Nigeria’s Digital Payment Boom Faces Rising Cybersecurity Threats By Abdulateef Abdulsalam

In recent years, Nigeria has become one of Africa’s leaders in digital payments. Mobile banking apps, fintech platforms, and USSD services have made financial transactions faster, easier, and more accessible to millions of people. According to the Nigeria Inter-Bank Settlement System (NIBSS), electronic payments in the country exceeded ₦600 trillion in 2023 — a staggering leap that reflects how deeply digital finance has become part of everyday life.
Yet alongside this success lies a major problem. Cybercriminals are exploiting weak systems, poor regulation, and limited consumer awareness to carry out increasingly sophisticated fraud schemes. Unlike advanced economies, where strict regulations and advanced fraud detection systems protect users, Nigeria’s payment ecosystem remains far more vulnerable.
If left unchecked, this could undermine public confidence in digital payments and slow down financial inclusion.

The Rise of Digital Payments in Nigeria
The boom in digital payments has been driven by several factors:
High mobile phone penetration: Over 180 million active mobile subscriptions make Nigeria one of the largest mobile markets in Africa.
Fintech innovation: Startups like Paystack, Flutterwave, OPay, and Kuda are building user-friendly platforms for payments, transfers, and merchant services.
Banking convenience: Mobile and internet banking now account for a significant share of transactions as Nigerians seek faster alternatives to branch visits.
Government support: The Central Bank of Nigeria (CBN) has promoted cashless policies to reduce reliance on physical currency.
This shift has transformed commerce, especially for small and medium enterprises that can now receive payments digitally. It has also boosted financial inclusion, with millions of unbanked Nigerians accessing financial services for the first time through fintech platforms.
But the same tools that enable growth also create openings for cybercriminals.

Understanding the Cyber Threat Landscape
The threat environment in Nigeria’s payment sector is complex and growing. Common attack methods include:
Phishing and social engineering: Fraudsters send convincing emails, texts, or phone calls that trick users into sharing login credentials.
SIM swap fraud: Criminals take over mobile numbers by deceiving telecom providers, giving them access to one-time passwords and bank accounts.
Insider collusion: Some fraud cases involve staff working with external criminals to bypass controls.
Account takeover: Using weak or reused passwords, criminals gain access to users’ online banking profiles.
Malware and fake apps: Fraudulent mobile apps are used to capture banking details from unsuspecting users.
The NIBSS Annual Fraud Report showed that in 2023 alone, attempted fraud rose by 45%, with mobile channels and online platforms being the most exploited. Losses amounted to billions of naira, and many cases were never reported to law enforcement.

Comparing Regulatory Frameworks: Nigeria vs. Advanced Economies
Nigeria:
The CBN has issued guidelines on mobile banking, KYC requirements, and cashless policy.
The NDPR (Nigeria Data Protection Regulation) provides data protection rules.
However, compliance and enforcement remain weak. Many fintech operate with minimal oversight.
Fraud reporting systems are fragmented, and consumers often face difficulty recovering stolen funds.
Advanced Economies:
In the European Union, the Payment Services Directive 2 (PSD2) requires strong customer authentication (such as two-factor authentication) for online payments.
The PCI-DSS standard governs card transaction security globally.
In the United States, financial institutions must report breaches and fraud attempts. Institutions also share intelligence through the FS-ISAC (Financial Services Information Sharing and Analysis Center).
In the UK, the Open Banking framework enforces data sharing under strict security standards.
The contrast is clear: while developed economies enforce strict rules with penalties for non-compliance, Nigeria’s regulatory environment is more reactive and less consistent.

The Cost of Weak Cybersecurity in Payments
The consequences of poor security in Nigeria’s digital payment space go beyond financial losses. They include:
Erosion of consumer trust: Users who lose money to fraud often stop using digital channels.
Reputational damage for fintech and banks: Repeated breaches discourage investors and customers.
Financial inclusion setbacks: People in rural areas or low-income groups may revert to cash.
Broader economic risks: A fragile payment ecosystem threatens Nigeria’s cashless policy and fintech growth.
By contrast, in developed markets, the high level of trust in digital platforms has allowed online payments to flourish, with e-commerce thriving on secure infrastructure.

Case Examples: Nigeria vs. Abroad
In Nigeria, telecom-related fraud (such as SIM swaps) has caused repeated customer losses, with reports of millions stolen in coordinated attacks. Many banks refund victims slowly, if at all.
In the UK, banks are required under the Contingent Reimbursement Model (CRM) to refund customers who fall victim to authorised push payment fraud. This ensures accountability and restores trust.
In the US, credit card fraud liability is capped for consumers, with banks and merchants bearing responsibility.
Nigeria’s lack of structured consumer protection leaves users bearing the brunt of fraud.

Closing the Gaps
To strengthen its financial cybersecurity, Nigeria can learn from global practices. Key measures include:
Enforce Multi-Factor Authentication (MFA): Every bank and fintech should implement biometric or token-based authentication.
Adopt AI for Fraud Detection: Machine learning tools can identify suspicious activity in real time, reducing false positives while catching fraud.
Public Awareness Campaigns: Educating consumers about phishing, SIM swap risks, and fake apps is vital.
Strengthen Regulations: The CBN should enforce PCI-DSS compliance and expand fraud liability protections for customers.
Encourage Collaboration: Banks, fintech, and telcos should share intelligence, much like FS-ISAC does internationally.
Stronger Legal Enforcement: Law enforcement agencies must be better equipped to investigate and prosecute cybercrime cases.

Conclusion
Nigeria’s digital payment revolution is a remarkable achievement. But it sits on shaky ground if cybersecurity continues to lag adoption. Fraud and cybercrime could undo years of progress if public trust is lost.
Advanced economies show that the solution lies in a combination of strong regulation, advanced technology, and consumer education. If Nigeria embraces these strategies, digital payments can remain a growth engine. But if it doesn’t, the risks could outweigh the benefits — leaving consumers, fintech, and the economy exposed.

Abdulsalaam, Cybersecurity Expert, based in United Kingdom