Any time a government service starts asking for a face scan, it is fair to ask whether it is actually safe, or whether it just looks official. That question matters even more for pensioners, a group scammers specifically target because of predictable monthly payments and, often, less day-to-day exposure to digital fraud tactics. This guide looks honestly at how Nepal's e-pension verification system handles your data, where the real risks sit, and how to avoid the fake versions that inevitably follow any popular government app.
Short answer
The official e-pension verification system, accessed through pension.gov.np and built on the government's IPMS-V2 platform, is a legitimate Ministry of Finance service. It is not inherently unsafe. The real risk is not the official system itself, but fake links, lookalike apps, and phone calls that impersonate it to steal your login details or OTP codes.
What the System Actually Does With Your Face
The verification technology, built by Third Factor AI, performs "liveness verification": it captures a facial scan and a live hand gesture (such as a thumbs up or victory sign) to confirm that a real person, not a photo or recording, is completing the renewal. This data is compared against the pensioner's existing records and cross-checked with the national identity database. The Ministry of Finance has publicly described the process as secure, and the underlying purpose is protective: it exists specifically to stop pension funds from being fraudulently drawn on inactive or deceased pensioners' accounts.
Where the Real Risk Comes From
Facial verification technology itself is not the main danger here. The danger sits in the same place it does for every popular Nepali digital service, banking apps, e-wallets, and government portals alike: scammers copying the look of a trusted brand to trick people into handing over credentials. Nepal has already seen a documented rise in SMS phishing campaigns impersonating banks and payment platforms, using fake "your account will be locked" messages to steal OTPs and passwords. There is every reason to expect the same tactic to be tried against a newly launched, widely publicized government service like e-pension.
Warning signs of a fake e-pension link or call
- An SMS or social media message urging you to "verify immediately" through a link that is not pension.gov.np.
- A phone call asking you to read out the OTP code you just received, for any reason.
- A request to download an APK file from outside the official Google Play Store or Apple App Store.
- A message asking for your password, PIN, or bank account details "to complete verification."
- Urgent, threatening language claiming your pension will be cancelled within hours unless you act now.
How to Verify You Are on the Real System
Type the address yourself
Go to pension.gov.np by typing it directly into your browser rather than tapping a link from a message.
Never share your OTP
The Pension Management Office will never call and ask you to read out your OTP code over the phone.
Check the domain
Legitimate government pension services use a .gov.np domain. Be suspicious of similar-looking but different domains.
Ask before you tap
If a family member sends you a verification link, confirm with the official IPMS video tutorial or support contact before using it.
Is Facial Recognition Data Itself a Privacy Risk?
It is a fair concern, and worth answering plainly rather than dismissively. Any system that stores biometric data carries some inherent risk, since biometric data cannot be changed the way a password can if it is ever compromised. What can be said based on the government's own description of the system is that verification is tied to a specific, narrow purpose, confirming the pensioner is alive, rather than open-ended surveillance, and it operates within the existing national ID infrastructure rather than a new, separate database. If you have specific concerns about how long your data is retained or who can access it, the Pension Management Office's official contact channel is the appropriate place to ask, rather than relying on assumptions in either direction.
Official vs. Suspicious Channels
| Signal | Official (safe) | Suspicious (avoid) |
|---|---|---|
| Website | pension.gov.np, typed directly | Shortened links, lookalike domains, links in SMS |
| Contact method | You initiate the login yourself | Unsolicited call or message asks you to act immediately |
| Information requested | Pension Account Number, OTP entered by you on the real site | OTP read aloud, password, PIN, or bank card details |
| App source | Official app store listing under the Ministry of Finance / Pension Management Office | APK sent via message or shared link |
What to Do If You Think You Were Scammed
- Do not enter any further information on the suspicious page or app.
- Change your IPMS-V2 password immediately from the official pension.gov.np site.
- Contact your bank if you shared any banking details, to flag your account for monitoring.
- Report the incident to the Nepal Police Cyber Bureau, which handles digital fraud complaints.
- Inform the Pension Management Office support contact so they can flag the impersonation.
Frequently Asked Questions
Is the official e-pension system government-run or private?
It is run by the Ministry of Finance's Office of the Comptroller General, with the underlying facial liveness technology built by a Nepali company, Third Factor AI, under Prixa. It is an official government service, not a third-party product operating independently.
Can someone steal my pension using a photo of my face?
The system is specifically designed to resist this by requiring a live, randomized hand gesture in addition to facial matching, which a static photo or pre-recorded video cannot perform on demand.
Should I trust an SMS that says my e-pension is expiring today?
Treat it with caution. Instead of tapping any link in the message, open your browser and go to pension.gov.np directly to check your actual renewal status.
Is it safe to let a family member help me with the facial scan?
Yes, having someone help you hold the device or navigate the screen is fine. What matters is that the face and gesture on camera belong to you, the pensioner, since the system is verifying your identity specifically.
What if I already gave my OTP to someone claiming to be from the Pension Office?
Change your password immediately through the official site and contact the Pension Management Office support channel to flag the account. Also monitor your linked bank account for any unusual activity.
Conclusion
The e-pension verification system itself is a legitimate, purpose-built government tool, not something to be nervous about using. The genuine safety work is on your side: always reach it by typing pension.gov.np yourself, never read an OTP aloud to anyone, and treat any urgent, threatening message about your pension as a red flag until proven otherwise. Used carefully, this system is considerably safer than the paperwork-heavy process it replaced.
Ready to complete your verification the right way?
Step-by-Step: How to Update Your Life Certificate | How IPMS-V2 Works
Discussion