This is an official ODERSA website.Here’s how you know

The official domain

The address of this site ends in odersa.org. Every service the association runs sits on a subdomain of odersa.org and nowhere else. If the address in your browser’s address bar does not end in odersa.org, this site is not ours.

Free, and no account

Everything is open straight away. No sign-up, no account, no password, no subscription, no advertising. Nothing is held back for those who pay, because there is nothing to pay for.

No data collected

This site does not follow you: no tracker, no tracking cookie, no measurement tool built into these pages, and nothing measured on your device. Our host counts requests in aggregate, as any server that answers does: a total, never a profile. You do not have to take our word for it: open your browser’s developer tools, go to the Network tab, and reload the page. You will see the full list of what the site asks for. Everything comes from odersa.org, nothing goes anywhere else.

Free to reuse

The content is published under the CC BY 4.0 licence. You may copy it, translate it, print it and pass it on, for your classes as much as for the people around you, on one condition only: credit ODERSA.

The fake adviser

This trap steals nothing: it makes you carry out the transaction yourself. Someone presents themselves as your bank or a public body, invents an immediate danger, and guides you step by step towards a transfer you authorise with your own hand.

The bait

Fear, with one sentence that puts the pressure on: your account is under attack, you have to act now.

The signs

None is proof on its own. One is enough to stop.

The reflex, in this order

  1. Hang up. An institution loses nothing by being called back.
  2. Call back yourself, using the number on your own official document or on the back of your card, never the one you have just been given.
  3. Give out no code received by message: a code authorises an operation, it never cancels one.
  4. Approve no notification you did not trigger yourself.
  5. Write down the time, the number displayed and what was asked: it will be useful if you have to report it.

If it has already happened

Nobody gets caught out of stupidity: these traps are built to work. What matters now is the order of the steps.

  1. Have the payment methods involved blocked, straight away, through your usual channel.
  2. Report it to your bank in writing: the written record is what makes the difference in a dispute.
  3. Report it to the competent authority in your country: the Your country page says where to look.
  4. Change the access codes involved, from a device you know is clean.

Who is targeted

This page describes the trap so that it can be recognised. It deliberately gives no script, no message template and no tool: enough to defend yourself, never enough to run it again.

Sources

See every trap