Blogs

🔐 Is Your Digital Wallet Safe? 5 Cyber Threats Every Nepali Should Know

🎣 Phishing Attacks

Fake SMS messages saying "Your account will be locked in 6 hours, verify now!" These look real, using shortcodes like 'AT_Alert'. Facebook and Messenger alone saw 9,829 fraud incidents in 2024–25. Simple rule: never click links in unsolicited messages. Your wallet will never ask for your OTP this way.

📲 Fake Apps & Malicious APKs

Fake loan or cashback apps shared via WhatsApp secretly install remote access tools like AnyDesk on your phone giving scammers full control. One investment app scam in Nepal caused Rs 12.08 crore in losses across 70,000+ victims. Only download apps from the official Play Store or App Store.

🔄 SIM Swap Fraud

A scammer visits your telecom provider, pretends to be you, and gets your number transferred to their SIM. Every OTP now goes to them. Dial *#21# to check if your calls are being forwarded, and ##002# to disable it immediately.

😈 Fake Customer Support Calls

"Namaste, I'm calling from your wallet's support team..." Online fraud cases in Nepal rose 307% and fake support calls are a major reason. No legitimate wallet will ever ask for your OTP or MPIN over a call. Hang up and call the official number yourself.

📷 QR Code Scams

Scammers place fake QR stickers over real merchant codes in restaurants, parking lots, and shops across Kathmandu, Bhaktapur, and Pokhara. Always check the merchant name on screen after scanning before you confirm any payment.

📋 Quick Safety Checklist

Phishing SMS/calls: Never share OTP or MPIN, ever
Fake apps: Only install from Play Store / App Store
SIM Swap: Dial *#21# regularly, set SIM PIN
Fake support calls: Hang up, call official helpline directly
QR Code scams: Always verify merchant name before paying

🚨 Got Scammed? Act Immediately

📞 Nepal Police Cyber Bureau: 100 or 1930
🌐 cyberbureau.nepalpolice.gov.np
🔒 Freeze your wallet account right away

🛡️ Your Security is CityPAY's Priority

As a Nepal Rastra Bank licensed digital wallet, CityPAY uses mandatory KYC verification, encrypted transactions, and continuous fraud monitoring. We will never ask for your OTP, MPIN, or password. Ever.