Protect your data and every payment

• Make sure your computer or mobile device is always up-to-date with the latest "patches" for the operating system and applications you use.
• Install and regularly update an antivirus program.
• Create a strong password for your account.
• Make sure your passwords are complex. Use strong and unique phrases as passwords.
• A strong password must meet at least the following required characteristics:
• to contain at least 8 (eight) characters;
• to contain at least one capital letter, number, special character ($ & # @ !…);
• must not be based on trivial sets of characters (ABCDEF, ...), words related to first and last name, date of birth, children's names ...
• Feel free to use password managers, specialized applications that allow you to securely store all your passwords in encrypted form. Use two-factor authentication wherever possible.
• Never share your credentials (user account and password) via email or phone call.
• Make regular backups of all important data.
• Never leave your laptop or computer with an open session (logged in and unlocked), Whenever you leave your computer you must lock it (Ctrl+Alt+Del or WIN +L).
• Never leave your computer unsecured in unsafe locations - lock it!
• May they always be by your side during the trip.
• Do not insert removable data carriers (media) into your computer if you suspect their origin (USB device found on the floor, advertising, etc.).

Make a regular backup of your device and data from it.

Turn on data encryption and create strong passwords for accessing the phone itself and the apps you use to protect yourself in case your device is lost or stolen.

Turn off bluetooth and wireless connections when not in use.

Download mobile apps only from official app "stores" (like Google Play or the App Store).

If a payment transaction was executed through the Electronic Money Institution PaySpot, you can report fraud or misuse to PaySpot by contacting an agent or branch of the Institution, at the Institution’s address, or by e-mail to prijavaprevara@payspot.co.rs.

The written report must be made on the form “Report of suspected fraud” and delivered to an agent or branch of the Institution, to the Institution’s address or by e-mail to prijavaprevara@payspot.co.rs.

In addition, for further processing of the report, you need to provide PaySpot within 3 days with proof that the fraud has been reported to the Ministry of Internal Affairs. Users can also report fraud to the competent authorities, directly to the competent units of the Ministry of Internal Affairs and the Public Prosecutor’s Office, and through the national platform Sajber straža (Cyber Guard), intended for reporting various forms of high-tech crime and Internet fraud.

As proof that the report was submitted, you can use a photocopy of the report filed with the competent authorities, or the confirmation of a report submitted through the Sajber straža platform, if such a confirmation was issued.

For more information on reporting fraud to PaySpot, call the Call Centre on 021/3103000 or write to prijavaprevara@payspot.co.rs.

How to recognize malicious sites and scams:

• The site redirects you or has a lot of pop-up ads and fake buttons - this is a warning sign.
• Warnings from antivirus software or browsers about dangerous sites should not be ignored.
• If you notice signs of malware, close the site immediately.

Frequent scams:

• Easy earnings: Offers from social networks for investments with unrealistic profits.
• Fake sweepstakes: Ask for card details or SMS codes.

Malicious emails: Notifications of account inflows or inheritance with a request for your information.

Recommendations for safe use of the Internet:

• Use only trusted sites to enter personal and sensitive information.
• Make sure the URL starts with https:// for a secure connection.
• If your social network account is hacked, quickly restore access and change your password.

Be aware of:

• Threats on the Internet and use devices responsibly to reduce them.
• Rights to use the Internet come with responsibility for possible consequences.
• Downloaded content may carry viruses.
• Disclosure of personal data may threaten privacy.
• Think carefully before posting anything on social media!

Important to know:

PaySpot will never ask its customers to provide them with application login credentials, sensitive payment card information, SMS activation codes and transaction verification codes. PaySpot sends all notifications to clients exclusively through official communication channels.

Prerequisites for secure payment on the Internet

• Install and regularly update an antivirus program.

Secure WiFi.

• Do not use shared Wi-Fi networks, or networks that are open, i.e. do not require a password. When shopping online, be on your home Internet or the Internet of your mobile operator.
• Payment by payment card.
• When paying online, always use a payment card that has a security system in the form of sending an SMS code or some other way of additional verification. It is best to use payment cards that you have designated exclusively for online payments. Never send a picture of your card to make a payment.
• Avoid visiting suspicious sites.
• Pay attention to sites that appear to be genuine, but actually differ in a few letters or characters. - Visit google.com/safe-browsing/search and type the address of the site you want to check. If there is an identified threat, the site will warn you.
• Always use the latest version of the Internet browser.

How phishing works:

• The scammer sends an email that looks like it's from a financial institution, asking the victim to update their information.
• The victim clicks on a link in the message that leads to a fake website, very similar to the official website.
• On the fake site, the victim enters a username and password.
• The fraudster collects data and uses it to access the victim's account.
• Funds are transferred to the account of a third party, from where the fraudster withdraws them.

Phishing doesn't just target electronic payment data – fraudsters can ask for information about payment cards, PINs, ID cards, passports and other confidential data, impersonating trusted institutions.

Preventive measures against phishing:

• Do not reveal your password.
• Do not click on unknown links from e-mail messages - be suspicious.
• Compare the address in the e-mail with the real address of the institution.
• Do not open unknown attachments if you suspect the content or the sender.
• Do not leave personal information such as passwords, card numbers or PINs.
• Remember: financial institutions never ask for this data via e-mail!

How fraudsters get data:

• Buying data from hackers.
• Spying – looking over your shoulder while entering your PIN.
• Eavesdropping on telephone conversations.
• Spamming – sending fake offers via e-mail.
• Junk search – finding discarded documents or equipment.
• Phishing – fake messages in the name of trusted institutions.
• Hacking – stealing data from computers or databases.

How to protect yourself:

• Do not share personal information with unknown companies or people.
• Use strong passwords and always log out securely.
• Make sure no one sees your PIN at the ATM.
• Report the loss of the card to the bank and block it immediately.
• Report missing documents to the police.

Abuse of payment card:

Card abuse involves theft or fraud using the physical card or data related to it, such as the card number, CVC/CVV code and expiration date. This data is used for unauthorized transactions, most often on the Internet.

Signs of card misuse:

• The card is stolen or lost.
• You receive an SMS for a transaction you did not complete.
• You notice changes on your account that you didn't make.
• You suspect that someone has found out your PIN or card data.
• Abuses often happen shortly after the loss of the card - notify your bank immediately.

Recommendations:

Card and PIN:

• Do not keep PIN and card together.
• Cover the keyboard while entering the PIN.
• Use biometrics (fingerprint or face scan) for mobile wallet.

Online payment:

• Pay only on sites with https:// or a padlock symbol.
• Use special cards for internet payments and keep only necessary funds in your account.
• Secure sites require double authentication (one-time code via SMS or app).

Reduce risk:

• Connect the card to your phone and pay with your mobile device.
• Use contactless options at ATMs and in stores. The card stays with you at all times.

Advice on scam messages and fake offers

• Information often requested in scams:
• Username, password, phone number, activation code from SMS.
• Card number, validity date, CVV.
• Request to send a photo of the card or personal documents - this is a sure sign of fraud.
• Dangers of suspicious messages:
• Opening attachments or links can infect your device with viruses and enable data theft.
• Fake messages from "financial institutions":
• Real institutions use only their official e-mail domains.

Recommendations for the security of your mobile device

• Make a regular backup of your device and data from it.
• Turn on data encryption and create strong passwords for accessing the phone itself and the applications you use to protect yourself in case of loss or theft of your device.
• Install anti-malware and anti-virus software on your device.
• Turn off bluetooth and wireless connections when not in use.
• When you install new apps on your phone, pay attention to the permissions that allow those apps to access data on your phone. Install only the apps you really need.
• Regularly delete cache memory and web browser history in your mobile phone.
• Download apps only from official app "stores" (like Google Play or App Store).
• Regularly remove any app that you don't use for a long period of time.
• Do not connect to public, open and unsecured Wi-Fi connections unnecessarily.
• Update your device regularly to receive the latest updates from the manufacturer.

PaySpot Warns Users About Unauthorized Online Gambling Platforms Using Digital Assets

IEN PaySpot would like to draw users attention to the presence of foreign online platforms that enable participation in gambling activities using digital assets (virtual currencies), either directly or through third-party conversion services, and that do not hold authorization from the competent authorities to operate gambling services within the Republic of Serbia.

The use of such platforms is not compliant with the regulations governing gambling activities in the Republic of Serbia. For this reason, users are advised to exercise extra caution and verify the regulatory status and licensing of any platform before using its services within Serbia.

Particular concern arises from the fact that some of these platforms actively promote their services through social media, often engaging influencers, YouTubers, and other public figures. Such promotional activities do not constitute proof that a platform is authorized to offer gambling services, nor do they guarantee the safety or security of users.

In addition to regulatory concerns, using unauthorized platforms may expose users to a number of risks, including:

• Loss of deposited funds and limited ability to exercise user rights;
• Inability or difficulty in claiming and withdrawing potential winnings;
• Misuse of personal and financial information;
• Unauthorized transactions and other forms of financial fraud;
• Increased risks associated with purchasing and transferring digital assets.

PaySpot continuously monitors security risks in the digital environment and encourages users to conduct financial transactions responsibly, using only trusted services that comply with applicable laws and regulations.

For more information on the safe use of financial services and protection against online fraud, please read the rest of our Security Recommendations page.

How does it work?

1. After you click an advertisement on social networks, register and leave your contact details, “agents” get in touch and give you notices and instructions for “investing”. Communication takes place only in closed chat groups in various apps (for example Telegram), run by people who present themselves as AI experts.
2. Depending on the amount paid, the “company” assigns levels. The higher the level, the higher the promised daily earnings. To unlock a higher level, an OKE GREEN user must invest more money or bring in new members.
3. When the user tries to withdraw money, the excuses begin, with new demands to pay ever larger amounts and to bring in new members. If the user refuses, they are removed from the group and all contact stops, without any refund of the money invested.

PaySpot warns of the main signs that it is fraud:

• Fast, easy and guaranteed additional earnings are promised, without any explanation of how the profit is made.
• Payments and alleged payouts are made directly with various private individuals.
• There are investment levels that require larger payments and bringing in new users.
• Fake proofs of payout and advertisements about “financial freedom” are used.
• The platform is not registered with any financial regulator in Serbia or the EU.

How to protect yourself:

• Do not pay money on the instructions of strangers, to the accounts of unknown private individuals.
• Be careful with platforms that use terms such as AI, green project or smart investment: this is often just a marketing mask.
• If someone invites you to “build a team” or “invite friends”, it is a pyramid scheme.
• Check whether the company is registered with the National Bank of Serbia or another relevant regulator.
• If you have already paid, report the case to the competent authorities and inform PaySpot on 021/310 3000 or at prijavaprevara@payspot.co.rs.

How does it work?

After seeing an advertisement or receiving a message (Viber, Telegram, WhatsApp) about easy earnings, the user is invited to register and do simple tasks: liking posts, watching videos, creating orders and the like.

When the client has completed a number of tasks, they are told they cannot withdraw their earnings until they “upgrade the account” by paying a certain sum. After the payment the fraudsters disappear or ask for new fees, and the money cannot be recovered.

The main signs that it is fraud

• Fast and easy earnings are promised without a clear explanation of how they are paid.
• The user is asked to pay in order to “activate” or “upgrade” the account.
• Communication takes place through informal channels (chat groups in apps).
• The money earned cannot be withdrawn, and the fraudsters ask for further payments.
• Users are encouraged to keep investing to “avoid losses”.

How to protect yourself

• Do not make payments on instructions received over the Internet or in apps from people you do not know.
• Do not trust offers that promise earnings for simple tasks or an “account upgrade”.
• Do not give your personal data or account numbers to strangers, so that they cannot be misused.
• Do not trust so-called “hackers” who offer to recover lost money: this is often a new fraud.
• If you have already paid, stop all contact and do not send any more money.
• Keep all communication, report the case to the competent authorities and inform PaySpot on 021/310 3000 or at prijavaprevara@payspot.co.rs.