The scams that target Ukrainians abroad

Being a Ukrainian abroad puts you in a category fraudsters actively look for. You need documents from an overloaded consulate, you are dealing with two bureaucracies in a language that may not be your first, you often need housing quickly, and you are used to sending money home. Every one of those is a lever.

None of this is about being gullible. The schemes below work on careful people, because they imitate the exact things you are legitimately trying to do.

The one pattern underneath most of them

Before the individual schemes, the shape they share. Nearly every one combines:

1. Urgency — the slot expires today, the price is only valid now, the queue closes tonight.
2. Prepayment — money first, by transfer to a personal card, crypto, or an “advance.”
3. A private channel — the conversation moves to Telegram, WhatsApp, or Viber, away from any platform with a dispute process.
4. Documents and card details — photos of your passport, ID, tax number, or bank card, asked for as “verification.”

Ukraine’s Cyberpolice describes exactly this combination in its warnings, right down to victims sending passport photos, tax numbers, and card data. If a request has three of those four features, stop. You do not need to identify which specific scam it is.

Fake consular “agents” and paid appointment slots

This is the one most specific to our situation. Consular appointments are booked through the official electronic queue, and they are not sold. Ukraine’s foreign ministry is explicit that consulates do not work through intermediaries — anyone presenting themselves as a partner of an embassy or consulate for appointments or document preparation is not one.

The schemes take a few forms: reselling free slots, taking payment for a booking that never appears, or sending a forged confirmation, which you only discover on the day you turn up.

What to do: book only through your consulate’s own site. If someone offers to “arrange” a slot for a fee, that is the tell, not the service.

Document services that cannot deliver

A large category, and Cyberpolice has published warnings on it: sites and Telegram bots offering to produce documents — permits, certificates, replacements — for an advance payment. Some impersonate government bodies directly, copying logos and photographs from official pages to look affiliated.

There is a second, sharper edge here. Where the “service” claims it will produce a genuine document through unofficial means, you are being invited into a crime as well as a fraud — and you are the one handing over your identity documents to strangers while doing it.

What to do: treat any document process as beginning at the official site of the issuing body. If a service claims a shortcut around the official channel, it either does not have one or is selling you a forgery.

Housing and rental deposits

Common everywhere, and it hits hardest when someone needs a place quickly in an unfamiliar city: an attractive listing, a landlord who cannot show it in person, and a deposit requested to “hold” it. After the transfer, the account goes quiet.

What to do: view the property, in person or by live video where you control what is shown, and do not pay a deposit to a private card before you have. Prices well below the local market are the signal, not the bargain.

Aid, charity, and fundraising appeals

Fake appeals have followed this war since 2022, including schemes impersonating international organisations — the UN has issued its own fraud alert about its name being used. Impersonating a real, respected organisation is the point: the credibility is borrowed.

What to do: give through organisations you sought out yourself, reaching them by typing their address rather than following a link from a message. A genuine organisation is unbothered by you donating tomorrow through its own website instead of tonight through a link.

Emotional and romance approaches

Some approaches build a relationship first — often with someone presenting as a Ukrainian in difficulty, or as a supporter of Ukrainians — and only later introduce a crisis that needs money. These take weeks and are far harder to spot, because the request arrives inside something that feels real.

What to do: the durable rule is about money, not sincerity. Money to someone you have never met in person, sent urgently, in a form you cannot reverse, is the pattern regardless of how genuine the person seems.

If it has already happened

Report it. In Ukraine, the Cyberpolice takes reports online. Where you live, report to the local police and, if a card or transfer was involved, to your bank immediately — speed matters most in the first hours. If documents or card details were shared, treat them as compromised: replace the card, and watch for accounts being opened in your name.

And tell people. Shame is what keeps these schemes working; the person you mention it to is probably being targeted by the same thing this week.

Where to check

Ukraine’s Cyberpolice publishes current schemes as they appear, and your consulate publishes what it does and does not do. Those are the authorities here — the sources below are the right starting points, and if one of them contradicts this page, follow it and tell us.