Kaspersky’s new global research reveals that 65% of online shoppers believe they can detect fraud on their own, while only 42% actually use security software to protect their payments and block malicious links.

Experts consider this a major risk for online buyers. Over the past year Kaspersky identified nearly 6.7 million phishing attacks globally impersonating online stores, payment systems, and banks, with 55.6% targeting online shoppers.

As the post-holiday and summer sales season kicks off, Kaspersky conducted a survey to examine consumer cybersecurity practices employed during online shopping. The findings show that 97% of respondents demonstrate a substantial level of awareness of online security risks and implement at least some measures to safeguard their digital transactions.

However, the survey found that fewer than half the participants use dedicated security software to block phishing attempts and protect payment transactions. This concerning trend is particularly pronounced among the 55+ year old generation, with only 32% of respondents in this age group actually using security software when making online purchases.

The most commonly adopted security protocols include being vigilant about potential warning signs, such as suspicious hyperlinks or unusual website design (65%) and verifying seller authenticity (62%).

Kaspersky experts emphasise that while these practices are essential protective measures for online shopping, they constitute only foundational protection strategies rather than the comprehensive fraud prevention provided by a security solution.

Other steps that could protect online shoppers, like using a separate credit card for digital purchases or using a separate email address to register with unfamiliar online shops, were chosen by 33% and 26% of survey participants, respectively.

Meanwhile, 30% claimed to consult with friends and relatives before making a purchase. Interestingly, this option is highly popular among the younger generation, with 37% opting for it, while it is less common among older people (21%).

“Throughout the year, we’ve observed that online shoppers have consistently been one of the most desirable targets for scammers. During sales periods, their scams can become even more pervasive. Staying vigilant is crucial, but protecting yourself requires more than just awareness.

It is particularly concerning how scammers are now using AI to craft more sophisticated, targeted phishing attempts that are increasingly difficult for regular users to recognise,” comments Olga Altukhova, Senior Web Content Analyst at Kaspersky.

Sales seasons are peak times for scammers. To protect yourself against emerging threats, implement the following security practices:

– Don’t save your full credit card details on websites unless absolutely necessary.

– Consider using a separate debit card specifically for online purchases and set up transaction alerts on your bank and credit card accounts.

– Be extra cautious of “flash sales” that seem too good to be true. Watch out for websites that pressure you into making quick decisions, and be wary of sellers who refuse returns or exchanges.

–  Use different passwords for each online account and enable two-factor authentication wherever possible.

– Apply a security solution with a strong anti-phishing component. For instance, Kaspersky Premium received the annual ‘Approved’ certification from the leading testing lab AV-Comparatives in 2025 for detecting 93% of phishing URLs, demonstrating outstanding anti-phishing capabilities, powered by AI technology.

– Scammers constantly evolve their methods, so staying informed about new phishing techniques can help you recognise and avoid them. The Kaspersky Security blog will help you keep your finger on the pulse of emerging cyberthreats.

The study was conducted by Kaspersky’s market research center in November 2025. A total of 3000 respondents from 15 countries (Argentina, Chile, China, Germany, India, Indonesia, Italy, Malaysia, Mexico, Saudi Arabia, South Africa, Spain, Turkey, the United Kingdom, and the United Arab Emirates) took part in the survey.

Kashifu Inuwa Abdullahi, Director General of the National Information Technology Development Agency (NITDA), has reaffirmed Nigeria’s commitment to strengthening collaboration with the United States in building a secure, trusted, and resilient digital ecosystem, with a particular focus on data privacy, artificial intelligence, cybersecurity, and capacity building.

NITDA

He stated this while delivering an address at the Nigeria Data Privacy Capacity Building Workshop organised by the United States Department of State, in collaboration with the Nigerian Mission and relevant stakeholders in the digital ecosystem.

Expressing his excitement at the engagement, Inuwa described the workshop as a strong revalidation of the long-standing partnership between Nigeria and the United States in advancing the country’s technical and digital systems.

According to him, the collaboration is not a new initiative but part of a growing and deliberate effort by both countries to jointly address emerging digital challenges and opportunities.

Inuwa recalled that in April 2024, Nigeria and the United States, through the U.S.–Nigeria Binational Commission, agreed to work together on key areas including data privacy, artificial intelligence, cybersecurity, capacity building, and other aspects of digital development.

He further noted that the same year witnessed the successful hosting of an Artificial Intelligence Conference, co-hosted by the Nigerian Government and the U.S. Mission in Nigeria, as well as Nigeria’s participation in engagements with U.S. cybersecurity companies to explore partnerships aimed at strengthening Nigeria’s technical ecosystem.

He explained that NITDA’s emphasis on data privacy, AI, cybersecurity, and policy is anchored on one central objective: building trust in the digital ecosystem, adding that trust is a critical enabler of digital transformation, as its absence slows down innovation and increases costs, while its presence accelerates progress and reduces barriers to growth.

The NITDA Boss stressed that building a prosperous digital economy requires deliberate efforts to safeguard data privacy, strengthen security frameworks, and deploy AI responsibly.

He noted that artificial intelligence relies on data, data demands privacy, and privacy can only be guaranteed through strong security, making it impossible to address these issues in isolation.

Inuwa described the workshop as the beginning of broader engagements and deeper collaboration in other strategic areas, particularly as Nigeria continues to position itself as a key player in the global digital economy.

He disclosed that following the participation of the U.S. Mission in Nigeria’s National Cybersecurity Conference last year, plans are underway to expand the conference into an international cybersecurity platform this year.

According to him, the international conference will provide an opportunity for U.S. cybersecurity companies to showcase their technologies, explore partnerships with Nigerian firms developing local cyber solutions, and jointly strengthen Nigeria’s cybersecurity ecosystem.

Inuwa also reassured partners and stakeholders of NITDA’s commitment to building the right policies and enabling environment for innovation to thrive.

He noted that Nigeria, alongside Africa, represents the next frontier of the digital economy, driven by a young, digital-native population and a large, expanding market.

He said that while many public and private sector organisations in Nigeria rely on U.S. technologies to build their digital systems, the country also possesses significant local talent capable of developing homegrown solutions to address national and regional challenges.

He added that NITDA remains committed to working with international partners to build local capacity and promote Nigeria’s digital self-determination.

According to the DG, digital technology is no longer optional, as it represents the future of economic growth and development, and no nation can afford to be left behind.

He emphasised that the only way to fully harness the opportunities of the ongoing AI revolution is by safeguarding privacy, establishing sound policies, and laying a strong digital foundation capable of supporting rapid technological advancement.

He appreciated the U.S. Department of State and the U.S. Mission in Nigeria for their continued partnership and support, expressing optimism that the collaboration will be further strengthened to explore new areas of cooperation, particularly in cybersecurity and artificial intelligence, for the mutual benefit of both countries.

Lagos High Court at TBS has awarded $25,000 in damages in favour of Mr. Femi Falana (SAN) in his $5 million lawsuit against Meta Platforms Inc., the US-based technology company owned by Mark Zuckerberg, over the alleged invasion of his privacy.

Early in 2025, a video was published on Facebook claiming that Falana was suffering from a terminal illness, which prompted the suit

Delivering judgment on Tuesday, January 13, Justice Olalekan Oresanya held that a global technology company such as Meta, which hosts pages for commercial benefit, owes a duty of care to persons affected by content disseminated on its platform.

Falana, through his lawyer, Mr. Olumide Babalola, accused Meta of publishing motion images and voice captions titled “AfriCare Health Centre” on its platform, suggesting that he suffered from a disease known as prostatitis.

He argued that the publication constituted an invasion of his privacy as guaranteed under Section 37 of the Constitution of the Federal Republic of Nigeria, 1999 (as amended).

Falana said the false video about his health status had tarnished his image and reputation built over the years.

He also contended that the publication, which he described as false, offensive and disturbing, painted him in a false light and caused him mental and emotional distress.

In its judgment, the court rejected the argument that digital platforms can rely solely on “hosting” or “intermediary” defences where the platform monetises content and the harm arising from misinformation is reasonably foreseeable.
Falana’s lawyer said the decision reinforces a standard of platform accountability under Nigerian law, aligning with emerging global jurisprudence.

The court further held that “the fact that the applicant is a public figure does not rob him of his right to privacy.” It found that the publication of false medical information intruded into the claimant’s private life, regardless of his public standing.

Babalola said the finding settles an important misconception in Nigerian legal practice and affirms that health data enjoys heightened protection, even for public figures.

The court also held that Meta determines the means and purposes of processing content, monetises pages, and controls distribution algorithms, thereby acting as a joint data controller with page owners.

Consequently, Meta was held vicariously liable for the offensive video.

Babalola said: “This is a major development under the NDPA and weakens the ‘mere platform’ defence traditionally relied upon by Big Tech.”

The court further ruled that Meta breached Section 24 of the NDPA by processing personal data that was inaccurate, harmful, lacked a lawful basis and was unfair to the learned Senior Advocate. The false health information was held to amount to unlawful processing per se.

It emphasised that where the risk of inaccuracy is foreseeable, particularly in relation to sensitive personal data, a platform owes a heightened duty to ensure accuracy and integrity.

The court held that Meta failed to deploy adequate safeguards to prevent or mitigate the harm.

As a global technology company with vast resources, Meta was expected to implement effective content-review mechanisms, rapid takedown processes and safeguards proportionate to the risks posed by misinformation. Its failure to do so, the court held, amounted to regulatory non-compliance.