Fake support-payment messages: warning signs for foreign residents

Key facts to check first

Real programs can have fake links: A real government support program can still be copied by a fake text, chat message, sponsored result, or unofficial landing page.
Random links are the danger point: Support-payment checks should be opened through official government, local-government, bank, card, or app channels you find yourself.
OTP and app install requests are high risk: Requests for OTP, certificate password, card details, ID photos, remote-control apps, or urgent transfers should be treated as serious warning signs.
Fast reporting may help, but recovery is not guaranteed: If money or personal information was sent, contact the bank, card company, police, or relevant official channel quickly. This does not guarantee recovery.

Quick context

Fake support-payment messages copy the language of real ones. They're especially hard to read when the Korean is unfamiliar, the deadline feels urgent, the sender sounds official, and the link looks legit. The safe habit: separate the program from the message — look the program up through an official channel yourself, and treat the message as untrusted until it proves otherwise.

Timeline

When you receive the message

Do not click first. Screenshot it, check the sender, and search for the program through an official channel opened independently.
If you clicked or entered information

Stop entering data, disconnect from the page or app, save evidence, and contact the relevant bank, card company, or official help channel.
If you transferred money or shared ID details

Treat it as urgent. Contact your bank or card company, police help where relevant, and cyber/spam/smishing consultation channels as soon as possible.

Why it matters

Real support programs may exist, which makes fake messages more believable.
Scam messages often ask for information that official pages should not request through random texts.
A link can lead to fake login pages, app installation, remote-control access, or money transfer pressure.
Foreign residents may not immediately recognize whether a Korean sender name, short link, or public-institution phrase is normal.
A stolen ID photo, phone verification, or account access can create banking, immigration, housing, and employment problems later.

What foreign residents should check

Whether the message asks for OTP, certificate password, card details, ID photo, app installation, or remote control.
Whether the link is shortened, unfamiliar, or different from an official domain you found independently.
Whether the sender pressures secrecy, urgent action, or immediate transfer.
Whether the same program exists on an official site you accessed independently.
Whether the message asks you to move to a private messenger, send screenshots of banking apps, or prove identity through a non-official channel.
Whether the message promises guaranteed payment, faster approval, or special foreigner-only processing through a link.
Whether bank account, card, ARC, passport, phone, or certificate information may already have been exposed.

Suggested check order

1 First, stop clicking and save the message, sender, URL, phone number, and screenshots.
2 Second, search for the support program through an official government, local-government, card-company, bank, or app channel opened independently.
3 Third, if account or card details were exposed, contact the bank or card company through a number or app you already trust.
4 Fourth, if money was sent or identity documents were shared, ask the relevant official channel what emergency reporting and account-protection steps apply.
5 Fifth, use the Suspicious Message Checklist before replying to any follow-up message or call.

FAQ for foreign residents

Can a real support program send a message?

Some real programs may send notices, but you should not treat a random link as safe just because the program exists. Open the official site, app, bank, card-company, or local-government channel yourself.

What if the message uses my name or visa information?

Personal details can be leaked or guessed. Do not rely on personalization as proof. Verify through an independently opened official channel before entering more information.

What should I save as evidence?

Save screenshots, sender number or ID, the full URL, time received, transfer receipt if any, bank or card alerts, app names, and the sequence of what happened.

Will reporting guarantee that I get my money back?

No. Quick reporting may help reduce further damage, but recovery is not guaranteed. This page is a safety checklist, not an official investigation or recovery promise.

Official-source checks

Use official websites, apps, branches, or phone numbers you find independently.
If bank or card information may be exposed, contact the relevant bank or card company directly.
For cyber, spam, or smishing help in Korea, official contact points may include 118; for urgent police help, 112 may be relevant.
Do not install a remote-control app or share OTP, password, certificate, ID, passport, card, or account screenshots because a caller or message asks for it.

Sources checked

KISA: 118 consultation service
Official Korea Internet & Security Agency page for 118 cyber, spam, and smishing-related consultation channels.
KISA Spam Response Center: user spam-prevention guidance
Official spam-prevention guidance mentioning reporting through 118 and the spam response center.

What this update does not mean

This update cannot confirm whether a specific message is a scam.
This update does not provide emergency response or official investigation.
This update does not replace bank, police, provider, or official support guidance.