ONLINE FRAUD AND CYBERCRIME IN NIGERIA: HOW TO PROTECT YOURSELF AND WHAT TO DO IF YOU ARE A VICTIM | Clementina E. Ukiri, Esq.

Clementina Egwolomena Ukiri Esq. July 04, 2025
Nigeria's burgeoning digital landscape, while offering immense opportunities, has unfortunately become a fertile ground for online fraud and cybercrime.

From elaborate scams designed to fleece unsuspecting individuals to sophisticated attacks targeting businesses, the threat is real and constantly evolving.

Recent reports highlight the alarming scale of the problem, with Nigerian financial institutions losing billions of naira annually to fraud, much of it digitally driven. For instance, the Nigeria Inter-Bank Settlement System's (NIBSS) 2023 Annual Fraud Landscape report revealed a staggering ₦17.6 billion lost to fraud in 2023, a 496% increase from 2019. (Techpoint Africa, 2024).

Understanding the common tactics employed by cybercriminals and equipping yourself with robust defensive strategies is no longer optional – it's essential for anyone engaging with the internet.

Common Types of Online Fraud and Cybercrime in Nigeria.
The arsenal of cybercriminals is diverse, but some types of online fraud and cybercrime are particularly prevalent in Nigeria:
  1. Phishing and Smishing: This involves sending deceptive emails (phishing) or text messages (smishing) that impersonate legitimate organisations (like banks, government agencies, or popular online services) to trick you into revealing personal information such as passwords, bank details, or BVN. The aim is often to gain unauthorised access to your accounts.
  2. Romance Scams (Catfishing): Scammers create fake online personas on dating apps or social media, build emotional connections with victims, and fabricate emergencies or elaborate stories to solicit money.
  3. Investment Scams: These promise unrealistically high returns on investments, often in fake cryptocurrency schemes, forex trading, or bogus agricultural projects. Victims are encouraged to deposit funds, which are then stolen.
  4. Online Shopping Fraud: This includes fake e-commerce websites offering heavily discounted products that are never delivered, or compromised vendor accounts on legitimate platforms.
  5. Job Scams/Recruitment Fraud: Fraudsters pose as recruiters or employers, asking job seekers to pay for non-existent application fees, training, or visa processing.
  6. Identity Theft: This involves stealing your personal information (e.g., NIN, BVN, passport details) to open fraudulent accounts, make unauthorised purchases, or commit other crimes in your name.
  7. Business Email Compromise (BEC): This sophisticated scam targets businesses by impersonating executives or trusted partners to trick employees into transferring funds or sensitive data to fraudulent accounts.
  8. Tech Support Scams: Scammers pretend to be from well-known tech companies, claiming your computer has a virus or other issue, then demand payment for unnecessary "fixes" or try to gain remote access to your device.

How to Protect Yourself: Proactive Measures.
Prevention is always better than a cure when it comes to online fraud.

Here are essential steps you can take to safeguard yourself:
  • Be Sceptical of Unsolicited Communications:
    1. Verify the Sender: Always scrutinise emails and messages. Check the sender's email address for slight misspellings or unusual domains. If it claims to be from your bank, independently verify by calling their official customer service number, not the one provided in the suspicious message.
    2. Beware of Urgency and Threats: Scammers often create a sense of urgency or use threats to pressure you into acting quickly without thinking. Legitimate organisations rarely demand immediate action under duress.
    3. Avoid Clicking Suspicious Links: Never click on links in unsolicited emails or messages. If you suspect the message might be legitimate, type the organisation's official website address directly into your browser.
  • Strengthen Your Digital Security:
    1. Strong, Unique Passwords: Use complex passwords (a mix of uppercase, lowercase, numbers, and symbols) for all your online accounts. Crucially, never reuse passwords across multiple platforms. Consider using a reputable password manager. 
    2. Enable Two-Factor Authentication (2FA) / Multi-Factor Authentication (MFA): This adds an extra layer of security by requiring a second form of verification (e.g., a code sent to your phone, a fingerprint, or a facial scan) in addition to your password. Enable it on all your sensitive accounts (banking, email, social media). 
    3. Regular Software Updates: Keep your operating system, web browsers, antivirus software, and all applications updated. These updates often include critical security patches that protect against known vulnerabilities.
    4. Use Reputable Antivirus Software: Install and regularly update antivirus and anti-malware software on all your devices.
  • Protect Your Personal Information:
    1. Be Cautious What You Share Online: Limit the personal information you share on social media platforms, as scammers can use this data to craft targeted attacks or for identity theft.
    2. Shred Sensitive Documents: Before disposing of documents containing personal information (bank statements, utility bills, old IDs), shred them thoroughly.
    3. Be Wary of Public Wi-Fi: Avoid conducting sensitive transactions (online banking, shopping) on unsecured public Wi-Fi networks, as they can be easily intercepted by criminals. Use a Virtual Private Network (VPN) if you must.
    4. Never Share Your PIN or OTP: Your Personal Identification Number (PIN) for ATM cards and One-Time Passwords (OTPs) sent to your phone are confidential. No legitimate bank staff or organisation will ever ask you for these. 
  • Smart Online Shopping & Financial Habits:
    1. Shop on Secure Websites: When shopping online, ensure the website address begins with "https://" and look for a padlock icon in the address bar. This indicates a secure connection.
    2. Read Reviews and Research Sellers: Before making a purchase from an unfamiliar vendor, check reviews and verify their legitimacy.
    3. Monitor Your Bank Statements: Regularly check your bank accounts and credit card statements for any unauthorised transactions. Report discrepancies immediately.
    4. Be Skeptical of "Too Good to Be True" Offers: If an offer seems unbelievably good, it probably is a scam.

What to Do If You're a Victim.
If you suspect you've been a victim of online fraud or cybercrime, acting quickly is crucial to minimise damage and aid law enforcement:
 
  • Act Immediately to Limit Financial Loss:
    1. Contact Your Bank: If your bank account or card details have been compromised, immediately contact your bank to block your account/card and report the fraudulent transactions.
    2. Change Passwords: Change passwords for all compromised accounts and any other accounts that use the same password. Enable 2FA if you haven't already.
  • Gather Evidence:
    1. Document Everything: Take screenshots of suspicious emails, messages, websites, transaction details, and any communication with the fraudster.
    2. Save URLs (Website links): Note down the URLs of any suspicious websites.
    3. Preserve Communication: Do not delete emails, chat logs, or text messages from the scammer.
  • Report the Incident to the Authorities:
    1. Nigerian Police Force (NPF) - National Cybercrime Centre (NCCC): This is your primary point of contact for reporting cybercrime in Nigeria. (Phone: +2349168343711, Email: support@nccc.npf.gov.ng, WhatsApp: +2349168343710. Their website: nccc.npf.gov.ng)
    2. Economic and Financial Crimes Commission (EFCC): For financial crimes and advanced fee fraud. You can report via their online portal or visit their offices.
    3. Independent Corrupt Practices and Other Related Offences Commission (ICPC): Also handles corruption-related cybercrimes.
    4. Scamwatch Nigeria: An initiative under the Nigerian Communications Satellite Limited (NIGCOMSAT) in collaboration with other agencies. They have forms to report scams and cybersecurity incidents: scamwatch.ng.
    5. Your Internet Service Provider (ISP): Report phishing attempts or malicious websites to your ISP.
    6. Seek Legal Counsel: Consult a lawyer experienced in cybercrime and fraud cases. They can guide you through the legal process, help you understand your rights, and explore avenues for recovery or redress.

The Legal Ramifications: Cybercrime (Prohibition, Prevention, Etc.) Act 2015 with Amendment Act 2024.
Nigeria has a robust legal framework to combat cybercrime: the Cybercrime (Prohibition, Prevention, Etc.) Act 2015. This Act criminalises various cyber-related offences and provides for their investigation and prosecution. Penalties vary depending on the severity of the offence, ranging from significant fines to lengthy terms of imprisonment (e.g., up to 10-15 years or more for offences against critical national information infrastructure, and substantial fines or imprisonment for electronic fraud and identity theft) (Nigerian Financial Intelligence Unit, 2015). The Act also places obligations on service providers like MTN and GLO to assist law enforcement.

Conclusion
Online fraud and cybercrime are formidable adversaries, but knowledge and vigilance are your strongest weapons. By adopting proactive security measures and understanding the steps to take if you fall victim, you significantly reduce your risk. Remember, the internet is a powerful tool, but like any tool, it demands responsible and informed use. Stay alert, stay secure, and contribute to making Nigeria's digital space safer for everyone.

References:

Clementina E. Ukiri, Esq. (07057269862)

Post a Comment

0 Comments

Emoji
(y)
:)
:(
hihi
:-)
:D
=D
:-d
;(
;-(
@-)
:P
:o
:>)
(o)
:p
(p)
:-s
(m)
8-)
:-t
:-b
b-(
:-#
=p~
x-)
(k)