E-Financial
Cybersecurity Expert Raises Alarm, Warns against Use ATM Card PIN for Online Transactions
Dr. Kingsley Chibuzor Aguoru, a Nigerian-British Chartered Engineer and Doctor of Information Security, has petitioned the Economic and Financial Crimes Commission (EFCC) and the Central Bank of Nigeria (CBN) to immediately put a halt to card PIN usage for online payments to protect Nigerians from being fleeced of their hard earned money.
He said he was making the passionate appeal in order to secure financial practices in the country.
According to the UK based chartered Engineer, with his over 20 years of experience in financial technologies and security, who pioneered the concept of OTPs for card-not-payments, he was compelled to bring attention to the critical flaws in the Nigeria’s current online card payment practices, which exposes customers to unnecessary risks and significant danger.
Specifically, according to Aguoru, the continued use of PIN in online transactions put Nigerians at a grave risk of being defrauded.
Aguoru noted that card PINs were designed for face-to-face transactions at ATMs and POS terminals where secure encryption methods protect users rather than online usage.
In the petition cited by this paper, titled: “Urgent Call to Ban Card PIN Usage for Online Payments in Nigeria”, Dr. Aguoru explained: “In 2005, I developed a solution to tackle prevalent fraud in card-not-present transactions in the United Kingdom using both online and offline OTP models, drawing on Cartesian geometry. Although major networks like Visa and Mastercard declined the innovation at the time, my OTP model has since become a standard worldwide for authorization.
”Nigerian payment providers, such as Paystack and Flutterwave, and Interswitch still require card PINs for online card transactions, a practice virtually obsolete elsewhere or not ever used. Card PINs are designed for face-to-face transactions at ATMs and POS terminals, where secure encryption methods protect users. Using them online exposes consumers to serious cyber risks, including phishing, keylogger, man-in-the-middle attacks, even some dubious staff at the payment provider company can misuse customer’s PIN captured on the internet.”
He continued: “Nigerians are already familiar with OTPs for securing online transactions. However, it is critical to understand that OTPs should never be combined with Card PINs in an online setting. Instead, global best practices require using OTPs or Multi-Factor Authentication alone for online payments, which adds a secure layer of protection, an alternative to using card PINs online is to issue hardware card readers. With these devices, customers would simply insert their card, enter their PIN directly on the reader, and receive a generated OTP, keeping the entire process offline and secure.”
Enumerating the role of CBN in financial matters in the present digital age, Dr. Aguoru called on the apex financial regulator to protect consumers from cyber vulnerabilities. “I respectfully call on the CBN to address these issues head-on by prohibiting web PIN entry for card payments and enforcing OTP or MFA requirements across all payment providers.”
He advised the CBN to urgently steps forward for the safety of Nigerian cardholders by banning the use of card pins for online transactions and mandate the use of OTPs or other dynamic authentication methods, such as authorization through mobile banking apps.
He noted that there was need for consumers to be educated on safe online payments practice to minimize exposure to phishing and other cyber threats.
He said it was also necessary for the apex bank to enforce industry wide compliance with modern security standards to protect Nigerian customers, especially on the web, through policies, such as security, payments compliance policies.
Aguoru emphasized that by adopting these measures, the CBN will greatly reduce the risks Nigerian consumers face and bring the nation’s payment systems in with international best practice.
Nigerian banks have resumed processing international tuition payments from Naira accounts through the Central Bank of Nigeria (CBN)’s Form A portal.
Form A is an application form designed by the Central Bank of Nigeria to pay for service transactions (invisible trade).
The form allows customers to purchase foreign exchange at the CBN or interbank rate to make payments for eligible services as predetermined by the foreign exchange manual.
This development comes a month after commercial banks announced the resumption of international transactions on their naira cards.
In an email to customers, Guaranty Trust Bank Limited (GTBank) and Lotus Bank announced that the service is now available for applicants paying undergraduate and postgraduate tuition fees abroad.
“Pay international tuition fees directly from your Naira account,” the notice from GTBank read.
To access the service, customers are required to register and submit their applications via the Trade System Portal at www.tradesystem.gov.ng.
GTBank explained: “Select the ‘Form A’ application for Educational Fees. Choose GTBank as the processing bank, attach required documents, and submit the application.”
Similarly, Lotus Bank stated, “Register on the Trade System Portal. Select Form ‘A’ application for Educational Fees. Choose Lotus Bank as the processing bank, attach required documents, and submit the application.”
In a similar notice, Lotus Bank also informed customers of processing international fees using its facility.
“Register on the Trade System Portal (www.tradesystem.gov.ng). Select Form ‘A’ application for Educational Fees. Choose Lotus Bank as the processing bank, attach required documents, and submit the application,” the bank said.
In 2022, Nigerian banks said international school fees and upkeep requests via Form A will be processed within 120 days due to forex scarcity at the time.
Safaricom, M-PESA and PayPal have announced a strategic collaboration to enable account linking and seamless fund transfers across their networks.
This collaboration aims to empower more than 35 million M-PESA customers and two million businesses and micro traders in Kenya to access PayPal’s global network.
By first linking their PayPal and M-PESA wallets, users can easily transfer funds from their PayPal accounts into their M-PESA wallets, and vice versa. This service is designed to enhance the experience for customers and businesses transacting between the two platforms.
The solution is currently available to Safaricom M-PESA customers in Kenya, with plans to roll out the service to the other M-PESA markets in the future.
“As globalization and digitization continue to reshape how people and businesses connect, our partnership with PayPal is a bold step forward in enabling seamless, worry-free, safe, secure, and inclusive digital payments.
“This collaboration empowers over thirty-five million customers and two million businesses and micro-entrepreneurs across Kenya to participate in the global digital economy by conveniently sending and receiving payments across more than 200 markets. It’s part of our commitment to unlocking opportunities and transforming lives through the power of M-PESA,” said Esther Waititu, Chief Financial Services Officer, Safaricom PLC.
“Building seamless connections between the global economy and local financial ecosystems is crucial to expanding digital financial inclusion,” said Otto Williams, Regional Head and General Manager for the Middle East and Africa, PayPal. “We are thrilled to enable millions of M-PESA’s customers across Africa connect more easily to PayPal’s international customer base.”
For 18 years, M-PESA has driven financial inclusion and bridged the digital divide. With M-PESA Kadogo, introduced in 2016, Safaricom waived fees for transactions of Kshs 100 and below, making digital payments more accessible. Now, through Ziidi MMF, customers can invest from as little as Kshs 100, promoting a culture of saving and financial wellness.
The partnership will tap into the emergence and growing popularity of the gig economy that has seen a rise among Africans accepting online jobs for clients across the world.
It equally marks a growing trend of interoperability between fintech providers with a goal of providing customers with a digital financial ecosystem that meets their needs by combining different capabilities.
PayPal is a leading global payment processor with more than 400 million active PayPal accounts operating across 200 markets, while M-PESA is Africa’s leading mobile money service connecting more than 50 million customers across Africa, 2 million businesses and micro traders, with more than $1.1 billion transacted daily.
Federal government has mandated banks and financial institutions to begin reporting monthly transactions exceeding N25 million for individuals and N100 million for firms to the tax authorities.
Under the new provisions of the Nigerian Tax Act, financial institutions are required to submit quarterly returns to the Federal Inland Revenue Service (FIRS).
The agency will be renamed to the Nigeria Revenue Service (NRS) from January 2026, when the new tax system will take effect.
“Every person who has an obligation to deduct and remit tax under this Act or any other Returns for tax legislation shall render monthly returns to the appropriate tax authority, as specified deduction of tax in the regulation issued for that purpose,” the Act reads.
“Without prejudice to section 142 of this Act, every bank, insurance company, stock-broking firm, or any other financial institution, shall prepare, with or without demand be delivered by the relevant tax authority, quarterly returns to the relevant tax authority specifying the names and addresses of new customers;Nigerian fashion trends
“…and existing customers in the case of (i) an individual, all transactions where the cumulative transactions in a month amount to N25,000,000 or more, or (ii) a body corporate, all transactions where the cumulative transactions in a month amount to N100,000,000 or more.”
Prior to the new tax law, banks were mandated to report deposits of N5 million — a measure intended to curb illicit financial flows, according to TheCable
Experts said the shift is part of efforts to tighten anti-money laundering reporting in the financial sector.
In 2023, Nigeria was listed on the grey list by the Financial Action Task Force (FATF) over deficiencies in tackling money laundering and terrorism financing.
Since then, the country has been making efforts to exit the grey list, which subjects it to increased monitoring by the FATF.
In November 2024, Hafsat Bakari, chief executive officer (CEO) of the Nigerian Financial Intelligence Unit (NFIU), said Nigeria has achieved upgrades in five key recommendations from the FATF.
MTN Mulls AI Tech to Protect Infrastructure as Cable Cuts Hit 13,000 in 18 Months
Banks Reopen Naira Card Payments for International Tuition Fees
Attackers Target Employees with Fake HR Updates
Yahoo Mail Halts Free Storage Service, Caps at 20GB
Safaricom, PayPal Collaborate to Link Mobile Money with Online Payments
E-Financial2 days agoUnion Bank Rewards Customers with ₦5 Million Each in Save and Win Palli Promo Season 4 Grand Finale
E-Business2 days agoHuawei Unveils AI Computing System to Challenge Nvidia’s Flagship Product
E-Financial2 days agoEdun, Finance Minister Inaugurates NDIC New Management
News2 days agoLawyers Drags NLS to Court for Alleged Election Fraud, Data Violation
Telecom1 day agoGlo Boosts Network Capacity for Enhanced Customer Experience
General News2 days agoNew Tax Law Empowers NRS to Fine Offenders up to N10m
News1 day agoTranscorp Power Posts Strong Half-Year Profit, Declares ₦11.25Bn Dividend
Broadcasting2 days agoCourt Upholds AVRS Legal Rights to Licence Audiovisual Works in Hotels