BaridiMob users told to update app to fix error

Algeria Post is asking all BaridiMob users in Algeria to install the latest version of the mobile payment app, to fix a login error, Algérie 360 reported.

The app shows the message 'Invalid server certificate', which stops users from reaching their postal accounts.

Algeria Post said the problem was not a cyberattack. The message comes from an expired server certificate linked to older versions of the app.

Phones with an old installation file can no longer make a secure connection with the operator's servers.

The fix is already available. Android users can get the update from Google Play, and iPhone users from the App Store.

According to the operator, no full reinstall or new account is needed.

Algeria Post also warned about APK files shared on social media and on unapproved websites, which it says are presented as the update. Installing one of these files means handing personal and financial data to unknown people, the operator warned.

Algeria Post warned that a fake app could capture login details and the secret code, or intercept verification codes sent by text message. After that, the account balance can be reached by outsiders in a few minutes only.

Last year, the operator reported a wave of fraudulent calls asking customers for their OTP codes, which are one-time passwords. It reminded customers that it never asks for this information by phone.

If a user suspects an intrusion, Algeria Post advises changing the app's secret code first. If a suspicious transaction appears on the statement, the online payment service should be switched off.

A visit to the nearest ATM also lets the user change the phone number linked to the account, which is a key step to cut off a possible fraudster's access.

An official at Algeria Post said on Chaîne 3 radio that these were the steps to take in case of hacking.

According to Algérie 360, BaridiMob has several million active users, which makes it one of the most widely used financial tools in the country.

Algeria Post repeated that any information about a service, a new feature or an update must be checked through its official channels.