29th October 2025, Kathmandu
The escalating sophistication of digital fraud has prompted Nepal Investment Mega Bank Limited (NIMB) to issue a critical public advisory. In a comprehensive warning, the bank has urged all customers and the general public across Nepal to exercise extreme vigilance against a surge of fraudulent online activities, including deceptive surveys, fake loyalty programs, and phishing attempts that falsely claim affiliation with the bank on various social media platforms.
NIMB Warns Of Scams
This proactive move is essential as cybercriminals increasingly target unsuspecting users to compromise their financial security.
The bank’s stern and unambiguous notice is a necessary safeguard in an era where digital transactions are rapidly becoming the norm. By unequivocally stating that Nepal Investment Mega Bank is not currently running any gift schemes, loyalty programs, or online surveys through platforms like Facebook or Instagram, NIMB aims to empower its customers with the necessary information to distinguish between authentic communication and malicious scams. This clarity is the first and most vital line of defense against cyber fraud.
Understanding the Modus Operandi of Digital Scammers
The digital scams currently circulating are carefully engineered to exploit customer trust and vulnerability. These fraudulent messages, links, and invitations often promise enticing rewards, special discounts, or chances to win large prizes under the pretense of a bank-sponsored campaign. The primary objective behind these deceptive campaigns is not to award prizes, but to engage in a type of digital fraud known as phishing or credential harvesting.
Scammers specifically target and attempt to steal highly confidential customer information, which is the key to accessing personal accounts and performing financial theft. The critical data points these criminals are after include:
Bank Account Numbers
Passwords and Login Credentials
One-Time Passwords (OTPs)
ATM/Debit Card PINs
Other Personal and Financial Details
Once a customer clicks on a suspicious link, they are often redirected to a cloned or phishing website meticulously designed to mimic NIMB’s official online platforms. Believing they are on a genuine page, users are tricked into entering their sensitive login credentials or financial details, which are then immediately harvested by the fraudsters for unauthorized transactions or identity theft. Nepal Investment Mega Bank has thus strongly advised the public to never respond to such offers or share any personal information in response to unverified digital communications.
Your Digital Shield: Best Practices for Banking Security
The responsibility of maintaining security in the digital space is a shared one. While NIMB continually invests in robust cybersecurity measures and advanced infrastructure to protect its systems, customer awareness and caution remain the single strongest defense against these evolving online threats.
To help customers secure their digital banking experience, NIMB provides several key recommendations:
- Be Suspicious of Unsolicited Offers: Treat any message promising high-value prizes, special discounts, or urgent account verification requests from unknown sources with extreme skepticism.
- Avoid Clicking Suspicious Links: Never click on links received via text messages (smishing), social media direct messages, or emails, especially if they create a sense of urgency. Always navigate directly to the bank’s official website by typing the address manually.
- Keep Confidential Data Private: Remember the golden rule of online banking: The bank will never ask you for your PIN, CVV, password, or OTP. Never share these confidential details with anyone, even if they claim to be a bank employee or a representative of a trusted authority.
- Use Secure Connections: Avoid conducting sensitive online transactions, such as mobile or internet banking, while connected to public or unsecured Wi-Fi networks, which can be easily compromised by hackers.
- Strengthen Your Account Protection: Enable Two-Factor Authentication (2FA) wherever possible on bank accounts and digital wallets. This adds an essential layer of security, ensuring a compromised password alone is not enough for a scammer to gain access.
- Regular Software Updates: Regularly update all mobile banking applications and the operating systems on your devices. These updates often contain crucial security patches that protect against the latest cyber vulnerabilities.
Verifying Authenticity: Know the Bank’s Official Channels
Nepal Investment Mega Bank has stressed that all official, legitimate communications regarding product launches, promotional campaigns, or public notices are released only through its verified channels. Customers must learn to rely solely on these official sources for credible information:
Official Website: www.nimb.com.np
Verified Social Media Pages
Official Press Releases
If any offer or message appears on an unverified platform, it should be immediately treated as potentially fraudulent. NIMB has provided an extensive list of official contact information, including dedicated helplines and email addresses, to allow customers to verify the authenticity of any suspicious communication directly and safely.
The bank’s commitment is to ensure trust and reliability in every service. By working together, with the bank providing secure technology and the customers exercising digital caution, Nepal can continue to embrace its digital future while effectively neutralizing the threat of cybercriminal activities. The key to staying safe is to stay informed and vigilant.
For More: NIMB Warns Of Scams