Tabung Haji affirms system security, cautions depositors on account information
TH said it would not seek passwords or security codes by phone, SMS or email, and urged depositors to use official account channels.

Lembaga Tabung Haji (TH) has reiterated that its systems remain secure, while urging depositors to keep their account credentials private. In a statement on Oct 16, the institution said safeguarding savings, accounts and personal data remained a priority.
The warning covered passwords and verification codes, as well as transaction authorisation codes (TACs) and one-time passwords (OTPs). TH told depositors not to disclose these details to anyone, adding that it would never seek them by telephone, SMS or email.
TH also cautioned against requests for account or personal details through suspicious emails, calls, links or messages. A communication that appears to be from TH should still be treated with caution, it said.
For account concerns or suspicious communications, depositors were directed to a nearby TH branch or the TH Contact Centre on 03-6207 1919. TH said account access should be through official channels only, including the THiJARI mobile application and its website. It also pledged further improvements to security controls and continued system monitoring.


