Recognise the warning signs
Your code stays private
A caller claiming to be staff asks for a PIN, OTP or password: do not share it.
A “safe account” request
Do not move funds to an account suggested by a caller pressuring you to protect your money.
An unfamiliar link or app
Do not follow suspicious links or install software that gives someone remote access to your device.
Make security an everyday habit
- Lock your phone and keep its apps and operating system updated.
- Use different passwords and keep them out of other people’s reach.
- Check the recipient and amount before authorising a transaction.
- Keep transaction evidence and review account records when available.
Ask the SACCO to confirm its approved digital channels. A familiar name or logo in a message is not proof of authenticity.
Something wrong? Take these steps
End the interaction
Stop sharing money or information. Do not use a number or link supplied by the suspicious contact.
Contact the actual provider
Use a channel you already trust to request help with the affected account. For an unexpected loss of SIM service, contact your mobile provider.
Keep an incident record
Record the time, messages and suspected loss; retain evidence securely. Leave secret codes out of any enquiry.
A quick knowledge check
Someone says: “Give me your OTP so I can restore your account.”
Which is the safer next step?