Security policy

Boliba Savings and Credit is committed to protecting the security of our members’ funds, personal information, and transactions.

Our Security Commitment

As a regulated Savings and Credit Cooperative, we implement robust technical, physical, administrative, and procedural controls to protect your money and data against unauthorized access, loss, misuse, or breach.

Key Security Measures

1. Technical Security

  • Advanced encryption (SSL/TLS) for all website connections and online transactions
  • Secure servers hosted in controlled environments
  • Multi-factor authentication (MFA) for sensitive operations where applicable
  • Real-time fraud detection and monitoring systems
  • Regular penetration testing and vulnerability assessments
  • Firewalls and intrusion prevention systems

2. Data Protection

  • Strict access control — only authorized personnel have access to sensitive data
  • Data is anonymized or encrypted where possible
  • Secure backups with disaster recovery procedures
  • Regular independent security audits

3. Physical Security

  • Restricted access to our offices and server rooms
  • CCTV surveillance at all branches
  • Secure document storage and disposal procedures

4. Operational Security

  • Comprehensive staff training on information security and fraud prevention
  • Clear internal policies and segregation of duties
  • Continuous monitoring of systems and transactions 24/7

Member Responsibilities

To maintain the highest level of security, we strongly recommend that members:

  • Keep login credentials, PINs, and passwords strictly confidential
  • Use strong, unique passwords and change them regularly
  • Never share account details through email, SMS, or social media
  • Avoid using public Wi-Fi for sensitive transactions
  • Report lost or stolen devices immediately
  • Verify all communications claiming to be from Boliba

Incident Response

In the unlikely event of a security incident or breach, we will:

  • Investigate promptly
  • Notify affected members as required by law
  • Take immediate remedial action
  • Cooperate fully with regulatory authorities

Reporting Security Concerns

If you suspect any unauthorized activity on your account, notice suspicious behaviour, or receive fraudulent messages, please contact us immediately:

Compliance

Our security practices comply with the Cooperative Societies Act No. 6 of 2000, relevant financial regulations in Lesotho, and international best practices for financial institutions.

Your security is our top priority. We continuously invest in the latest technologies and processes to protect your hard-earned money and personal information.

Last Updated: June 2026y is our top priority. We continuously invest in the latest security technologies to protect your money and personal information.