How to Report Cybercrime and Online Fraud in Ukraine (2026)
Scammed or hacked in Ukraine? Who to call (police 102), how to report to the Cyber Police and CERT-UA, and how to try to get your money back.
Ukraine is a sovereign state with its own police, financial regulator and cybercrime laws, so if you are scammed or hacked here you report to Ukrainian authorities, not a foreign hotline. Wartime conditions have also made the country a frequent target for fraud, from fake charity appeals to bogus bank alerts. This guide shows exactly who to contact, how to preserve evidence, and how to try to get your money back. Act fast: the sooner you tell your bank, the better your odds.
Primary sources: Cyber Police of Ukraine · CERT-UA (SSSCIP) · Cyber Brama (report a fraud site) · National Bank of Ukraine · Ukrainian Parliament Commissioner for Human Rights
On this page
First: stop the loss
- Contact your bank or card issuer immediately. If you sent money or shared card details, call the number on your card or statement, report the fraud, and ask them to stop or recall the payment and freeze the account. For card payments, ask about a chargeback. Our chargeback guide explains how.
- Stop all contact with the scammer. Never send more money to "release" or "verify" funds, and never install remote-access software a caller asks for. That is the scam. Block the number, email and account.
- Secure your accounts by changing passwords, signing out other devices and turning on two-step verification. If you clicked a link, see what to do after clicking a phishing link.
- Keep evidence: emails, texts, payment references, names, numbers and account details.
Who to report to
- Emergency or a crime in progress: call 102 (or 112 where it has been introduced in your region).
- Fraud, hacking or online scams: report to the Cyber Police Department of the National Police at ticket.cyberpolice.gov.ua.
- A cyberattack or security incident affecting a business or organisation: report to CERT-UA, run by the State Service of Special Communications and Information Protection (SSSCIP), at cert.gov.ua or [email protected].
- A fraudulent website or fake bank page: flag it through Cyber Brama at stopfraud.gov.ua.
- Bank-related fraud: your bank first, and the National Bank of Ukraine (NBU), which tracks phishing campaigns and works to get fraudulent sites blocked, though it does not process individual refund claims.
Reporting does not return your money by itself, but it creates a record and feeds intelligence that helps stop the next attempt. Report even if you lost nothing.
Getting your money back
Ukraine's currency is the Hryvnia (UAH). How you paid decides your options, and speed is everything.
| How you paid | What to do |
|---|---|
| Bank transfer | Call your bank within minutes to try to stop or recall the payment. Ask whether it will reimburse you, and file a formal claim. |
| Debit or credit card | Ask your card issuer for a chargeback and dispute the transaction in writing. Card payments carry the strongest protection. |
| Crypto, cash app or gift cards | Rarely recoverable. Report to the platform and the Cyber Police at once, and be wary of "recovery agents" who contact you afterward, that is usually a second scam. |
There is no automatic reimbursement scheme for bank-transfer fraud in Ukraine. Report to the Cyber Police, claim through your bank's complaints process, and keep every reference number you are given.
Scams that hit Ukraine
Ukrainian police and the NBU have repeatedly warned about:
- "Bank employee" fraud call centres, where a caller poses as staff from a victim's own bank and talks them into moving money to a "safe account" or reading out a one-time code.
- Fake investment and crypto platforms promising guaranteed high returns, often pushed through social media ads and messaging apps like Telegram.
- Phishing emails and texts impersonating the National Bank of Ukraine or major banks, designed to harvest card numbers and online-banking logins. See how this works in our explainer on how phishing works and how to stop it.
The law and your data
Cybercrime offences in Ukraine, including unauthorised interference with computer systems, networks and data, are prosecuted under Chapter XVI of the Criminal Code (articles 361 through 363-1). Ukraine ratified the Council of Europe's Budapest Convention on Cybercrime in 2006. Personal data is protected under the Law "On Protection of Personal Data" (No. 2297-VI, 2010), overseen by the Ukrainian Parliament Commissioner for Human Rights, acting as data protection authority. This is an older, narrower framework than the EU's GDPR and carries no fixed 72-hour breach-notification deadline, so don't assume EU-style timelines apply.
FAQ
Does Ukraine have a single cybercrime hotline?
No phone hotline. Report crimes and scams online to the Cyber Police at ticket.cyberpolice.gov.ua, security incidents to CERT-UA at cert.gov.ua, and fraudulent websites through Cyber Brama at stopfraud.gov.ua.
My email or bank account was hacked. Who do I tell?
Secure the account first: change the password, sign out other devices and turn on two-step verification. Then report to the Cyber Police, and to CERT-UA as well if a work or organisational system was involved.
I received a phishing message pretending to be from my bank but lost no money. Should I still report it?
Yes. Reporting through Cyber Brama or to your bank and the NBU helps get the fake page or number blocked before it reaches someone else.
Sources: Cyber Police of Ukraine · CERT-UA (SSSCIP) · Cyber Brama · National Bank of Ukraine · Ukrainian Parliament Commissioner for Human Rights
If you have been targeted, you are not alone. See our country-by-country cybercrime help hub for step-by-step reporting and recovery guides.