The scams that target Ukrainians abroad

Being a Ukrainian abroad puts you in a category fraudsters actively look for. You need documents from an overloaded consulate, you are dealing with two bureaucracies in a language that may not be your first, you often need housing quickly, and you are used to sending money home. Every one of those is a lever.

None of this is about being gullible. The schemes below work on careful people, because they imitate the exact things you are legitimately trying to do.

The one pattern underneath most of them

Before the individual schemes, the shape they share. Nearly every one combines:

1. Urgency — the slot expires today, the price is only valid now, the queue closes tonight.
2. Prepayment — money first, by transfer to a personal card, crypto, or an “advance.”
3. A private channel — the conversation moves to Telegram, WhatsApp, or Viber, away from any platform with a dispute process.
4. Documents and card details — photos of your passport, ID, tax number, or bank card, asked for as “verification.”

Ukraine’s Cyberpolice describes exactly this combination in its warnings, right down to victims sending passport photos, tax numbers, and card data. If a request has three of those four features, stop. You do not need to identify which specific scam it is.

Three stories that actually happened

Not composites and not “a friend of a friend” — documented cases, each with the investigation linked, retold here because a pattern with a face is easier to recognise than a rule.

«Помічники» з рахунками, Іспанія. A network of Ukrainian nationals recruited vulnerable young women from war-affected regions — the offer sounded like help: a trip to Spain, assistance getting refugee status and opening a bank account, some money for the trouble. The women were then returned to Ukraine; their accounts, and even their Spanish refugee subsidies, went on to launder profits through betting platforms — EUR 4.75 million of them. Fifty-five victims; twelve arrests in Alicante and Valencia. The Europol press release classifies it as trafficking in human beings, not just fraud — because the women were the instrument, and the criminal exposure was theirs. The rule it teaches: an account in your name is your criminal liability. Nobody legitimate will ever pay you for opening one.

The $800 “approval letter”, USA. People searching Facebook groups for a Uniting for Ukraine sponsor met “immigration organisations” that produced an official-looking sponsorship approval letter — payable, around $800, before anything moved. One man told Newsweek he spent five months looking for a sponsor and found only scammers. USCIS itself is blunt: filing the sponsorship declaration is free, and nobody legitimate charges the beneficiary. The rule: in real programs, money flows from the sponsor’s goodwill — never from you to a “facilitator”. A fee for a humanitarian program is the scam’s own signature.

€1,000 and free housing, the EU. A cross-border investigation by VSquare documented agencies meeting refugees at the border with job offers — around €1,000 a month plus free accommodation. The reality on arrival: pay far below the promise, inflated “utility” deductions, overcrowded housing with bedbugs — while some agencies also collected host-country subsidies for housing the same people. Labour inspectorates recorded the classics: unpaid wages, missing time records, 60–72-hour weeks. The rule: a job offered at the border or the station, without a contract you can read before travelling, is not a job. And an employer who “keeps” your passport is not an employer.

Fake consular “agents” and paid appointment slots

This is the one most specific to our situation. Consular appointments are booked through the official electronic queue, and they are not sold. Ukraine’s foreign ministry is explicit that consulates do not work through intermediaries — anyone presenting themselves as a partner of an embassy or consulate for appointments or document preparation is not one.

The schemes take a few forms: reselling free slots, taking payment for a booking that never appears, or sending a forged confirmation, which you only discover on the day you turn up.

What to do: book only through your consulate’s own site. If someone offers to “arrange” a slot for a fee, that is the tell, not the service.

Document services that cannot deliver

A large category, and Cyberpolice has published warnings on it: sites and Telegram bots offering to produce documents — permits, certificates, replacements — for an advance payment. Some impersonate government bodies directly, copying logos and photographs from official pages to look affiliated.

There is a second, sharper edge here. Where the “service” claims it will produce a genuine document through unofficial means, you are being invited into a crime as well as a fraud — and you are the one handing over your identity documents to strangers while doing it.

What to do: treat any document process as beginning at the official site of the issuing body. If a service claims a shortcut around the official channel, it either does not have one or is selling you a forgery.

Housing and rental deposits

Common everywhere, and it hits hardest when someone needs a place quickly in an unfamiliar city: an attractive listing, a landlord who cannot show it in person, and a deposit requested to “hold” it. After the transfer, the account goes quiet.

What to do: view the property, in person or by live video where you control what is shown, and do not pay a deposit to a private card before you have. Prices well below the local market are the signal, not the bargain.

“Sponsorship” and paid help with immigration programs

Wherever a humanitarian program exists — U4U in the US, sponsorship schemes elsewhere — a market of fake “facilitators” grows beside it: fees for finding a sponsor, for an “approval letter”, for “speeding up review”. The tell is always the same and always sufficient: legitimate humanitarian programs do not charge the beneficiary. A lawyer bills for advice; nobody legitimate sells sponsors, approvals or queue positions.

What to do: take program rules only from the immigration authority’s own site, and treat any fee request as the answer to your question. Details for the US, UK and Canada are in the protection-status guide.

“Open an account, earn a little”: money-mule recruitment

The offer arrives as easy help: open a bank account “for a company”, lend your card “to receive a payment”, register a SIM — small money for nothing. What is actually being bought is your name on a laundering chain, and when it surfaces, the account holder is the first person the case file names. The Spanish case above shows the industrial version, down to the victims’ own refugee subsidies being taken.

What to do: your accounts, cards and SIMs are never for rent — at any price, to anyone, including acquaintances. If money you cannot explain has already passed through your account, go to your bank and the police yourself, first: in these cases the difference between witness and suspect is often who reported it.

Aid, charity, and fundraising appeals

Fake appeals have followed this war since 2022, including schemes impersonating international organisations — the UN has issued its own fraud alert about its name being used. Impersonating a real, respected organisation is the point: the credibility is borrowed.

What to do: give through organisations you sought out yourself, reaching them by typing their address rather than following a link from a message. A genuine organisation is unbothered by you donating tomorrow through its own website instead of tonight through a link.

Emotional and romance approaches

Some approaches build a relationship first — often with someone presenting as a Ukrainian in difficulty, or as a supporter of Ukrainians — and only later introduce a crisis that needs money. These take weeks and are far harder to spot, because the request arrives inside something that feels real.

What to do: the durable rule is about money, not sincerity. Money to someone you have never met in person, sent urgently, in a form you cannot reverse, is the pattern regardless of how genuine the person seems.

Habits that beat scams — because vigilance does not

Nobody stays alert every day. Habits work while you are tired, which is when schemes are designed to land:

1. The second-channel rule. Any request involving money or documents — even from a “known” contact — gets verified through a channel you find yourself: the official site’s number, not the one in the message. Accounts get hijacked precisely to borrow trust.
2. The payment method IS the safety level. A card payment to a business can be disputed; a bank transfer to a private card, crypto, gift cards or a courier picking up cash cannot. The moment a “service” steers you toward the irreversible end of that list, it has told you its plan.
3. Documents never go into chats. A photo of your passport in Telegram is a copy you no longer control, forever. Send documents only through official portals of institutions you contacted first.
4. Reverse-search the pictures. Rental listings, “landlords”, romantic strangers — a photo search (Google Lens and similar) takes a minute and regularly ends the conversation.
5. The 24-hour rule. Anything real — a flat, a slot, a job — survives one night of thinking. «Тільки сьогодні» is not a deadline, it is a diagnosis.
6. Say it out loud to one person before paying. Scams are engineered for a victim alone with their urgency; retelling the offer to anyone breaks the spell with remarkable reliability.

If it has already happened

Report it. In Ukraine, the Cyberpolice takes reports online. Where you live, report to the local police and, if a card or transfer was involved, to your bank immediately — speed matters most in the first hours. If documents or card details were shared, treat them as compromised: replace the card, and watch for accounts being opened in your name.

And tell people. Shame is what keeps these schemes working; the person you mention it to is probably being targeted by the same thing this week.

Where to check

Ukraine’s Cyberpolice publishes current schemes as they appear, and your consulate publishes what it does and does not do. Those are the authorities here — the sources below are the right starting points, and if one of them contradicts this page, follow it and tell us.