்கான வசதி பொதுமக்களுக்கு வழங்கப்பட்டுள்ளது. எனினும், இந்த முறைமையை ஒத்த போலி இணையதளங்களை உருவாக்கி பொதுமக்களை ஏமாற்றி பண மோசடி செய்த பல சம்பவங்களை இலங்கைப் பொலிஸ் கண்டறிந்துள்ளது.

கடந்த சில நாட்களாகவும், இலங்கைப் பொலிஸின் பெயரைப் பயன்படுத்தி, வேக வரம்பை மீறியதாகவும் அல்லது பிற போக்குவரத்து விதிமீறல்களைச் செய்ததாகவும் தெரிவித்து, அபராதத் தொகையைச் செலுத்துமாறு கோரும் போலி குறுந்தகவல்கள் (SMS) பொதுமக்களுக்கு அனுப்பப்பட்டு வருவதாக தகவல்கள் கிடைத்துள்ளன.

போக்குவரத்து விதிமீறல்கள் தொடர்பாக இலங்கைப் பொலிஸ் நடவடிக்கை எடுக்கும் போது, குறித்த விதிமீறலைச் செய்த நபருக்கு சம்பவ இடத்திலேயே அதுகுறித்து அறிவித்து, இடத்திலேயே அபராதப் பத்திரம் வழங்குவது அல்லது தேவையெனில் நீதிமன்றத்தில் வழக்குத் தாக்கல் செய்வதே தற்போது நடைமுறையில் உள்ள செயற்பாடாகும்.

அதேபோல், கண்காணிப்பு கமெராக்கள் (Surveillance Cameras) மூலம் போக்குவரத்து விதிமீறல்கள் கண்டறியப்பட்டாலும், அதற்காக குறுந்தகவல் அனுப்பி சம்பந்தப்பட்ட நபர்களின் வங்கி கணக்கு விவரங்களை எந்தவிதத்திலும் கோருவதில்லை என்பதை பொதுமக்கள் கட்டாயம் அறிந்திருக்க வேண்டும்.
எனவே, இவ்விடயம் குறித்து பொதுமக்கள் மிகுந்த அவதானத்துடன் இருக்குமாறும், எந்தவொரு சந்தர்ப்பத்திலும் இத்தகைய போலி இணைப்புகள் (Fake Links) மூலம் அணுகி ஏமாறி பண மோசடிக்கு ஆளாக வேண்டாமெனவும் இலங்கைப் பொலிஸ் அறிவுறுத்துகிறது.

இவ்வாறான மோசடிக்கு ஏற்கனவே யாரேனும் உள்ளாகியிருந்தால், அது தொடர்பாக உடனடியாக அருகிலுள்ள பொலிஸ் நிலையத்தில் முறைப்பாடு செய்யுமாறும் மேலும் அறிவிக்கப்படுகிறது.
குறிப்பு :-

GovPay என்பது உங்கள் உத்தியோகபூர்வ வங்கி செயலிகள் (Banking Apps) அல்லது நிதி தொழில்நுட்ப செயலிகள் (Fintech Apps) மூலமாக மட்டுமே இயங்கும் கட்டணச் சேவையாகும்.

குறுந்தகவல்கள் (SMS) அல்லது வேறு எந்த அதிகாரப்பூர்வமற்ற வழிகளிலும் கிடைக்கும் கட்டண இணைப்புகளை (Payment Links) பயன்படுத்துவதை தயவுசெய்து தவிர்க்கவும்.

----------------------------------
Public Advisory on Fraudulent Websites Impersonating the Official GovPay Platform

The GovPay platform has been introduced as a secure and user-friendly digital payment solution to facilitate online payments for government services in Sri Lanka.

Among its services, members of the public are able to settle on-the-spot traffic fines issued by the Sri Lanka Police through the official GovPay payment system. However, the Sri Lanka Police have recently uncovered several incidents in which fraudsters have created counterfeit websites closely resembling the official GovPay platform to deceive the public and unlawfully obtain mone
Over the past few days, reports have also been received indicating that members of the public have been sent fraudulent SMS messages falsely claiming to be from the Sri Lanka Police. These messages allege that recipients have committed speeding or other traffic offences and instruct them to pay a fine through fake payment links.

The Sri Lanka Police wishes to emphasise that, when dealing with traffic offences, officers either issue an on-the-spot traffic ticket to the offender or initiate legal proceedings in accordance with the relevant law. Even in instances where traffic offences are detected through surveillance cameras, the Police do not send SMS messages requesting bank account details or directing individuals to make payments through links sent via text messages.

The public is therefore strongly advised to remain vigilant, avoid accessing suspicious links, and never disclose personal or banking information through unofficial websites or messages. Anyone who has fallen victim to such fraudulent activities is urged to lodge a complaint at the nearest police station without delay.

Important Notice

GovPay is an official payment service that operates only through authorised banking applications (Banking Apps) and approved financial technology applications (Fintech Apps). Members of the public are strongly advised not to make payments using links received via SMS messages or through any other unofficial channels.

#මේ_ඔබේ_පොලිසියයි

26/07/2026

📵 Got a call asking for your PIN? That's a scam — full stop.

Legitimate banks and institutions will NEVER ask for your PIN, OTP, or password over the phone. No exceptions.

hashtag hashtag hashtag hashtag hashtag hashtag

26/07/2026

🚨 Scam Alert: Scammers are impersonating GovPay to steal your money.

Fraudsters are sending fake traffic violation notices via SMS and WhatsApp, posing as Sri Lanka Police. These messages pressure recipients into clicking malicious links that redirect to fake GovPay payment platforms designed to steal your personal and banking information.

🔒 Always access GovPay only through the official website: https://govpay.lk
🔒 Never click on links received via SMS or WhatsApp claiming to be from the Police or government agencies.
🔒 Treat any unsolicited payment notices with urgency tactics and threats of arrest with suspicion.

26/07/2026

Address

Level 18, Bank Of Ceylon Head Office, BOC Square, No. 01, Bank Of Ceylon Mw
Colombo
00100

Opening Hours

Monday 08:30 - 17:00
Tuesday 08:30 - 17:00
Wednesday 08:30 - 17:00
Thursday 08:30 - 17:00
Friday 08:30 - 17:00

Telephone

+94112039777

Alerts

Be the first to know and let us send you an email when FinCSIRT posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to FinCSIRT:

Shortcuts

Share