Transcript
Joy: Welcome to Your Phone, Your SACCO — using your society from the phone in your hand. I'm Joy, and with me is James. Today: protecting your PIN and your account.
James: Thanks Joy. This is the one I'd want every member to hear before they hear anything else.
Joy: Why this one first?
James: Because everything else we can fix. A wrong transfer can be traced. A late repayment can be rescheduled. Money that left because somebody had your PIN is the hardest to get back.
Joy: Before we go further — is it a PIN, or a password?
James: Both, depending where you are. USSD uses a PIN — four digits. The member app signs you in with a password. The rules are the same for each, so when I say PIN, take it to mean whichever one you use.
Joy: Good. So what makes a good one?
James: One that isn't about you. Not your year of birth, not the last digits of your phone number, not your ID number. Those are things other people can find out.
Joy: What about repeated or sequential digits?
James: Avoid them. One-two-three-four and one-one-one-one are the first things anyone tries. And don't use the same PIN as your mobile money — if one is compromised, both are.
Joy: Where should someone keep it?
James: In their head. Not written in the phone. Not in a contact saved as "PIN". Not on paper in the same wallet as the phone.
Joy: And who can ask for it?
James: Nobody. This is the rule that matters most, so let's be very clear. Your SACCO will never ask you for your PIN. Not the loans officer, not the manager, not a text message, not someone who calls saying they're from the system.
Joy: Not even to help fix a problem?
James: Especially not to fix a problem. That's the exact story fraudsters use. "There's an issue with your account, read me your PIN and I'll sort it." A real member of staff can help you without it — they have their own access.
Joy: What about the codes that arrive by SMS?
James: Same rule. A one-time code is a PIN with a short life. If someone rings and asks you to read out a code that just arrived, that call is the fraud. The code arrived because they are trying to get in.
Joy: What are the other common tricks?
James: Three. The urgent call — "act now or your account is locked" — because urgency stops people thinking. The false winner — you've won something, just confirm your details. And the wrong-number refund — "I sent money to you by mistake, please send it back." That one uses your decency against you.
Joy: How should a member respond to any of them?
James: Hang up. Then call the SACCO on the number you already have — from your passbook, your statement, or the branch you joined at. Never the number the caller gave you.
Joy: Let's talk about the phone itself.
James: Lock it. A screen lock is the first door, and a surprising number of members don't have one. If the phone is unlocked, everything on it is.
Joy: And getting to the app in the first place?
James: There's nothing to install — the member app is a web link your SACCO gives you, and it opens in any browser. Get that link from your SACCO, save it yourself, and always open your saved one. If a different link arrives by SMS or WhatsApp, don't tap it, however right it looks.
Joy: What about sharing the phone? Many families do.
James: Then use the screen lock, and never save your USSD PIN or your app password on it. Be careful with USSD especially — the number you dial from is your sign-in, there's no password screen, so whoever holds that handset is already inside your SACCO menu with only the PIN in the way.
Joy: What should a member do if they think something is wrong?
James: Move fast and don't be embarrassed. Change it immediately if you can still get in — the PIN on USSD, the password on the app. Call the SACCO and tell them. If the phone or SIM is lost, report it to the SACCO and the network the same day.
Joy: Does speed really change the outcome?
James: Enormously. Hours matter. And the members who lose the most are usually the ones who waited a day because they felt foolish. Nobody at the society is judging you — they deal with this regularly.
Joy: One habit to leave people with?
James: Check your balances. Open the app once a week and see that the numbers are what you expect. If anything looks wrong, ask your SACCO for a statement — you'll notice a problem long before anyone else does.
Joy: The takeaway: your USSD PIN and your app password are yours alone, nobody legitimate will ever ask for either, or for a code you've just received. Lock your phone, only ever open the member link your SACCO gave you, and if something feels wrong, change it and call your SACCO the same day. Thanks James, and thank you for listening to Your Phone, Your SACCO.