₦airaland Forum

Seeing a lot of these OTP scam stories lately so wanted to break down exactly how it works, because the "trick" is simpler than people think once you see it laid out.

The call sounds like it's genuinely from your bank's fraud department. They already know your account number and recent transactions (usually from an earlier data leak, not from hacking the bank itself). They say there's a fraudulent transfer in progress and they just need "one more verification code" to stop it.
That code is your real OTP. Reading it out doesn't stop anything — it hands them the transfer they claimed to be stopping.

How to tell it's not really your bank:
• Any request to read out an OTP, PIN, or full card number over the phone
• Pressure to act "before the transfer completes" — real banks freeze suspicious transfers automatically, they don't need you racing a clock
• Caller ID showing your bank's real number — this is trivially spoofable and proves nothing on its own

The one rule that stops this completely: no real bank employee will ever ask you to read out an OTP over the phone. Not GTBank, not Zenith, not any bank. If anyone asks, hang up.
Safest way to verify any bank call: hang up, then dial the number printed on the back of your card or in the bank's official app. Never a number the caller gives you, never "call back" the same number that just rang you.
If you've already shared a code: call your bank's fraud line immediately, report to the EFCC, and change your banking app password and PIN right away.


Wrote up a fuller breakdown of this and other Nigeria-specific scams (BVN fraud, Opay/Palmpay patterns) here if useful: hackedbeforebreakfast.com