Home > Security
Bank of Khartoum is committed to helping customers protect their accounts, cards, personal information, and digital banking access.
Use only official Bank of Khartoum channels, keep your credentials private, and report suspicious activity immediately through our customer support channels.
Customers receive messages [your account is blocked or your device needs activation]. Fraudsters direct customers to malicious links that imitate official Bankak or iBOK pages.
Never click on links received through SMS or WhatsApp. Always access iBOK directly through the official website or app.
Fraudsters create imitation domains that look identical to the official iBOK login page. Customers unknowingly enter their username, password, or OTP, enabling account takeover.
Always verify the official URL: https://ibok.bok-sd.com. Never access banking links shared via SMS or social media.
Fraudsters call customers pretending to be bank staff, requesting OTPs, TPIN resets, or device changes [fix an issue].
The bank will never ask for OTP, TPIN, or MPIN over the phone.
Customers log in to their accounts using unsecured public Wi-Fi networks, exposing their credentials.
Avoid accessing your banking accounts on public Wi-Fi. Use secure networks only
Fraudsters coerce or pressure customers into transferring money urgently for fake emergencies or investment opportunities.
Always verify urgent requests for money transfers. Fraudsters
Customers rely on unofficial agents to perform banking services, exposing credentials and documents.
Never share your banking information with intermediaries or agents
Fraudsters exploit weak verification questions and outdated customer contact details to reset TPIN through social engineering.
Ensure your mobile number and email are always updated