WHALE SAFETY FIELD GUIDE

Community lessons for travel and home

Community accounts are not independently verified. This page extracts situations worth preparing for; it does not establish personal losses, provider liability or local risk levels. Use the recommendations with official guidance and the earlier procedures.

A stolen phone can remove your ability to respond

A Reddit traveller says an unlocked phone was snatched while they were using it in a taxi in Peru. By the time they found internet access and help, financial accounts had recorded outgoing transfers. The exact intrusion path was not independently established. [S59]

Check now: look beyond wallet apps to email, authentication, saved passwords and cloud recovery concentrated on one phone. The travel contact needs communication and ordinary payment alternatives that do not depend on it. Find the official lost device route in advance; submitting a lock request does not prove it took effect. See chapters 9 and 40. [S58]

Neither success nor loss stories certify a dealer

One Dubai post describes arranging a cash crypto purchase through chat and completing it in a mall. Another claims a stablecoin transfer at an office was not followed by the promised cash. Neither account was independently verified for this edition. [S65] [S66]

Check now: a shared background, office or previous payment does not replace entity and activity checks. For services under Dubai's VARA jurisdiction, check the official register for a full licence and permitted activities. In principle approval alone does not permit serving clients. [S23]

Do not choose brokers or recovery lawyers from comments. Material settlement needs formal arrangements reviewed in advance. Avoid carrying cash and improvised private handovers; pause for third party recipients or venue changes. If threatened in person, prioritise getting to safety, not grabbing cash or forcibly reclaiming a device.

A real name on a label does not verify an order

A Singapore Reddit user describes an unexpected cash on delivery parcel bearing a family member's name and address, refused after the family denied ordering it. This does not establish courier involvement or where the information came from. [S67]

Check now: family, carers and assistants should follow one delivery rule: verify the order before paying. Knowledge of the address does not justify entry, scanning a login code or sharing verification codes. One unfamiliar parcel does not prove a targeted attack; report persistent anomalies, threats or attempted intrusion. See chapter 12. [S02]

A thread is not a support channel. Do not follow unfamiliar trading, recovery or download links in case discussions, or give commenters personal account details.

Find your next step.

Search 50 cities, 54 chapters and ten case studies, or explore the incident register.

Search the full incident register
CITYDubai · United Arab EmiratesCITYAbu Dhabi · United Arab EmiratesCITYHong Kong · Hong KongCITYMacao · MacaoCITYSingapore · SingaporeCITYTokyo · JapanCASECher, France · Taken from home. Held apart.CASEParis, France · The family became the target.CASEHong Kong · A trade invitation became captivity.CASEPunggol, Singapore · A Telegram offer. A bag of cash.01Start here02Emergency numbers and bilingual card03Decide how much protection you need04Map your exposure without creating a target list05Reduce what strangers can learn06Separate daily spending from long term reserves07Make signing a deliberate activity08Backups and inheritance without new vulnerabilities09Secure phones accounts and communications10Recognise manipulation before money moves11Give family and staff a usable role12Make home entry predictable and controlled