In the time it takes to read this sentence, another Nigerian has been scammed online. Not a stranger. Not "someone else." A mother. A student. A business owner. Someone just like you.
The scale of the problem is staggering, and the cost is personal. But the solution starts with one thing: awareness.
A Story Everyone Should Hear
Mrs. Ngunan runs a small provisions shop in Makurdi. She has three children in university and ₦4.2 million saved in her bank account. It is her entire life savings.
One day she received a WhatsApp message from her "son" who studies in Jos. He was in trouble, panicking, needing ₦10,000 urgently for a hospital bill. He asked her to send the money to a different account number because "his phone had been stolen and he was using a friend's."
She sent the money within three minutes.
Two days later, her account was empty. The message was a scam. Her son's profile picture had been copied. Her habits, her family, her emotional triggers — all learned from public posts she had made over the last two years.
Mrs. Ngunan did not lose her money because she was foolish. She lost it because she was never taught what to look for. Millions of Nigerians are in exactly the same position right now — vulnerable not because they are unintelligent, but because no one has ever educated them on the threats they face every day.
The Scale of the Problem
The 5 Attacks You Must Know
These are the most common forms of cyber attack targeting Nigerians today. Learn them, and you are already far safer than the average user.
An attacker sends a message that looks like it comes from a trusted source — your bank, your email provider, a government agency, or a friend. The message contains a link. Clicking it takes you to a fake website that captures your login details or installs malware on your device. Recent Nigerian example: fake "BVN verification" emails from criminals posing as banks. Thousands of Nigerians clicked and handed over their bank login credentials within hours.
The most common attack in Nigeria today. Attackers gather information about you from public social media — where you work, who your family is, where you shop — then use that information to impersonate someone you trust. Watch for these red flags: urgency ("I need this NOW"), emotional manipulation (a sick child, an arrest, a stranded traveller), requests to send money to an unusual account number, and a new phone number claiming to belong to a family member.
A criminal contacts your network provider, pretends to be you, and requests a SIM replacement. Once your SIM is swapped to their phone, every OTP and every bank SMS goes to them — and they drain your account in under 30 minutes. Prevention: lock your SIM with a PIN, register for bank notifications by email as well as SMS, and never respond to "verify your SIM" messages.
Attackers create fake job postings, investment opportunities, and loan offers to trick Nigerians into sending money or personal information. The schemes have become sophisticated: professional-looking websites, references to real companies, even fake testimonials from "past beneficiaries." Golden rule: if you have to pay money to get a job or an investment, it is a scam. Period.
You see a great deal on Instagram or Facebook Marketplace. You send the money. The "seller" disappears. Or worse, you receive a cheap knock-off instead of the real product. Safe shopping rules: use escrow services, buy from verified sellers, pay on delivery whenever possible. If the deal is too good to be true, it is.
Why Nigerians Are Easy Targets
Three factors make Nigerians especially vulnerable to cyber attacks:
- Digital literacy has not kept pace with digital adoption. Nigeria has raced into the digital age — but without the cybersecurity education that should have come with it. Millions of Nigerians use online banking, e-commerce, and social media daily, yet very few have ever received a single hour of cybersecurity training.
- Trust is high, awareness is low. Nigerians are famously hospitable and trusting. Attackers exploit this. A convincing story from a stranger on WhatsApp gets the money faster in Nigeria than it would almost anywhere else.
- Reporting is almost nonexistent. When Nigerians get scammed, they are often too ashamed to report it. The result: attackers operate with near-total impunity, and the same criminals continue attacking new victims every day.
What Every Nigerian Must Do — Starting Today
On Your Phone
- Enable two-factor authentication (2FA) on your email, bank, and social media — preferably using an authenticator app, not SMS.
- Use a password manager and never reuse the same password across accounts.
- Lock your SIM with a PIN by calling your network provider.
- Turn off Bluetooth and NFC when not in use.
- Never click links in unsolicited messages.
- Keep your phone's operating system and apps up to date.
On Your Banking
- Never share your OTP, PIN, or CVV with anyone — not even someone claiming to be from your bank.
- Register for email notifications in addition to SMS.
- Set transaction limits for your account.
- Review your bank statements monthly.
- Log out of banking apps when not in use.
On Your Social Media
- Make your accounts private (or at least limit what is publicly visible).
- Do not post real-time location updates.
- Do not post photos of your house, car, or children with identifiable details.
- Never accept friend requests from strangers.
- Verify every "urgent" message by calling the person through their real number.
On Your Business
- Train every staff member on phishing and social engineering.
- Use a business email with proper SPF, DKIM, and DMARC records.
- Back up your data — at least two copies, one stored off-site.
- Conduct a cybersecurity audit at least once a year.
- Have an incident response plan for when — not if — you are attacked.
The Role of Government and Organisations
Individual awareness is essential, but it is not sufficient. Government and private organisations must work together:
- Make cybersecurity education part of the national school curriculum.
- Fund and staff the Cybercrime Advisory Council properly.
- Compel banks and telecoms to implement stronger authentication.
- Publicise — and punish — cybercriminals convicted in Nigerian courts.
- Fund a national incident response team that small businesses can call for free.
Cybersecurity is no longer an IT issue. It is a life issue, a business issue, and a national security issue. Until every Nigerian — young and old, urban and rural, poor and wealthy — understands the basics of digital safety, we will continue to pay the price. In cash. In reputation. In trust.
The Bottom Line
If you have read this far, please do three things today:
- Enable two-factor authentication on your most important account.
- Share this article with a family member who is not tech-savvy.
- Commit to learning one new cybersecurity concept every week.
The bad guys are organised. You and I need to be too.
Comments (0)
No comments yet. Start the conversation!
Leave a Comment