At 11pm a customer types "ابا نفس العطر حق امس, send link please" and waits. The payment link you send next decides two things: whether she trusts it enough to tap, and whether the money actually reaches you. In a week when police and the central bank warned about fake links on WhatsApp and Instagram, both questions matter more than usual.
Why your link looks suspicious this week
On 13 October, the Oman Observer reported a fresh warning from the Royal Oman Police and the Central Bank of Oman. Fraudsters are posing as financial institutions on WhatsApp, Snapchat and Instagram, offering fake instant loans and sending links that collect personal and banking details. Some even send app files to install.
It follows the fake traffic fine texts police flagged on 3 September, which demanded payment within 12 hours through an unofficial link. No rule for sellers changed this week. What changed is the mood: your customers have seen these forwards in the family group, and any link from a shop now gets a second look.
What a payment link actually is
A payment link is a web address that opens a secure checkout page where the customer pays a set amount by card. You create it inside your bank's merchant service or a licensed payment provider's app, and the customer never types card details into the chat. Since 2021 the central bank has let banks and licensed providers sign up micro businesses with fewer than ten staff for electronic payments, so this is not only for big stores.
The other common way to get paid in chat is a bank transfer, with the customer sending a screenshot as proof. That works until the screenshot is fake. We will come back to that, because it is how most small sellers actually lose money.
A safe payment link is one the customer was expecting, for an amount they already agreed, from a number they already know.
The red flags customers now watch for
Most of these come straight from police and bank warnings. If your link shows even one, a careful customer will walk away.
- Being asked for an OTP, PIN or CVV in chat. Banks say they never ask for these by SMS or WhatsApp, and neither should a shop.
- A deadline that feels like pressure, such as "pay within 12 hours or lose your order".
- A link that arrives before the order is agreed, or from a number they have never chatted with.
- A web address that does not match any bank or provider name, or a file to download and install.
- A price far below everyone else's for the same item.
- A name on the checkout page that does not match the shop they think they are paying.
The scam that runs the other way
Sellers are targets too. The Ministry of Commerce, Industry and Investment Promotion has noted that online sellers face payment fraud, fake receipts and last-minute cancellations. Police have also warned about "buyers" who send sellers a link to "verify" a payment, which can end with money withdrawn from the seller's own account, as the Oman Observer reported in May.
Take Yusra, a composite example: she sells oud and perfume from home in Seeb through Instagram and WhatsApp. One evening in September a new customer sent a neat transfer screenshot for OMR 38. She called the driver, the parcel left, and the money never arrived. What finally stopped it is simple, and it comes in a moment.
What a fake screenshot really costs
Here is Yusra's month, worked out. Put your own numbers in the last column. The link fee is an example rate only; check the real rate in your own bank or provider contract.
| Line | Yusra's month (composite) | Your numbers |
|---|---|---|
| Orders taken in chat | 60 | ___ orders |
| Average order | OMR 22 | OMR ___ |
| Chat sales for the month | OMR 1,320 | OMR ___ |
| One parcel sent on a fake screenshot | OMR 40 lost (OMR 38 goods plus OMR 2 delivery) | OMR ___ lost |
| Time matching transfers in the bank app | 3 minutes x 60 = 3 hours | ___ hours |
| Link fee at an example 2.5 percent | OMR 33 | OMR ___ |
Notice the lesson is not "links good, transfers bad". The lesson is where you check the money. Visitors in high season often cannot make a local transfer at all, so a card link wins you those orders too.
Check the money in your own account, never in the customer's screenshot.
The routine that protects both sides
Yusra now runs every paid order through the same steps, and her customers have started commenting that it feels professional.
- Agree the order in writing first: item, size, price, delivery fee and total.
- Create the link yourself, from your bank's merchant app or your provider's dashboard, for that exact total. Never use a link someone else sent you.
- Send it with the same short message every time, for example: "Your order from Oud Yusra: 2 x Dehn al Oud, delivery to Seeb. Total OMR 22. Pay securely here (your link). We never ask for your OTP, PIN or CVV."
- Confirm the payment shows as paid in your own dashboard or bank app before anything leaves.
- Send a confirmation in the same chat, then dispatch.
- If a customer pastes card numbers or a photo of their card, delete it and point them to the link.
- Show your e-commerce licence number on your Instagram and WhatsApp profiles. Social media sellers must display it, and it is exactly what a wary customer looks for.
Now nothing leaves the house until I see it paid in my own app, not in somebody's screenshot.
What this means for you
Your customers are more cautious this month, and that is good news for honest shops. Make your payment step predictable: same number, same message, an agreed amount, a checkout page that carries your shop's name. Predictable is what trust looks like on a phone screen.
Protect yourself the same way. Never open a link a buyer sends you, never dispatch on a screenshot, and if a message feels wrong, report it to the police or your bank rather than replying.
Is a transfer screenshot proof of payment?
No. Screenshots are easy to fake. Treat the order as paid only when the money shows in your own bank app or payment dashboard.
A buyer sent me a link to receive their payment. Should I open it?
No. Real payments do not need you to click anything a buyer sends. Police have warned that these links can lead to money being taken from your account.
Do I need a licence to sell on Instagram or WhatsApp?
Online sellers, including those on social media, need an e-commerce licence from the Ministry of Commerce, Industry and Investment Promotion, and must show the licence number on their profiles.
The bottom line
A payment link is safe when nothing about it surprises anyone: the customer expected it, the amount was agreed, and you confirm the money yourself. Build that routine once, and the same habit that reassures your customers also keeps fake screenshots out of your business.
Sources checked for this article
- Oman Observer: Beware of 'instant loan' offers, ROP cautions (13 October 2026) (media)
- Muscat Daily: ROP warns against fake traffic fine text messages (3 September 2026) (media)
- Oman Observer: Scammers target online buyers (May 2026) (media)
- Ministry of Commerce, Industry and Investment Promotion: e-commerce sector growth and challenges (July 2025) (oman-official)
- Muscat Daily: E-commerce becomes essential for Omani SMEs, startups (licence display rule) (media)
- Times of Oman: CBO issues framework for small businesses to use e-payment services (media)
Practical information, not legal advice. Rules and dates were checked on 19 October 2026; verify current official positions before acting.
