Scammers build fake websites that look exactly like the real Hafilat recharge page. They pay Google to put their fake site at the top of search results. If you enter your card details on a fake site, they steal your money. The only real website is https://hafilat.darb.ae. Always check the web address before typing anything in.
This guide shows how to spot fake sites, what to do if you have been scammed, and how to recharge safely every time.
What the Scam Looks Like
A Reddit user posted a warning about a fake Hafilat website.
“I searched for ‘hafilat card recharge’ on Google. The first link was a sponsored ad. It looked exactly like the real site. I entered my card number. I picked AED 10. The page changed to a payment screen I had never seen before. I entered my card details. Then I got a text message with an OTP for USD 201, not AED 10. That is when I knew something was wrong. I did not enter the OTP.”
This is happening to real people. Scammers copy the official Hafilat recharge page. They pay Google to show their fake site at the top of search results. People click on the ad. They land on a page that looks real.
The fake site asks for the 16-digit card number. Then it asks for payment details. The scammers take that information and try to charge large amounts in foreign currency.
How the scam works step by step:
| Step | What Happens |
| 1 | A scammer builds a copy of the real Hafilat website. |
| 2 | The scammer pays Google for a sponsored ad. |
| 3 | A user searches for “hafilat recharge.” |
| 4 | The fake site shows up at the top of the search results. |
| 5 | The user clicks the link. The site looks real. |
| 6 | The user enters their card number and payment details. |
| 7 | The scammer steals the card information. |
| 8 | The user gets an OTP for a large amount in USD. |
The fake sites often use web addresses that look close to the real one. Some examples include:
- hafilat-darb.com
- hafilatrecharge.ae
- darbhafilat.com
- hafilatbalance.com
The only real web address is https://hafilat.darb.ae.
How to Tell If a Website Is Fake
There are several warning signs to watch for.
Warning sign 1
The site shows up as a sponsored ad on Google.
Scammers pay for top placement. Real government services usually do not pay for ads. If the first result says “Sponsored” next to it, be very careful.
Warning sign 2
The web address looks wrong.
The real website is hafilat.darb.ae. Notice the .ae at the end. The word “darb” is in the middle, not at the end.
Fake web addresses often have:
- .com instead of .ae
- Extra words like “recharge” or “online”
- Dashes between words like hafilat-darb
- Strange endings like .net or .org
Warning sign 3
No padlock icon in the address bar.
The real website uses HTTPS. There is a padlock icon next to the web address. Fake sites sometimes do not have this. If there is no padlock, do not enter any information.
Warning sign 4
The payment screen looks unfamiliar.
The real Hafilat site uses payment gateways like TAAM or official bank pages. Fake sites often use generic sounding names like “Abu Dhabi Pay” or “UAE Secure Payment.”
Warning sign 5
The OTP comes in a foreign currency.
The real site sends an OTP for the exact amount in AED. If the OTP says USD, EUR, or any other currency, it is a scam. Do not enter the OTP.
Warning sign 6
The site asks for too much information.
The real site needs the 16-digit card number, the recharge amount, and payment details. It does not ask for your bank login, your password, or your CVV more than once.
Warning sign 7
Bad spelling or grammar.
Fake sites are often built quickly. Look for spelling mistakes, odd phrasing, or fonts that do not match.
What to Do If You Got Scammed
If you entered your card details on a fake website, act fast.
Step one: Block your card right away
Call your bank immediately. Tell them the card may be compromised. Ask them to block the card and send a new one.
Step two: Look for charges you did not make
Check your bank statement. Look for any transactions you do not recognize. If you see a charge you did not authorize, report it to the bank.
Step three: Report the scam to the police
In Abu Dhabi, report online scams to the Aman service.
- Phone: 800 2626
- Email: aman@adpolice.gov.ae
- SMS: 2828
Give them the fake website address, the date and time, and any screenshots you took.
Step four: Report the fake website to Google
Google has a form to report phishing websites. Go to safebrowsing.google.com/safebrowsing/report_phish/ and submit the fake web address.]
Step five: Keep an eye on your bank account for the next few months.
Scammers may try to use the card information weeks or months later. Even if the card was blocked, watch for any suspicious activity on other accounts.
What if the scammer already took money?
Call the bank immediately. Report the fraudulent transaction. Banks can often reverse the charge if it is reported quickly. This is called a chargeback.
Real Stories from Reddit
A Reddit user shared what happened to them.
“I searched for ‘hafilat card recharge’ on Google. The first link was a sponsored ad. It looked exactly like the real site. I entered my card number and payment details. Then I got an OTP for USD 201. I knew right away it was a scam. I did not enter the OTP. I called my bank and immediately blocked my card. They said someone tried to charge USD 201, but the transaction was declined because I did not enter the OTP.”
Another user replied to that thread.
“The same thing happened to me. The fake site looked perfect. The web address was hafilat-darb.com. I entered my card number. Then I noticed the payment screen was called ‘Abu Dhabi Pay.’ That did not sound right. I closed the page and checked the real site. The real site uses TAAM. I dodged a bullet.”
A third user shared a warning about a friend.
“My friend lost AED 500 to a fake Hafilat site. He entered his card details. The scammers charged his card multiple times. The bank refunded some of the money but not all. He learned to always type the real web address directly into the browser. Never click on sponsored ads.”
These stories show that the scam is real. It is happening to real people. The best defense is knowing the real website and never clicking on ads.
How to Recharge Safely Every Time
Safe method 1: Type the real web address directly
Do not use Google search. Do not click on links. Open a new browser tab. Type hafilat.darb.ae directly into the address bar. Press enter. Save it as a bookmark for next time.
Safe method 2: Use the Darb mobile app
The safest way to recharge is through the official Darb app. The Darb app is the official app from the Integrated Transport Centre. Download it from the Google Play Store, Apple App Store, or Huawei AppGallery. Recharge from inside the app. No risk of fake websites.
Safe method 3: Use the Payit app
Payit is the official digital wallet of First Abu Dhabi Bank. It has a Hafilat recharge feature. Use it instead of a website.
Safe method 4: Recharge at a ticket vending machine
TVMs are physical machines at bus stations. There is no risk of online scams. Tap the card. Insert cash or a card. The balance updates right away.
Safe method 5: Recharge at Lulu Hypermarket
Go to the customer service counter at any Lulu Hypermarket. Hand over the card. Tell the staff how much to add. Pay with cash or card. The balance updates immediately.
Safe method 6: Recharge at a Customer Happiness Center
Go to any Customer Happiness Center at a major bus station. Staff will process the recharge. No online risk.
After recharging safely, tap your card on a reader to activate the balance. If it still does not work, check our guide on why your Hafilat card might be getting rejected.
Real Website vs Fake Website
| Feature | Real Website | Fake Website |
| Web address | https://hafilat.darb.ae | hafilat-darb.com, hafilatrecharge.ae, etc. |
| Padlock icon | Yes | Sometimes no |
| Payment screen | TAAM or official bank pages | Generic names like “Abu Dhabi Pay” |
| OTP currency | AED | Often USD or other foreign money |
| Google result | May not be first | Often shows as “Sponsored” ad |
| Asks for bank login | No | Sometimes yes |
| Spelling and grammar | Correct | Often has mistakes |
What to Do If You Are Not Sure
If something feels wrong, stop.
Step one: Do not enter any more information.
Close the browser tab. Do not click anything else on the page.
Step two: Look at the web address again.
Look at the address bar. Is it hafilat.darb.ae? If not, leave the page.
Step three: Open a new tab and type the real web address.
Type hafilat.darb.ae directly into the address bar. Do not copy and paste from the suspicious site.
Step four: Compare the two pages.
Look at the real site. Look at the suspicious site. Do they look the same? If the suspicious site is a copy, it is a scam.
Step five: If still not sure, use a different method.
Recharge at a TVM or Lulu counter instead. No online risk.
Conclusion
Fake Hafilat recharge websites are out there. They look real. They pay Google to show up at the top of search results. They steal card information and try to charge large amounts in foreign currencies.
But the scam is easy to avoid.
Always type the real web address directly into the browser: https://hafilat.darb.ae. Save it as a bookmark. Use it every time.
Or skip websites altogether. Use the Darb app. Use the Payit app. Use a ticket vending machine. Use Lulu Hypermarket. Use a Customer Happiness Center.
Never click on sponsored ads. Never enter card details on a site you are not sure about. If something feels wrong, stop.
And if you do get scammed, block the card immediately. Call the bank. Report to the police. Act fast.
The real website is the only safe website. Remember that one rule, and the scammers cannot touch you.
