SECURE YOUR USSD BANKING

Secure your USSD banking.

Practical protection for PINs, USSD transactions, mobile numbers, transfers and the phones you use to access your money.

USSD is convenient. That does not mean you should rush.

Before authorizing a transaction, confirm the beneficiary, account number and amount. The CBN's consumer guidance specifically emphasizes protecting PINs, promptly reporting fraud and confirming transaction details and recipients before authorization.

Most importantly, never give your PIN, OTP, password, token or authorization code to someone who contacts you unexpectedly.

USSD SECURITY

Work through these protections one at a time.

USSD menus differ between banks. These guides focus on safe banking behaviour and the security controls you should look for rather than pretending every bank uses the same steps.

Use only your bank's official USSD code

Do not dial a USSD code simply because someone sent it to you in a message or told you over the phone.

Click to see protection steps

Step-by-step

Find your bank's official USSD code from a trusted source.
Use your bank's official website, official app, card documentation or another trusted bank-provided source to confirm the code.
Save the verified code somewhere convenient if you use USSD regularly.
Be cautious if someone suddenly sends you a different code through WhatsApp, SMS or social media.
Do not dial a code simply because someone says your account will be blocked if you do not.
If you are unsure, contact your bank through its official customer-service channel.

VERIFY: Before using USSD, confirm that the code you are about to dial came from a trusted official source belonging to your bank.

Protect your USSD PIN

Your USSD PIN is a security secret. Treat it with the same care as other banking credentials.

Click to see protection steps

Step-by-step

Never share your USSD PIN with another person.
Do not tell anyone your PIN over a phone call, WhatsApp message or face-to-face conversation.
Shield your phone screen when entering your PIN around other people.
Do not write your PIN somewhere that another person can easily find.
If you believe someone has seen or obtained your PIN, contact your bank through an official channel.
Change or reset the PIN using your bank's legitimate process if necessary.

VERIFY: Confirm that nobody else knows your USSD PIN and that you know how to change or report it if it becomes compromised.

Verify the transaction before approving it

USSD makes transactions convenient, but convenience should never replace verification.

Click to see protection steps

Step-by-step

Start the transaction only after you know exactly what you intend to do.
Check the beneficiary name shown by your bank where available.
Check the account number.
Check the amount.
Check any transaction description or reference shown.
If the request came from another person, verify the request through a separate trusted channel.
Do not allow urgency to prevent you from checking the final details.
Only enter your PIN when the transaction details are correct and you genuinely intend to authorize it.

VERIFY: Before entering your PIN, confirm that the final transaction details match exactly what you intended.

Never give your PIN or OTP to a caller

A person can sound convincing and still be a scammer. Your banking secrets remain yours.

Click to see protection steps

Step-by-step

Stop if someone calls claiming to be your bank and asks for your PIN.
Never provide your USSD PIN, OTP, password, token or authorization code.
Do not read an SMS verification code to a caller.
Do not follow USSD instructions simply because a caller claims they are trying to protect your account.
End the call if you feel pressured.
Contact your bank using a trusted official number or channel that you obtained independently.

VERIFY: If someone asks for a banking secret, stop and verify the request independently instead of continuing the conversation.

Be careful with USSD instructions sent by message

Scammers can use SMS, WhatsApp and social media to convince people to dial codes or authorize transactions.

Click to see protection steps

Step-by-step

Treat unexpected USSD instructions as unverified.
Check who sent the message.
Do not assume that a familiar name or profile means the request is legitimate.
Be especially cautious if the message creates urgencyor threatens account closure.
Do not dial a code because someone says it will unlock, upgrade, reverse or secure your account.
Verify the instruction through your bank's official channel.

VERIFY: Only follow a USSD instruction after independently confirming that the instruction and code are legitimate.

Be careful when using another person's phone

USSD transactions can expose sensitive banking information if another person has access to the phone or watches what you enter.

Click to see protection steps

Step-by-step

Whenever possible, use your own phone for banking.
Avoid performing sensitive banking transactions on a phone you do not control.
If you must use another device in an emergency, be especially careful about what appears on the screen.
Shield your PIN when entering it.
Do not allow another person to enter your PIN for you.
End the session normally when the transaction is complete.

VERIFY: Confirm that you are using a device you trust and that nobody else has seen your PIN or transaction information.

Check the transaction confirmation

A transaction should not be considered complete simply because you entered a USSD code.

Click to see protection steps

Step-by-step

Wait for the transaction confirmation from your bank.
Review the amount and transaction status shown.
Keep the transaction reference if one is provided.
Check your bank's SMS, app notification or account balance where appropriate.
If the transaction fails, do not immediately repeat it without checking whether the first attempt was actually processed.
If the status is unclear, contact your bank through its official support channel.

VERIFY: Confirm the final transaction status through your bank's own confirmation or account records.

Do not repeat a transaction blindly

A failed-looking USSD session does not always mean that no transaction occurred.

Click to see protection steps

Step-by-step

If USSD displays an error or timeout, stop before immediately trying again.
Check for an SMS or other transaction notification.
Check your account balance or transaction history through a trusted banking channel.
Look for a transaction reference or debit confirmation.
If you cannot determine whether the transaction succeeded, contact your bank before attempting the transaction again.

VERIFY: Confirm whether the original transaction succeeded or failed before attempting the same transaction again.

Secure your SIM and phone number

Your mobile number may be connected to banking notifications and authentication, so protect access to it.

Click to see protection steps

Step-by-step

Keep your SIM card under your control.
Protect your phone with a strong screen lock.
Do not give your SIM or phone to someone simply because they claim to need it for a banking problem.
Pay attention if your phone suddenly loses network service without an obvious reason.
If you suspect your SIM or number has been compromised, contact your mobile network provider and bank through their official channels.

VERIFY: Confirm that your SIM, phone and mobile number remain under your control and that unexpected loss of service has been investigated.

Protect your phone from unauthorized access

USSD security also depends on protecting the physical device used to access your bank.

Click to see protection steps

Step-by-step

Enable a strong screen lock.
Use supported biometric security where appropriate.
Keep your phone's operating system updated.
Do not leave your phone unlocked around people you do not trust.
Do not install suspicious applications that request unnecessary access to your SMS, phone or financial information.
Review unusual applications or permissions if something about your phone changes unexpectedly.

VERIFY: Lock your phone and confirm that the security protection is active before using USSD for sensitive transactions.

Know what to do after a suspicious USSD transaction

If money leaves your account unexpectedly or you were deceived into authorizing a transaction, act quickly.

Click to see protection steps

Step-by-step

Stop making additional transactions while you investigate.
Preserve transaction references, SMS messages, screenshots and other evidence.
Contact your bank immediately through its official fraud-reporting or customer-service channel.
Explain what happened clearly and provide the transaction details.
Ask the bank what protective action should be taken on your account.
If you believe your PIN or other credentials were exposed, tell the bank so they can advise you on securing the affected channel.
Do not continue negotiating with the suspected scammer while waiting for the bank's response.

VERIFY: Obtain and keep the bank's complaint or case reference and follow the bank's instructions for the investigation.

Secure USSD after losing your phone or SIM

A lost phone or compromised SIM can create additional banking risk and should be addressed quickly.

Click to see protection steps

Step-by-step

Contact your mobile network provider through its official channel if your phone or SIM is lost.
Ask about securing or replacing the affected SIM where appropriate.
Contact your bank immediately through its official channel.
Tell the bank that your phone or SIM has been lost or may have been compromised.
Ask what steps the bank recommends for securing your USSD and other electronic banking channels.
Review recent account activity for transactions you did not initiate.

VERIFY: Confirm with your bank and mobile network provider that the affected phone, SIM or banking access has been secured.

Review your USSD security periodically

USSD security is not a one-time task. Review your habits and banking protections regularly.

Click to see protection steps

Step-by-step

Confirm that you still know your bank's official USSD code.
Review your transaction notifications.
Check recent transactions for anything unfamiliar.
Review your transaction limits where your bank provides that option.
Confirm that your mobile number and SIM remain under your control.
Review your phone's screen-lock and security settings.
Repeat these checks after changing phones, changing SIMs or noticing suspicious activity.

VERIFY: Confirm that your USSD access, phone, SIM and banking security controls still match your current situation.

Something does not look right?

If you find an unfamiliar login, changed recovery information, unexpected security alerts or another sign that someone may have accessed your account, stop the normal security check and move to the recovery process.

I think my account is compromised →

Still need help?

If you have worked through the relevant settings and something still looks wrong, do not give your security secrets to someone promising to fix the account. Use the service's official support and recovery resources for service-specific account problems.

For broader cybersecurity problems, you can also use the professional assistance pathway on this platform.

Need Professional Help? →

Ussd security is not a one-time task.

Review important account settings periodically, especially after a password change, device change, suspicious message or unexpected login alert.

VERIFY BEFORE YOU TRUST.

← Back to Secure Your Accounts