Sodefina deploys significant human and technical resources to prevent and detect fraud attempts targeting its clients. Our systems continuously monitor your account for suspicious login attempts — an unusual location, repeated incorrect code attempts, or a sudden change in behaviour — and automatically trigger a temporary account block in case of suspected compromise. You are alerted immediately by email if unusual activity is detected on your account.
Sodefina will never ask you by telephone, email or SMS for your access codes, your PIN, your full card numbers or your 3D Secure code. If you receive such a request, it is a phishing attempt impersonating us. Hang up immediately, do not click any link, and report the incident to us at fraud-prevention@sodefina.eu.
Phishing involves sending you an email or message that imitates Sodefina's visual identity, in order to trick you into clicking a fraudulent link and entering your credentials on a fake site. Smishing uses the same principle but via SMS, often with a shortened link and a message creating a sense of urgency (“your account will be blocked”, “confirm your payment immediately”). Vishing involves a fraudster calling you while posing as a Sodefina adviser or a Banco de Portugal official, in order to obtain your access codes or convince you to make a transfer.
These attempts often take the form of an urgent email, SMS or call asking you to “verify your account” or “confirm a payment” via a link. Watch out for the following signs: a sender address slightly different from sodefina.eu, spelling mistakes, an artificial sense of urgency, or a request for payment before a loan is released. Always check the sender's address and the site's URL before entering any information (our official domain name is sodefina.eu), and remember that our advisers will never ask you for your login codes or your full card number over the phone.
Some fraudsters present themselves as “Sodefina advisers” on social media or via instant messaging, outside our official channels. Our communications with clients take place exclusively via the secure messaging service in your client area or our official contact form, at contact@sodefina.eu. Sites or mobile apps may also be created to imitate the appearance of our platform in order to fraudulently collect your data — always make sure you access your client area via the official URL sodefina.eu, or by typing the address directly into your browser, rather than following a link received by email or message.
For every credit application, we rigorously verify the applicant's identity using official supporting documents, in order to prevent any attempt to take out credit in someone else's name. If you suspect you have been the victim of identity theft in connection with a credit application made in your name, contact us immediately.
The documents you submit as part of your credit application (proof of identity, proof of income, bank details) are transmitted exclusively via encrypted channels: your secure client area or our internal messaging service. Never send a copy of your personal documents via an unsecured channel at the request of an unverified contact.
All our communications are protected by the TLS 1.3 protocol, the latest and most secure encryption standard. Our servers are hosted in ISO 27001-certified data centres (information security management), located exclusively within the European Union, and all card payments are processed by PCI DSS-certified providers (Payment Card Industry Data Security Standard). Access to your client area is further protected by a strong authentication system compliant with the requirements of the European PSD2 directive: when logging in from a new device or carrying out a sensitive operation (changing your IBAN, early repayment), you are asked for additional verification via a code sent by SMS or a mobile app notification.
Every outgoing transfer from your client area is subject to validation via a security code sent by our team, which checks the consistency of the operation before it is executed, as an additional control designed to prevent any attempt to misappropriate funds. Our information systems also undergo regular security audits conducted by independent providers, as well as periodic penetration tests designed to identify and fix potential vulnerabilities before they can be exploited by malicious actors.
Sodefina pays particular attention to protecting people in situations of financial fragility or vulnerability, in line with the charter of responsible credit institutions that we have signed. Our advisers are trained to identify these situations and direct affected individuals towards suitable support.
If you suspect fraudulent use of your account or a phishing attempt impersonating Sodefina, contact us immediately by email at fraud-prevention@sodefina.eu, via our contact form (Mon-Fri 8:30 a.m.-7:30 p.m., Sat 8:30 a.m.-5:00 p.m.), or via the secure messaging service in your client area. If you are in any doubt about the authenticity of a communication received in Sodefina's name, do not take any risks: contact us directly through these same channels before taking any action.
If you think you have mistakenly disclosed your login details, your card number or any other sensitive information to a fraudulent third party, change your password immediately, contact your bank to dispute the transaction if necessary, and report the incident to fraud-prevention@sodefina.eu without delay. In addition to reporting to Sodefina, you can report any phishing or fraud attempt to the Portuguese government platform dedicated to cybersecurity, the CNCS (Centro Nacional de Cibersegurança), accessible at www.cncs.gov.pt, as well as to the relevant police authorities in the event of proven financial loss.
Sodefina has internal teams specialised in detecting and handling fraud attempts, working closely with our compliance and IT security teams. Every client report is individually analysed and, where appropriate, immediate protective measures are applied to the account concerned. We also carry out regular awareness campaigns for our clients — email reminders, informational articles, banners in your client area — in order to maintain a high level of vigilance in the face of constantly evolving fraud techniques.
Our fraud prevention framework is part of our regulatory obligations under the supervision of the Banco de Portugal, as well as our obligations regarding the fight against money laundering and terrorist financing. In accordance with the GDPR, in the event of a personal data breach likely to result in a risk to your rights and freedoms, Sodefina is required to inform you as soon as possible and to notify the competent supervisory authority (CNPD) within 72 hours. Repayment of your instalments is made via the SEPA direct debit system, which offers an 8-week dispute period for authorised direct debits (13 months for unauthorised direct debits); in the event of a disputed direct debit, your bank is required to refund you immediately.
To learn more about online security, also see our dedicated online security page, which details the technical infrastructure implemented to protect your data, as well as our complaints charter.
Simulate your project in a few clicks — simple and commitment-free!
Please enter an amount between €3,000 and €75,000
Repayment term
Simulate your project in a few clicks — simple and commitment-free!
Personal loan of 5,000 €
Your personalised simulation
— Our loan proposal is adjustable —
(1) Excluding optional insurance. Indicative simulation. Subject to acceptance. Indicative fixed APR. Credit is a commitment and must be repaid. Check your repayment capacity before taking out a loan.
Simulate your project in a few clicks — simple and commitment-free!
Personal loan of 5,000 €
The optional monthly insurance premium is 0.70% of the outstanding balance. The first premium is the highest. Check your eligibility.