Introduction: Why a Loan Code on WhatsApp Can Cost You More Than a Loan
You are in a WhatsApp group when a message drops: “Instant loan! No documents. Dial *123*456# now and get up to ₦50,000 in 2 minutes.” It has been forwarded many times, and someone in the group claims it worked for them. You are tempted to dial.
But a USSD code is just a dialling string. It is not a bank, not a licence, and not proof that a real lender is behind it. Scammers know that people trust anything that looks like a bank menu on their phone. They use that trust to collect your BVN, PIN, OTP, or card details, and sometimes to move money out of your account.
This article will show you how to verify a lender before you dial, how to recognise the red flags of a fake USSD loan code, and what to do if you have already dialled one. You will learn a simple verification routine you can use every time.
What a USSD Loan Code Actually Is
USSD (Unstructured Supplementary Service Data) is the technology behind those short codes you dial, like *123#. It works on any phone, even without data or a smartphone. You dial the string, a menu appears on your screen, and you reply with numbers to move through the options.
Banks and licensed lenders use USSD to let customers check balances, buy airtime, or apply for small loans. For example, some banks have loan codes you can dial to request a salary advance or quick credit. The code is simply a shortcut into that institution’s system.
The important point: the code itself does not tell you who is behind it. Anyone can set up a USSD service through a telecom operator, and scammers can create codes that look similar to genuine ones. So the code is not a guarantee of legitimacy. You have to verify the lender separately.
How Fake USSD Loan Codes Reach People
Fake loan codes usually reach you through these channels:
- WhatsApp broadcasts and group forwards: A message promising easy loans is forwarded from person to person, often with a claim that someone received money.
- SMS blasts: Bulk text messages that appear to come from a bank or lender, sometimes using a sender name that looks official.
- Social media ads: Posts on Facebook, Instagram, or X that mimic bank branding and push a USSD code.
- Lookalike links: A link that takes you to a fake website or WhatsApp chat where you are asked to dial a code or share details.
Genuine lenders rarely rely on unsolicited forwards. They may advertise, but they will direct you to their official app, website, or verified social media page. If a loan code arrives out of the blue, treat it as untrusted until you have checked it.
Red Flags: How to Spot a Fake USSD Loan Code
Use these warning signs to screen any loan code before you dial.
The code arrives unsolicited or is forwarded many times
If you did not request the loan and the message has been forwarded many times, be suspicious. Scammers often add pressure like “share with 10 people” or “forward to your contacts to activate.” That is a classic scam pattern. Genuine lenders do not need you to spread their code to activate a loan.
It asks for your BVN, PIN, OTP, or card details inside the USSD menu
A licensed lender may legitimately ask for your BVN or NIN as part of identity verification. For example, some USSD loan services use your phone number and NIN to validate your BVN. That is different from asking for your card PIN or OTP (the one-time password sent to your phone).
No genuine lender will ever ask for your card PIN or OTP through a USSD menu. If a menu asks for your PIN or OTP, stop immediately. That is a hard stop. Also be careful with your BVN: share it only after you have verified the lender, because your BVN can be used to access your financial records.
It promises guaranteed approval, no checks, or unrealistic speed
Phrases like “everyone approved,” “no documents,” “instant cash without checks,” or “bad credit accepted” are designed to make you lower your guard. Real lenders must verify your identity and assess your ability to repay. A promise of guaranteed approval with no checks is a strong sign of a scam.
It pressures you with threats, deadlines, or 'deactivation' warnings
Scammers create urgency so you act before you think. They may say “your account will be deactivated in 24 hours,” “you will be blacklisted,” or “this offer expires today.” Genuine lenders do not threaten you into dialling a code. Take your time and verify.
The lender has no verifiable name, address, or registration number
A real lender can be traced to a registered business entity. Look for a company name, a physical address, and a registration number (RC number). If the only contact is a WhatsApp number or a Gmail address, and there is no company name anywhere, walk away.
How to Verify a Lender Before You Dial
Follow these steps every time you come across a loan USSD code.
Step 1: Identify the actual company behind the code
Find the legal business name, not just the brand name or the WhatsApp display name. Check the message for a company name, and then search for that name independently. Do not rely on the message that delivered the code. Look for the company’s registration number and use it to confirm the business exists.
Step 2: Check the lender against the regulator's register
In Nigeria, lenders should be licensed by the Central Bank of Nigeria (CBN). The CBN publishes lists of licensed institutions, including money lenders, microfinance banks, and finance companies. You can check whether the company appears on the relevant list. (please verify: exact name and URL of the CBN register, and whether it is searchable online or must be requested)
If the lender is not on the register, do not proceed. Also note that some legitimate lenders may be licensed by state authorities for money lending; you can ask the lender for its licence details and verify with the relevant state ministry.
Step 3: Confirm the company's own official channels
Check the lender’s official website or verified social media accounts. Type the company name into a search engine and look for the official site. Be careful of lookalike domains: scammers use slight misspellings or different endings (like .com instead of .ng). Do not click links from the forwarded message; instead, navigate to the official site yourself. If the company has a verified social media account, check that the code is mentioned there.
Step 4: Read the loan terms before accepting anything
Before you accept any loan, read the terms. Look for the total repayment amount, fees, interest rate, late payment penalties, and how your data will be used. Genuine lenders must disclose these. (please verify: current fee and interest disclosure requirements under the CBN lending framework) If the terms are unclear or hidden, do not proceed.
Step 5: Test with a small, reversible action first
Dial the code and go through the menu without committing to a loan. See what information is requested. If the menu asks for your PIN or OTP, stop. Never send money to “unlock” a loan. Legitimate lenders deduct fees from the loan amount or charge them upfront in a disclosed manner; they do not ask you to send airtime or transfer cash to a personal account to activate a loan.
What to Do If You Have Already Dialled a Fake Code
If you have dialled a suspicious code and entered details, act quickly:
- Stop the session immediately. Do not enter any more information.
- If you shared your PIN, OTP, or card details, contact your bank immediately. Use the official customer care number on your bank’s website or app, not a number from the suspicious message.
- Change your PINs and passwords for your bank accounts and mobile money wallets.
- Report the code and sender. Report to your bank, your mobile network operator, and the relevant authorities. (please verify: correct reporting agency (CBN, EFCC, or police cybercrime unit) and their current reporting channels)
- Monitor your account for unauthorised transactions and report any to your bank.
Safer Habits for Borrowing by USSD
Adopt these habits to protect yourself:
- Borrow only from lenders you have verified through the CBN register or official channels.
- Never share your OTP or PIN with anyone, even if they claim to be from your bank.
- Keep records of the loan terms, including screenshots of the USSD menu and any messages.
- Treat forwarded codes as untrusted until you have checked them.
- Remember that USSD communications are not encrypted, so avoid entering sensitive information on public or shared phones.
Verification takes only a few minutes and can save you from losing real money.
Summary: Verify First, Dial Second
A USSD code is not proof of legitimacy. Scammers use forwarded codes to steal your details and your money. Before you dial any loan code, verify the lender: identify the company, check the CBN register, confirm official channels, read the terms, and test carefully.
Remember the red flags: unsolicited messages, requests for PIN or OTP, unrealistic promises, pressure tactics, and no verifiable company details. If you have already dialled a fake code, stop, contact your bank, and report it.
Save this checklist and use it every time: Verify first, dial second.
