Central Bank warns against sharing OTP codes to prevent fraud

According to reports on social networks, some citizens claimed that answering calls from unknown numbers resulted in the unauthorized withdrawal of funds from their bank cards. The Central Bank has officially addressed these allegations.

Verification and security measures

The Central Bank explained that when a citizen registers on a mobile application of a commercial bank or payment system, they provide their phone number and enter a confirmation code received via SMS. Additionally, users may be required to undergo biometric verification to confirm their identity. After successful registration, users can link their bank card to the mobile application.

To link a bank card, a one-time password (OTP) is sent to the phone number associated with the card. The card is linked to the application only if the user enters the OTP correctly. The phone number provided during the registration process must match the one linked to the bank card. Otherwise, the application will reject the card linkage.

Furthermore, commercial banks and payment organizations restrict the use of newly registered bank cards in mobile applications for up to one hour to enhance security.

Risks of unauthorized withdrawals

The Central Bank emphasized that funds can only be withdrawn unlawfully if users:

1. Share their login credentials, passwords, or OTP codes with third parties (fraudsters).
2. Install harmful APK files distributed via messengers on their mobile devices.

“Answering calls from unknown numbers alone cannot result in unauthorized withdrawals from bank cards,” the Central Bank stressed.