Your money needs the same 2FA as your photos
Set up tonight (15 min):
- Easypaisa/JazzCash: enable biometric/PIN + transaction limits; never share OTP or your "T-PIN"
- Bank app: activate fingerprint login + transaction alerts (SMS on every debit)
- Raast: remember — refunds for failed transfers are AUTOMATIC. No "Raast agent" ever calls. Anyone calling about a Raast refund is a scammer
- Card shopping online: use a separate low-limit card or virtual card if your bank offers it
The three requests that are ALWAYS scams:
- "Read me the code you received" (OTP theft)
- "Approve the request we're sending" (hidden payment approval)
- "Install this app so I can help you" (remote access malware)
If money goes to a scammer: Call your bank's official helpline IMMEDIATELY and say "fraudulent transaction — request freeze on beneficiary account." Then NCCIA 1799 with the transaction ID. The first 24 hours decide recovery.