Staying Safe Online: Avoiding Scams and Phishing

The digital age has brought countless conveniences, but it has also opened the door to various online threats.

For expatriates and locals in China, staying safe online is essential to protect personal information, financial assets, and digital privacy.

This guide provides practical tips to avoid scams and phishing attempts, with a focus on the unique challenges of navigating the digital landscape in China.

For more general safety tips, check out our guide on Safety & Security in China.

Understanding Scams and Phishing

Scams and phishing are deceitful attempts to obtain sensitive information such as usernames, passwords, and credit card details by disguising as trustworthy entities.

These attacks are increasingly sophisticated and can occur via email, social media, messaging apps, or fraudulent websites.

Common Types of Scams and Phishing Attacks in China

Phishing Emails
Fraudulent emails that appear to be from reputable sources, such as banks or government agencies, asking you to click on links or provide personal information.
(Example: An email pretending to be from a Chinese bank asking you to verify your account details.)
Spear Phishing
Targeted phishing attacks aimed at specific individuals or organizations, often using personal information to appear legitimate.
(Example: A scammer impersonating your employer or a colleague.)
Smishing (SMS Phishing)
Phishing via SMS or messaging apps like WeChat, urging recipients to click on malicious links.
(Example: A fake delivery notification asking you to pay additional fees.)
Vishing (Voice Phishing)
Scammers call pretending to be from legitimate organizations, such as immigration offices or banks, to extract sensitive information.
(Example: A call claiming your visa is expiring and asking for payment to “resolve” the issue.)
Fake Websites
Websites that mimic legitimate sites to trick users into entering sensitive information.
(Example: A fake Taobao login page designed to steal your credentials.)

General Tips for Staying Safe Online

Be Skeptical of Unsolicited Messages
Treat any unsolicited email, message, or call with caution. If something seems suspicious, it probably is.
Verify the Source
Always verify the legitimacy of the source before clicking on links or providing information. Check the email address, website URL, and contact details.
Google Safe Browsing
Look for Red Flags
Poor grammar, spelling mistakes, and urgent requests for personal information are common indicators of scams.
Enable Two-Factor Authentication (2FA)
Use 2FA for your online accounts to add an extra layer of security. For example, enable 2FA on WeChat and Alipay to protect your financial transactions.
How to Enable 2FA on WeChat
Keep Software Updated
Ensure that your operating system, antivirus software, and apps are up to date to protect against the latest threats.
(Recommended Antivirus: Kaspersky, Bitdefender)

Recognizing Phishing Emails and Messages

Check the Sender’s Email Address
Scammers often use email addresses that look similar to legitimate ones. Look for subtle differences, such as additional characters or misspellings.
Hover Over Links
Before clicking on a link, hover over it to see the actual URL. If it looks suspicious or doesn’t match the supposed sender, don’t click on it.
Avoid Downloading Attachments
Be cautious with attachments from unknown senders. They may contain malware or viruses.
Verify Requests for Personal Information
Legitimate organizations will never ask for sensitive information via email or message. If in doubt, contact the organization directly using official contact details.
Contact Alipay Support

Using Social Media Safely in China

Adjust Privacy Settings
Review and adjust your social media privacy settings to control who can see your information and posts. On WeChat, limit who can view your Moments and personal details.
WeChat Privacy Settings
Be Cautious with Friend Requests
Only accept friend requests from people you know. Scammers often create fake profiles to gain access to your information.
Avoid Sharing Personal Information
Limit the amount of personal information you share on social media. Avoid posting your full name, address, phone number, or financial details.
Report Suspicious Activity
If you encounter suspicious profiles or receive scam messages, report them to the platform administrators.
How to Report on WeChat

Protecting Yourself from Fake Websites

Check the URL
Make sure the website URL starts with “https://” which indicates a secure connection. Look for a padlock icon in the address bar.
Verify Website Authenticity
Use tools like Google Safe Browsing or search for reviews and complaints about the website.
Avoid Clicking on Pop-Up Ads
Pop-up ads can redirect you to malicious websites. Use a pop-up blocker and avoid clicking on them.
Use Secure Payment Methods
When making online purchases, use secure payment methods such as Alipay, WeChat Pay, or credit cards. Avoid direct bank transfers to unknown sellers.
How to Use Alipay Safely

Staying Safe on Messaging Apps

Be Cautious with Links
Avoid clicking on links received via messaging apps unless you trust the sender and are sure of the link’s destination.
Verify Contacts
If you receive a suspicious message from a known contact, verify with them directly through another communication channel.
Enable Security Features
Use end-to-end encrypted messaging apps and enable security features like disappearing messages for sensitive conversations.
WeChat Security Features
Block and Report Scammers
If you receive messages from unknown or suspicious contacts, block and report them to the app administrators.