How to Identify a Scam in Cambodia: How to Protect Yourself and Report It to the Authorities
Scams in Cambodia aren’t slowing down. They come through Facebook, Telegram, phone calls, SMS, email, fake websites, ads, job offers that sound too good, investment “opportunities,” even accounts posing as government officials or well-known businesses. Here’s the thing people get wrong: the scary part isn’t the technology. Most scammers aren’t hackers. They’re just good at reading people such as trust, urgency, fear, greed, the pressure of a friend or a stranger pushing you to decide right now.
1. What Is an Online Scam?
Someone uses digital communication or technology to trick you, usually to get your money, your personal information, access to your accounts, or some other benefit at your expense. In Cambodia that shows up as:
- Facebook and Facebook Messenger
- Telegram
- TikTok
- Phone calls
- SMS
- Fake websites
- Online advertisements
- Fake investment platforms
- Fake job advertisements
- Fake shopping pages
- Fake government or company accounts
- Cryptocurrency and investment schemes
- Fake account-recovery or account-protection services
The Telecommunication Regulator of Cambodia (TRC) has flagged fraudulent Telegram messages specifically and other warning for fake investment pitches, fake prizes, people impersonating officials and business leaders, and messages pretending to be from Telegram itself. The announcement https://www.trc.gov.kh/en/media/news-releases/23-news-release
2. The Most Common Warning Signs
A. Someone promises easy money
You already know this one when you hear it, even if you don’t always act on that instinct.
- “Invest $100 and receive $500.”
- “Guaranteed profit.”
- “You won a prize.”
- “You can earn $100 a day from your phone.”
- “Send money now to unlock your investment.”
If the return is guaranteed and it’s high, that’s not an opportunity. That’s the scam.
B. Someone creates urgency
The goal is to stop you from thinking. So you get lines like:
- “You must pay within 10 minutes.”
- “Your account will be deleted today.”
- “Your package will be cancelled if you don’t pay.”
- “Your bank account has a security problem.”
C. They ask for your OTP or password
Never give your password, Telegram code, Facebook code, banking OTP, PIN, or any login credential to another person. Not to your bank. Not to “Telegram support.” Not to anyone. TRC says exactly this to Cambodian users by avoiding giving hand out passwords or OTP codes. Somebody telling you:
- “I am from Telegram.”
- “I am from Facebook.”
- “I am from your bank.”
- “I can protect your account.”
without proving anything just by saying it as the above. Go and verify through the company’s actual website or its actual support line instead of following their word for it.
D. Suspicious links
A scam link can look nearly identical to the real thing while quietly routing you to a fake login page built to steal your credentials.
Before you click, please check:
- The domain name
- Spelling
- Whether it’s actually HTTPS
- The full website address
- Whether you were expecting this message at all
- Whether the sender really is who they say
The Ministry of Interior’s advice is straightforward: don’t click links or open files from sources you can’t verify, keep your devices updated, and turn on Telegram’s Two-Step Verification.
3. Be Careful with Fake “Account Protection” Services
This one’s worth its own section because it’s specific to Cambodia right now. In August 2026, TRC warned about people selling “account protection” or “page protection” services on social media, claiming they can guarantee your Facebook page won’t get suspended, deleted, or taken.
It’s a scam built on a real fear of losing an account you’ve spent years building, therefore by cutting this fear, please
- Don’t give out passwords or OTP codes.
- Don’t pay anyone who “guarantees” account recovery or protection.
- Don’t give strangers Admin or Editor rights on your page.
- Don’t click suspicious links.
- Don’t install apps from unknown sources.
- Turn on Two-Factor Authentication.
4. How to Protect Yourself
- Use Two-Factor Authentication: turn it on everywhere such as Facebook, Telegram, Google, Microsoft, email, banking apps, business accounts. It’s a small hassle now that makes your password nearly useless to a thief later. TRC’s Telegram-specific advice: enable Two-Step Verification, check your active sessions, use Passcode Lock.
- Use different passwords: One password everywhere means one leak everywhere. If a scammer pulls your password off some website, the first thing they’ll do is try it on Facebook, Gmail, Telegram, Microsoft, and your bank. Give each one its own long, unique password, or just let a password manager handle it.
- Keep your phone and computer updated Android, iPhone, Windows, macOS, your browser, Telegram, Facebook, banking apps UpToDate exist mostly to patch the holes scammers already know about. Skipping them leaves the door open.
- Think before transferring money: before you send money to anyone you met online, slow down and actually check: their identity, their phone number, their account name, the business, independently, and don’t let anyone’s pressure make the decision for you.
5. What If You Already Lost Money?
First, don’t panic, and don’t be embarrassed. What actually matters now is speed to work on this by the following step
Step 1: Stop communicating with the scammer
- Send nothing else. If they say: “Pay another fee to recover your money.”
Step 2: Contact your bank immediately
If money went out through a bank or payment service, call their official customer-service line right away. Tell them when it happened, how much, who it went to, the transaction or reference number, and what happened. Ask if there’s anything they can still do.
Step 3: Secure your accounts
If a password got out, please change it immediately, and turn on 2FA, check what devices are logged in, and end any session you don’t recognize. On Telegram, you go to Settings → Devices → Terminate All Other Sessions the moment you suspect someone else got in.
Step 4: Preserve evidence
Resist the urge to delete everything and move on. Hold onto screenshots, usernames, profile links, phone numbers, bank account details, transaction receipts, QR codes, website addresses, emails, messages, voice notes, photos, videos, timestamps, whatever names the scammer used. All of it helps whoever ends up investigating.
6. How to Report a Scam in Cambodia
Cambodia has a Hotline Scam Reporting service running 24/7 through the National Police. You can file online with the details of your case and whatever evidence you’ve got, and authorities may follow up with you directly.
Official scam-reporting website:Cambodia National Police — Hotline Scam Reporting 24/7
The National Police has publicly asked victims of tech-based scams to get their information to the Hotline Scam team quickly.
Emergency phone numbers
- 1245 / 1247 — Ad-Hoc Committee for Combating Tech Scams
- 6789 — Telecommunication Regulator of Cambodia (TRC)
- 1245 — General Commissariat of National Police
For anything Telegram- or telecom-related, TRC can also be reached at 6789 during business hours, by email, or through its official Facebook page. Telecommunication Regulator of Cambodia (TRC)
7. What Information Should You Include in Your Report?
Give them a clear timeline. Something like:
- Date: September 9, 2026
- Platform: Telegram
- Scammer username: @example123
- Phone number: +855 XX XXX XXX
- Amount: $500
- Payment method: Bank transfer
- Recipient account: [account information]
- What happened: The person promised an investment return and asked for an upfront payment.
- Evidence: Screenshots, messages, transaction receipt, profile information.
The National Police’s online system has spots for the facts of the case and for uploading documents or images as evidence.
8. Don’t Become a Second Victim
Be aware of getting your stolen money back requires paying another fee first, you’re probably talking to scammer, not a rescuer. The same goes for a random “cybersecurity expert” who wants into your Facebook, Telegram, email, or computer. Go through official channels and real financial institutions instead.
9. A Simple Rule: STOP – CHECK – VERIFY – REPORT
- STOP. Don’t click, pay, download, or reply on the spot.
- CHECK. Look hard at the sender, the number, the website, the account, the request.
- VERIFY. Confirm it through a channel you know is real, not one they gave you.
- REPORT. If it’s a scam, tell the authorities and the platform.
Cambodia now is being good at new tech savvy, therefor scammers also increased. They’ll pose as officials, companies, banks, friends, Telegram staff, recruiters, investors, but those are fake information. So don’t let urgency rush your decision. Don’t send money chasing a guaranteed return. Don’t hand your password or OTP to anyone, ever. Watch your links. Turn on two-factor authentication. Keep things updated. And if it does happen to you anyway, move fast instead of staying quiet out of shame because scammer is counting on.
Remember: Stop. Check. Verify. Report.