E-Financial
Hackers Hit ATMs in Lagos
A large number of Automated Teller Machines located in some posh areas of Lagos like Victoria Island, Lekki Peninsula Phase I and II, and Ikoyi have been attacked by hackers and electronic fraudsters, according to Punch
The hackers are said to be fixing small fraud tools on the ATMs in order to harvest the passwords of cardholders who come to collect cash or do some other transactions on the machines.
Top bank officials privy to the development said a number of banks had deployed detectives to monitor their ATMs in those locations, especially in the Victoria Island and Lekki axis.
A banker told Punch correspondent, “A number of the ATMs in Victoria Island and Lekki axis have been compromised by hackers. Some of these fraudsters visit those ATMs very late in the night or very early in the morning to fix some fraud devices on them, which are capable of collecting cardholders’ information, including their passwords.
“They come back later to remove those devices. The information collected is then used to commit fraud against those customers later.
“Most of us (banks) are aware of the development and we are very vigilant now. What some of us have done is to get a patrol team of security men to start combing the affected areas and the ATMs from time to time. We will get those guys soon.”
While some of the cardholders’ information collected by the fraudsters were being used to commit online-related frauds locally, a large number was used to clone ATM cards and used to shop in malls abroad, especially in the United States of America, bankers told our correspondent.
Mr. Dele Adeyinka, vice-chairman, Committee of e-Banking Industry Heads, confirmed the fraudsters’ activities.
He, however, said that following the banks ‘compliance with the CBN directive asking them to install anti-skimming devices on their ATMs, it would be difficult for the fraudters’ devices to work.
He said, “Yes, it is true that hackers are carrying out those activities. It is not only in Victoria Island axis, they are doing it everywhere. But all the banks have complied with the CBN directive on anti-fraud tools. So, it will be difficult for those fraud devices to work.”
Punch reported that Rising cases of electronic frauds, especially ATM-related scams, which have made Nigerian banks to lose billions of naira in recent times, have forced some lenders to prevent their payments cards from working in the US, China and a few other countries.
According to Central Bank of Nigeria statistics, the banks lost N40bn to electronic frauds in 2013 alone.
On January 19, 2015, the CBN ordered banks in the country to prevent payment cards (debit and credit) issued by them from working in fraud-prone countries, including the US, South Africa and China.
The central bank also said that banks would be liable for frauds committed abroad using cloned cards belonging to their customers.
The CBN said in a circular that from February 1, 2015, all the banks in the country must stop the payment/ATM cards from working in non-Europay, MasterCard and Visa countries.
It directed the banks to only activate the cards when customers to whom the cards had been issued were travelling abroad and this should only be for the period that the customers would spend overseas.
The circular, signed by Mr. Dipo Fatokun, dDirector, Banking and Payment System, CBN, read in part, “The occurrence of card present frauds in non-EMV environments is on the increase, especially when international hybrid cards issued by Nigerian banks are used in non-EMV environments like the USA.
“It has, therefore, become necessary for the CBN to issue the following directives and that all DMBs should do the following: collate all their card frauds abroad and send to the CBN not later than January 30, 2015; subsequently, all data on card frauds occurring abroad should be rendered on the NIBSS fraud portal; implement anti-fraud solution on their card management systems not later than January 30, 2015; ensure that from February 1, 2015, only customers that expressly indicated the intention of travelling to non-EMV jurisdictions would have their cards default to the magnetic stripe and for the period indicated by the cardholder only.”
Prior to the deactivation of the payment cards from working overseas, one of the ‘systemically important banks’ made refunds in excess of N200m in 2014, The PUNCH had reported exclusively.
The PUNCH had in August last year also exclusively reported that electronic fraudsters had been duplicating payment cards belonging to Nigerian bank customers and using them to buy items worth millions of dollars from shopping malls in the US.
The development had forced top executives of the banks and senior officials of the CBN to meet with the Economic and Financial Crimes Commission sometime last year in order to stem the tide.
The Chairman, Chartered Institute of Bankers of Nigeria, Lagos State Branch, Mr. Abolade Agbola, had emphasised the need for the CBN to fast-track the biometric registration of bank customers as a way of checking electronic frauds.
The President, Institute of Chartered Accountants of Nigeria, Mr. Chidi Ajaegbu, said the CBN had achieved a lot in the cashless drive but there was a need to continue to build public confidence in the electronic means of payment.
Cybercriminals have developed a new Android malware that can turn victims smartphones into a bridge for stealing bank card information and carrying out contactless payment fraud, cybersecurity researchers have warned.
The malware, identified as WindRelay, operates in conjunction with a known remote-access trojan, SpyNote, to capture live information exchanged between a physical bank card and an Android phone via Near Field Communication (NFC).
NFC is the short-range technology that enables contactless payments when a bank card or smartphone is tapped against a payment terminal.
According to cybersecurity firm Group-IB, WindRelay was detected in the wild in August 2025 and has been used in a social-engineering scheme targeting victims in Czechia, Slovakia and Slovenia.
Meanwhile, the fraud begins with a phone call, text message or other communication in which criminals pretend to be bank officials.
The victim is persuaded to install an application, often personalised with the victim’s name, and once installed, SpyNote gives the criminal remote access to the phone and can silently install WindRelay, with the victim then tricked into placing a physical bank card against the infected smartphone, supposedly for identity verification, PIN change, or account resolution.
WindRelay reads the card’s NFC signals and sends the information in real time to another device controlled by the criminal, with such a device then imitating the victim’s card at a payment terminal or ATM, as the victim’s smartphone becomes a wireless bridge between the victim’s bank card and the criminal’s device.
Group-IB said it identified 23 WindRelay samples uploaded to VirusTotal between November 2025 and July 2026, with the malware samples impersonating financial institutions in Czechia, Slovakia and Slovenia.
Meanwhile, the development adds to existing concerns over the use of mobile devices in cybercrime and financial fraud in Nigeria.
In June, the Nigeria Computer Emergency Response Team (ngCERT) issued an advisory on IPIDEA malware and malicious residential proxy networks, warning that the malware could hijack consumers internet connections and use compromised devices as part of criminal proxy networks.
While the ngCERT advisory concerns a different malware and attack method, both incidents highlight a growing risk: ordinary smartphones and connected devices can be secretly turned into tools for cybercriminals.
This is particularly relevant as Nigerians increasingly rely on smartphones for mobile banking, digital payments and other financial services.
Consequently, cybersecurity experts have advised users not to install applications sent through unsolicited calls, text messages or links, especially when the sender claims to represent a bank, as users should also be suspicious of requests to place payment cards against smartphones for supposed account verification.
The Securities and Exchange Commission (SEC) has cleared additional Virtual Asset Service Providers (VASPs) for admission into its Accelerated Regulatory Incubation Programme (ARIP).
Among the newly cleared is BC Access Nigeria Limited (Blockchain), marking an important step in the company’s long-term commitment to Nigeria and its broader expansion across Africa.
Nigeria is one of Africa’s most important digital asset markets, where crypto increasingly plays a practical role in how people access, hold and move.
Value Admission into ARIP means Blockchain has satisfied the SEC’s initial requirements to participate in the programme and is authorised to operate within its defined sandbox scope, subject to the Commission’s ongoing compliance obligations, testing parameters, and regulatory conditions.
Through ARIP, Blockchain can work directly with the SEC as the Commission evaluates digital asset business models, tests. appropriate safeguards and develops its long-term regulatory framework for the market.
Speaking, General Manager for Africa, Blockchain, Owen Odia, said: “Nigeria is one of Africa’s most important digital asset markets and participating in the SEC’s ARIP is an important step forward in our long-term commitment to the country.
“The programme gives us the opportunity to work directly with the SEC in a controlled environment, bring our global experience to the Nigerian market and help support a framework that protects consumers while enabling responsible innovation. We appreciate the SEC’s proactive approach and look forward to contributing to a safe, transparent and well-regulated digital asset ecosystem.”
Blockchain’s participation in ARIP forms part of a broader global strategy to engage constructively with regulators and build within established regulatory frameworks.
Over the past year, Blockchain has secured several formal licenses and registrations globally, including the UK Financial Conduct Authority (FCA), EU Markets in Crypto-Assets (MiCA), and Cayman Islands Monetary Authority (CIMA) Virtual Asset Service Provider (VASP) License. Participating in Nigeria’s ARIP sandbox builds on that experience, bringing global standards in compliance, security and consumer protection to its local operations.
For Blockchain, ARIP provides a structured environment to test services for the Nigerian market, strengthen consumer protections and work directly with regulators and local stakeholders.
The company sees Nigeria as an important market in its African strategy, with strong existing demand for digital assets and an increasingly clear regulatory pathway for responsible operators. The company’s strategy materials specifically identify Nigeria as an important market for its African expansion.
ARIP was established by Nigeria’s SEC as a controlled regulatory sandbox for VASPs and fintech innovators. The programme allows the SEC to observe live applications of digital asset technologies, study operational risks, and establish tailored investor protection and anti-money laundering (AML) standards before final regulatory rules are codified.
Blockchain is pleased to participate in ARIP as we work alongside regulators to support responsible innovation, consumer protection and market integrity.
Founded in 2011, Blockchain is one of the world’s longest-standing digital asset companies with more than 95 million wallets, more than 44 million confirmed accounts and over $1.2 trillion processed.
Leadway Assurance has unveiled the Leadway Lifetime Plan, a one-of-a-kind whole-of-life insurance solution designed to extend financial protection beyond the immediate household to the wider family circle.
The newly introduced plan unveiled at a press briefing in Lagos reinforces Leadway’s commitment to building lasting financial security, preserving wealth, and delivering meaningful, long-term protection for the people who matter most.
The Leadway Lifetime Plan responds to the increasingly complex financial responsibilities faced by many working adults, particularly members of the Sandwich Generation individuals who simultaneously provide financial support for ageing parents while raising children and planning for their future.
With family responsibilities now extending beyond the traditional nuclear household, the Leadway Lifetime Plan is designed to offer broader, long-term protection that reflects the realities of modern Nigerian families.
Speaking on the new insurance plan, Olufunmilayo Amanwa, executive director, Technical & Operations, Leadway Assurance, said the product reflects the insurer’s recognition that family structures and financial responsibilities are evolving, and that insurance solutions must evolve with them.
“Financial responsibility no longer stops at the nuclear family. Today, one individual may be supporting children, a spouse, ageing parents, and in some cases, parents-in-law or siblings, all at once. That reality demands a different approach to protection.
The Leadway Lifetime Plan was built around this reality. It gives customers a way to extend continuous protection to the extended family, ensuring the people who depend on them are covered, while also delivering meaningful benefits to policyholders within their own lifetime. This is the Leadway way, designing solutions that respond to how people actually live, not recycling old products with new names”
Beyond traditional life protection, the Leadway Lifetime Plan incorporates a range of living benefits designed to provide financial support during critical stages of life.
Following five years of complete premium payment and subject to the policy terms, the policyholder and spouse may access up to 50 per cent of their current sum assured upon diagnosis of a covered critical illness. This benefit can provide valuable financial support at a time when a serious health event may place pressure on income, savings and overall household stability.
The plan also provides greater long-term financial flexibility. Eligible policyholders may access up to 50 per cent of the policy value for significant life goals after the premium payment term plus five years, subject to applicable policy conditions.
While Leadway’s existing Family Benefit Plan provides family-focused whole-life protection, the Lifetime Plan has been developed as a more expansive, multi-generational solution that combines lifelong protection with financial value that can be accessed during the policyholder’s lifetime.
Explaining the thinking behind the product, Rosetta Aryeetey, head, Life Underwriting and Life Business, Leadway Assurance said the solution was developed around the changing needs of customers. “The starting point for the Leadway Lifetime Plan was the customer.
We looked closely at how families are structured Today, how financial responsibilities are shared and the challenges customers face when they are responsible for several generations at the same time. What emerged was a need for a solution that does more than pay a benefit after death. Customers need protection for the people who depend on them, but they also need support when critical life events occur and flexibility as their financial priorities evolve.”
She added that the combination of multi-life protection, living benefits, long-term value and flexibility makes the Lifetime Plan relevant across different stages of a customer’s financial journey.
The plan also offers flexibility to enhance financial protection over time through an Escalation of Sum Assured feature. This allows customers to increase their benefits by a fixed percentage, giving them the flexibility to align their level of protection with their evolving financial needs and circumstances.
With the launch, Leadway Assurance is reinforcing its commitment to developing insurance solutions that respond to real-life needs while helping families build resilience, preserve financial stability and create lasting legacies.
FG Seeks to Half Burkina Faso’s Internet Cost while Nigerians Pay more
Cyberthreat: New Malware, Turns Phones into Tools for Card Fraud- Report
SEC Clears Blockchain for Accelerated Regulatory Incubation Programme
Union Bank Secures Global Payment Data Security Certification
NLNG, NCDMB Boost Engineering Research with Innovation Centre
EFCC Busts NIS Visa Overstay Racket, Uncovers N700m in an Account
Fact-Check: Elon Musk’s “Tesla Pi Phone” is Internet Rumor
NBC Tasks Broadcasting Stations over 2028 DSO Global Deadline
Glo Sponsored African Voices to Feature Netflix’s “The Polygamist” Stars
Access Bank Debunks Shutdown Report, Vows Action against Perpetrators
Telecom2 days agoAirtel Nigeria Adds Over 1,000Cell Sites in Nationwide Expansion to Surpasses 17,000
E-Financial2 days agoMastercard, TeamApt Collaborate to Expand Digital Payments Across Africa
E-Business2 days agoMacOS Users Report More Cyber Threats than Windows Users – Survey Reveals
News2 days agoAccess Holdings Sets New Benchmark in Nigeria’s Finance Talent Pipeline
Telecom2 days agoNigerian Startup Act: NITDA Calls for Stronger Inter-Agency Collaboration
E-Financial2 days agoSEC Orders Immediate Freeze of Assets Linked to Six Terrorism Financiers, Three Entities
General News2 days agoAnambra Seeks Digital Inclusion in Rural Communities
Broadcasting2 days agoESUT Workers Get N82,000 Minimum Wage as Enugu Approves Fresh Salary Increase