POS TRANSACTION SAFETY IN NIGERIA
Point-of-Sale (POS) services have become an important part of everyday financial activity in Nigeria.
People use POS terminals to:
- Withdraw cash
- Transfer money
- Deposit money
- Make payments
- Check balances
- Complete other financial transactions
POS services can be convenient, especially where access to traditional banking facilities may be limited.
But convenience does not remove the need for verification.
A POS transaction can involve several points where mistakes, manipulation, misunderstanding or fraud can occur.
The most important principle is:
BEFORE YOU AUTHORISE A POS TRANSACTION, VERIFY THE AMOUNT, PURPOSE, RECIPIENT AND TRANSACTION DETAILS.
1. WHAT IS A POS TRANSACTION?
POS means Point of Sale.
A POS terminal is an electronic device used to process certain financial transactions.
Depending on the service and provider, a POS terminal may support:
- Cash withdrawals
- Transfers
- Payments
- Balance-related services
- Other approved financial transactions
A POS operator may assist customers in completing transactions.
However, the fact that someone is operating the terminal does not mean you should surrender control of the transaction.
You remain responsible for checking what you are authorising.
2. THE POS OPERATOR SHOULD NOT REPLACE YOUR VERIFICATION
When another person operates a POS terminal for you, it can be easy to become passive.
You may think:
“They know how to use the machine.”
“They do this every day.”
“I'll just enter my PIN.”
That can create risk.
The operator may be familiar with the process, but you still need to verify:
- The transaction type
- The amount
- The recipient where applicable
- The charges
- The final transaction result
Your PIN should remain private.
3. NEVER GIVE YOUR PIN TO THE OPERATOR
Your PIN is an authentication secret.
Do not tell the operator your PIN.
If the terminal requires you to enter a PIN, enter it yourself.
Shield the keypad where possible so that people nearby cannot easily observe your PIN.
This is especially important in crowded environments.
Someone does not need to steal your card to cause a problem if they can obtain your card information and PIN through other means.
4. CHECK THE AMOUNT BEFORE ENTERING YOUR PIN
One of the most important POS habits is:
LOOK AT THE AMOUNT BEFORE YOU AUTHORISE.
If you intend to withdraw:
₦10,000
make sure the terminal shows:
₦10,000
before entering your PIN.
Do not assume that the amount is correct because you told the operator what you wanted.
Check the actual amount displayed by the terminal.
5. THE EXTRA-ZERO PROBLEM
A dangerous mistake can occur when an amount is entered incorrectly or deliberately changed.
Imagine you ask for:
₦1,000.
The operator enters:
₦1,000.
But before you authorise the transaction, the amount is changed to:
₦10,000
or:
₦100,000.
If you enter your PIN without checking the final amount, you may authorise the wrong transaction.
The important lesson is:
THE AMOUNT YOU REQUESTED IS NOT THE SAME AS THE AMOUNT YOU ARE AUTHORISING.
Always verify the final amount displayed on the device.
6. WHY THIS CAN BE EASY TO MISS
People often look at the first few digits and assume the transaction is correct.
A busy environment can make this worse.
You may be:
- In a hurry
- Distracted
- Talking to someone
- Holding a child
- Trying to catch transport
- Worried about a queue
- Looking at your phone
- Trusting the operator
Attackers and dishonest operators can take advantage of distraction.
Slow down for the few seconds required to verify the transaction.
7. DO NOT LET A QUEUE PRESSURE YOU
A long queue can create social pressure.
You may feel:
“People are waiting behind me.”
“I don't want to delay everyone.”
“Let me just enter the PIN.”
Do not allow the queue to decide whether you verify your money.
A few seconds of verification can prevent a much larger problem.
Your financial security is more important than avoiding a few seconds of inconvenience.
8. CHECK THE TRANSACTION TYPE
Do not only check the amount.
Check what the terminal is actually processing.
For example, make sure you understand whether the transaction is:
- Cash withdrawal
- Transfer
- Payment
- Deposit
- Another transaction type
If the transaction shown on the terminal does not match what you intended, stop.
Ask the operator to explain it before proceeding.
9. CHECK THE RECIPIENT FOR TRANSFERS
If you are making a transfer through a POS terminal, verify the recipient details where the system provides them.
Check:
- Account number
- Account name
- Bank
- Amount
If the displayed recipient name is different from what you expected, stop and investigate.
Do not assume:
“The system probably knows what it is doing.”
The transfer may be going to a different destination.
10. VERIFY BEFORE AUTHORISING
The final screen before PIN entry or transaction confirmation is an important security checkpoint.
Use it.
Before authorising, ask:
Is the amount correct?
Is the transaction type correct?
Is the recipient correct?
Are the charges clear?
Did I request this transaction?
If anything looks wrong:
STOP.
11. NEVER SHARE YOUR PIN VERBALLY
You may hear:
“Tell me your PIN.”
“I need it to complete the transaction.”
“Just say the four digits.”
Do not.
The person may be able to complete the transaction without knowing your PIN.
If a legitimate terminal requires your PIN, enter it yourself.
A private PIN should remain private.
12. BE CAREFUL WHEN SOMEONE OFFERS TO “HELP”
Someone may say:
“Give me the card; I'll help you.”
“Let me enter the PIN for you.”
“Let me finish the transaction.”
“Give me your PIN so I can process it faster.”
Do not surrender control unnecessarily.
If you need assistance, keep your PIN private and maintain visibility of the transaction.
Convenience should not require you to surrender an authentication secret.
13. COUNT YOUR CASH
After a cash withdrawal, count the cash carefully.
Do not immediately walk away without checking.
If there is a discrepancy, address it as soon as possible.
Also check the receipt or transaction notification where available.
A receipt can help document:
- Amount
- Date
- Time
- Transaction reference
- Terminal or provider information
Keep evidence when something appears wrong.
14. VERIFY YOUR BALANCE
After an important transaction, check your account through your own banking application, SMS notification or another trusted method.
This can help confirm:
- What amount was actually deducted
- Whether the transaction succeeded
- Whether the correct transaction occurred
- Whether unexpected charges appeared
Do not rely only on what someone verbally tells you.
15. DO NOT TRUST A SCREENSHOT AS YOUR ONLY PROOF
Someone may show you a screenshot saying:
“The money has been transferred.”
A screenshot can be edited or presented out of context.
If you are the recipient, verify the transaction through your own account.
For example, if someone says they transferred ₦100,000 to you:
Check your actual account.
Do not release goods or provide cash merely because the person shows a screenshot.
16. WATCH FOR FAKE PAYMENT CONFIRMATIONS
A scammer may create a fake SMS or screenshot that appears to show a successful transfer.
They may say:
“The money has gone through.”
“Check your phone.”
“Here is the confirmation.”
Do not assume that a message on the other person's phone proves that your account received the money.
Check your own account.
17. SMS MESSAGES CAN ALSO BE MISLEADING
A message that appears to come from a bank or payment provider should not automatically be treated as conclusive proof.
If there is a discrepancy between:
What someone shows you
and
What your actual account shows,
trust the independently verified account information and investigate the discrepancy.
18. VERIFY CHARGES
Before completing a transaction, understand any applicable charges.
For example, if you expect a particular amount to be withdrawn, understand whether:
- A service charge applies
- A transaction fee applies
- The amount being processed includes a fee
Ask questions before authorising rather than discovering the difference afterward.
19. DO NOT ALLOW PRESSURE AFTER A FAILED TRANSACTION
A transaction may fail.
The operator may say:
“Let's try again.”
That may be perfectly legitimate.
But before repeating a transaction, check your account first.
A transaction that appears unsuccessful on the terminal may sometimes have a different status in the underlying banking system.
Before repeating a payment or withdrawal:
Verify whether the first transaction actually went through.
This can help prevent duplicate transactions.
20. WHAT IF YOUR ACCOUNT WAS DEBITED BUT CASH WAS NOT DISPENSED?
This can happen for legitimate technical reasons.
Do not immediately assume that someone has stolen your money.
First:
- Check your account.
- Keep the receipt.
- Record the transaction reference.
- Note the date and time.
- Note the terminal location.
- Contact the relevant bank or financial institution through its official channel.
- Follow the institution's dispute process.
Do not give your PIN to someone claiming they can reverse the transaction.
21. WHAT IF THE WRONG AMOUNT WAS DISPENSED?
If the amount of cash you receive does not match the transaction:
Do not simply walk away.
Keep the receipt.
Record the transaction information.
Check your account.
Report the discrepancy through the appropriate official channel.
The earlier the problem is documented, the easier it may be to investigate.
22. WHAT IF YOUR CARD IS RETAINED?
A terminal or ATM may sometimes retain a card because of a technical or security issue.
Do not give your PIN to someone who claims they can retrieve it.
Contact your bank through its official channel.
Follow the bank's instructions for blocking or replacing the card where necessary.
Do not accept an unsolicited stranger's offer to “help recover” the card.
23. NEVER GIVE YOUR CARD DETAILS TO A STRANGER
Be cautious if someone asks for:
- Card number
- PIN
- CVV
- OTP
- Expiry date
- Online-banking password
A person may claim:
“I need it to verify the transaction.”
Do not automatically trust the explanation.
Authentication secrets should remain private.
24. THE POS OPERATOR MAY ALSO BE A VICTIM
It is important not to assume that every POS operator is dishonest.
Many POS operators are legitimate people providing useful services.
The purpose of verification is not to accuse everyone.
It is to protect yourself regardless of who is operating the terminal.
A good security habit should work even when everyone involved is honest.
VERIFY because mistakes happen.
VERIFY because systems fail.
VERIFY because people can be impersonated.
VERIFY because fraud exists.
25. POS FRAUD CAN ALSO INVOLVE SOCIAL ENGINEERING
An attacker may approach an operator and claim:
“I am from the bank.”
“There is a problem with this terminal.”
“Enter this information.”
“Give me access.”
“Transfer this money.”
The operator should independently verify such requests through the institution's official channel.
The same security principle applies to businesses:
Never trust an unexpected technical or financial instruction simply because the person claims authority.
26. DO NOT FOLLOW UNUSUAL INSTRUCTIONS
Be cautious if someone tells you to:
- Transfer money to an unfamiliar account
- Withdraw cash and hand it to someone
- Read out an OTP
- Reveal a PIN
- Install an application
- Click an unexpected link
- Share a screenshot containing sensitive information
- Move money to a “safe” account
Unusual financial instructions deserve independent verification.
27. WHAT IF SOMEONE SAYS THE BANK SENT THEM?
Do not rely solely on the person's statement.
If someone says:
“The bank sent me.”
“The bank asked me to collect this.”
“The bank needs you to do this.”
verify through the bank independently.
The same applies to:
- Government officials
- Police
- Mobile-network representatives
- Payment providers
- Security personnel
- Company representatives
Authority must be verified.
28. POS SAFETY FOR CUSTOMERS
Before a POS transaction:
- Know what transaction you want.
- Confirm the amount.
- Observe the terminal.
- Keep your PIN private.
- Verify the final amount.
- Confirm the recipient for transfers.
- Authorise only after checking.
- Collect your receipt.
- Check your account when appropriate.
- Report discrepancies promptly.
29. POS SAFETY FOR OPERATORS
POS operators also need strong security practices.
Operators should:
- Protect customer information.
- Never ask customers to reveal private PINs unnecessarily.
- Keep their devices secure.
- Protect their own passwords and authentication methods.
- Verify unexpected instructions claiming to come from financial institutions.
- Keep transaction records.
- Reconcile transactions.
- Report suspicious activity.
- Avoid installing unauthorised software.
- Never allow unknown people to manipulate the terminal.
A POS business is both a financial service environment and a security environment.
30. POS SAFETY FOR BUSINESS OWNERS
If you operate a POS business, consider establishing procedures for:
- Device access
- Staff permissions
- Password management
- Transaction reconciliation
- Dispute handling
- Device maintenance
- Software updates
- Suspicious calls
- Fake support attempts
- Unusual transfer requests
Do not allow one person's phone, password or account to become the only way to control the entire operation.
31. KEEP YOUR DEVICE AND APPLICATIONS UPDATED
Security updates can address vulnerabilities and improve reliability.
Where your POS provider or financial institution provides official updates, follow the legitimate update process.
Do not install software from an unknown person simply because they claim:
“This update will fix your terminal.”
Verify the source.
32. BE CAREFUL WITH REMOTE ACCESS
A person may claim:
“Give me remote access to your phone so I can fix the POS issue.”
This can expose:
- Banking applications
- Passwords
- Messages
- Authentication codes
- Personal information
Never give an unsolicited person remote access to a device simply because they claim to be technical support.
33. IF YOU THINK A POS TRANSACTION WAS FRAUDULENT
Preserve evidence.
Record:
- Date
- Time
- Location
- Amount
- Transaction reference
- Account involved
- Receipt
- Messages
- Phone numbers
- Relevant screenshots
- Details of what happened
Then contact the appropriate financial institution through its official channel.
If money is involved, act promptly.
Do not allow another person to convince you to send additional money to “reverse” or “unlock” the transaction.
34. WHAT IF SOMEONE MADE A MISTAKE?
Not every wrong transaction is fraud.
A person may accidentally enter:
₦10,000
instead of:
₦1,000.
The security response is still the same:
Stop.
Verify.
Document.
Correct the transaction through the proper process.
Do not accuse someone without evidence.
Cybersecurity is about making safer decisions, not automatically assuming malicious intent.
35. COMMON POS MISTAKES
Mistake 1: “I told the operator the amount, so I don't need to check the screen.”
Better approach: Verify the final amount yourself.
Mistake 2: “The operator needs my PIN.”
Better approach: Enter your PIN yourself.
Mistake 3: “The transaction failed, so I can immediately try again.”
Better approach: Check your account first.
Mistake 4: “The customer showed me a transfer screenshot.”
Better approach: Verify the actual funds in your own account.
Mistake 5: “The person says they work for the bank.”
Better approach: Verify independently.
Mistake 6: “Everyone is waiting behind me.”
Better approach: Take the few seconds necessary to verify your transaction.
Mistake 7: “The difference is only a zero.”
Better approach: One zero can change ₦1,000 into ₦10,000 and ₦10,000 into ₦100,000.
36. A PRACTICAL EXAMPLE: THE EXTRA ZERO
Imagine you want to withdraw:
₦1,000.
The operator enters the amount.
You are distracted because people are waiting.
You glance quickly and enter your PIN.
The actual transaction is:
₦10,000.
You have just authorised a transaction ten times larger than intended.
The safest habit would have been:
Look at the final amount.
Pause.
Confirm.
Then enter the PIN.
The five-second verification could prevent a much larger problem.
37. A PRACTICAL EXAMPLE: FAKE TRANSFER
Someone comes to your business and says:
“I have transferred ₦50,000.”
They show you a screenshot.
You check your own account.
The money is not there.
They say:
“The network is slow. Just give me the goods.”
Do not release the goods solely because of the screenshot.
Wait for the payment to be independently confirmed through your own system.
A screenshot is evidence that can be investigated.
It is not automatically proof of settlement.
38. A PRACTICAL EXAMPLE: FAILED TRANSACTION
You attempt a withdrawal.
The terminal says:
“Transaction failed.”
You check your phone and see that your account was debited.
Do not immediately attempt several additional withdrawals.
Preserve the transaction details.
Contact the bank through the official channel.
Follow the dispute process.
Repeated transactions can make the situation more complicated.
39. PROTECT YOUR PHONE TOO
Your phone may contain:
- Banking applications
- Authentication apps
- SMS messages
- Payment applications
- Personal information
Protect it with appropriate security controls.
If your phone is lost or stolen, act quickly to secure important accounts and contact your mobile provider where necessary.
Do not assume that a screen lock alone solves every risk.
40. YOUR POS VERIFICATION CHECKLIST
Before authorising a POS transaction:
□ Did I request this transaction?
□ Is the transaction type correct?
□ Is the amount exactly correct?
□ Did I check for extra zeros?
□ Is the recipient correct?
□ Is the bank or provider correct?
□ Are the charges clear?
□ Am I entering my PIN myself?
□ Is anyone pressuring me to hurry?
□ Did I receive a transaction receipt?
□ Did I verify the final result?
□ If something failed, did I check my account before trying again?
□ If something looks wrong, have I stopped instead of proceeding?
41. IF YOU REMEMBER ONLY ONE THING
A POS terminal does not make a transaction automatically safe.
The operator does not make a transaction automatically safe.
A receipt does not make a transaction automatically safe.
A screenshot does not prove that money has arrived.
A person claiming to be from the bank does not automatically represent the bank.
Your safest protection is deliberate verification.