How these scams work

Fraudsters use various scams to trick you into clicking on links in messages and sharing your personal information with them.

  • You receive an email or SMS that looks like it comes from Nedbank, asking you to click on a link or attachment to do one of the following:
    • Access a proof of payment or bank statement.
    • Reverse a fraudulent transaction or debit order.
    • Update your details to avoid your account from being blocked due to a FICA restriction.
    • Download security software to keep your account safe.
    • Deactivate a mobile device that was added to your banking profile.
  • When you click on the link or attachment, you are taken to a fake web page and asked to enter personal information like your card number, PIN, expiry date and CSC (the 3- or 4-digit security number on the front or back of your card), your Nedbank ID username and password, or your cellphone number.
  • When you enter your personal information on the fake web page, it is forwarded to the fraudsters.
  • In some cases, fraudsters may call you and ask you to accept an Approve-it message or share your one-time password (OTP) with them for a fraudulent transaction they are performing. They hope that you won’t take the time to read the message properly and approve their fraudulent transaction.

 

Tips to keep safe

  • Don’t click on links or attachments in messages from unknown sources.
  • Nedbank will never ask you to enter your Nedbank ID username and password or card number, PIN, expiry date and CSC (the 3- or 4-digit security number on the front or back of your card) on a web page you’ve accessed through a link or attachment.
  • Always read your Approve-it or OTP messages carefully. Taking a few extra seconds to read the message properly could stop someone from stealing your money. If you receive an Approve-it or OTP message for a transaction you did not make, reject it and call us on 0800 110 929 immediately. 
  • Never share an OTP with anyone.
  • Avoid entering your card details on websites that offer unrealistically low-priced products and have terms and conditions that automatically enrol you in subscriptions or long-term monthly payments. Take the time to read the terms and conditions.
  • Hover your mouse over any hyperlinks to see the actual URL. On mobile devices, you can long-press the hyperlink to see it.
  • Do not do your banking on a public computer found at libraries, cyber- or internet cafes and hotels, and avoid using wifi hotspots.
  • Make sure you have the latest antivirus software installed on all your devices and install the latest updates on your operating system as soon as they become available.
  • If you receive a suspicious email, forward it to phishing@nedbank.co.za and delete it immediately.
  • Keep your passwords safe. Don’t save them on your device or in your browser and don't use the same username and password for all your logins. Your Nedbank ID username and password should be different.
  • Always ensure that you have the latest version of your banking app loaded on your device.
  • If your mobile device is lost or has been stolen, notify us immediately so that we can deactivate the Money app and have any tokens for digital wallets (Apple Pay, Garmin Pay, Google Pay, etc.) loaded on your device removed.
  • If you receive an SMS for a SIM swap or number port you did not request or seem to lose cellphone connectivity for a long time without reason, call your service provider and let us know immediately on 0800 110 929.
  • Report fraud by calling us on 0800 110 929.