Bank and ATM Scams: Card Skimming, Fake Bank Calls, and PIN Theft
Updated 2026-08-20
Beyond mobile money, scammers also target bank customers directly: at the ATM, over the phone, and through fake banking messages. Many of the same instincts that protect you from mobile money fraud apply here too, with a few bank-specific tricks to watch for.
Common tricks
Card skimming. A hidden device is fitted over or inside an ATM's card slot to copy your card's details when you insert it, sometimes paired with a tiny hidden camera to record your PIN as you type it.
- Before inserting your card, check the card slot and the keypad area for anything loose, added, or misaligned compared to the rest of the machine.
- Cover the keypad with your other hand while entering your PIN, so a hidden camera can't record it.
"Helpful stranger" at the ATM. Someone nearby offers to help when your card seems stuck, or distracts you right after you enter your PIN, then swaps or retains your card, or reads your PIN over your shoulder.
- Never accept help from a stranger at an ATM. If your card is genuinely stuck, contact your bank's official line or go inside the branch. Don't let anyone else touch your card or keypad.
Fake bank customer care calls. A caller claims to be from your bank's fraud or security department, says suspicious activity was detected on your account, and asks you to confirm your card number, PIN, OTP, or to move money to a "safe" account.
- Your real bank will never ask for your PIN or full card number over the phone, and will never ask you to transfer money to a different account "for safety." Hang up and call your bank back using the number on your card or their official website.
Fake SMS or email "bank alerts." A message claims your account has been suspended, or asks you to "verify" your details through a link that leads to a fake login page that steals your online banking credentials.
- Never enter your banking login or card details through a link in a text or email. Open your bank's app directly, or type their website address yourself.
Cheque and account-opening fraud. Less common but still seen: fraudulent cheques deposited on your behalf, or someone using stolen ID documents to open an account in your name.
- Check your account statements regularly, and report any unfamiliar transaction or account activity immediately.
Warning signs to watch for
- Anyone offering unsolicited "help" at an ATM.
- Any call, SMS, or email asking you to confirm your PIN, full card number, or OTP.
- Pressure to act "right now" to prevent your account from being blocked or frozen.
- A request to move your own money to a different account to "protect" it.
What to do if you suspect fraud
- Call your bank's official customer care number immediately (from your card, statement, or their official website, not from the suspicious message or call).
- Ask your bank to block your card and account if you believe details were stolen.
- Check recent transactions for anything you don't recognize, and dispute them with your bank right away.
- Report the incident to the Uganda Police Cyber Crime Unit, especially if a device was found on an ATM. This helps get it removed before it affects others.