Protecting Your Collection Wallet: PIN, SIM Card and Scam Calls

Your collection wallet is where all your business money passes. If someone gets its PIN or your SIM, the balance can be gone in minutes. Protecting your collection wallet is as basic as pricing or shipping.

PIN and verification codes: never share them

• Pick a PIN that is hard to guess; avoid birthdays, 1234 or your phone digits.
• Don't store it in phone notes or on paper near the counter.
• Change it immediately if you think someone saw it.
• An OTP you didn't request is a warning sign: don't give it to anyone, and change your PIN.

Daffaa never needs your wallet PIN. The app reads incoming transfer SMS to confirm payments, so there is no reason for anyone to ask for your PIN in Daffaa's name.

Scam calls

Common patterns: "your wallet will be closed", "you won a prize", "I sent you money by mistake, please return it", or a link asking for your PIN. Hang up and call the official number shown in your wallet app yourself. For "sent by mistake" claims, check the real incoming SMS and your Daffaa transactions, never a screenshot.

Protect the SIM

• Keep the line officially registered to you or your business.
• Enable a SIM PIN in phone settings.
• If the line suddenly shows no service, call your carrier and ask about SIM replacement requests.
• Don't hand the SIM to anyone to "try something".

The collection phone is a work device

• Use a strong screen lock.
• Install apps only from the official store, and only those you need.
• Grant SMS access only to trusted apps you actually need.
• Keep the system and apps updated.
• If the phone is replaced or stolen, revoke it from the Devices page in Daffaa.

Consider separating your business wallet from your personal one, and compare the real wallet balance with your transactions weekly.

Secure your Daffaa account

Enable two-factor authentication and give staff only the permissions they need. Daffaa also adds protections such as duplicate-transfer prevention and balance-mismatch checks.

Sign up for Daffaa so every transfer is confirmed from the real incoming SMS.