The Central Bank of Barbados is warning the public never to share their BiMPay verification codes, tokens, passwords or other security credentials with anyone, following a reported social engineering fraud involving an online loan offer.
There is no indication that the BiMPay platform itself was compromised. The fraud occurred after the customer provided a third party with a mobile verification code, an email verification code, and a BiMPay token in connection with a purported loan application. A transaction was subsequently made without the customer’s authorisation.
