7. Protecting your money and mobile payments

How Mobile Payment Fraud Happens

Before you can protect yourself, you need to understand how criminals steal money from mobile payment accounts. There are five common methods used in Ethiopia:

1. SIM-swap fraud

A criminal visits an Ethio Telecom shop or calls customer care, pretends to be you, and convinces the agent to transfer your phone number to a new SIM card they control. Once they have your number, they can receive your one-time passwords (OTPs) and reset your TeleBirr or bank account. To do this, they usually first gather your personal details from social media or phishing messages.

2. Fake OTP requests

You receive an SMS or phone call saying 'Your TeleBirr transfer has been initiated. To CANCEL it, reply with the code we just sent you.' The code they sent IS the OTP needed to AUTHORISE a transfer — not to cancel it. By giving the code you actually approve the payment.

3. 'Merchant terminal' trick

A criminal pretending to be a market seller or taxi driver shows you a payment QR code. The amount is correct, so you scan and approve — but the merchant code belongs to a fraud account. Always confirm the merchant name displayed on your screen before approving.

4. Fake customer-care calls

You receive a call from someone claiming to be TeleBirr, CBE, or another bank. They say your account has a problem and ask for your PIN, OTP, or the last four digits of your SIM card serial number. Legitimate banks and telecom companies NEVER ask for your PIN or OTP by phone.

5. Screen-sharing and remote access scams

A 'helper' asks you to install an app such as AnyDesk or TeamViewer to 'fix a problem' on your phone. Once installed, they can see your screen and operate your phone remotely — including opening your banking app and transferring your money out.

How to Secure Your TeleBirr and Bank Apps

Setting up your accounts correctly is the single most important thing you can do. Follow these steps for every financial app on your phone:

Set a strong, unique PIN

Most mobile money apps including TeleBirr use a 4- or 6-digit PIN. Do not use obvious numbers such as your birthday (e.g. 2309 for 23 September), your phone number's last digits, or repeated numbers like 1111 or 123456. Create a PIN you will remember but that a stranger cannot guess. If the app allows a longer password instead of a PIN, use it.

Never share your PIN with anyone

Not with your spouse, your child, your best friend, or a bank employee. Your PIN is yours alone. If you believe someone has seen or guessed your PIN, change it immediately from within the app (TeleBirr: Menu → Settings → Change PIN).

Enable biometric login where available

Both TeleBirr and most bank apps support fingerprint or face-unlock as an alternative to the PIN. This is faster and more secure because your fingerprint cannot be guessed or stolen over the phone. Enable it in the app's security settings.

Set a daily transfer limit

Many bank apps allow you to set a daily maximum amount for transfers. Keep this limit low — enough for your daily needs but not your entire savings. Even if a fraudster gains access, they can only steal up to your daily limit.

Check your transaction history regularly

Open your TeleBirr or bank app at least once a week and review every transaction. If you see a transfer you did not make — no matter how small — report it to your bank or TeleBirr immediately. Criminals sometimes start with a small test transaction before making a large one.

Recognising and Avoiding Payment Scams

Fraudsters are creative and constantly invent new tricks. Here are the most common payment scams in Ethiopia, and exactly what to do:

The 'wrong transfer' scam

You receive money in your TeleBirr account from a stranger. Then someone calls and says 'I sent you money by mistake — please send it back.' You transfer the money back, but then you discover the original transfer was made using a stolen account. Your own money is now gone and the original victim's money never actually left their account.

What to do: Never return money to a stranger without first contacting TeleBirr (127) and letting them investigate. Do not touch the received amount until it is verified.

The 'prize winner' scam

You receive a call or SMS saying you have won a big prize — a car, cash, or a phone — in a TeleBirr or bank lottery. To receive it, you must first pay a 'small processing fee' or 'tax'. Legitimate lotteries never ask winners to pay first.

What to do: Hang up. TeleBirr and Ethiopian banks do not require you to pay to receive a prize.

The 'job offer' money-transfer scam

You are offered an easy job: receive money in your account and transfer it to another account, keeping a percentage as commission. This is money laundering — you are being used as a 'mule'. You will be held legally responsible even if you were tricked.

What to do: Refuse any job that involves receiving and forwarding money through your personal account.

Fake QR codes and payment links

Scammers create QR codes or payment links that look like they come from real businesses. Always double-check the merchant name and amount on your phone screen before confirming any payment.

Protecting Your SIM Card and Phone

Your SIM card is the key to your mobile money life. Losing control of it — even for an hour — can cost you your entire savings. Here is how to lock it down:

Set a SIM PIN (separate from your phone PIN)

Every SIM card can have its own PIN, separate from your phone's screen lock. If your phone is stolen and the thief moves the SIM to another phone, they will need this PIN before the SIM works. To enable it:

• On Android: Settings → Security → SIM card lock → Lock SIM card

• On iPhone: Settings → Cellular → SIM PIN

Set a strong screen lock

Use a fingerprint, face unlock, or a 6-digit (or longer) PIN to lock your phone screen. Avoid 4-digit PINs — they are easier to guess or shoulder-surf. Never use a pattern lock that leaves visible smudges on the screen.

Know your IMEI number

Dial *#06# on your phone to see your IMEI — a unique number that identifies your handset. Write it down and keep it somewhere safe (not on the phone itself). If your phone is stolen, report the IMEI to Ethio Telecom and the police — they can block the phone from working on any network in Ethiopia.

Protect against SIM-swap fraud

Contact Ethio Telecom and ask to put a 'SIM replacement restriction' or additional verification on your account. Some operators require you to visit a branch in person with your original ID to replace a SIM — make sure this is set for your number.

Never let strangers handle your phone

A common trick is for a stranger to ask to 'make a quick call' or 'check something' on your phone. They can quickly install malware, view your banking apps, or swap your SIM. Politely refuse — offer to dial the number yourself while holding the phone.