Connect with us

Broadcasting

PIN Lock is an Integral Aspect in Prevention of SIM Swap Fraud – Effiong

Published

on

Kindly share this post

Martin Effiong, Operator Partnership Manager for Infobip in Anglophone West Africa, is a seasoned IT Professional, driven to achieve excellence with a flare for VAS, SaaS and CPaaS Product design, architecture and monetization, with a profound interest in IoT.

 

His previous roles include Customer Support Engineer at ITS Nigeria, Manager, VAS and Content, Airtel Nigeria, Manager, VAS Operations and Governance, Airtel Nigeria and Innovation Lead, Airtel Nigeria
In this interview with Nigeria Nigeria CommunicationsWeek reporter, Effiong spoke on the threats of cyber fraud, particularly Identity theft and SIM swap. Excerpts.

 

Tell us a little bit about what you do for Infobip?

Thank you for the opportunity to interact with you about such a crucial subject. I’m Martin Effiong, Senior Operator Partnership Manager in Anglophone West Africa for Infobip. I manage robust engagements with the region’s mobile telecom operators in pursuit of collaborations that allow both of our entities to grow. In simple terms, we rely on operators for connectivity when they are suppliers to us, and we cater to their business communication needs when they are our customers.

What is SIM swapping? Why does it pose such a security risk to consumers?

There are plenty of reasons why you would swap your SIM. Say you’ve lost your phone or bought a new one – but your old SIM card doesn’t fit. Or maybe your SIM card was damaged, or you found a better deal with a new operator. It’s a perfectly legitimate process, but one which sadly many fraudsters are looking to exploit.

So, the abuse of a SIM replacement process for the benefit of individuals or perpetrators who are not the rightful SIM owners, and which usually happens without the knowing or participation of the rightful SIM owner is actually the SIM swap fraud. On why this is a serious security risk, to acquire access to a brand-new SIM card belonging to a legitimate owner, a SIM swap fraudster uses confidence techniques and internet stalking to mimic someone like me or you to an operator. They can intercept phone calls, SMS messages, social media accounts, and banking credentials using this method, giving them all the information, they need to develop a victim profile. Fraudsters can then use this profile to take over accounts, transfer money to themselves, and steal not only your life savings, but also your identity, in less than 20 minutes.

To what extent has this threat grown and evolved over the recent years?

According to data from the South African Banking Risk and Information Center (SABRIC), SIM swap-related fraud increased by 100 percent in South Africa between 2018 and 2019. In Nigeria, we have some equally frightening statistics, with mobile channel fraud increasing by 330 percent between 2019 and 2020. This report, published by the Nigeria Inter-Bank Settlement Scheme (NIBSS), demonstrates that it is a global phenomenon, but it is also very damaging to developing world economies due to their heavy reliance on the internet and mobile GSM generated or GSM enabled Internet services. So, yes, it has grown exponentially as internet and smartphone usage in the region has increased. In most instances, the first lines of defense are a username and password, but they should not be the only ones. Layering your security will help you protect your customers better and, if done correctly, will also improve their overall experience.

What steps should consumers be taking to protect themselves from SIM swapping?

The steps outlined here are the standard global best practices for using electronic devices that connect to the internet. Starting with the most general steps and progressing to those tailored to mobile device users. When using the internet, it is recommended that you be cautious and security aware of what can happen. When you are on your device, the privacy of your room does not translate to any form of privacy on the internet. As a result, you must exercise extreme caution in what you do, how you do it, and what information, particularly private information, you post on the internet, particularly on publicly accessible sites or social media applications.

It’s also a good idea to make sure the websites you’re visiting are secure. In terms of SIM swap fraud, make sure your SIM cards have a PIN lock. As a result, whenever your phone is turned off and turned back on, it will request a SIM PIN, or whenever your SIM is removed and re-inserted into your phone, or a new SIM is inserted, it will request a SIM PIN. In this manner, a stolen phone device whose SIM is being Swapped will request a SIM PIN.

Lastly, In the event of the receipt of unsolicited texts or emails about your SIM being ported or a PAC request, or if you unexpectedly lose phone service, contact your telco service support immediately. The same is true for contacting banks if a fraudster attempts to make an online or phone transfer. However, much of the onus should be placed on the verification services that operators have in place to protect their customers.

Can establishing a global security standard for telco providers reduce this threat?

From my perspective, Telcos and enterprises are doing a lot but can still do more to sensitize their customers of the associated risk of mobile-enabled transactions from SIM swaps. They will also do well to implement technology to better protect their customers from these frauds.

Setting a global verification standard to confirm a person’s mobile identity is critical in preventing SIM swap scams, in my opinion. This standard must be set by telcos, which have all the information required to verify an identity securely and, more importantly, in real time. For example, if a customer called a company with a question, the company could silently authenticate the person in the background using telco information, eliminating the need for the customer to answer a series of onerous security questions. Simultaneously, if any irregularities are discovered during the frictionless check, the suspicious activity is flagged, and a SIM swapping attempt may be impeded.

This is how the Mobile Identity authentication solution from Infobip works. It can confirm the mobile account activation date by checking for changes to your IMSI (International Mobile Subscriber Identity) number – or, more simply, ‘telecom account data’. If there is no reason to be concerned, authentication will take place silently in the background, without interfering with the user’s experience. If the IMSI number has recently changed, this will be flagged as suspicious activity. The service provider will then contact the user and request additional verification.

What other measures should telcos providers be taking to help protect consumers from this tactic?

Due to the negative impact of SIM SWAP fraud on customer experience, it’s understandable that GSM service providers would have to strike a balance between offering very strict security measures on the SIM replacement process to protect their customers from SIM swap fraud and also improving their service’s customer experience. It is about associating security with a positive customer experience and trust.  Many businesses arelooking for ways to remove friction from customer interactions in order to provide the best possible experience. However, some critics believe that removing friction will reduce security and make customers less confident in their interactions with businesses. A smooth approach, however, should not jeopardize security.

At least three real-time identification and authorization services should be included in a strong authentication layer. At Infobip, this includes silent mobile verification (SMV), account takeover protection (ATP), and SIM Swap. Furthermore, as part of the customer journey, these checks should take place “behind the scenes.” This is especially significant in light of the Central Bank of Nigeria’s (CBN) recent steps in granting licenses to two telecommunication companies to operate as Payment Service Banks (PSBs). This is after these businesses successfully completed a series of applications and requirements. This license allows these telcos to complement rather than compete with other banks. One of the key provisions of the PSB license issued by the CBN is safety of funds to the consumers of the Payment Service Banks’ products. This is where leveraging technology for KYC checks through a strong customer authentication framework comes to play in reducing fraud while increasing authorization rates. PSBs and Fintechs must implement security measures – consisting of at least two real-time identification and authentication services – when customers make an online purchase to meet KYC requirements. This enables businesses to verify the customer’s identity as well as the validity of the credit card being used to complete the transaction.

 

 

 

 

 


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Broadcasting

Madonna University Taps Tech Guru Adote for Strategic Board Role

Published

on

Kindly share this post

Technology strategist Rock Adote has been appointed to the Board of Trustees of Madonna University Nigeria, a move expected to strengthen the institution’s push toward digital governance and modern technological systems in higher education.

L-r: Professor Martin Osita Anagboso, deputy vice chancellor, Madaonna University in a handshake with Rock Adote, newly appointed member of the Board of Trustees of the University

Madonna University

Adote, who has built a reputation in cybersecurity, enterprise identity management and digital transformation, brings over a decade of experience in designing secure digital infrastructure and managing identity systems for organizations.

Stakeholders believe his expertise will support the university’s efforts to strengthen data security and modernize its academic and administrative digital frameworks.

The appointment reflects the university’s growing commitment to technology-driven leadership as institutions increasingly rely on digital systems for academic operations, data management and research collaboration.

Universities today manage large volumes of sensitive digital information, including student records, research data and staff credentials, making strong cybersecurity and identity management frameworks essential.

As a member of the Board of Trustees, Adote will participate in providing institutional oversight and guiding strategic policy direction for the university.

The board is responsible for safeguarding academic standards while steering long-term development initiatives and ensuring the institution remains responsive to evolving global trends in education and technology.

Industry observers say Adote’s background in enterprise digital systems positions him to contribute significantly to the university’s digital transformation agenda, particularly in strengthening technological resilience and governance frameworks across its operations.

Other newly appointed members of the board include Sir Nwagwu Aloysius Emeka, Chief Arthur Obi Okafor (SAN), Professor Anagboso Martin Osita, Mrs. Ike Angela Unaoaku, Barrister Augustine Nenwa Obo and Rev. Fr. Stephen Ifeanyichukwu Nwatah.

Speaking on the appointment, Adote expressed appreciation for the opportunity to serve, emphasizing the importance of aligning higher education institutions with emerging technological realities.
According to him,

“Digital transformation will play a crucial role in shaping the future of academic administration, research and learning environments”.

Analysts note that the inclusion of technology leaders in university governance structures signals a growing recognition that digital transformation is becoming central to the competitiveness and sustainability of modern higher education institutions.

With Adote’s appointment, Madonna University is expected to further strengthen its technology strategy and position itself as a forward-looking institution within Nigeria’s higher education landscape.


Kindly share this post
Continue Reading

Broadcasting

Healthcare Under Attack: Why Cybersecurity is Now Critical Care

Published

on

Kindly share this post

By: Kerissa Varma, Microsoft Chief Security Advisor, Africa

Africa’s healthcare sector is facing a silent emergency. Many healthcare operators, facilities and doctors across Africa already grapple with the challenges of under-resourced environments, an uneven distribution of resources and massive demand for services.

Healthcare Under Attack: Why Cybersecurity is Now Critical Care

Kerissa Varma, Microsoft Chief Security Advisor, Africa

Now healthcare administrators must turn their attention to a relatively new and extremely urgent concern. While doctors fight to save lives, cybercriminals are infiltrating hospitals, laboratories, and clinics, turning life-saving environments into digital battlegrounds.

A growing epidemic

World Health Organisation director-general Tedros Adhanom Ghebreyesus noted that the digital transformation of healthcare, combined with the high value of health data, has made the sector a prime target for cybercriminals, commenting that “At best, these attacks cause disruption and financial loss. At worst, they undermine trust in the health systems on which people depend, and even cause patient harm and death.”

Recent attacks have exposed the fragility of Africa’s medical infrastructure. In May 2025, Mediclinic Southern Africa was hit by a cyber extortion attack, compromising sensitive HR data. Later in 2025, Lancet Laboratories faced a regulatory penalty for failing to notify patients about data breaches under South Africa’s POPIA law, while a ransomware strike on the National Health Laboratory Service disrupted blood test processing nationwide, delaying critical care for millions.

M-Tiba, a Kenyan digital health platform managed by CarePay and backed by Safaricom, suffered a significant cyberattack and data breach in late 2025, while earlier this year Pharmacie.ma, a Moroccan pharmaceutical platform, was reportedly the target of an alleged data leak incident that allegedly involved the unauthorised export of a customer database. And recent research indicates that Nigeria’s private healthcare sector is now one of the most targeted on the African continent, with attacks increasing at an alarming rate.

Many incidents also go unreported, as hospitals and healthcare facilities rarely disclose them publicly, yet these incidents are not isolated, with ransomware dominating the threat landscape. Africa’s healthcare sector is heavily targeted by cybercriminals, with healthcare organisations facing an average of 3,575 weekly attacks in 2025, a 38% surge from the previous year, with encryption of patient data, temporary loss of access to hospital systems and the risk of data appearing on the dark web cited as potential impacts.

Why healthcare is a prime target

The healthcare industry in Africa, particularly in the public sector, is working with legacy systems, fragmented infrastructure, and underfunded IT teams, all of which combine to make the sector an easy target for unscrupulous bad actors.

Many medical institutions are adopting open-source AI tools for diagnostics and patient management. While cost-effective, these platforms often lack enterprise-grade security, leaving sensitive data exposed. Combined with fragmented storage of paper and electronic patient records – often unencrypted and scattered across multiple systems – the risk of breaches multiplies.

Hospitals and healthcare facilities cannot afford downtime. Every minute offline risks lives, making them more likely to pay ransoms in an attempt to regain control of their systems. Cyber insurers  indicate that in 2 of 5 cases of a ransom being paid, data and operations still cannot be recovered. Additionally, in instances where some or all of the seized data is recovered after paying a ransom, the attacker goes on to request further payments.

Medical records are also a premium target for cybercriminals. In the USA, researchers found that patient records, insurance details, and research data fetch premium prices on the dark web – up to 10 times higher than financial data, according to cybersecurity analysts. A single stolen medical record can sell for $260–$310, compared to $30–$50 for a credit card, because unlike credit cards, medical records never expire and medical information cannot be easily changed, making it useful for years. Medical records frequently include personal identifiers, insurance details, and sometimes biometric data, enabling identity theft and fraud, while criminals use medical data for fake insurance claims, prescription fraud, and targeted scams. Microsoft believes cybersecurity needs to be embedded into every technology implementation. This should be a key priority, especially with sensitive medical data and operations.

How healthcare can use modern technology safely

As Africa’s healthcare systems digitise and embrace AI, protecting the digital lifeline must become as critical as protecting the physical one. Key steps can secure healthcare organisations and facilities like laboratories and diagnostic services’ systems.

Include cybersecurity in your resilience planning

Medical professionals and healthcare facilities often prioritise the resilience of physical capabilities. Power backups, multiple devices should equipment fail, and a standby roster in the event of a practitioner being unavailable are all practices that save lives. Equally cybersecurity and safeguarding online systems needs to be built into the overall resilience planning of medical facilities and services.

Investing in cybersecurity technology that can quickly identify and contain attacker activity before it leads to system downtime or data theft can save lives. Having a response plan that is practiced and maintained in the event of a cyber breach and ensuring strong data backups could mean the difference between a total failure of health services or a minor incident. Ensuring incident response plans are aligned with local compliance laws such as South Africa’s POPIA, and Kenya and Nigeria’s Data Protection Acts is critical for healthcare providers to meet both their resilience and compliance objectives.

Prepare for AI-driven attacks that are going to increase attacker speed and success

Threat actors are increasingly exploiting the interconnectedness of modern software ecosystems and operational structures to conduct malicious activity, so regular auditing of third-party integrations, especially those involving AI or cloud services, is critical.

Adversaries are using AI to scale and tailor operations, with AI-driven phishing being 4.5x more effective than traditional phishing. However, in equal measure, AI is transforming cyber defence – it automates response and containment, detects threats faster and more accurately, and identifies detection gaps and adapts to attacker behaviour. Healthcare organisations should invest in AI-driven threat detection for faster response and anomaly detection and must also take steps to secure AI models and data pipelines by implementing robust access controls, vulnerability scanning, and regular patching for open-source tools.

Remote and wider access to patient records requires strong identity practices

As both patients and medical professionals start accessing patient records digitally, strong means of identification, verification and authentication are critical. The Microsoft Digital Defense Report 2025 notes that the abuse of valid accounts is a frequent occurrence, with malicious actors gaining access to user credentials (usernames and passwords) and using them to infiltrate systems without triggering traditional security alerts. Therefore, organisations must deploy phishing-resistant multifactor authentication (MFA) and conditional access to strengthen user defences.

Invest in people and skills

People are at the heart of robust cybersecurity measures, so it is vital to train staff against common tactics such as phishing, which is the most common entry point for attackers, and apply role-based access controls for both clinical and research data to prevent privilege misuse.

Cybersecurity is no longer an IT issue – it’s a patient safety issue. Healthcare services and providers must treat digital resilience with the same urgency as infection control. By investing in comprehensive cybersecurity strategies and leveraging AI-powered defences, Africa’s healthcare sector can position itself as a crucial front line against emerging threats and help build stronger, more resilient digital ecosystems.


Kindly share this post
Continue Reading

Broadcasting

South Africa’s Nomzamo Mbatha Appears on Glo-Sponsored African Voices

Published

on

Kindly share this post

Globally recognized South African actress Nomzamo Mbatha will feature on this week’s edition of African Voices Changemakers, the 30 minute show on Cable News Network International (CNN).

In this episode of the Glo-sponsored programme, Mbatha sits down with CNN’s Larry Madowo for an exclusive conversation while filming the final season of the hit television series Shaka iLembe. The interview was recorded at the historic Cradle of Humankind outside Johannesburg, where she reflects on her career and the legacy she hopes to build beyond the screen.

As her international profile continues to rise, Mbatha has appeared in two Hollywood productions and was named to the prestigious TIME100 Next list in 2025, which celebrates emerging global leaders shaping the future. She is also making strides in the beauty industry as the first South African woman to secure endorsement deals with global skincare brand Neutrogena and haircare brand Cream of Nature.

Mbatha also shares the cultural importance of Shaka iLembe, her journey from South Africa to the global stage, and why giving back remains central to the enduring contribution she aims to leave behind.

The programme will air on Saturday at 8.30 a.m., with additional broadcasts at 12.00 p.m. the same day; Sunday at 4.30 a.m. and 6.00 p.m.; Monday at 3.00 a.m. and 5.45 p.m.; and Tuesday at 5.45 p.m. It will also air again on Saturday, March 14 at 7.30 a.m. and 11.00 a.m.; Sunday, March 15 at 3.30 a.m. and 6.00 a.m.; and Monday, March 16 at 3.00 a.m.

 


Kindly share this post
Continue Reading

Trending