If a bank, wallet or payment account connected to gambling activity may be compromised, secure the financial account first through the provider's verified channel. Do not wait for a casino dispute to be resolved before contacting the bank or payment provider. Then secure the gambling account separately, preserve evidence and report only through official routes.
This is a general Nigeria safety checklist. It does not confirm that Lotwin currently supports a particular bank, wallet, payment method, dispute process, freeze feature or recovery timeline. Never send a PIN, password, one-time code, full card details or identity document in response to an unsolicited message.
1. Stop using the suspected channel
Do not make a new transfer to test whether the account still works. Do not follow a link from the message, advert, search result or social-media reply that alerted you to the problem. If a device or browser may be compromised, use another trusted device where practical.
Record the time you first noticed the issue and what triggered the concern, such as an unfamiliar debit, a changed phone number, an unexpected password reset or a request for a one-time code. Do not paste private account data into a public complaint or social post.
2. Contact the bank or payment provider first
Use the contact route printed on the card, shown inside the provider's official app or published on a verified official website. Explain that the account or payment instrument may be compromised and ask what immediate protective actions are available. Follow the provider's instructions for card blocking, account restriction, credential reset or transaction dispute.
Ask for a complaint or case reference and save it. The Central Bank of Nigeria publishes a complaints-management route for escalating complaints involving regulated financial institutions after the institution's own process has been used. The existence of an escalation route does not guarantee a refund, reversal or fixed resolution time.
If the suspected payment was sent through an instant-payment rail, the receiving name, narration and transaction reference may help the financial institution trace the record. Do not contact an unknown recipient directly if doing so could expose more information or provoke further fraud.
3. Secure the gambling account separately
The financial account and gambling account are different security boundaries. After starting the bank or provider response:
- open the gambling service through a known official route, not a link in the suspicious message;
- change the password if you can safely access the account;
- use a unique password not reused for email, banking or social media;
- review the official account history for unfamiliar changes or activity;
- contact the service's verified support route and request the available security review;
- do not give support staff a bank PIN, card PIN, password or one-time code.
A supposed support agent who asks for a one-time code, remote-access installation, screen sharing or a new transfer to “unlock” funds is creating additional risk. Use the fake support message checklist to verify the route before continuing.
4. Protect the email, phone and device
If the attacker can control the email address or phone number used for recovery, changing only the gambling password may not be enough. Review the security of the recovery email, mobile line and device.
From a trusted device, check for unfamiliar email forwarding rules, unknown signed-in sessions and unexpected recovery-address changes. Contact the mobile operator through its verified route if the SIM or line may have been taken over. Remove unrecognized remote-access or screen-sharing software only after preserving the minimum evidence needed for a report.
The Nigerian Communications Commission's security advisory warns that phishing can arrive through email, text, calls and social platforms. Treat urgency and claims of guaranteed recovery as warning signs, not proof that a message is genuine.
5. Preserve a minimum evidence set
Save evidence before it disappears, but keep it private:
- date and time of the unfamiliar event;
- amount and transaction reference shown by the official provider;
- merchant or recipient label exactly as displayed in the account record;
- screenshots of suspicious messages with the sender and time visible;
- bank, payment-provider and gambling-support case references;
- a short timeline of the actions already taken.
Do not include the full card number, security code, PIN, password, one-time code, complete bank statement or identity document unless the legitimate provider specifically requires it inside an authenticated process. Nigeria's data-protection guidance supports limiting personal data to what is necessary for the stated purpose.
For a gambling-result problem rather than payment compromise, the round-ID evidence guide explains how to preserve the game record without oversharing account data.
6. Report through the right official route
Keep each report within its scope:
- Bank or payment provider: suspected unauthorized payment, card, wallet or account compromise;
- Gambling service: account-access change, unfamiliar account activity or a disputed service record;
- Mobile operator: suspected SIM or line takeover;
- Regulator or formal escalation channel: only after checking the scope and required first-step complaint process;
- Law-enforcement or cybercrime channel: where theft, impersonation or another suspected offence needs a formal report.
Do not pay an intermediary who promises guaranteed recovery. A case reference proves only that a report was opened; it does not prove liability or guarantee a particular outcome.
7. Separate recovery from gambling decisions
Do not make another deposit or increase a stake to recover the suspected loss. Security and complaint handling should be completed separately from any decision to gamble. If the incident is creating pressure to chase losses, stop gambling and protect essential money first.
The Payments and Verification hub provides general troubleshooting boundaries, while Responsible Play lists Nigeria and global non-commercial support options. Gambling should never be used as a way to repair financial harm caused by fraud or an account compromise.
Quick response order
- Stop using the suspected payment route.
- Contact the bank or payment provider through a verified channel.
- Secure the gambling account through its official route.
- Protect the recovery email, phone and device.
- Preserve only the evidence needed for a private report.
- Use the correct formal escalation route for each problem.
- Do not gamble or transfer more money to recover the loss.
Speed matters, but verified routes matter more. Take the earliest safe protective action available without giving a stranger more access or more personal information.