5. Securing your phone and SIM

Locking Your Screen — The First Line of Defence

If your phone has no screen lock — or uses a simple swipe — anyone who picks it up has full access to everything on it: your TeleBirr, your bank app, your email, and your private messages.

Set a strong screen lock right now:

• Use a PIN of at least 6 digits. Avoid obvious numbers like 1234, 0000, your birth year (e.g. 1995), or a repeated digit.

• A strong alphanumeric password (letters + numbers) is even better, though harder to type quickly.

• Face unlock or fingerprint unlock is convenient and secure — use it as your main method, but always set a PIN as a backup, because biometrics can fail (wet fingers, glasses off, low light).

• Avoid pattern locks — they leave grease trails on the screen that can be read by an observer.

Also set your screen to lock automatically after 30 seconds to 1 minute of inactivity. You will find this under Settings → Display → Screen timeout (the exact menu name varies by phone brand).

Protecting Your SIM Card

Your SIM card is as valuable as your phone itself. Here is why — and what to do:

Enable your SIM PIN

Your SIM card has a separate PIN (different from your screen lock). If your phone is stolen and the thief removes the SIM to use it in another phone, the SIM PIN stops them cold. Without the correct PIN, the SIM is blocked.

How to enable it:

• Android: Settings → Security → SIM card lock → Lock SIM card → Enter your carrier's default PIN (for Ethio Telecom the default is often 0000 — change this immediately to something only you know).

• iPhone: Settings → Phone → SIM PIN.

Important: Do NOT forget your SIM PIN. If you enter the wrong PIN three times in a row, the SIM is locked and you will need your PUK code (printed on the original SIM card packet) to unlock it. Keep the PUK in a safe place.

What is a SIM swap attack?

In a SIM swap attack, a criminal goes to an Ethio Telecom or Safaricom shop and tricks staff into transferring your phone number to a new SIM card they control. Once they have your number, they can receive your bank and TeleBirr OTP codes, reset your passwords, and drain your accounts — all without ever touching your phone.

Warning signs of a SIM swap:

• Your phone suddenly loses all signal (no bars, 'No Service') even in a normal area.

• You stop receiving calls and SMS messages unexpectedly.

• You receive a message that your SIM has been changed.

If any of these happen, act immediately — call your telecom from another phone.

App Security and Permissions

The apps on your phone can themselves become a security risk if you are not careful about where you get them and what permissions you allow.

Only install apps from official stores

Download apps from the Google Play Store (Android) or the Apple App Store (iPhone) only. Avoid installing apps from links sent on WhatsApp, Telegram, or websites. These unofficial APK files (on Android) often contain spyware or malware that runs silently in the background, stealing your messages and passwords.

Check app permissions

Every app asks for permissions when you install it. Ask yourself: does this app actually need this permission?

• A flashlight app that wants access to your contacts and microphone — say NO.

• A simple game that wants to read your SMS messages — say NO.

• The TeleBirr app asking for location and camera — reasonable for a financial app.

To review permissions on Android: Settings → Apps → [App name] → Permissions.

Keep your phone's software updated

Phone and app updates often contain security patches — fixes for vulnerabilities that criminals can exploit. When your phone tells you a system update is available, install it as soon as you can (preferably on Wi-Fi to avoid data charges). Outdated software is one of the most common reasons phones get compromised.

If Your Phone Is Lost or Stolen

Losing your phone does not have to mean losing your money and data — if you act fast.

1. Remotely lock or erase your phone

• Android: Go to android.com/find on any browser and sign in with your Google account. You can remotely lock, ring, or erase the device.

• iPhone: Go to iCloud.com/find and sign in with your Apple ID. Select 'Mark as Lost' to lock it, or 'Erase iPhone' if recovery seems impossible.

This only works if you had set up Google or Apple account sync before the phone was lost. Do it today — do not wait.

2. Change all passwords from another device

Start with your email, then TeleBirr, then your bank apps. Signed-in sessions on the lost phone will be ended when you change your passwords or remotely log out.

3. Call your telecom immediately

Ask Ethio Telecom to suspend your SIM. This prevents the thief from receiving your OTP codes. Bring your National ID to any Ethio Telecom shop to get a replacement SIM.

4. Report to the police

File a report with your local police station. You will need the IMEI number — a unique ID for your phone. You can find your IMEI by dialling *#06# on your phone, or on the original box. Keep this number written somewhere safe (not in the phone itself).