Security centre

How to recognise a phishing scam:

Don’t be caught out! Find out what you need to look out for to avoid becoming a victim.

Fraudsters often send out emails claiming to be from Absa (or other reputable organisations) – commonly known as ‘phishing’ - many of which look very authentic as they make use of the Absa logo and corporate colours to convince you that the email is legitimate.

Often, the content of the email makes reference to your account being suspended, and the only way you can stop this suspension is to click on the link supplied and update your personal details. Although this link does not link to the real Absa website, these websites are usually designed to look exactly like the Absa site, and it becomes difficult to differentiate between this site and the real site.

There are some recurring themes that you can look out for when you receive an email, including:

• Terrible grammar
• Strange email addresses/Unknown email addresses
• A request to click on a link in an email

Never reply to a spam email - This only confirms that your email address is active, and will spur the fraudsters on to send you even more spam.

Delayed phishing attacks:

In some cases, fraudsters may obtain your access credentials long before any attempt is made to defraud your account. It is very important to change your banking logon information such as your username and password regularly to prevent delayed phishing attacks.

Steps to avoid being a victim of phishing attacks:

Although we have a number of security measures in place to protect you, your awareness is the key to avoid being a victim of phishing attacks, so bear the following in mind when you receive an email claiming to be from Absa:

• Never reply to these emails, and don’t click on any links
• Never provide your personal details such as your PIN or account details via email or on any links within these emails. We already have information like your ID number, cell number and email address and will never ask for them via email.
• Never navigate to our site using a link from an email – always type in the address.
• Delete spam emails immediately. Even a request to remove your email address from the mailing list will confirm to the fraudsters that your email account is active, and could open you up to more attacks.
• Never open an email attachment unless you know who sent the message.
• Use the latest browsers, which come with filters that alert you when you visit a website that contains potentially unsafe website.
• Absa will never send you a letter or email asking you to complete your personal details by clicking on a link in an email.

It is vital that you are aware of some measures that you can take to make you more secure online, such as:

• Always keep your personal access information secure, and change your PIN and passwords regularly.
• Never open a link or an attachment within an email claiming to be from Absa as this may link to a fraudulent website or download a virus or key logging software that will compromise your security.
• Be aware that phishing scams have also been received through instant messaging systems such as Google Talk or Skype; as well as through social networking websites such as Facebook. When in doubt of the authenticity of a link or a claim, simply don’t click it.
• Install good quality security software and ensure that you have updated to the latest version of your browser. Most of the newer browsers have the inherent ability of detecting fraudulent websites.
• Don’t bank or shop online when using a public terminal such as those found in internet cafes, hotels, coffee shops or student labs. Key logging software could be present on the computer, and will send all your personal information to the fraudster, who could then use this information to clear out your account.
• Before you bank online, ensure that you are actually within the secure internet banking website. Once you visit www.absaband.co.ke and click on the internet banking link, you will be redirected to an available banking server. Once there, check the browser address. It should begin with ‘https://’ (not ‘http://’). Also check the browser for a closed lock and/or key icon – which should either be at the top or the bottom of the screen.
• When leaving your computer, always end the current session by closing your browser window, and never leave your computer unattended during an Internet banking session. 

With the convenience of cellphone banking comes the responsibility of ensuring the security of your account:

• Don’t store your password or pin in clear text on your mobile device.
• Install antivirus software on your mobile device and scan your device regularly.
• Be wary that a 'jailbroken' device will weaken the security of your mobile device. The Absa App will not work on a jailbroken device.
• Enable the lock screen on your phone. A password or pin is always more secure than other lock-screen options.
• Turn off your wifi or data connections, when not in use.
• Use the latest software version.
• Be as vigilant on your smartphone or tablet as you would be on your computer.
• Don’t leave your tablet or mobile device unattended while you have your banking profile open.
• If your tablet or cellphone is stolen, remember to unlink it from your device access (this can be done on internet banking under your profile).
• Be careful when using public wifi or hotspots to do your banking.

Always remember to log out once you have finished banking.

We will not ask you to confirm the following telephonically:

• Credit card expiry date
• 3-digit number on the back of the card
• Secure code/OTP number
• Your PIN (you will only be required to use your PIN or OTP number when transacting)

When we contact you, we will have your card number and you will only need to confirm a few digits.

If you receive a secure code/OTP and you are not transacting, please contact our Customer Service Line on +254 (20) 3900000.

Have you been asked to change the bank details for a client or supplier? This may be an attempt to defraud you.

Change-of-bank-account-details scam is clients receive requests, purporting to be from genuine clients or suppliers, asking them to change the bank details used for electronic payments.

These perpetrators go to the extent of diverting correspondence from the targeted business to verify the notification to one of them, who will then validate the instruction. Always make sure that it is indeed your supplier that you are communicating with.

If you believe you are a victim of this type of fraud, report it immediately to your relationship executive. Use the Absa Customer Service contact centre on +254 (20) 3900000 or visit the nearest police station.

Some recommendations to reduce the risks:

• The counterfeit invoice and covering letter may be printed on a scanned copy of the company’s letterhead and the logo may appear somewhat blurred.
• False confirming emails may be sent from almost identical email addresses, or addresses that differ from the genuine one by perhaps one letter that can be easily missed.
• Always confirm any request to change bank details with your usual contact.
• Instruct staff responsible for paying invoices to check invoices for irregularities and escalate suspicions to a known contact.
• Consider setting up designated single points of contact with companies to which you make regular payments.
• Shred your business and supplier invoices or any communication material that may contain letterheads.
• Don’t publish your bank account details on the internet, as this is company private information that can be used fraudulently.
• Consider reviewing previous requests to change account details to confirm they were genuine.
• To prevent your clients from acting on an instruction purporting to be from you, alert them to this type of fraud.

Individuals:

• Carry as little cash as possible.
• Pay your accounts electronically.
• Make use of mobile banking.
• Make use of internet transfers or ATMs.

Businesses:

• Alternate the days and times you deposit cash.
• Never make your bank visits public.
• Don’t openly display your money in the bank queue.
• Avoid carrying money bags or openly displaying deposit receipt books.
• Visit different branches to ensure your banking pattern is not recognisable.
• Consider a cash management service.
• Don’t pay wages in view of the public.
• Don’t use a company-branded vehicle to go to the bank.
• Use an electronic alternative to pay wages.

Savings clubs:

• Don’t make cash deposits on high-risk days.
• Let someone accompany you when you deposit.
• Let members deposit funds directly into the account.
• Arrange electronic pay-out to members’ accounts.

SMiShing, or SMS Phishing, occurs when a fraudster sends a text message to an individual's cellphone in an attempt to get them to divulge personal or sensitive information. Similar to Phishing or Vishing, a SMiShing attack usually requires the victim to respond by clicking on the link provided, in order to either update their security, or to unlock their account. The SMiShing URL gets shortened using bit.ly URL in certain cases and are sent to multiple recipients using different cellphone numbers.

The SMiShing link requests the following information:

• Account number
• PIN
• Full password and
• Cellphone number

Please do not click on these links and divulge any personal information.

Card skimming:

Card skimming occurs while you are making a payment or withdrawal (at a restaurant, garage, ATM or retailer). The criminal either has direct access to your card (to process the payment) or the device is attached to the slot of the ATM. All Absa ATMs have Jitter technology that makes your card shudder slightly when you insert it into an ATM as an added safety feature.

This is in place so that if a card skimming device is present, it will only capture scrambled data. Card skimming devices are generally smaller than a deck of cards, and are hand-held (often fitting snugly into the palm of the hand); which is why people are not aware of what is happening until they are defrauded at a later stage.

What can you do to avoid being scammed?

Always keep an eye on your card when making a transaction; and scrutinise your bank statements to ensure that you spot and report irregular transactions that may occur on your account.

What should you do if your card is skimmed?

If your card has been skimmed, you need to contact your bank immediately and ensure that your card is blocked. This will ensure that the criminals can’t do any more transactions using your account details. The bank may ask you to:

• Change your PIN
• Cancel the card (and issue you a new one)
• Sign an affidavit or provide additional information (depending on the circumstances surrounding the skimming)

Will I be reimbursed?

Depending on your bank or the means used to remove the funds from your account, your bank may reimburse you. Each case is individually assessed and circumstances of the loss are considered to determine if any claims will be refunded.

If a 'fraudulent' transaction has taken place where your card is used together with your PIN, the transaction is usually identified as authentic, and you will not be reimbursed. Never keep your PIN number and card together; rather memorise your PIN.