Nigeria has rapidly established itself as a leading power in Africa’s digital payments landscape. Mobile banking applications, dedicated financial technology (fintech) platforms, and USSD services have revolutionised access to money, making financial transactions quicker, easier, and more accessible to millions of people. This massive shift has propelled the country’s electronic payments volume, which hit a staggering ₦600 trillion in 2023. This figure represents a leap of over 50 per cent from the previous year’s total of ₦387 trillion, vividly illustrating just how deeply digital finance has integrated into the nation’s daily life.
This impressive boom has been fuelled by several factors. Nigeria boasts one of the continent’s largest mobile markets, with over 180 million active mobile subscriptions providing the necessary infrastructure. Furthermore, a wave of innovation from start-ups like Paystack, Flutterwave, and OPay has introduced user-friendly platforms for payments and transfers. These new channels offer undeniable convenience and speed, a welcome alternative to the often slow and stressful experience of traditional banking halls. The Central Bank of Nigeria’s cashless policy, which aims to reduce reliance on physical currency, has also acted as a significant catalyst, expanding commerce for small and medium-sized enterprises and boosting financial inclusion among millions of formerly unbanked citizens.
However, this rapid digital progress is now overshadowed by a growing and evolving crisis: the significant rise in cybersecurity threats. Criminals are actively exploiting vulnerabilities in the system, including weak regulatory enforcement and a general lack of consumer awareness, to carry out increasingly sophisticated fraud schemes.
Data from the Nigeria Inter-Bank Settlement System (NIBSS) Annual Fraud Report painted a worrying picture for 2023, revealing that attempted fraud across the ecosystem soared by 45 per cent. The most exposed channels were mobile banking apps and online platforms. The total financial losses resulting from these activities ran into billions of naira, and many cases of theft and attempted crime were never officially reported to law enforcement agencies.
The cybersecurity environment in the Nigerian payments sector is complex and highly vulnerable. Common attack methods include phishing and social engineering, where users are tricked via scam emails, text messages, or phone calls into divulging sensitive login details. Other prevalent threats include SIM swap fraud, account takeover, and, worryingly, collusion from insiders within financial institutions.
Compared to advanced economies, where stringent regulatory enforcement and sophisticated fraud detection systems offer greater user protection, Nigeria’s payment ecosystem remains exposed. While the Central Bank issues guidelines and there are regulations for data protection, consistency in compliance and enforcement remains a major challenge. Fraud reporting systems are often fragmented, leaving consumers struggling to recover stolen money.
In contrast, regulatory bodies in regions like the European Union enforce strong customer authentication for online payments, and countries such as the UK have consumer protection models that require banks to refund customers who fall victim to certain types of fraud. In the US, liability for credit card fraud is often capped for consumers, shifting the responsibility—and the incentive to prevent crime—onto banks and merchants. Nigeria’s lack of structured consumer protection means users currently bear the brunt of most fraud incidents.
If left unchecked, this escalating trend of cybercrime could severely damage public confidence in digital transactions, potentially undermining years of progress towards financial inclusion. To fortify the ecosystem, experts suggest that Nigeria must mandatorily enforce multi-factor authentication, embrace the use of Artificial Intelligence for real-time fraud detection, and run robust public awareness campaigns to educate citizens about the risks of phishing and SIM swaps. Crucially, the regulatory framework must be strengthened to expand customer liability protection, while promoting intelligence-sharing among banks, fintech companies, and telecoms operators to effectively fight organised cybercrime.
