Banks and SACCOs
SMS for banks and SACCOs in Malawi
Members and customers want to know the moment money moves. SMS reaches them on any phone, with no data and no app, so it suits alerts, reminders and login codes.
Messages that build trust
YourSACCO: MWK 50,000 received on A/C ****4821 on 12 Nov. Bal: MWK 215,400. Not you? Call 0999 000 000.
YourSACCO: your loan repayment of MWK 32,000 is due on 30 Nov. Pay at any branch or by mobile money. Ref 7719.
Use 482913 to authorise your MWK 120,000 payment. Valid 5 minutes. We will never call you to ask for it.
Three ways to connect
- HTTP API. Your core banking or SACCO system calls one endpoint when a transaction posts. Add an
Idempotency-Keywith the transaction id, so a retry never sends or charges twice. - Verify API. For login and payment codes. It makes the code, checks it and limits abuse, so your team does not have to build that part.
- SMPP bind. If your switch or banking platform already speaks SMPP, connect it directly from fixed IP addresses.
What institutions should plan for
An alert is only useful if you can prove what happened to it. Every message has a status you can read from the API, and a signed webhook can write the final status back to your own records. Set a validity period on short-lived messages, so an old code or alert stops trying after a few minutes instead of arriving late.
Members trust a name they recognise, so request your sender ID early and use it for everything. Tell members which name you text from and that you will never ask for a PIN by SMS. That one line makes fake messages easier to spot.
For smaller SACCOs
You do not need a developer to start. Export your member list to Excel, upload it, and send a meeting notice or a dividend update from the dashboard. Merge fields can fill in each member's own balance or amount due, so one upload becomes a personal message for everyone. The Excel guide shows how.
Questions
Should a SACCO use the dashboard or the API?
Use the dashboard for messages you write by hand, such as a meeting notice or a dividend announcement. Connect the API, or an SMPP bind, for alerts your core system sends by itself.
Is SMS safe for login codes?
It is a widely used second step that works on any phone. Use short time limits, never ask people to share the code, and use the Verify API so codes are limited and stored only as a hash.
What should never go in a banking SMS?
Full account or card numbers, passwords and PINs. Mask account numbers to the last four digits, and never ask a customer to reply with private details.
Keep reading
Connect your core system
Talk to us about API or SMPP access, or start with a free test key.