Security centre

How to recognise a phishing scam:

Don’t be caught out! Find out what you need to look out for to avoid becoming a victim.

Fraudsters often send out emails claiming to be from Absa (or other reputable organisations) – commonly known as ‘phishing’ - many of which look very authentic as they make use of the Absa logo and corporate colours to convince you that the email is legitimate.

Often, the content of the email makes reference to your account being suspended, and the only way you can stop this suspension is to click on the link supplied and update your personal details. Although this link does not link to the real Absa website, these websites are usually designed to look exactly like the Absa site, and it becomes difficult to differentiate between this site and the real site.
 

There are some recurring themes that you can look out for when you receive an email, including:

• Terrible grammar
• Strange email addresses/Unknown email addresses
• A request to click on a link in an email

Never reply to a spam email - This only confirms that your email address is active, and will spur the fraudsters on to send you even more spam.
 

Delayed phishing attacks:

In some cases, fraudsters may obtain your access credentials long before any attempt is made to defraud your account. It is very important to change your banking logon information such as your username and password regularly to prevent delayed phishing attacks.
 

Steps to avoid being a victim of phishing attacks:

Although we have a number of security measures in place to protect you, your awareness is the key to avoid being a victim of phishing attacks, so bear the following in mind when you receive an email claiming to be from Absa:

• Never reply to these emails, and don’t click on any links
• Never provide your personal details such as your PIN or account details via email or on any links within these emails. We already have information like your ID number, cell number and email address and will never ask for them via email.
• Never navigate to our site using a link from an email – always type in the address.
• If you receive eStatements – make sure that you are opening a legitimate statement.
• Delete spam emails immediately. Even a request to remove your email address from the mailing list will confirm to the fraudsters that your email account is active, and could open you up to more attacks.
• Never open an email attachment unless you know who sent the message.
• Use the latest browsers, which come with filters that alert you when you visit a website that contains potentially unsafe website.
• Absa will never send you a letter or email asking you to complete your personal details by clicking on a link in an email.

While the internet can make life very convenient with services such as online banking and shopping, there is always the underlying security risk that criminals will abuse the internet to gain access to your personal information - such as banking details - and use this to steal your money.

We will automatically disable your access to internet banking if three incorrect attempts are made to log in using your details. This is to stop fraudsters making repeated attempts to log into your accounts.

Follow these simple tips to enjoy a secured online banking experience! Avoid using shared computers when accessing Absa Internet Banking:

• Avoid logging into Absa Internet Banking or using critical passwords at internet cafes, libraries, and other public sites to avoid the risk of information being copied and re-entered after you leave.
• Change your passwords regularly.
• Contact Absa immediately if you suspect your online banking password has been compromised.
• Use a password on your computer to prevent unauthorised individuals from accessing your information.
• Disable the "AutoComplete" function of your browser.
• Always remember to log-off internet banking and close your browser when you have finished.

With the convenience of mobile banking, comes the responsibility of ensuring the security of your account:

• Don’t store your password or pin in clear text on your mobile device.
• Install antivirus software on your mobile device and scan your device regularly.
• Be wary that a 'jailbroken' device will weaken the security of your mobile device. The Absa App will not work on a jailbroken device.
• Enable the lock screen on your phone. A password or pin is always more secure than other lock-screen options.
• Turn off your wifi or data connections, when not in use.
• Use the latest software version.
• Be as vigilant on your smartphone or tablet as you would be on your computer.
• Don’t leave your tablet or mobile device unattended while you have your banking profile open.
• If your tablet or cellphone is stolen, remember to unlink it from your device access (this can be done on internet banking under your profile).
• Be careful when using public wifi or hotspots to do your banking.
• Always remember to log out once you have finished banking.

We will not ask you to confirm the following telephonically:

• Credit card expiry date
• 3-digit number on the back of the card
• Secure code/OTP number
• Your PIN (you will only be required to use your PIN or OTP number when transacting)

When we contact you, we will have your card number and you will only need to confirm a few digits.

If you receive a secure code/OTP and you are not transacting, please contact our Customer Service Line on +256 (0) 312 218 348.

Have you been asked to change the bank details for a client or supplier? This may be an attempt to defraud you.

Change-of-bank-account-details scam is clients receive requests, purporting to be from genuine clients or suppliers, asking them to change the bank details used for electronic payments.

These perpetrators go to the extent of diverting correspondence from the targeted business to verify the notification to one of them, who will then validate the instruction. Always make sure that it is indeed your supplier that you are communicating with.

If you believe you are a victim of this type of fraud, report it immediately to your relationship executive. Use the Absa Customer Service contact centre on +256 (0) 312 218 348 or visit the nearest police station.

Some recommendations to reduce the risks:

• The counterfeit invoice and covering letter may be printed on a scanned copy of the company’s letterhead and the logo may appear somewhat blurred
• False confirming emails may be sent from almost identical email addresses, or addresses that differ from the genuine one by perhaps one letter that can be easily missed
• Always confirm any request to change bank details with your usual contact
• Instruct staff responsible for paying invoices to check invoices for irregularities and escalate suspicions to a known contact
• Consider setting up designated single points of contact with companies to which you make regular payments
• Shred your business and supplier invoices or any communication material that may contain letterheads
• Don’t publish your bank account details on the internet, as this is company private information that can be used fraudulently
• Consider reviewing previous requests to change account details to confirm they were genuine
• To prevent your clients from acting on an instruction purporting to be from you, alert them to this type of fraud

Individuals:

• Carry as little cash as possible.
• Pay your accounts electronically.
• Make use of mobile banking.
• Make use of internet transfers or ATMs.
   

Businesses:

• Alternate the days and times you deposit cash.
• Never make your bank visits public.
• Don’t openly display your money in the bank queue.
• Avoid carrying money bags or openly displaying deposit receipt books.
• Visit different branches to ensure your banking pattern is not recognisable.
• Consider a cash management service.
• Don’t pay wages in view of the public.
• Don’t use a company-branded vehicle to go to the bank.
• Use an electronic alternative to pay wages.
   

Savings clubs:

• Don’t make cash deposits on high-risk days.
• Let someone accompany you when you deposit.
• Let members deposit funds directly into the account.
• Arrange electronic pay-out to members’ accounts.

SIM swapping:

If a fraudster has a false copy of your identity document, they can perform an illegitimate SIM swap with your cellphone service provider. The fraudster now has full use of your cellphone account and will receive messages intended for you. They will also receive the confidential banking notifications and approval SMSs that the bank sends to customers.

If they have already tricked you to give them your personal and account details, they can transfer money from your account without you knowing. If Absa becomes aware of a SIM swap, a temporary hold is placed on your account to allow you to authenticate yourself.
If the SIM swap was legitimate, you can wait out the 36 hours or authenticate yourself by calling our Contact Centre on +256 (0) 312 218 348. Once you have been verified as the actual Absa customer, the hold will be lifted.
 

Porting:

Watch out for this cellphone scam that enables fraudsters to port your number and gain access to your accounts.

Fraudsters port the victim’s number from one cellphone service provider to another. Some cellphone service providers send SMSs for the account holder to confirm that they are transferring to another service provider. When these confirmation messages are ignored, the porting goes through and the fraudsters have access to the victim’s cellphone messages, including the approval SMSs that the bank sends to customers.

If they have already tricked you into giving them your personal and account details, they can transfer money from your account without you knowing. Always keep your cellphone switched on and don’t ignore messages from your service provider.
 

Twin SIM:

Be aware and pay special attention to all messages received from your network service provider regarding Twin SIM functionality.
 

Do not switch off your phone. Take note of any logon notifications when you are not logging on to internet banking yourself.