Security
Your money, safe on your phone
Most money is lost to tricks, not hacking. These habits keep you safe, and the app is built to back you up.
Five habits that stop most scams
- 1Never share your PIN or codeBDPAY will never call, text or message you for your PIN or SMS code. Anyone who asks is a scammer, even if they say they are from BDPAY.
- 2Check the name before you sendBefore money goes, the app shows part of the receiver’s name, like “K*** H***”. If it is not who you expect, stop.
- 3Check the shop name before you payAfter scanning a QR, the app shows the verified shop name in large letters. A sticker placed over the real QR will show a different name.
- 4No prize needs a paymentCalls about lottery wins, cashback or a “wrong transfer” that ask you to send money first are scams. Report them in the app.
- 5Install only from the official storesGet BDPAY from Google Play or the App Store only. Never install an app from a link someone sends you.
If something looks wrong
- Got an SMS about a sign-in on a new phone that was not you? Tap the link in that SMS to freeze your account at once.
- In the app, choose “This was not me” to freeze your account. You are signed out everywhere and no money can move.
- Then call the BDPAY hotline. Only BDPAY can unfreeze the account, after checking it is really you.
What BDPAY does for you
One account, one phone
Your account works on one phone at a time. Signing in on a new phone signs the old one out, and we send you an SMS.
24-hour pause on a new phone
After signing in on a new phone, sending money is paused for 24 hours, so a stolen SIM cannot empty your wallet.
NID and selfie for everyone
Every account is checked against the Election Commission with an NID and a live selfie. One NID can open only one personal account.
PIN locks
After 3 wrong PINs the app pauses for 5 minutes. After 5, the PIN is locked until you reset it with an SMS code and a selfie.
Your NID is encrypted
NID numbers are stored encrypted. BDPAY staff see only part of your number and NID, and every look-up is recorded.
Two people for big changes
Inside BDPAY, unfreezing an account or changing who has access needs two staff members, so no one person can do it alone.