On a humid weekday morning in Abuja, a single tap on a WhatsApp link unraveled Mrs. Adaeze Okonkwo’s carefully ordered life. Within minutes, her account was hijacked. Within hours, her reputation was under siege. By nightfall, money had moved from the pockets of friends, family and colleagues—sent in good faith, stolen in her name.
Adaeze’s story is not exceptional. It is emblematic. In today’s Nigeria, where banking, commerce and even intimacy increasingly live on mobile screens, digital access has outpaced digital safety. In this report, Chukwu Obinna traces how weak cyber awareness, economic desperation and fragile digital infrastructure are colliding—turning ordinary Nigerians into prime targets for cybercriminals, and everyday smartphones into gateways of loss, shame and fear.
A Revolution Without a Rulebook
From Lagos to Lafia, Nigeria’s digital revolution has arrived without a safety manual. Bank apps promise speed. Social media sells connections. Fintech platforms offer inclusion. Yet for millions of users, each click carries hidden risk.
Cybercriminals, once focused on corporations and governments, have shifted decisively to individuals—civil servants, students, traders, drivers and retirees—because they are easier to deceive, poorly protected and unlikely to report attacks. The financial toll is sobering. The Nigeria Inter-Bank Settlement System (NIBSS) reports that Nigerians lost over ₦17.67 billion to electronic fraud in 2023. In 2024, Africa recorded the highest volume of cyberattacks globally, with organisations facing an average of 2,960 attacks weekly, a 37 per cent jump year-on-year.
Behind the statistics are lives punctured by a single misstep: a shared OTP, a convincing phone call, a link clicked in haste.
Three Lives, Three Lessons
Adaeze Okonkwo, 38, Civil Servant, Abuja “It looked official,” Adaeze says, recalling the WhatsApp message warning that her account would be “suspended for verification”. She clicked. Seconds later, she was locked out. The hijackers then messaged her entire contact list—over 400 people—pleading for urgent financial help. “My colleagues, my church members, even my sister sent money before I could warn them,” she says. “I lost my reputation and my peace of mind. People still ask if that message was really me.”
WhatsApp hijacking has become one of Nigeria’s fastest-growing cyber threats. Kaspersky data shows suspected scam notifications surged by up to 3,000 per cent in parts of Africa in 2024.
Musa Ibrahim, 22, University Student, Nasarawa Musa’s trap arrived via Instagram: a glossy advert promising 100 per cent returns on cryptocurrency investments in 48 hours. Pressed by school fees, he transferred ₦150,000—his entire savings. The page disappeared the next day.
“I knew it sounded too good to be true, but I was desperate,” Musa admits. “The police told me cases like mine are almost impossible to trace.”
In 2024 alone, Nigeria’s Economic and Financial Crimes Commission (EFCC) arrested more than 1,000 suspects linked to cyber scams. A December raid netted 792 suspects accused of romance and crypto-investment fraud. Many victims are young Nigerians aged 18–30, squeezed by economic hardship and seduced by digital illusions of quick wealth.
Mama Ngozi, 45, Market Trader, Abuja
Her caller sounded professional. He knew her name and bank details. He warned her account was “compromised” and asked for the one-time password sent to her phone. “I complied,” she says quietly. “Within minutes, ₦340,000 was gone.”
This is social engineering—the art of manipulating trust—and it is now the most potent weapon in the cybercriminal’s arsenal. A 2024 study on Nigerian banks identified pharming, SIM-swap fraud, identity theft, smishing and vishing as leading threats to customers.
Why Nigerians Remain Exposed
The explosion of cyber fraud reflects layered systemic failures. A vacuum in public education: Digital safety is rarely taught in schools or reinforced through public campaigns. Most Nigerians learn to use smartphones without understanding strong passwords, two-factor authentication or phishing red flags.
Weak enforcement: While arrests make headlines, prosecution lags. Many victims do not report cases—out of shame or resignation. Globally, less than 25 per cent of cybercrimes are reported, according to Cybersecurity Ventures.
Economic pressure: With inflation averaging 33.24 per cent in 2024 and youth unemployment stubbornly high, cybercrime has become a perverse survival strategy for some, while desperation makes others easy prey.
Fragile infrastructure: Nigeria’s rapid digitalisation prioritised speed over safety. Customer education remains minimal. As of December 2024, the Nigerian Communications Commission recorded 139.2 million internet users, with 92 per cent accessing the web via mobile phones—often with limited security settings.
Expert Insight: How to Stay Safe Online
To cut through the fear, this reporter spoke with Sani Isah, CEO and Founder of DOT IO, a cybersecurity and AI firm. “The biggest vulnerability I see is password hygiene,” Isah says. “People reuse simple passwords everywhere. Once one account is breached, everything falls.”
He insists on unique, 12–16-character passwords and the use of password managers such as Bitwarden or LastPass. “Never use birthdays or names. Hackers crack those in seconds.”
On two-factor authentication, his advice is blunt: “Think of it as a second lock. Use authenticator apps, not SMS. Apps are the gold standard.”
Isah urges Nigerians to take control of privacy settings, avoid posting phone numbers or locations publicly, verify links—even from friends—and shun public Wi-Fi for banking.
“Cybersecurity isn’t paranoia,” he says. “It’s intentional living. Just as you lock your door at night, you must lock your digital life.”
A National and Continental Crisis
Nigeria’s vulnerability mirrors a wider African emergency. The World Cybercrime Index (2024) ranked Nigeria fifth globally for cybercrime threat. INTERPOL reports 3,459 ransomware detections in Nigeria last year alone.
As connectivity deepens, the stakes rise.
The Cost of Inaction
Beyond billions lost, cyber fraud corrodes trust—undermining financial inclusion, e-commerce and digital governance. It breeds cynicism among youth and normalises criminality in the digital economy.
The digital age is here. Safety must follow.
For Nigeria’s 139 million connected citizens, digital security is no longer optional. It is survival. The choice is stark: adapt and protect—or remain exposed.
