Central Bank warning: Never share BiMPay verification codes, security credentials

The Central Bank of Barbados is warning the public never to share their BiMPay verification codes,  tokens, passwords or other security credentials with anyone, following a reported social engineering fraud involving an online loan offer.

There is no indication that the BiMPay platform itself was compromised. The fraud occurred after the customer provided a third party with a mobile verification code, an email verification code, and a BiMPay token in connection with a purported loan application. A transaction was subsequently made without the customer’s authorisation.

BiMPay verification codes and tokens are security information. They should only be used by the customer for their own BiMPay registration and access and should never be given to another person.