We have a number of systems and security protocols in place to keep you safe when you bank online, protecting you from identity theft or other threats. Read about our measures and what you should do to keep your money safe.

eggs in a nest

What we do for you

NBC Online Banking features state-of-the-art technologies that provide a high degree of security.

  • NBC online security

    The security infrastructure comprises a firewall, intrusion detection systems (IDS), virus monitoring tools and many more. The security requirements have been implemented and audited by an international consulting firm, using internationally accepted standards and practices.

    Online banking uses 128-bit digital certificate from VeriSign for encryption of the Secure Sockets Layer (SSL) session. SSL is the industry standard for encrypted communication and ensures that customers' interaction with the bank over the internet is secure. Besides technological solutions, security is also built into the login process. Online Banking enforces the use of a minimum 8-character password including alphanumeric (code inclusively with numbers and letters) plus special. We also use secret questions and answers to protect your online banking details.

  • One-Time Passwords (OTP)

    When creating a new beneficiary, doing one-time transfers, or other sensitive transactions, a special one-time password (OTP), will be sent to your mobile phone. You must type this number into the indicated field for verification. These codes can only be used once, and dramatically decrease the risk of being defrauded.

  • Timed logout

    Online banking logs you out if you are inactive for five minutes. This gives you added protection if you forget to log yourself out.

  • Three password failures result in account suspension

    If the incorrect PIN or password is entered three times consecutively, the online banking service will be temporarily suspended or locked and you will have to visit your preferred branch or call our Contact Centre.

  • Virtual keyboards

    Virtual or dynamic keyboards are designed to reduce the risk of programs that download themselves to your computer and create a keystroke log (access time) that can be used to gain access to your accounts. Virtual keyboards are an important component in securing your online banking experience.

How we protect you

What you have to look out for

While the internet can make life very convenient with services such as online banking and shopping, there is always the underlying security risk that criminals will abuse the internet to gain access to your personal information – such as banking details – and use that to steal your money.

  • Basic tips to keep safe

    • Avoid using shared computers when accessing NBC online banking
    • Don’t log in to NBC Online Banking or use critical passwords at internet cafes, libraries, and other public sites to avoid the risk of information being copied and re-entered after you leave
    • Change your passwords regularly
    • Phone NBC Contact Centre on +255 (0) 768 984 000, +255 (0) 222 193 000 or +255 (0) 225 511 000 immediately if you suspect your online banking password has been compromised
    • Use a password on your computer to prevent unauthorised individuals from accessing your information
    • Disable the 'Auto Complete' function of your browser
    • Always remember to log off from online banking and close your browser when you have finished banking
    • Before you bank online, ensure that you are actually on the secure internet banking website. Once you visit www.nbctz.com and click on the Internet Banking link, you will be redirected to an available banking server. Once there, check the browser address. It should begin with ‘https://’ (not ‘http://’). Also check the browser for a closed lock and/or key icon – which should either be at the top or the bottom of the screen
    • Install good quality security software and ensure that you have upgraded to the latest version of your browser. Most of the newer browsers have the inherent ability of detecting fraudulent websites
  • Phishing scams

    • Some criminals will go to amazing lengths to steal your money – but the more aware you are, the less likely it will be that you will fall prey to internet or email phishing scams (break-in)
    • Fraudsters often send out emails claiming to be from NBC (or other reputable organisations) – commonly known as ‘phishing’ - many of these mails look very authentic as they make use of the NBC logo and corporate colours to convince you that the email is legitimate
    • Often, the content of the email makes reference to your account being suspended, and the only ways you can stop this suspension is to click on the link supplied and update your personal details. Although this link does not link to the real NBC website, these websites are usually designed to look exactly like our site, and it becomes difficult to differentiate between this site and the real site. You should therefore identify that the site you are logged onto is the genuine NBC website

    Below is an example of a phishing email:

    Dear ABC Bank Member,

    This email was sent by the ABC Bank server to verify your e-mail address. You must complete this process by clicking on the link below and entering in the small window your ABC Bank User ID and Password.

    This is done for your protection - because some of our members no longer have access to their email addresses and we must verify it. To verify your e-mail address and access your bank account, click on the link below:
    It will then link to a fraudulent verification page like the one below:

    Delayed phishing attacks:
    In some cases, fraudsters may obtain your access credentials long before any attempt is made to defraud your account. It is very important to change your banking logon information such as your PIN and password regularly to prevent delayed phishing attacks.
    Steps to avoid being a victim of phishing attacks:
    Although we have a number of security measures in place to protect you, your awareness is the key to avoid being a victim of phishing attacks; so bear the following in mind when you receive an email claiming to be from NBC:
    • Never reply to these emails, and don’t click on any links
    • Never provide your personal details such as your PIN or account details via email or on any links within these emails. We already have details like your ID number, cell number and email address and will never ask for those via email
    • Never navigate to our site using a link from an email – always type in the address (www.nbctz.com)
    • Delete spam emails immediately. Even a request to remove your email address from the mailing list will confirm to the fraudsters that your email account is active, and could open you up to more attacks
    • Never open an email attachment unless you know who sent the message
    • Use the latest browsers which come with filters that alert you when you visit a website that contains potentially unsafe website
    • NBC will never send you a letter or email requesting you to complete your personal details by clicking on a link in an email
    • Be aware that phishing scams have also been received through instant messaging systems such as Google Talk or Skype; as well as through social networking websites such as Facebook. When in doubt of the authenticity of a link or a claim, simply don’t click on it
  • SIM swap

    A fraudster is able to perform an illegitimate (illegal) SIM swap with your cellphone service provider by for example carrying a false copy of your identity document. This allows the fraudster full use of your cellphone account and to receive messages intended for you. They will also receive the confidential banking notifications and approval SMSs that the bank sends to customers. If they have already tricked you to give them your personal and account details, they can transfer money from your account without you knowing.

    • You should:
      Protect your personal, bank account and cellphone account information – also when you’re online
    • Immediately investigate when you notice that you are not receiving calls and messages
    • Keep your phone switched on – otherwise you will not notice when your SIM card has been swapped

Need more information or assistance?

Call us:

+255 76 898 4000/4011
+255 22 219 3000
+255 22 551 1000
0800711177 (Toll-Free)

Email us:


Contact us

Find a branch