If you’ve been on Facebook lately and follow TallyKhata—Bangladesh’s popular digital bookkeeping and payment platform—you might have noticed something off. Gambling ads. Suspicious links. Content that has no business being on a fintech company’s official page.
Users are worried. Some are convinced the page has been hacked. Others think it’s been taken over by scammers. And honestly? Given what we know about cybercrime in Bangladesh right now, those concerns aren’t paranoid—they’re justified.
The Context
TallyKhata is no small player. The app serves millions of small business owners across Bangladesh, helping them track transactions, accept digital payments, and manage their finances. In recent months, the company has even partnered with Midland Bank to digitally empower small businesses nationwide. It’s a trusted name.
That’s exactly why this is alarming. When a trusted financial brand’s social media page starts pushing gambling ads and sketchy content, people notice. And they panic.
TallyKhata hasn’t issued an official statement yet. No explanation. No reassurance. Just silence—while the speculation grows.
This Isn’t Isolated
Here’s the thing: this fits a pattern. A disturbing one.
Between November 2024 and April 2026, Dhaka’s Cyber Support Centre received 905 complaints. Among them: 237 cases of financial fraud on Telegram, 220 cases of bKash fraud, and 98 hacks involving Facebook and Gmail accounts.
The scale of mobile financial services fraud is staggering. Financial crime analysts estimate that digital scams linked to MFS tools have siphoned off nearly Tk 21,000 crore over the years. A recent study found that 6.3% of individual MFS users and 17% of agents have already fallen victim to fraud.
And social media account hijacking? It’s booming. Between June 2025 and April 2026 alone, the CID received 491 hacking-related complaints—including 247 Facebook accounts, 103 email accounts, and 79 WhatsApp numbers. Investigators say users who don’t use two-factor authentication are the most vulnerable.
How These Things Happen
Scammers don’t need to be geniuses. They just need to be convincing.
They create imposter pages that look almost identical to the real thing—same branding, same taglines. Or they take over legitimate pages through phishing, credential theft, or social engineering. Once they’re in, they monetize the page by running ads for gambling, fake investments, or outright scams.
In one recent case, a fraud ring arrested by RAB had swindled more than Tk 1 crore from mobile banking users. Their method? Collecting account numbers from agents, then calling victims with cloned SIMs that mimicked official service provider numbers.
Another network, operating from China, Malaysia, and the Philippines, used fake AI traffic violation messages to steal banking details. One doctor lost Tk 100,000 after clicking a single link.
What You Should Do Right Now
Until TallyKhata clarifies the situation, treat their Facebook page with extreme caution. Here’s what matters:
Never share your PIN, OTP, CVV, password, or verification code with anyone—no matter who they claim to be. Banks and fintech companies will never ask for these.
Don’t click on suspicious links in messages, ads, or posts—even if they appear to come from a trusted source.
Only use the official TallyKhata app or website for transactions. Not links from social media. Not messages from unknown numbers.
Enable two-factor authentication on every financial app and social media account you have.
If something feels off, contact TallyKhata’s official customer care directly—not through the Facebook page, but through their verified website or app.
The Bottom Line
We don’t know yet whether TallyKhata’s page has been hacked or if it’s something else. But we do know that cybercriminals are getting bolder, smarter, and more organized. The platforms we trust are exactly the ones they’re targeting.
Until we get an official word from TallyKhata, assume nothing. Verify everything. And don’t let urgency or fear push you into making a mistake.
Tags:
Technology