- [AhlaCode](https://ahlacode.com/en/)
- [Guides](https://ahlacode.com/en/guides/)
- Fake promo codes and voucher scams: how to spot them first

Guide
# Fake promo codes and voucher scams: how to spot them first

Written by [Mariam Alhammadi](https://ahlacode.com/en/editors/mariam/) · updated 17 Oct 2026

A real code is one you type yourself into the store's official app or site, its effect shows in the order summary before you pay, and it never asks for extra details. Treat any message that asks you to tap a link to "activate a voucher", asks for your OTP or card details, or promises an unrealistic discount as a scam until proven otherwise. Gulf authorities warn about exactly this pattern and run channels for reporting it.

## Useless code or scam code? An important difference

Not every code that fails is a scam. There are two different kinds:

- Useless codes: real codes that save you nothing. They may be expired, first-order only, for another country's site, or worth less than advertised because of a cap. Some are posted more to promote or to track where a visit came from than to give you a discount. [SHEIN's coupon policy](https://m.shein.com/ar-en/Coupon-Policy-a-1302.html) notes that influencer coupons aren't linked to your account or shown in My Coupons, and that a coupon only works on the country site that issued it. You lose only time.

- Scam codes or vouchers: bait for your data or money: a link to "claim a voucher", a look-alike store page asking for card details, or a message asking for your OTP. You can lose your account or your bank balance.

The dividing line: a real code only needs typing into the coupon field. [noon](https://help.noon.com/portal/en/kb/articles/stay-safe-online-protect-yourself-from-internet-fraud-and-scams) says it never asks for your personal information or one-time passwords, and never asks you to do "tasks" over unofficial channels such as WhatsApp or Telegram.

## 90% off everything? Signs of a fake offer

Huge discounts on everything, with a countdown and pressure to buy now, come up again and again in official warnings:

- The [UAE Cyber Security Council](https://csc.gov.ae/en/faq) advises checking any shopping site through reviews and HTTPS, and being wary of deals that seem too good to be true.

- An official in Kuwait's Interior Ministry cybercrime department told [KUNA](https://www.kuna.net.kw/ArticleDetails.aspx?id=3238876&language=en) (July 2025) that online shops selling at ridiculously low prices lured victims, and that fake payment links posing as government bodies or official companies were used to steal data and money.

- In Bahrain, the [Ministry of Industry and Commerce](https://www.moic.gov.bh/en/faq/30) lists offering sales that aren't real or aren't licensed among prohibited practices.

- In Saudi Arabia, the [Ministry of Commerce](https://mc.gov.sa/ar/mediacenter/News/Pages/28-02-24-01.aspx) requires stores, online ones included, to get a discount licence before advertising a sale and to display it so shoppers can verify it by scanning its barcode. The discount range (from-to) and the before-and-after prices must be stated clearly.

Not every big discount is fake. But a big discount that reaches you through a link in a message deserves a second check.

## "Free voucher" and "update your details" messages: how the scam works

The usual pattern is an SMS, WhatsApp message or email in the name of a store, bank or government body, with a link and an urgent ask: claim your voucher, activate your card, update your details. Official warnings agree on the same points:

- The [Saudi Central Bank](https://www.sama.gov.sa/ar-sa/News/pages/news-622.aspx) warned about messages and calls using its name and asking people to update details through links that don't belong to it.

- The [Saudi banks' media and awareness committee](https://www.spa.gov.sa/N2171777) warned that fraudsters exploit National Day with fake offers and sites imitating well-known companies, and advised never sharing a verification code.

- Bahrain's [General Directorate of Anti-Corruption and Economic and Electronic Security](https://www.bna.bh/en/HMKingissuesdecree46/Policewarnsofscammessages.aspx?cms=q8FmFJgiscL2fwIzON1%2BDnUV84dVDBU35Y4ikVDJLRE%3D) said banks don't ask for passwords by text message.

- The [UAE Cyber Security Council](https://csc.gov.ae/en/w/phishing-awareness) advises against clicking links in unexpected messages and says to check the sender's address and the official domain.

- Qatar's [Stay Aware campaign](https://www.qcb.gov.qa/en/pages/the-national-awareness-campaign-for-information-security.aspx) tells people to watch for fake addresses, be wary of messages demanding urgent action, and contact the organisation through official channels when in doubt.

In October 2025 the [Central Bank of Kuwait](https://www.cbk.gov.kw/en/cbk-news/announcements-and-press-releases/press-releases/2025/10/202510020700-cbk-participates-in-the-joint-campaign-among-gcc-central-banks-to-combat-financial) announced it was joining a joint GCC central banks campaign against financial fraud. The campaign covers phishing, fake accounts and websites, and the use of AI in phishing.

## Where to report in each country

If you receive a scam message or get defrauded, these are the channels named in official sources. Everywhere, call your bank first if your card details may have been exposed.

| Country | Body | Officially stated reporting channel |
| --- | --- | --- |

| Saudi Arabia | Communications, Space and Technology Commission | Forward the scam SMS to 330330 ([SPA](https://www.spa.gov.sa/1849116)) |

| UAE | Cyber Security Council | Staysafe.csc.gov.ae or your service provider ([Council FAQ](https://csc.gov.ae/en/faq)) |

| Kuwait | Interior Ministry cybercrime department | WhatsApp 97283939 or @ECCCD ([KUNA, Aug 2024](https://www.kuna.net.kw/ArticleDetails.aspx?id=3176453&Language=en)) |

| Qatar | Ministry of Interior and Qatar Central Bank | Hotline 66815757, the Metrash2 app, or cccc@moi.gov.qa ([QCB](https://www.qcb.gov.qa/en/pages/the-national-awareness-campaign-for-information-security.aspx)) |

| Bahrain | General Directorate of Anti-Corruption and Economic and Electronic Security | Hotline 992 ([BNA, 2020](https://www.bna.bh/en/HMKingissuesdecree46/Policewarnsofscammessages.aspx?cms=q8FmFJgiscL2fwIzON1%2BDnUV84dVDBU35Y4ikVDJLRE%3D)) |

| Oman | Royal Oman Police | We couldn't confirm a dedicated channel for reporting fake stores or vouchers. The police advise dealing only with official websites ([ROP](https://www.rop.gov.om/media/arabic/articledetails.aspx?articleid=49)). |

Some of these channels were published years ago, so confirm them on the body's official website before relying on them.

## How to try a code safely: practical steps

- Don't tap the link. Open the store's official app or type its address yourself, then enter the code in the coupon field.

- A real code asks for nothing. You test a code in the cart, before payment. If you're asked for an OTP or card details to "activate" a voucher, stop.

- Check the effect before paying. [Amazon.sa](https://www.amazon.sa/-/en/gp/help/customer/display.html?nodeId=GPAU9BCECRXQBFQR) says to verify the discount on the final checkout page before placing the order. On [noon](https://help.noon.com/portal/en/kb/articles/all-you-need-to-know-about-discounts), a valid code updates the order summary straight away.

- Read the terms at the source. Official help centres publish terms for bank offers and major coupons, as [Namshi](https://help.namshi.com/portal/en/kb/articles/alinma-bank-offer-terms-conditions-feb-2026) does. If an offer has no official trace anywhere, treat it as unconfirmed.

- Check the address. [noon](https://help.noon.com/portal/en/kb/articles/stay-safe-online-protect-yourself-from-internet-fraud-and-scams) advises making sure the site uses https and watching for misspellings and odd domains. [Kuwait's Interior Ministry](https://www.kuna.net.kw/ArticleDetails.aspx?id=3176453&Language=en) warned about sites built with the free Wix builder.

- In Saudi Arabia, scan the discount licence barcode. The [Ministry of Commerce](https://mc.gov.sa/ar/mediacenter/News/Pages/09-02-26-01.aspx) says scanning it with your phone camera shows the discount type, rate, duration and the business's details.

- Pay with something you can trace. [Qatar Central Bank](https://www.qcb.gov.qa/en/pages/the-national-awareness-campaign-for-information-security.aspx) advises not saving card details on websites and contacting your bank at once about any suspicious transaction.

## Fake apps and sites that imitate stores

A scam voucher can arrive inside a fake app or a cloned site. According to [WAM](https://www.wam.ae/en/article/bz77cjv-cyber-security-council-warns-against-downloading), the UAE Cyber Security Council warned against downloading and using fake apps, noting that more than 200 fake apps were found in a single year and were downloaded over 40 million times in total from Google Play before being detected and removed.

In Kuwait, the [Interior Ministry](https://www.kuna.net.kw/ArticleDetails.aspx?id=3176453&Language=en) said in August 2024 it had removed about 392 scam sites and blocked more than 662 fraudulent WhatsApp numbers, and urged people to use trusted sites only.

In practice: install store apps from your device's official app store and check the developer name. Never install an app from a link in a message promising a voucher.

## If you fell for it: what to do right away

- Call your bank immediately on the number on your card or the bank's official site, as [noon](https://help.noon.com/portal/en/kb/articles/stay-safe-online-protect-yourself-from-internet-fraud-and-scams) advises, and ask them to block the card.

- Change your store account password and any account that shares it. noon advises not reusing passwords across accounts.

- Contact the store's customer service from inside the official app if your account or balance shows odd activity.

- Report to your country's authority through the channels in the table above, and keep screenshots, messages and links as evidence.

## Seasons when scams spike

Fraudsters ride the seasons when people expect discounts. The [Saudi banks' committee](https://www.spa.gov.sa/N2171777) tied its warning to National Day. The [same committee](https://www.spa.gov.sa/N2231495) warned in December 2024 about people impersonating charities and asking for fees through links, a pattern that comes back in Ramadan, when donations rise.

Coming up: Black Friday on 27 November 2026. "White Friday" or "Yellow Friday" for 2026 are expected but their dates aren't announced yet. Then Ramadan 1448, expected to start around 8 February 2027. In these periods especially, only use codes and vouchers from inside the official app.

## Questions shoppers ask

**I got a message with a link to "claim a voucher" from a well-known store. Is it real?**

Don't tap the link. Open the official app and look for the offer there. noon says it never asks for OTPs or personal details over unofficial channels such as WhatsApp or Telegram.

**Does any real code need my OTP?**

No. A real code only goes into the coupon field. Your OTP is for you alone, and Saudi banks warn against sharing it with anyone.

**How do I check that a Saudi store's sale is licensed?**

Scan the discount licence barcode with your phone camera. The Ministry of Commerce says it shows the discount type, rate, duration and the business's details.

**Where do I report a scam message in the UAE?**

The Cyber Security Council points to its Staysafe.csc.gov.ae reporting platform or your service provider.

**A code doesn't work. Does that mean it's a scam?**

Not necessarily. Many codes are real but expired, first-order only, or for another country's site. It becomes a scam when you're asked to follow a link, hand over details, or pay outside the official store.

## Sources

- [help.noon.com](https://help.noon.com/portal/en/kb/articles/stay-safe-online-protect-yourself-from-internet-fraud-and-scams)
- [help.noon.com](https://help.noon.com/portal/en/kb/articles/all-you-need-to-know-about-discounts)
- [help.namshi.com](https://help.namshi.com/portal/en/kb/articles/alinma-bank-offer-terms-conditions-feb-2026)
- [m.shein.com](https://m.shein.com/ar-en/Coupon-Policy-a-1302.html)
- [amazon.sa](https://www.amazon.sa/-/en/gp/help/customer/display.html?nodeId=GPAU9BCECRXQBFQR)
- [csc.gov.ae](https://csc.gov.ae/en/faq)
- [csc.gov.ae](https://csc.gov.ae/en/w/phishing-awareness)
- [wam.ae](https://www.wam.ae/en/article/bz77cjv-cyber-security-council-warns-against-downloading)
- [sama.gov.sa](https://www.sama.gov.sa/ar-sa/News/pages/news-622.aspx)
- [spa.gov.sa](https://www.spa.gov.sa/N2171777)
- [spa.gov.sa](https://www.spa.gov.sa/N2231495)
- [spa.gov.sa](https://www.spa.gov.sa/1849116)
- [mc.gov.sa](https://mc.gov.sa/ar/mediacenter/News/Pages/28-02-24-01.aspx)
- [mc.gov.sa](https://mc.gov.sa/ar/mediacenter/News/Pages/09-02-26-01.aspx)
- [kuna.net.kw](https://www.kuna.net.kw/ArticleDetails.aspx?id=3238876&language=en)
- [kuna.net.kw](https://www.kuna.net.kw/ArticleDetails.aspx?id=3176453&Language=en)
- [cbk.gov.kw](https://www.cbk.gov.kw/en/cbk-news/announcements-and-press-releases/press-releases/2025/10/202510020700-cbk-participates-in-the-joint-campaign-among-gcc-central-banks-to-combat-financial)
- [qcb.gov.qa](https://www.qcb.gov.qa/en/pages/the-national-awareness-campaign-for-information-security.aspx)
- [bna.bh](https://www.bna.bh/en/HMKingissuesdecree46/Policewarnsofscammessages.aspx?cms=q8FmFJgiscL2fwIzON1%2BDnUV84dVDBU35Y4ikVDJLRE%3D)
- [moic.gov.bh](https://www.moic.gov.bh/en/faq/30)
- [rop.gov.om](https://www.rop.gov.om/media/arabic/articledetails.aspx?articleid=49)

Mariam Alhammadi
Follows food delivery, grocery and pharmacy apps, and the bank-card offers that come with them. [Profile](https://ahlacode.com/en/editors/mariam/) · [How we confirm codes](https://ahlacode.com/en/method/)

## More guides

- [Why a promo code fails: the real reasons and a checklist](https://ahlacode.com/en/guides/why-codes-fail/)
- [Cashback vs instant discount: when credit lands and expires](https://ahlacode.com/en/guides/cashback-vs-instant/)
- [VAT in the Gulf: rates and what they mean for online prices](https://ahlacode.com/en/guides/vat-gulf/)
- [Customs on online orders from abroad in the Gulf: limits and fees](https://ahlacode.com/en/guides/customs-gulf/)
- [Online return and refund rights in the six Gulf countries](https://ahlacode.com/en/guides/returns-rights-gulf/)
- [Cash on delivery in the Gulf: fees, limits and alternatives](https://ahlacode.com/en/guides/cod-gulf/)
- [Tabby and Tamara in the Gulf: Instalments, Fees, Promo Codes](https://ahlacode.com/en/guides/tabby-tamara-gulf/)
- [Delivery Memberships in the Gulf: noon One, Prime, talabat pro](https://ahlacode.com/en/guides/delivery-memberships-gulf/)
- [Bank Card Offers and Shopping Codes in the Gulf: How They Work](https://ahlacode.com/en/guides/bank-card-offers/)
- [White Friday 2026 in the Gulf: Expected Dates and How to Prepare](https://ahlacode.com/en/guides/white-friday-2026/)
- [Ramadan 2027 shopping: expected dates, sales and Eid cut-offs](https://ahlacode.com/en/guides/ramadan-2027-shopping/)

Source: https://ahlacode.com/en/guides/fake-codes/