Fraud Prevention and Response
Spot suspicious requests early and know what to do next.
Warning signs
Be cautious about a guaranteed loan in exchange for an urgent personal payment, a request for your PIN or one-time code, altered invoices, unexpected changes to repayment details, or someone using KFC’s name from an unfamiliar address. Branding and screenshots alone do not verify that a person represents KFC.
If you think something is wrong
Stop the conversation or payment if it is safe to do so. Contact KFC through the telephone number on our Contact page, using a number you obtain independently of the suspicious message. If a payment account is at risk, contact its provider through an official channel promptly. Keep original messages and transaction references. Do not send more money to someone promising to recover a loss.
Information to share
Provide a safe contact method, dates, the claimed identity of the sender, relevant transaction references and a short description. Mask unrelated personal information. Do not send passwords, PINs, full card details or one-time codes. Ask how supporting evidence can be transferred safely.
Fraud-prevention standards
The fraud-prevention standard requires appropriate separation of duties, approval checks for payments and refunds, independent verification of changed payment instructions, reconciliations and a record of exceptions. Staff and suppliers should understand how to recognise impersonation, altered documents and improper requests, and how to report a concern promptly.
A fair response
Suspected fraud must be assessed without treating an allegation as proof. An independent investigator should secure evidence lawfully, document decisions and identify affected customers. Required reporting, remediation and recovery actions must follow Malawi law. Disciplinary decisions require a fair process; responsibility and reimbursement cannot be determined by this web page alone.
Learning and escalation
Material incidents, repeated control failures or concerns involving management should be escalated outside the implicated reporting line. Action owners must track corrective measures to completion. Use the whistleblowing route for serious internal wrongdoing once its independent channel is operational.