Nepal Cyber Safety & Digital Payment Protocol Guide

URGENT SECURITY REMINDER: Neither Nepal Rastra Bank, commercial banks, eSewa, Khalti, nor ConnectIPS will EVER ask for your OTP (One-Time Password), MPIN, or transaction password via phone call or WhatsApp. Never reveal an OTP to anyone under any circumstances!

1 Mobile Banking & Wallet Fortification

Biometric & 2-Factor Authentication (2FA)

Enable fingerprint/FaceID on eSewa, Khalti, and bank mobile apps. Do not use birth year, vehicle number, or 1234 as MPIN.

Dedicated SIM Card for Financial Services

Keep your bank-registered mobile number private. Do not list it on public business directories, social media profiles, or shared family accounts.

Daily Transaction Limit Restraint

Log in to your bank portal or app and restrict daily QR and transfer limits to what you routinely spend (e.g. NPR 25,000/day) rather than the default maximum.

2 Social Engineering & Phishing Identification

Lottery / Reward Scheme Red Flags

Block any caller claiming you have won a car, gold coin, or lottery on WhatsApp/Viber asking for a 'verification fee' or 'customs clearance transfer'.

Impersonation of Relatives in Distress

Verify voice calls independently if someone requests an emergency eSewa transfer claiming to be a cousin, brother, or friend stranded at an airport or hospital.

3 Emergency Incident Response (If Compromised)

Instant Bank Account Freeze

Immediately call your bank's 24/7 card/digital banking hotline to freeze your account and disable debit card ATM functionality.

Nepal Police Cyber Bureau Incident Filing

Report immediately to Nepal Police Cyber Bureau, Bhotahiti, Kathmandu (Phone: 01-4219044 / Email: cyberbureau@nepalpolice.gov.np) with transaction IDs, screenshots, and suspect phone numbers.