Banks will never ask you to share your PIN, online banking password or one-time passcode by phone, text, email or message. Anyone who asks is attempting fraud. End the contact and call your bank on a number you trust.
The Gambia Bankers’ Association is reminding the public that banks will never ask customers to share their PIN, online or mobile banking password, or one-time passcode (OTP). Anyone who asks for these details, however convincing they sound, should be treated as a fraudster.
The key message
Your PIN, password and OTP are the keys to your money. Bank staff do not need them to help you, and a genuine bank will not request them by telephone, text message, email, social media or messaging app. The same applies to card details such as the security code on the back of a card when you have not started a payment yourself.
How impersonation fraud works
In impersonation fraud, criminals pretend to be someone you trust, such as your bank, a mobile-money agent, a government office or even a relative, to persuade you to hand over information or move money. Common approaches include:
- A call claiming your account has been blocked, compromised or will be closed unless you “verify” your details.
- A text or message containing a link to a website that looks like your bank’s, asking you to sign in.
- A claim that money was sent to you by mistake and must be “reversed”, followed by a request for a code.
- A message announcing a prize, refund or grant that can be released only once you share an OTP or pay a fee.
- A caller who already knows some of your details, such as your name or the bank you use, to appear genuine.
Criminals can make a call or message appear to come from a familiar name or number. A caller knowing some of your details does not prove they are genuine.
Warning signs
- You are asked for a PIN, password or OTP.
- You are pressed to act immediately or warned of serious consequences if you hang up.
- You are told to keep the conversation secret, including from bank staff or family.
- You are asked to install an app, open a link or move money to a “safe” account.
What to do
- Do not share your PIN, password or OTP with anyone, for any reason.
- End the call or stop replying. You will not be penalised for doing so.
- Contact your bank directly using a number you trust, such as one printed on your card or statement or displayed in a branch.
- If you have already shared details or made a payment, tell your bank immediately so that it can act to protect your account.
- Keep a record of the number, messages and any payment details, and report the matter to the police.
- Warn family members, particularly older relatives, who may be targeted in the same way.
Note. The Association does not hold customers’ accounts and does not contact individual members of the public about their accounts. Any message claiming to come from the Association and asking for account details should be treated as fraudulent.