Uganda

Security Centre

Fighting fraud is the responsibility of every one of us.
While we do our part to ensure that you can bank safely, learn about how you can protect yourself and your possessions.

stanbic salary advance
Be Steady

It is important that you are able to protect yourself and your possessions from fraud. In order to be able to do this, you need to be alert and knowledgeable about what fraud is and how to protect yourself. This security centre has the typical information that fraudsters are looking for, common financial scams and tips on how to avoid them.

Quick Security Tips

Bank Safely

Your accounts and personal information are secure with our online, ATM, and mobile security features. Sign Up for SMS and Fraud alerts. Transact online using only trusted sites and review your bank statement regularly.

Prevention Matters

Fraudsters exploit trust and technology to target individuals and businesses. Understanding their methods empowers you to protect yourself and respond swiftly if targeted.

Protect Yourself

This guide provides actionable strategies to recognize, prevent, and respond to fraud, including card fraud, digital scams, identity theft, and money laundering. Be steady, stay vigilant to keep your finances secure.

Think before you act

Pause before sharing personal or payment details. If something feels off, reject or ignore requests. Only scammers rush or pressure you. Our staff will never ask you for your PIN or passwords.

Bank Safely

Your accounts and personal information are secure with our online, ATM, and mobile security features. Sign Up for SMS and Fraud alerts. Transact online using only trusted sites and review your bank statement regularly.

Prevention Matters

Fraudsters exploit trust and technology to target individuals and businesses. Understanding their methods empowers you to protect yourself and respond swiftly if targeted.

Protect Yourself

This guide provides actionable strategies to recognize, prevent, and respond to fraud, including card fraud, digital scams, identity theft, and money laundering. Be steady, stay vigilant to keep your finances secure.

Think before you act

Pause before sharing personal or payment details. If something feels off, reject or ignore requests. Only scammers rush or pressure you. Our staff will never ask you for your PIN or passwords.
Information Fraudstars are looking for;

  • Account/card numbers and expiry dates
  • Magnetic Stripe Data (track 1 and/or track 2)
  • CVV2 (the three-digit code on the back of cards)
  • Personal Identification Numbers (PINs)
  • Personal information
  • Name and address
  • Phone/mobile number
  • Email address
  • Identity Number
  • Online/Mobile Banking login credentials
  • Internal company user identities and passwords
  • Policies and processes
How to Protect yourself

  • Strong Passwords: Use strong passwords (12+ characters, mixed letters/numbers) and enable two-factor authentication (2FA) on mobile money, banking, and email accounts.
  • Protect Your Phone: Keep your phone and apps updated, install antivirus software (e.g., Avast), and use a strong Wi-Fi password.
  • Shop Safely: Use websites with “https://” and avoid public Wi-Fi for mobile money or banking transactions.
  • Monitor Accounts: Enable SMS alerts and regularly check your bank or mobile money balance.
  • Limit Sharing: Avoid posting sensitive information like ID numbers, addresses, or phone numbers on social media.
  • Stay Skeptical: Ignore unsolicited calls, texts, or emails requesting money or PINs. Verify with your bank or telecom.
  • Phone Security: If your phone freezes, restarts, or behaves unusually, immediately check your mobile money and bank accounts. Contact your bank and telecom for assistance.

Common types of Fraud and Scams

Below are the most prevalent fraud types, their warning signs, and prevention strategies.

  • Card
  • Online
  • Phone
  • Transactional
  • Identity Theft & Impersonation
  • Money Laundering
Card Swap Fraud

Scammers swap your bank card with a fake or stolen card during a transaction (e.g., at an ATM, POS terminal, or shop) and use your real card for unauthorized transactions.

How It Works:

Fraudsters distract you during a transaction by offering “help” at an ATM, posing as a shop assistant, or causing a commotion. They swap your card with a similar looking one, leaving you unaware until fraudulent transactions occur.

Red Flags:

  • Strangers offering unsolicited help at ATMs or POS terminals, especially in crowded areas.
  • Your card appears different after a transaction (e.g., faded logo, wrong name, or slightly altered design).
  • Unexpected withdrawals or purchases on your account, often within hours of card use.
  • Tampered or loose card slots on ATMs or POS devices.
  • A shop assistant or bystander handling your card longer than necessary or out of sight.
  • SMS alerts showing unauthorized transactions or no alerts despite recent card use.

Prevention Tips:

  • Shield your PIN with your hand or body when entering it at ATMs or POS terminals.
  • Verify your card immediately after a transaction (check your name and card number).
  • Politely decline help from strangers at ATMs or shops to Avoiding distractions.
  • Use ATMs in secure locations, like bank branches, and report suspicious devices to your bank (e.g., Stanbic Bank Uganda: 0800 250 250).
  • Enable SMS transaction alerts to detect unauthorized activity quickly.
If you suspect a swap, contact your bank immediately to block the card and report to the authorities
ATM Card Fraud

This is the illegal use of someone's ATM card or card details to steal money from their account. It involves fraudsters gaining unauthorized access to your ATM card or account information

Red Flags:

  • Suspicious devices attached to ATMs.
  • Strangers observing you enter your PIN.
  • Unexpected withdrawals from your account.

Prevention Tips:

  • Enable transaction alerts and review statements weekly.
  • Never share your card number, CVV, or PIN. Use strong PINs (avoid birthdays or “1234”) and change them every few months.
  • Inspect ATMs for loose or unusual devices.
  • Cover the keypad when entering your PIN to prevent “shoulder surfing.”
  • If your card is lost or stolen, immediately call your bank to block it.
  • Shred receipts containing card details.
Online Card Fraud

This is the unauthorized use of credit or debit card information to make purchases or transactions online.
It involves fraudsters obtaining card details (such as the card number, expiration date, and CVV) through various means and using them to conduct fraudulent activities without the cardholder's knowledge or consent. 

Red Flags:

  • Websites lacking “https://” or a padlock icon when requesting card details.
  • Emails or texts urging you to enter card details to “verify” accounts or claim prizes, often with poor grammar.
  • Unknown charges after shopping online, especially on unfamiliar or local e-commerce sites.
  • Pop-up ads or redirects to payment pages that may install malware.
  • Requests for your card’s CVV or OTP via WhatsApp or SMS, posing as your bank.

Prevention Tips:

  • Shop on secure sites with “https://” and a padlock. Avoid public Wi-Fi for transactions.
  • Ignore unsolicited emails or texts requesting card details. Verify with your bank.
  • Use one-time passwords (OTPs) or 3D Secure (e.g., Verified by Visa) for online purchases.
  • Report unauthorized transactions immediately and disable cards via digital channels.
Card Not Present

This is a wide-ranging term for theft and fraud committed, without the fraudster being in possession of your card, in order to make online purchases using your card details.

 Important tips to avoid ‘Card Not Present’ Fraud:

  • Check your bank statements often for any suspicious transactions and if you find any, contact us immediately.
  • You should always keep your statements and cards in a safe place.
  • Never take a photo of your card, or post your card details anywhere online.
  • Always verify the website address before making an online card payment, as fake sites may have extra words or spelling errors.
  • Inspect card machines carefully; if anything looks suspicious or tampered with, avoid using them.
Phishing, Smishing, and Vishing

Fraudsters impersonate trusted entities via emails (phishing), texts (smishing), or calls (vishing) to trick you into sharing sensitive information or clicking malicious links.

 

Red Flags:

  • Urgent emails threatening account suspension.
  • Calls requesting your PIN, OTP, or password, claiming your account is “at risk.”
  • Emails with spelling errors, unfamiliar senders, or urgent requests to click links.
  • Messages mimicking official bank or telecom formats but sent from personal numbers.
  • Social media ads or WhatsApp messages directing to fake login pages.

Prevention Tips:

  • Avoid clicking links in unsolicited emails or SMS. Access your bank’s website by typing www.stanbicbank.co.ug directly.
  • Do not create desktop shortcuts to online banking, as malware may redirect them to phishing sites.
  • Keep electronic payment and withdrawal limits low.
  • Delete suspicious SMS without replying.
  • Contact your bank to verify suspicious messages.
  • Ensure you’re on the authentic website before entering personal information.
  • If you suspect a compromised device, contact your bank immediately.
  • Use complex passwords and change them regularly.
  • Avoid storing banking information on your smartphone.
  • Treat urgent security alerts or offers as potential hacking attempts.
Online Purchase and Investment Scams

Scammers advertise fake products, jobs, or investments (e.g., crypto, betting) on social media or websites to steal money or data.

Red Flags:

  • Ads for cheap electronics with no verifiable seller details.
  • Job offers requiring upfront fees without a physical office or contract.
  • Investment schemes promising unrealistic returns (e.g., “Double your money in 30 days”).
  • Poorly designed websites or social media pages with broken links or no contact information.
  • Requests to send money to personal accounts via mobile money or bank transfer.
  • Overly positive or repetitive testimonials often fabricated.

Prevention Tips:

  • Buy from trusted platforms and check seller reviews.
  • Verify job or investment offers with a trusted person or your bank.
  • Avoid sending money to strangers on WhatsApp or Facebook for “deals.”
Risks of Saving Credentials

Saving banking or mobile money PINs in texts, emails, or phone notes increases vulnerability to hackers.

Red Flags:

  • Notifications of unauthorized access to your accounts.
  • Saved PINs or passwords in your phone’s notes, messages, or email drafts.
  • Browser prompts to auto-save banking passwords on shared devices.
  • Login attempts from unfamiliar locations or devices.

Prevention Tips:

  • Never save PINs or passwords in texts, emails, or phone notes. Delete messages with sensitive details.
  • Disable auto-save for banking passwords and use “private” mode on shared devices.
  • Use strong, unique passwords and enable 2FA.
Stolen Phones

Fraudsters access banking apps or data on stolen devices.

Red Flags:

  • Unexpected transactions after losing your phone.
  • Login attempts or password reset requests from unknown devices.
  • Strange messages sent from your number.
  • Unauthorized activity in banking apps.

Prevention Tips:

  • Report a stolen phone to your bank (e.g., Stanbic Bank Uganda: 0800 250 250) and telecom immediately.
  • De-link your stolen phone from your banking app: Log in on another device, go to More > Settings > Devices > Unlink.
  • Change passwords for banking and email accounts and enable 2FA.
  • Monitor accounts for unusual transactions.
SIM Swap and Twin SIM Scams

Fraudsters take control of your phone number to intercept OTPs or access accounts by duplicating your SIM card.

Red Flags:

  • Sudden loss of phone signal in a regular network area.
  • Inability to receive calls, messages, or requested OTPs.
  • Unexpected transactions after losing phone service.

Prevention Tips:

  • Contact your bank and carrier immediately if your phone loses service.
  • Add a PIN or password to your carrier account.
  • Be cautious of offers for second SIMs or number transfers.
  • Monitor accounts for unauthorized activity.
Cheque Fraud

This refers to fraud on a customer’s account using a cheque leaf/leaves not authorised by the account signatory/signatories.

The typical kinds of cheque frauds are;

  • Cloned Cheques - This is where fraudsters try to make fake cheque books and use to defraud customers.
  • Washed Cheques - These are cheque leaves where some information have been erased and substituted with details of a customer who is going to be defrauded.
  • Altered Cheques - These are genuine cheques ready to be presented but lands in the hands of a fraudster and payment instructions like payee details are altered.
  • Stolen Cheques - These are genuine cheque leaves stolen from a cheque book by a fraudster and account signatories forged and used to defraud the customer.

 

Important tips to avoid cheque fraud:

  • Never sign blank cheques
  • Report the loss of your cheque book or card to the bank immediately
  • Avoid posting cheques as they could be intercepted
  • Do not leave open spaces. Instead, draw a line to avoid any information being added
  • Reconcile your cheques against your bank statements.
  • It is important to check your bank statements regularly and look out for any suspicious transactions
  • Do not use abbreviations as payee details
  • Use crossings appropriately
  • Familiarise yourself with the different bank cheque layouts
Invoice and Mandate Scams

Scammers send fake invoices or emails with incorrect bank details to divert payments.

Red Flags:

  • Emails from slightly altered addresses (e.g., [email protected] instead of stanbicbank.co.ug).
  • Sudden changes to payment details in invoices without prior notice.
  • Urgent payment requests citing penalties or account suspension.
  • Invoices with formatting errors or missing logos.
  • Calls or texts from “suppliers” pressuring payment to a “new” account.
  • Lack of response when verifying invoices via the company’s official number.

Prevention Tips:

  • Verify bank details by calling the company using a known number.
  • Check with your bank to confirm the recipient’s account.
  • Be cautious of urgent payment requests, especially for large amounts.
Identity Theft & Impersonation

Fraudsters steal personal data to open accounts, make purchases, or impersonate you or trusted entities (e.g., family, bank staff).

 

Red Flags:

  • Messages from “friends” or “family” on new numbers urgently requesting money.
  • Calls claiming your account is “at risk” and requesting sensitive details.
  • Unknown accounts opened in your name.
  • Fake social media profiles mimicking you or your contacts.
  • Bills or debt collection notices for unfamiliar services or loans.
  • Strangers contacting you with accurate personal details, suggesting a data breach.

Prevention Tips:

  • Limit personal details shared on social media (e.g., birthdate, address).
  • Verify identities using known contact methods.
  • Never transfer money to a “safe account”—banks do not request this.
  • Report fake WhatsApp messages: Tap the three dots, select “More,” then “Report.”
  • Update software to patch vulnerabilities.
Money Laundering

Fraudsters use complex methods to disguise illegal money through mobile money, bank accounts, or cryptocurrencies.

 

Red Flags:

  • Frequent large transactions you didn’t initiate.
  • Transfers to or from unknown accounts, often international.
  • Requests to move money quickly for vague reasons.
  • Unsolicited offers to handle cryptocurrency or foreign currency transactions.
  • Bank or telecom notifications about suspicious high-volume transactions.
  • Strangers asking you to receive and forward money to “clean” it.

Prevention Tips:

  • Monitor accounts for large or frequent unfamiliar transactions.
  • Avoid unsolicited offers to handle money, especially via social media.
  • Verify large payment sources with your bank or a trusted advisor.
  • Report suspected money laundering to your bank (0800 200 160).
Mule Account Fraud

Scammers trick you into allowing them to use your bank or mobile money account to receive or transfer illegal funds, often offering a small reward. This makes you an unwitting “money mule,” a crime in Uganda.

How It Works:

Scammers contact you via WhatsApp, social media, or in person, claiming they need your account for a “business deal” or because they lack ID to open an account. The money is often from illegal activities.

Red Flags:

  • Offers to receive money in your account for a “deal” you’re not involved in.
  • Requests to open accounts for others due to missing ID.
  • Unexpected large deposits from unknown sources.
  • Pressure to transfer money quickly to another account.
  • Social media job offers promising easy money for handling transactions.
  • Bank flagging or freezing your account due to suspicious activity.

Prevention Tips:

  • Never allow others to use your bank or mobile money account.
  • Do not open accounts for others, especially if they lack ID.
  • Report suspected illegal money to the Uganda Police Force (999 or 112) or your bank’s fraud line (0800 200 160).
  • Monitor accounts for unusual deposits or transfers.
  • Be cautious of job offers promising easy money.

Consequences:

Acting as a money mule, even unknowingly, can lead to arrest, prosecution for money laundering, and a criminal record, impacting future job prospects and financial access.