E-Financial
How Organisations Can Prevent Financial Losses via Innovative Email Protection

By peter oluka
Many business organisations and public institutions are faced one way or the other with challenges of their corporation email been compromised. This to a large extent has brought loss of businesses or embarrassment.
Those who have not been able to successfully manage it by being on top of the situation are those whose knowledge and technology partnership need to be upgraded.
In the technology parlance, the Business e-mail compromise (BEC) is when an attacker hacks into a corporate e-mail account and impersonates the real owner to defraud the company, its customers, partners, and/or employees into sending money or sensitive data to the attacker’s account.
BEC is also known as a “man-in-the-email” attack. This is derived from the “man-in-the-middle” attack where two parties think that they are talking to each other directly, but in reality, an attacker is listening in and possibly altering the communication.
This is how it works. A BEC scam starts with research. An attacker will sift through publicly available information about your company from your website, press releases, and even social media posts.
He/she might look for the names and official titles of company executives, your corporate hierarchy, and even travel plans from email auto-replies.
The attacker will then try to gain access to an executive’s e-mail account. To remain undetected, he/she might use inbox rules or change the reply-to address so that when the scam is executed, the executive will not be alerted.
Another trick is to create an e-mail with a spoofed domain. For example, the attacker might use [email protected]instead of [email protected], or [email protected] instead of [email protected]. If you do not pay close attention, it is easy to get fooled by these slight differences. One of the most famous spoofed domain tricks ever was the “PayPa1.com” – a scam site imitating money transfer website Paypal.com.
After scouting corporate communications for some time, the attacker will probably have a good idea of scam scenarios that might work. For instance, if the company has a lot of suppliers, he/she can send invoices to account for the rush payment of materials. The attacker would know who is responsible for wire transfers and be able to craft a convincing scenario that would require the immediate transfer of funds.
Some of the most prevalent examples of BEC scams are:
- The fraudulent invoice scamis when a cybercriminal uses an employee’s e-mail to send notifications to customers and suppliers asking for payment to the cybercriminal’s account.
- The fake boss scamis when a fraudulent email is sent from a business executive’s account to employees instructing them to urgently transfer money from the corporate account to the criminal’s account.
- The fake attorney scamis when a lawyer’s e-mail address is used to contact clients, asking that they pay money immediately to keep things confidential.
However, business e-mail compromise attacks do not only involve money; sometimes, attackers seek PII or trade secrets.
One high-profile BEC case involved a Lithuanian cybercriminal that used the e-mail addresses of suppliers. Companies that were targeted include Apple and Facebook. By impersonating suppliers, the hacker was able to steal $100 million in two years. In another case, the FACC Ag CEO was fired after such an attack cost the company $54 million.
In 2016, there were at least 40,000 incidents of business e-mail compromise or other incidents that involve e-mails—an increase of around 2,370% since January 2015. In the second half of 2016 alone, the FBI reported more than 3,044 victims in the United States, with a combined loss of around $346 million. Where does most of the money go?
Most of the victims are told to send the money to an Asian bank, usually in Hong Kong or China, or a bank in the United Kingdom.
But you can protect your business or organisation from all these challenges!
Business e-mail compromise attacks are successful for three main reasons:
- Insufficient security protocols
- Social engineering
- Lack of employee awareness
Multi-factor authentication should be implemented as an IT security policy. This will help prevent unauthorized access to e-mails, especially if an attacker attempts to login from a new location. In addition to stronger security protocols, employee education is also important.
Employees should be trained on identifying fraudulent e-mails. Always be skeptical of urgent and rush money transfer requests, especially from C-level executives, and verify those requests, either by phone or in person.
According to Victor Ugwu, Signal Alliance, technical security consultant, the company offers a robust and adaptive email security solution on- premise and in the cloud. Beyond email security, they also provide a tested and trusted Cybersecurity solutions ranging from; Perimeter Security, Infrastructure Security, Cloud, Mobile Security and Managed Security Service.
E-Financial
FG Signs MoU with ICAN, CIBN, Others to Train 10m Nigerians in Financial Literacy

The Federal Government of Nigeria has flagged off a free nationwide training of 10 million Nigerians on financial inclusion and literacy.

This is just as Vice-President Kashim Shettima has said Nigeria can reap bountifully from its demographic dividend only if young Nigerians and women are equipped with the needed skills and ethical grounding required for a speedily progressing digital economy.
The training undertaken by the Office of the Vice-President through the Presidential Committee on Economic & Financial Inclusion (PreCEFI), chaired by Vice-President Shettima, is designed to equip Nigerians, particularly women and youths, with essential financial skills, investment knowledge, and digital competencies for sustainable wealth creation.
Accordingly, the Office of the vice-president, through the PreCEFI, signed a Memorandum of Understanding (MOU) with six professional bodies to jointly design training programmes, certification pathways, digital skills initiatives, and mentorship platforms that would strengthen Nigeria’s financial and enterprise workforce.
The professional bodies include the Institute of Chartered Accountants of Nigeria (ICAN); Chartered Institute of Bankers of Nigeria (CIBN); Chartered Institute of Stockbrokers (CIS); National Institute of Credit Administration (NICA); Chartered Risk Management Institute (CRMI) and Nigeria Institute of Innovation and Entrepreneurship (NIIE).
Speaking while officially flagging off the free nationwide training of 10 million Nigerians, on behalf of President Bola Tinubu at the State House, Abuja, the vice-president noted that the signing of the MoU between the Federal Government and six of Nigeria’s foremost professional bodies was more than a formal agreement.
“It is a strategic national investment in capacity as infrastructure which is the human, institutional and ethical foundations upon which inclusive growth must rest,” he stated.
Shettima noted that the Aso Accord on Economic and Financial Inclusion, which the PreCEFI is mandated to implement, recognises the fact that “financial inclusion is not achieved by access alone, but by competence, trust and capability”.
According to him, the nation “cannot build a one-trillion-dollar economy on weak skills, fragmented standards, or disconnected professional ecosystems”.
He said: “This MoU therefore establishes a working framework to harness the collective expertise of ICAN, CIBN, CIS, CRMI, NICA, and NIIE to advance inclusion through capacity building, advocacy, digital transformation, youth empowerment and support for small and medium practitioners.
“It establishes a structured mechanism for joint training programmes, policy dialogue, digital skills development, and professional standards that align market practice with national inclusion goals.”
The vice-president pointed out that while capacity building is financial inclusion, “without accountants who understand MSME formalisation, credit administrators who can assess risk beyond collateral, bankers who embed consumer protection, risk professionals who anticipate digital threats, and innovators who translate ideas into enterprises, inclusion remains a slogan rather than a system”.
Maintaining that the training programme must prioritise young Nigerians and women, Shettima said: “Importantly, this collaboration prioritises women and youth inclusion and digital transformation, recognising that Nigeria’s demographic dividend will only materialise if young people are equipped with relevant skills and ethical grounding for a fast-evolving digital economy.”
He charged the PreCEFI and the professional bodies not to treat the MoU as a mere document, but as a living platform for execution.
“Accordingly, on behalf of President Bola Tinubu, I hereby flag off the free training of 10 million Nigerians with priority for women and youth across the country,” Shettima declared.
Earlier, President of ICAN, Mallam Haruna Yahaya, applauded the administration of President Tinubu for its bold economic reforms that has culminated in the flag off of the financial inclusion free training programme for 10 million women and youths in Nigeria.
He said the decision to embark on the project was prompted by visible improvements in the economy as a result of the gains of the Federal Government’s policy reforms.
Yahaya assured the vice-president of their professional support in the realisation of set objectives, describing their involvement in the project as an institutional honour.
On his part, the CEO of WAWU Africa, the technical partners in the programme, Mr Emmanuel Lennox, assured the Federal Government of the company’s readiness to deliver on the project, particularly in providing the digital platform and overall enabling environment for its success.
Also, explaining why the training of 10 million Nigerians on financial inclusion had become necessary, the Technical Adviser to the President on Economic and Financial Inclusion, Dr. Nurudeen Abubakar Zauro, said: “Exclusion is not only by lack of access, but by limited skills, weak institutional capacity, and insufficient professional support.
“Consequently, financial inclusion is not achieved by infrastructure alone; it is achieved when people and institutions are equipped to use that infrastructure responsibly, productively, and sustainably.”
The high point of the event was the signing of the MoU for the capacity building programme by the Federal Government and the six professional bodies.
E-Financial
Accidental Billionaire Opts for Jail Instead of Returning Money Credited Him by Mistake

A Nigerian man has gone viral after he chose to spend a year in prison after spending part of N1.5 billion that was accidentally sent to him.

If you’ve ever had money accidentally drop into an account, be it a bank account, savings, or even PayPal, it can cause a fair amount of stress.
You’re better off returning it than holding onto it.
However, Ojo Eghosa Kingsley decided to spend the money after it dropped into his account.
Kingsley, however, didn’t just receive a small chunk of change.
According to the Nigerian Economic and Financial Crimes Commission (EFCC), he received N1.5 billion into his account, which is around $1.1 million dollars.
As per the police’s report, the money had been split into different accounts, some in the name of Kingsley himself, and others belonging to his mother and sister.
After entering a guilty plea, he was offered a one-year prison sentence or a fine of N5 million – around $35,000.
Kingsley chose to spend a year in prison over the erroneously accredited money, also promising to “be of good behaviour going forward.” He was ultimately charged with “one count of bordering on stealing” by the EFCC.
He was also ordered to return the money, in which prosecutors noted that he had spent some of it already – as well as transferring it through different accounts.
The bank had managed to recover almost the full amount, save for a few thousand Naira.
Kingsley’s story has gone viral on social media, with many jokingly agreeing that they’d do the same thing if such a large sum ended up in their bank account.
Credit: ww.dexerto.com
E-Financial
SEC Warns of Potential Ponzi-style Risks in AURUM BOT, ModMount

Securities and Exchange Commission (SEC) has issued warnings regarding the activities of AURUM BOT and ModMount Services Limited.

The apex regulator of the capital market flagged both entities for operating without the necessary legal licenses and for exhibiting high-risk characteristics typically associated with fraudulent Ponzi schemes.
This SEC’s newest move in 2026 is part of the regulator’s broader crackdown on unregistered digital asset platforms that lure retail investors through social media with promises of “guaranteed” or “unrealistically high” returns.
In separate statements, the SEC said its attention has been drawn to the activities of AURUM BOT, “which presents itself as an investment platform dealing with cryptocurrency in Nigeria.”
The Commission reiterated that transacting in the Nigerian Capital Market with unregistered and unregulated entities exposes investors to financial risk, including fraud and potential loss of investment.
“The Commission hereby informs the public that AURUM BOT is not registered or licenced by the Commission to either solicit investments from the public or operate in any capacity within the Nigerian capital market”.
“Investigations have revealed that AURUM BOT has been actively promoted on social media platforms and online forums. Furthermore, its operations exhibit characteristics commonly associated with fraudulent Ponzi schemes,” SEC said.
SEC advises the public to refrain from investing with AURUM BOT in respect of any business pertaining or relating to the Nigerian capital market “as any investment activity carried out by them in Nigeria is illegal, and any person who engages with the platform does so at his/her own risk”.
Also, the SEC said its attention has been drawn to the activities of an online investment platform known as ModMount Services Limited, “which holds itself out as a financial services provider and Contract for Difference (CFD) broker offering investment opportunities in forex, stocks, indices, commodities, and cryptocurrencies”.
According to SEC, “Investigations by the Commission have revealed that the operators of ModMount Services Limited claim that the company is incorporated in Seychelles and authorised by the Financial Services Authority (FSA) of Seychelles.
“In addition, the entity solicits funds from members of the Nigerian public and encourages investors to remit monies through bank accounts domiciled in Nigeria. The Commission has also received information indicating complaints of withdrawal difficulties, aggressive solicitation practices, and other conducts inconsistent with fair market practices,” SEC noted.
SEC said that ModMount Services Limited is not registered or licensed by the Commission to either solicit investments from the public or operate in any capacity within the Nigerian capital market.
“Accordingly, the public is advised to refrain from investing with ModMount Services Limited in respect of any business pertaining or relating to the Nigerian capital market as any investment activity carried out in Nigeria is illegal, and any person who engages with the entity or its representatives does so at his/her own risk,” SEC noted.
Telecom2 days agoTelecom Operators Invest Over $1Bn on 2,850 New Sites in 2025 – NCC
E-Financial2 days agoIf Capital is the Answer, What Exactly is the Problem with First Holdco
E-Financial2 days agoAmaanah Finance to Unveils Non-Interest Banking Services Today
General News2 days agoFirst Trustees to Host 8th Islamic Estate Planning Clinic in Abuja
News2 days agoNSCDC Hands over Fake Crypto Currency Trader to EFCC
News2 days agoAlakija’s Flourish Africa Provides N300m Grants for Women Entrepreneurs
General News2 days agoSecurity Forces Probe Use of Drones by Terrorists
News1 day agoUngoverned AI is Quietly Scaling Risk in Nigeria – Dr. Naiho



















