Qiwa holds the paperwork that decides whether you can work, get paid and move jobs in Saudi Arabia. That makes it worth stealing from. This guide explains how the scams actually work, so you can spot them even when they look new.
Why Qiwa attracts scammers
Qiwa is the labor-market platform of Saudi Arabia's Ministry of Human Resources and Social Development (HRSD). It is where employment contracts are documented and where many labor services are handled, from work-related requests to checking your own contract details. Your sign-in goes through Saudi national authentication, not a password you invented on a random website.
Think about what a criminal sees. A worker who is anxious about a contract, a transfer or a permit. A topic with real deadlines. A name that millions of people trust. This is the perfect setting for what security people call social engineering: tricking the person, because tricking the system is much harder.
The key point of this guide is simple. Scammers rarely "hack Qiwa." They persuade you to hand over what you control: a login, a one-time code, a payment, or a photo of your ID.
How a typical attack unfolds
Almost every Qiwa scam follows the same five steps. Learn the chain and you can break it at any step.
Anatomy of a fake link
The most useful skill you can learn is to read a web address from right to left. The real owner of a site is the part just before the first single slash, not the part at the front that looks familiar.
| Trick | Example | Why it works |
|---|---|---|
| Decoy subdomain | qiwa.sa.secure-login.com | The real name appears first, so people stop reading. |
| Extra word or hyphen | qiwa-sa.com, qiwa-support.net | Looks official in a small phone address bar. |
| Wrong ending (TLD) | qiwa.support, qiwa.info | People remember the name, not the ending. |
| Look-alike letters | qiwa.sa written with a different character | Some letters from other alphabets look identical. Browsers show these as xn-- in technical form. |
| Short link | bit.ly/xxxx | Hides the destination completely. |
| "@" trick | qiwa.sa@evil.com | Everything before the "@" is ignored. The real host is after it. |
Check a link yourself
This checker runs in your browser only. It does not send the link anywhere. It looks for the tricks above. A clean result is not a guarantee, but a warning is a strong reason to stop.
The six scams to know
1. The fake portal
You get a message saying your account is suspended or your contract needs urgent action. The link leads to a perfect copy of the Qiwa login page. When you type your details and the code you receive, the criminal is using them on the real site at that same moment. This is why speed and fear are always part of the script.
2. The OTP phone call
Someone calls, says they are from "Qiwa support," and asks you to read out a code that just arrived. That code is the key to your account. No real support agent needs it. Read it to nobody, ever.
3. The paid "approval"
A middleman says that for a fee he can speed up or approve your contract, transfer or permit. Official steps are done through your account and your employer. A stranger selling "faster approval" is either lying or doing something that can put you in legal trouble.
4. The fake job with an upfront fee
A great offer, a nice salary, and a small "registration or Qiwa fee" before you start. Real employers do not need money from you to hire you. Once you pay, the offer disappears.
5. The contract swap
This one is quiet and expensive. You sign a paper in one language, and the documented version shows a lower salary, a different job title or different terms. Always compare the signed paper with what your own Qiwa account shows.
6. The ID collection
Scammers ask for a clear photo of your passport, residence ID or a selfie holding it, "to verify you." These are later used to open accounts, pass checks or sell your identity. Send these documents only to people you have verified through an official channel.
Where the real risk sits
Not all dangers are equal. This chart is the author's own rough judgment of how common each scam is and how badly it can hurt. It is not official statistics, and it is meant to help you decide what to worry about first.
Verify your contract the careful way
Do this every time you sign, and again after any change of job or terms.
- Type qiwa.sa yourself into the browser. Do not use a link from a message.
- Open the contract linked to your account and compare it line by line with your paper copy: salary, job title, start date, probation, working hours, leave.
- If anything differs, do not accept it. Ask your employer to correct it in writing before you continue.
- Save a screenshot or download of the final version somewhere safe, plus the date you checked it.
- Check that your salary actually arrives as the contract says. Keep payment records.
Lock down your account
- Use a strong, unique password for your national account. Never reuse it anywhere else.
- Treat every OTP as a house key. Nobody legitimate asks you to read it aloud or type it on a link you were sent.
- Bookmark the real address and always open it from the bookmark.
- Keep your phone updated, and remove apps you do not recognize.
- Be careful on public Wi-Fi for anything involving ID or money.
Things to never do
- Pay anyone a fee to "approve" or "release" a Qiwa document.
- Share a screen or install a "support app" for a stranger.
- Send ID photos or selfies to unverified people.
- Act within minutes because a message says "last warning."
If you already clicked or paid
Do not panic and do not hide it. Speed matters more than embarrassment.
Official contact channels
These details come from the official HRSD website (hrsd.gov.sa) pages for the Ministry and for Qiwa services. Save them in your phone now, from this page or from the official site, so you never have to trust a number that arrives in a message.
| Channel | Details | Use it for |
|---|---|---|
| HRSD unified call center | 19911 Hours listed on the ministry page: Sunday to Thursday, daytime | Labor complaints, reporting violations, general guidance |
| Qiwa phone support | 920000105 | Questions about Qiwa services and your account |
| Qiwa email | support@qiwa.sa | Written Qiwa support. Keep your screenshots ready. |
| HRSD email for reports | info@hrsd.gov.sa | Reporting labor-rule violations in writing |
| Government help center (Amer) | 199099 info@199099.gov.sa | General help with government digital services |
Notice that the email domains are exactly qiwa.sa and hrsd.gov.sa. A message from "support@qiwa-help.com" is not Qiwa. Also, working hours listed on different official pages are not identical, so if nobody answers, try again at another time or use the email.
Quick questions
Does Qiwa ever send me SMS?
Official platforms can send notifications, but a message that pushes you to click and log in is the red flag. Open the real site yourself and check there.
The website looks perfect. Is it safe?
No. Copying a design takes a scammer minutes. Check the address, not the look.
The address has a padlock. Does that mean it is real?
No. A padlock only means the connection is encrypted. Criminals get padlocks too. It says nothing about who owns the site.
My employer asked me to pay for my Qiwa contract.
Be careful. Ask what exactly the money is for, get it in writing, and check your rights with the official labor channels before paying anything.
The short version
Open Qiwa only by typing its address yourself. Never give an OTP to anyone. Never pay for an approval. Compare your contract with what your own account shows. If something pushes you to rush, that pressure is the clue that something is wrong.