You hand your card to a POS agent, he turns the machine slightly away, and says "network is slow, enter your PIN again." Two minutes later your phone shows a debit you didn't expect. That small moment at the counter is where most POS-agent losses start, and almost all of them can be prevented with habits that cost nothing.
This guide is about protecting yourself as the customer using a POS agent to withdraw cash or transfer money. If you are a shop owner worried about fake payment alerts, that is a different problem, and our post on Fake Bank Alert Scams at Shops and POS covers it. Most agents are honest and provide a real service, especially when ATMs are empty or far away. The aim here is to spot the few who are not, and to avoid the mistakes that make you an easy target.
Why POS terminals are a target
A POS stand is a crowded, hurried place. People are queuing, the agent is multitasking, and you are probably tired or in a rush. Fraudsters use exactly that. They need only two things: your card details (or the card itself) and your PIN, or a way to make you send money you did not mean to send.
Because the transaction happens in front of you, many victims blame themselves and never report it. That silence is what keeps the tricks working. Knowing the common patterns makes them easy to recognise.
The common tricks at the terminal
1. PIN watching (shoulder surfing)
Someone behind you, or the agent himself, watches you type your PIN. Later, the card is swapped or taken, and the PIN is already known. This is the simplest trick and the most common.
2. Card swapping
The agent says the first attempt "declined", asks you to enter the PIN again, and during the confusion hands back a different card that looks similar. You walk off with a worthless card. He now has yours and your PIN.
3. "Network failed" repeated debits
The screen shows failed, but your bank debits you. Sometimes this is a genuine network glitch that reverses automatically. Sometimes the agent runs the card a second time on purpose and pockets the cash. The only way to tell is to check your debit alert before you leave.
4. Transfer to the wrong account
You ask the agent to send money to someone, and he types the account number himself. A single changed digit sends your money to a stranger, or to his own account, and he says the bank must reverse it. Wrongly sent money is hard to get back, so prevention matters more than the complaint.
5. Cash shortage and counting tricks
The agent counts the notes quickly, folds them, or "adds" a bundle you did not watch him count. When you reach home, the amount is short. It is a low-tech trick, but it works on people in a hurry.
6. Tampered or unfamiliar machines
A device that looks heavily modified, has loose parts, or has a strange extra attachment around the card slot can be a skimmer. Skimmers copy the card details while you pay.
7. Agents who ask you to share OTPs or "confirmation" codes
No genuine POS withdrawal needs you to read out an OTP sent to your phone. If an agent asks for one, he is trying to complete a different transaction, possibly an online purchase or a transfer.
A safe routine, step by step
- Choose the agent carefully. Use a registered, permanent kiosk you know, not a stranger who approaches you. Avoid anyone who calls you over or insists on helping.
- Check the machine first. Look at the card slot and keypad. Anything loose, glued on or oddly thick is a reason to leave.
- Agree the amount and the charge before swiping. Ask what he will charge, and do not accept a vague "we'll see." Fees vary, and I won't quote one here; check your bank's current terms and what is posted at the stand.
- Keep the card in your hand and in sight. Insert it yourself where possible. Don't let it leave your sight or go behind a counter.
- Type your own PIN and cover the keypad. Use your free hand and body as a shield. Ask people behind you to step back.
- Read the screen before you confirm. Check the amount on the machine matches what you agreed.
- Wait for your debit alert before leaving. Confirm the exact amount on your phone. If the machine says failed, wait for the bank's message and check your balance in the app.
- Count the cash yourself, slowly. Do it at the stand, not after you leave.
- Check the card you receive. Look at the name and the last four digits on the card each time.
- Take or photograph the receipt if one is printed, or screenshot your alert.
Sending a transfer through an agent
If you must use an agent to transfer, type the recipient's account number into your own phone or ask the recipient to confirm it. Check that the account name shown matches the person before the money leaves. If the agent will not show you the name on the screen, do not proceed. Better still, use your bank's app yourself if your data and power allow.
Never give an agent your app login, token, or OTP so he can "do it faster." Our guide on fake BVN update calls and phishing SMS explains why those codes should never be shared with anyone.
A worked example (hypothetical)
Say Ada needs ₦40,000 cash on a Saturday. She goes to a kiosk she has used before and agrees the amount and the charge aloud. She inserts her card herself and covers the keypad as she types her PIN. The machine shows "failed."
The agent says, "Try again." Instead, Ada says she will wait for her bank's message. She opens her app and sees no debit, so she asks him to start fresh. This time the machine approves, she gets one alert for ₦40,000, and she counts the notes before leaving. Had she seen two debits, she would have stayed at the stand, shown him the alerts, and asked for the second amount in cash or a written note before leaving.
The habit that protected her was simple: she did not let the agent decide when a transaction had failed. Her bank did.
If something goes wrong
- Block the card immediately. Use your bank's app, USSD, or customer care line. Do this before arguing at the stand if you think the card was swapped.
- Stay at the location if safe and ask the agent to resolve it with you present. Note his stand name, kiosk location, and the terminal details on the receipt.
- Report to your bank in writing with the date, time, amount, and the terminal or agent details. Ask for a complaint reference number and keep it.
- Keep evidence. Screenshots of alerts, the receipt, and any chat messages.
- Report fraud to the police if money was taken deliberately. A police report can support your bank complaint.
- Watch your account for the next few weeks for unusual debits, and change your PIN once you have a new card.
Banks have their own timelines for investigating disputes, and I won't state them here. Ask your bank what its process is and what it needs from you. If it does not respond, you can escalate through the complaint channels the bank and the regulator publish. Be cautious of anyone who contacts you offering to "recover" the money for a fee; that is a second scam, and our post on fake EFCC or police officers shows how it often begins.
How the advice changes for different people
| Situation | What to do differently |
|---|---|
| You are elderly or not confident with phones | Go with a trusted relative, and use the same agent every time so he knows you. |
| You are travelling or in a new town | Prefer a bank branch or bank ATM during daytime. Avoid roadside stands at night. |
| You withdraw large amounts | Split the visit across daytime sessions, and ask someone to accompany you. Large cash also carries a robbery risk. |
| You receive money as a trader | Do not hand your card to the agent for anything. Use transfers you can confirm yourself. |
| You live in Ghana or Kenya | Mobile money agents work differently from card POS. See our guide on mobile money fraud in Ghana and Kenya. |
Mistakes that make you an easy target
- Using a card with a weak, guessable PIN such as your birth year, or the same PIN everywhere.
- Letting someone "help" because the line is long.
- Leaving before the alert arrives.
- Saving your card details or PIN in a phone note.
- Ignoring small unexplained debits. Fraudsters often test with small amounts first.
- Turning off SMS or app alerts to save data. Keep at least SMS alerts on.
Frequently asked questions
Should I change my PIN after every POS use?
Not after every use, but change it straight away if anyone could have seen it, if the card was out of your sight, or if something felt wrong.
The machine said failed but I was debited. Will I get the money back?
Often, genuine failed transactions are reversed automatically, but timelines vary by bank. Report it with the alert screenshot if the reversal does not arrive, and ask your bank how long it takes.
Is it safer to use my phone's bank app than a POS agent?
For transfers, yes, because you see and type the details yourself. For cash, a bank ATM in a secure location is generally safer than a roadside stand.
Can I refuse to let an agent hold my card?
Yes. You can insert and remove it yourself. An honest agent will not mind.
Your next step today
Open your bank app and confirm that debit alerts are switched on. Then save your bank's card-blocking method (app, USSD or customer care) in your phone, so you can act within seconds if a terminal ever goes wrong.
This article is for general information only and is not financial, legal, or tax advice. Prices, rates and rules change quickly, so check current details before making money decisions.