Fraudsters took money from my card: what to do and how to get it back
Step by step: blocking the card, reporting to the bank and police, NBU rules and the Supreme Court position on when a bank must return the money.
To pay you for an item, a buyer only needs your card number or IBAN. Any link «to receive payment» or any request for your CVV, card expiry date or an SMS code is fraud, even if the page looks like OLX or a delivery service. The safest way to buy is OLX Delivery with payment on the platform: the money is only taken once you have inspected and collected the item. About 1,500 phishing sites imitating OLX are blocked every month, so this is mass, industrial-scale fraud.
Fraud on OLX, Ukraine's largest classifieds site, and similar platforms has long been an assembly line. The EMA association, which brings together Ukraine's payment market players, describes it like this: fraudsters buy ready-made phishing pages and services from Telegram bots, scripts scan new listings around the clock, and the operatives only find a victim and send a generated link. The money then goes to money mules' cards and is split across other accounts to make it harder to trace.
So a fraudster messages you not because you are careless, but because your listing ended up in an automated mailing. What protects you is not general caution but a few simple rules that break the scheme itself.
A seller feels there is no risk: the money is supposed to come to them. That is exactly what fraudsters play on.
| What you are told | What is really happening |
|---|---|
| «I have already paid through OLX Delivery, follow the link to receive the money» | The link leads to a phishing copy of OLX. A real payment shows in your account on olx.ua, not through a link from a messenger |
| «Enter your card details so the money can be credited» | Receiving a transfer does not require a CVV, expiry date or SMS codes. If they are requested, money will not arrive but be taken |
| «The payment failed because of a technical error, here is a new link» | A second charge. Fraudsters call it a refund, but they are taking money a second time |
| «OLX support» writes to you on Viber or Telegram | OLX does not message users in messengers. «OLX support» or «Trust&Safety OLX» on Viber or Telegram are fraudsters |
| «Your card must hold an amount equal to the item price» | An invented rule to get you to top up the card the fraudsters will then drain |
| «Let's continue on Telegram, it's easier» | Outside OLX chat the platform's filters do not work. OLX itself calls such a request a red flag |
A phishing page can look exactly like OLX or a delivery service. Only the address gives it away. Read the domain from right to left: what matters is the part right before .ua or .com. Official OLX operations happen on olx.ua; signing in may redirect to ua.login.olx.com.
Do not reply to anyone who then offers to «recover the money» for an upfront fee: that is a second round of the same fraud. And never agree to «receive a transfer and send it on» for a reward. That is how money mules are recruited, and in October 2026 the Verkhovna Rada passed criminal liability for handing your card to fraudsters. More in our article on transfer limits and money mules.
Checked against official sources on October 31, 2026. If a figure changes, we update the article and the «Updated» date changes automatically.
This article is for information only. Platform and delivery service rules and features may change, so check current terms on their official websites.
Spotted a mistake or an outdated figure? Let us know and we will check it against the primary source and fix it.
Write to redaktsiia@wm2.com.ua: what is wrong and, if possible, a source with the correct information. In Gmail or your mail app the page address will already be in the message.