By Jackson Godwin. Cybersecurity Analyst & Penetration Tester.

The Photos Told a Different Story
The more I looked at the charity’s website, the more curious I became.
The photographs were emotional.
Children receiving food.
Volunteers handing out blankets.
Smiling families standing beside newly built classrooms.
Everything looked authentic.
But something still didn’t feel right.
Instead of accepting the images at face value, I decided to investigate them.
A Simple Search Changed Everything
I saved one of the photographs and performed a reverse image search.
Within seconds, I found the exact same picture…
On the website of a completely different charity.
The original image had been published several years earlier by a legitimate humanitarian organisation working in another country.
The fake NGO had copied it.
Then I checked another photograph.
The same thing happened.
A third image produced identical results.
None of the pictures actually belonged to the organisation asking for donations.
That was my first major piece of evidence.
The Children’s Stories Couldn’t Be Verified
The website introduced several children by name.
Each story was heartbreaking.
One child had supposedly lost both parents.
Another needed emergency surgery.
Another dreamed of becoming a doctor.
Every story ended with the same appeal.
“Please donate today.”
I searched online for some of those stories.
Nothing.
No independent reports.
No local news coverage.
No references anywhere except the charity’s own website.
While not every genuine charity receives media attention, relying only on stories published by the organisation itself makes independent verification difficult.
That encouraged me to keep investigating.
The Testimonials Looked Familiar
The website also displayed glowing reviews from donors.
“This organisation changed my life.”
“Every penny reached the children.”
“I will continue donating every month.”
At first they looked convincing.
Then I noticed something unusual.
Most testimonials used generic first names.
There were no links to real donor profiles.
Several profile pictures looked like professional stock photographs.
It reminded me of the fake crypto investment platform I had investigated weeks earlier.
Different scam.
Same technique.
Build trust using testimonials that cannot easily be verified.
I Asked About Registration
I decided to contact the organisation directly.
I sent a polite message.
“Could you please tell me where your NGO is officially registered?”
The reply arrived quickly.
Instead of providing a registration number or directing me to an official registry, they responded with:
“We are currently expanding internationally.”
That didn’t answer my question.
So I asked again.
“Can you provide your registration details?”
This time, the response was vague.
“Our legal team handles those matters.”
That answer raised another red flag.
Many legitimate charities are open about their registration status and governance.
The Pressure Slowly Increased
A few hours later, another message arrived.
“We urgently need support today.”
“Several children are waiting for food.”
Then another.
“Every minute counts.”
The conversation was becoming more emotional.
Less factual.
Instead of answering my questions, the representative tried to make me feel guilty for delaying my donation.
That is a common social engineering technique.
When emotions become stronger than facts, people are more likely to act without verifying information.
I Looked at the Donation Process
The website accepted donations through a personal bank account.
There was no explanation of how funds were managed.
No published financial reports.
No annual accounts.
No breakdown of how donations were supposedly spent.
Transparency is important for organisations asking the public to trust them with money.
The lack of clear financial information made me even more cautious.
Something Else Didn’t Add Up
I also noticed that the organisation claimed to operate in several countries.
Yet there were no local office addresses.
No verified phone numbers.
No partnerships with recognised humanitarian organisations.
For a charity claiming to help thousands of vulnerable children, there was surprisingly little evidence outside its own website and social media pages.
The picture was becoming clearer.
The Scam Wasn’t About Hacking
This wasn’t a cyberattack.
Nobody tried to steal my password.
Nobody infected my computer with malware.
Instead, the scammers attacked something much easier.
My emotions.
They used heartbreaking photographs.
Emotional stories.
Urgent language.
And the natural desire most people have to help children in need.
In the final part of this article, I’ll explain the biggest warning signs of fake charity and NGO scams, share practical tips for verifying organisations before donating, and provide a simple checklist to help ensure your generosity reaches people who genuinely need it—not criminals exploiting compassion.
Continue Reading: The Fake NGO That Claimed to Help Orphans (Part 3)








