Provincial Government Bank

Bank of Khyber Cyber Security & Fraud Prevention

Part of PakFinHub's BOK coverage — see the full bank overview.

Never Share Your OTP
24/7 Fraud Reporting

Written & reviewed by Dildar Hussain — 10+ years in Pakistani banking, BS Banking & Finance (NUML University)

Bank of Khyber cyber security awareness comes down to one rule that covers nearly every scam: BOK will never call, text, or email you asking for your PIN, full card number, CVV, or one-time password (OTP). This page covers which numbers are genuinely BOK's and how to report fraud fast.

What BOK Will Never Ask For

Your PIN or OTP

No genuine BOK representative will ever ask you to read out your PIN or a one-time password over any channel.

Your Full Card Number & CVV

BOK does not need your complete card number and CVV together to resolve any legitimate account issue.

Upfront "Fees" for a Prize or Job

Any message claiming you've won a BOK prize or job offer that requires an upfront payment to "unlock" it is fraudulent.

Verifying a BOK Contact Is Genuine

If you receive a call, SMS, or WhatsApp message claiming to be from Bank of Khyber, don't act on it directly — hang up or ignore it, then call BOK back yourself using the number on the back of your card or the official numbers listed on the BOK helpline page. Caller ID and SMS sender names can both be spoofed to look like they're coming from a bank, so the number displayed on your screen is not proof of who's actually calling.

Common Fraud Patterns to Recognize

Phishing messages typically create urgency — "your account will be blocked in 24 hours," "unusual activity detected, verify now" — paired with a link to a fake login page designed to capture your credentials. Vishing (voice phishing) calls often impersonate BOK's fraud department itself, ironically using the fear of fraud to extract the very details that enable it. SIM-swap fraud, where a criminal convinces your mobile carrier to transfer your number to their SIM, is a more sophisticated variant that can intercept OTPs entirely — protecting your CNIC and mobile account credentials matters as much as protecting your banking details directly.

What to Do If You've Been Targeted

If you've already shared sensitive details or notice an unauthorized transaction, act immediately: call BOK's 24/7 line to freeze the affected card or account, then follow the formal complaint process on the helpline page to have the transaction investigated. Time matters here — the sooner a fraudulent transaction is reported, the better the odds of it being reversed or the account secured before further damage.

Frequently Asked Questions

Will Bank of Khyber ever ask for my PIN or OTP over the phone?

No. Bank of Khyber will never ask you to share your PIN, full card number, CVV, or a one-time password over a phone call, SMS, or email. Any such request is fraudulent.

What's the single most important BOK Cyber Security rule?

Never share your PIN, full card number, CVV, or OTP with anyone, including someone claiming to be a BOK representative on a call, SMS, or email — BOK never asks for these.

How do I report a suspected BOK phishing message?

Don't click any link in the message. Call BOK's 24/7 helpline using the number on your card or BOK's official site to verify and report it directly.

Sharing BOK Cyber Security basics with less tech-familiar family members — particularly the rule about never sharing an OTP — closes one of the most common ways fraud actually succeeds, since scammers often target whoever in a household is least likely to question an urgent-sounding call.

Good For

Recognizing what BOK will and won't ask for
Verifying whether a BOK contact is genuine
Understanding common phishing and vishing patterns
Knowing exactly what to do if you've been targeted

Ready to bank with Bank of Khyber?

Verify current rates, offers, and terms directly with BOK before you apply.

Visit BOK Official Website See Full BOK Overview