Online fraud moves fast. The first few minutes after you notice a suspicious payment, hacked account or impersonation page can make a real difference. The sensible response is not to argue with the scammer. It is to protect your accounts, preserve evidence and report the incident through the right channel.

This guide explains a practical process for people in Bangladesh. It covers financial scams, hacked social accounts, fake shops, phishing, identity misuse and online harassment. If there is an immediate threat to life or physical safety, call Bangladesh’s national emergency service on 999.

First, stop further damage

  1. Call the bank or mobile financial service immediately. Ask them to freeze the affected account or transaction if that is still possible. Use the number in the official app, card or website—not a number supplied by the suspected scammer.
  2. Change the affected password. Start with your email account because password-reset links for other services usually go there. Use a clean device if you suspect malware.
  3. Sign out of other sessions. Facebook, Google, Microsoft and many financial apps let you review logged-in devices and revoke unfamiliar sessions.
  4. Turn on two-factor authentication. Prefer an authenticator app where available, and store recovery codes offline.
  5. Tell trusted contacts. If your account is sending messages, warn friends or customers not to send money or open links.

For more prevention steps, read SiteChai’s guides to avoiding mobile-banking scams in Bangladesh and spotting a fake online shop.

Preserve evidence before anything disappears

Good evidence is clear, chronological and original. Save it before the scammer deletes a profile or message.

  • Take full screenshots that show the account name, date, time and surrounding conversation.
  • Copy profile links, website URLs, phone numbers, email addresses and wallet or bank-account details.
  • Download receipts, transaction IDs and statements.
  • Keep the original email. Its full headers can help investigators trace delivery systems.
  • Write a short timeline: when contact started, what was promised, what you sent and when you discovered the problem.
  • Do not edit screenshots or crop away useful context. Keep a backup of the original files.

Never keep circulating intimate images or sensitive personal data as “proof.” Store them securely and share them only with the authorized officer or platform handling the complaint.

Where to report cybercrime in Bangladesh

Bangladesh Police and Online GD

For fraud, threats, identity misuse or an incident that may require legal action, contact your nearest police station. Bangladesh Police also operates the official Online GD portal. The portal can help you document a complaint, but the appropriate police unit may ask for further information or an in-person visit depending on the incident.

Police Cyber Support for Women

Women experiencing cyber harassment, blackmail, impersonation or related abuse can contact Police Cyber Support for Women. Bangladesh Police says the service provides legal and technical assistance and helps connect victims with the appropriate police unit while keeping victim information confidential.

BGD e-GOV CIRT

Organizations facing a technical security incident—such as malware, a data breach or an attack on a public-facing system—can use the Report Incident option at BGD e-GOV CIRT. CIRT describes a 24/7 incident-response function that detects, analyzes and helps contain cyber incidents. This channel is especially relevant to organizational and infrastructure incidents; it does not replace a police complaint for financial fraud or personal threats.

The affected platform

Report the account, page, advertisement or website directly to the platform as well. Use the platform’s built-in reporting tool and include the case or reference number in your notes. If the incident involves a website hosted by SiteChai, use the official SiteChai contact channel so the support team can route the issue correctly.

What not to do

  • Do not pay a “recovery agent” who promises to hack the scammer or instantly return your money.
  • Do not delete the conversation before saving evidence.
  • Do not publicly post your NID, card number, transaction PIN or full statement.
  • Do not continue clicking links or installing apps sent by the attacker.
  • Do not assume a payment is unrecoverable without first contacting the provider.

A simple incident report template

Keep your report factual. State what happened, the date and time, the accounts involved, the amount lost, the transaction ID, actions already taken and a numbered list of attached evidence. Avoid guessing who is behind the account unless you have verifiable information.

Frequently asked questions

Can I report an online scam after sending money?

Yes. Contact the payment provider first, then preserve the transaction evidence and make the appropriate police complaint. A quick report improves the chance that funds or related accounts can be traced, but recovery is never guaranteed.

Should I block the scammer?

Save the evidence first. Then block the account unless police or the platform gives you a different instruction. Do not keep engaging in an attempt to collect more proof.

What if my website or business email was hacked?

Reset access from a clean device, revoke active sessions, preserve server and email logs, and contact your hosting or email provider. SiteChai customers can reach the support team for account and service assistance.

Last fact-check: 24 August 2026. Official contact details and reporting processes can change, so verify them on the linked government pages before submitting sensitive information.