Messages that build trust

Deposit alert
YOURSACCO

YourSACCO: MWK 50,000 received on A/C ****4821 on 12 Nov. Bal: MWK 215,400. Not you? Call 0999 000 000.

GSM-7, 103 characters, 1 part: K20 per person

Loan reminder
YOURSACCO

YourSACCO: your loan repayment of MWK 32,000 is due on 30 Nov. Pay at any branch or by mobile money. Ref 7719.

GSM-7, 110 characters, 1 part: K20 per person

Payment code
YOURBANK

Use 482913 to authorise your MWK 120,000 payment. Valid 5 minutes. We will never call you to ask for it.

GSM-7, 104 characters, 1 part: K20 per person

Three ways to connect

  • HTTP API. Your core banking or SACCO system calls one endpoint when a transaction posts. Add an Idempotency-Key with the transaction id, so a retry never sends or charges twice.
  • Verify API. For login and payment codes. It makes the code, checks it and limits abuse, so your team does not have to build that part.
  • SMPP bind. If your switch or banking platform already speaks SMPP, connect it directly from fixed IP addresses.

What institutions should plan for

An alert is only useful if you can prove what happened to it. Every message has a status you can read from the API, and a signed webhook can write the final status back to your own records. Set a validity period on short-lived messages, so an old code or alert stops trying after a few minutes instead of arriving late.

Members trust a name they recognise, so request your sender ID early and use it for everything. Tell members which name you text from and that you will never ask for a PIN by SMS. That one line makes fake messages easier to spot.

For smaller SACCOs

You do not need a developer to start. Export your member list to Excel, upload it, and send a meeting notice or a dividend update from the dashboard. Merge fields can fill in each member's own balance or amount due, so one upload becomes a personal message for everyone. The Excel guide shows how.

Questions

Should a SACCO use the dashboard or the API?

Use the dashboard for messages you write by hand, such as a meeting notice or a dividend announcement. Connect the API, or an SMPP bind, for alerts your core system sends by itself.

Is SMS safe for login codes?

It is a widely used second step that works on any phone. Use short time limits, never ask people to share the code, and use the Verify API so codes are limited and stored only as a hash.

What should never go in a banking SMS?

Full account or card numbers, passwords and PINs. Mask account numbers to the last four digits, and never ask a customer to reply with private details.

Connect your core system

Talk to us about API or SMPP access, or start with a free test key.