SIM Swap Fraud: How Criminals Are Emptying Nigerian Bank Accounts Using Your Phone Number

SIM Swap Fraud: What It Is and Why Nigeria Is One of the Most Targeted Countries

Last Updated: May 29, 2026

SIM swap fraud has quietly become one of the most damaging financial crimes in Nigeria, draining bank accounts in minutes without the victim clicking a single phishing link or sharing a password. In 2025, the Nigeria Inter-Bank Settlement System recorded 67,518 digital payment fraud incidents with losses totalling N25.85 billion — and the NCC and CBN both identify SIM swap fraud as one of the dominant threat vectors driving this figure. This guide explains exactly how SIM swap fraud works in Nigeria’s specific telecom and banking environment, documents the insider threat that most guides ignore, and gives you the precise steps to protect yourself today.

How SIM Swap Fraud Works in Nigeria: The Step-by-Step Attack

SIM swap fraud is defined as an attack in which a criminal tricks or bribes a mobile network operator’s agent into transferring a victim’s phone number to a new SIM card in the criminal’s possession. Once the transfer completes, every call, SMS, and OTP sent to that number arrives at the criminal’s device instead of the victim’s phone.

Why Nigeria’s Banking Architecture Makes SIM Swap Fraud Especially Dangerous

In Nigeria, mobile phone numbers are the central identifier across every layer of digital banking. They power one-time passwords for transactions, USSD banking sessions, account recovery processes, and login verification for fintech apps. BusinessDay Nigeria described this as a structural vulnerability: in a SIM swap attack, a fraudster can take control of a customer’s number without breaching the bank’s systems at all. They intercept OTPs, authorise transfers, and reset passwords — all because the network recognises their SIM as the legitimate owner of the number. Furthermore, BVN–NIN verification confirms identity at account opening but does not monitor whether the phone number linked to an account has subsequently been reassigned or swapped. A January 2026 data brief from the National Institute for Legislative and Democratic Studies confirmed that SIM swap fraud remains a dominant threat vector despite Nigeria’s overall reduction in aggregate fraud losses, and warned that a 34% drop in institutional fraud reporting in Q4 2025 risks masking the true scale of losses. The attack chain is straightforward. The criminal collects personal information about the target — name, date of birth, BVN, and phone number — from social media, data breaches, or phishing. This information is used to impersonate the victim at a telecom service centre or through a compromised agent. The agent processes a SIM replacement request. The victim’s phone loses network signal. The criminal’s new SIM begins receiving all calls and texts. Within minutes, the criminal initiates password resets on the victim’s banking apps, requests OTPs that now arrive on their device, and authorises fund transfers to mule accounts. The victim often does not discover the attack until they notice their phone has no signal and then, shortly after, finds their account balance depleted.

The Insider Threat: How Telecom Staff Enable SIM Swap Fraud in Nigeria

The most important and most underreported aspect of SIM swap fraud in Nigeria is that criminal actors frequently do not rely on impersonation alone — they bribe telecom staff to approve fraudulent SIM replacement requests directly. The NCC’s Computer Security Incident Response Team issued a public advisory confirming this reality: “criminal actors are using SIM swap attacks to steal millions from the public, sometimes by paying off telecom staff.” This insider threat makes SIM swap fraud qualitatively different from most digital scams. Most fraud requires the victim to make a mistake — clicking a link, sharing an OTP, downloading a fake app. SIM swap fraud, when executed through a corrupt insider, requires nothing from the victim. The criminal exploits the telecom company’s own processes using a bribed employee. Telecom companies process hundreds of SIM-related requests every day, and fraudulent requests from insiders can go undiscovered in the volume. Furthermore, economic pressure on customer service staff creates the conditions that criminals exploit. A staff member offered a bribe equivalent to several weeks’ salary for approving a single SIM replacement request faces a different calculation from a well-compensated employee at a heavily regulated institution. This systemic vulnerability is why individual vigilance alone is insufficient protection against SIM swap fraud in Nigeria — regulatory intervention is also necessary.

What the NCC and CBN Are Doing About SIM Swap Fraud in 2026

Nigeria’s regulatory response to SIM swap fraud reached a significant milestone in 2026. The NCC unveiled the Telecommunications Identity Risk Management System (TIRMS), a platform specifically designed to allow banks and fintechs to verify in real time whether a phone number has recently been swapped, recycled, or flagged before authorising transactions. The NCC and CBN signed an MoU establishing TIRMS governance, with CBN Governor Olayemi Cardoso describing the framework as a practical statement of national interest that reinforces payment system stability. TIRMS addresses the core gap that makes SIM swap fraud possible: BVN–NIN verification confirms identity at account opening but cannot detect a phone number that was legitimately issued to a customer and subsequently hijacked. With TIRMS, a bank can query the platform before approving a high-value transaction and receive a real-time signal if the associated number has been recently swapped. Additionally, the CBN has imposed restrictions on BVN-linked phone number changes and limits device switching on banking apps, adding institutional friction to the account takeover process. However, TIRMS was still in the implementation phase as of May 2026, meaning individual protective measures remain the most reliable defence available to Nigerian bank customers today.

The Warning Signs of a SIM Swap Attack You Must Recognise Immediately

SIM swap fraud moves fast — the window between a successful SIM swap and account drainage is often less than thirty minutes. Recognising the warning signs immediately is therefore the critical defensive advantage available to victims.

What to Do the Moment Your Phone Loses Signal

The most direct warning sign of a SIM swap attack is your phone suddenly showing no network signal or “No Service” when it functioned normally minutes earlier. BusinessDay Nigeria’s cybersecurity analysis explicitly advises: if your phone suddenly stops getting signals, do not wait and do not assume it is just a network issue. Check your bank app immediately using Wi-Fi if available. If your bank account shows unusual activity or you cannot log in because your password appears changed, call your bank’s fraud hotline immediately from a different device. Contact your telecom provider to verify whether a SIM replacement has been processed on your number. Request an emergency reversal and block any further OTPs being sent to the swapped SIM. Furthermore, report the incident to the NCC consumer portal or on the toll-free line 622, and file a report through the Nigeria Police Force National Cybercrime Centre portal. Under the CBN’s November 2025 APP fraud framework, you must report unauthorised transactions within 72 hours to retain full eligibility for the 16-working-day refund process. Every minute matters — speed of response directly determines how much of the damage is recoverable. The same urgency applies to the follow-up: visit your bank branch where your BVN was originally enrolled and request that your profile be placed on a temporary risk watchlist, triggering stricter biometric verification for any future transactions until the situation is resolved.

People Also Ask: SIM Swap Fraud in Nigeria

Can a SIM swap happen without my knowledge in Nigeria?

Yes. In Nigeria, SIM swap fraud frequently occurs without any action from the victim, because criminal actors bribe telecom insiders to approve fraudulent SIM replacement requests on their behalf. The victim’s first indication that something is wrong is typically their phone losing network signal. Unlike phishing or OTP scams, this attack requires no mistake from the victim — only a compromised telecom agent or a successful impersonation at a service centre.

How do I stop SIM swap fraud from affecting my bank account in Nigeria?

Set a SIM lock PIN with your mobile network provider immediately. This is a unique PIN that must be provided before any SIM replacement, port-out, or number transfer is processed on your account. Visit your network provider’s service centre in person and request this feature — it is the single most effective barrier against SIM swap fraud available to individual Nigerians today. Additionally, enable biometric authentication on all banking apps rather than relying solely on SMS OTP verification. Use an authenticator app such as Google Authenticator or Microsoft Authenticator for any account that supports it, since these generate OTPs on your device rather than through SMS and are not affected by a SIM swap. Furthermore, limit the personal information you share publicly on social media — full name, date of birth, phone number, and BVN fragment are exactly what a criminal needs to impersonate you at a telecom service centre.

The Insight Most SIM Swap Guides Miss: Number Recycling Creates Victims Who Did Nothing Wrong

Here is the angle that most Nigerian SIM swap fraud coverage overlooks entirely: SIM swap attacks are not always deliberate criminal impersonation. Phone numbers that have been inactive for several months may be deactivated and reassigned by the carrier to a new subscriber. If that recycled number remains linked to the previous holder’s banking profile, email account, or social media recovery settings, the new subscriber can unintentionally or intentionally access accounts they have no business accessing. BusinessDay Nigeria specifically documented this number recycling vulnerability: a number in the hands of a stranger may still be linked to banking profiles or recovery emails, paving the way for unintentional but real identity theft. This is a structural flaw in Nigeria’s telecom identity architecture that affects people who changed their number, stopped using a SIM, or travelled abroad for extended periods. The protection is straightforward but rarely stated: if you have an old SIM you no longer use, log into every banking and financial account linked to that number and update the contact to your current active number before abandoning it. Do not leave a dormant phone number linked to your financial accounts. This single action eliminates the number recycling attack surface entirely. The broader social engineering tactics that create the information advantage criminals use in SIM swap attacks appear across other fraud categories too. Understanding how scammers gather personal data is as important as understanding the attack itself — our guide on fake giveaways on social media that harvest personal data using Dangote and MTN names explains one of the primary data collection methods criminals use before executing SIM swap attacks. Additionally, the CBN’s fraud and scam awareness page documents reporting channels and current fraud alerts for Nigerian bank customers. For further context on how Nigeria’s new telecom-banking TIRMS integration works, Nairametrics published a detailed analysis of the TIRMS platform and its implications for fraud prevention across Nigeria’s digital payments ecosystem.

Key Takeaways: Protecting Yourself from SIM Swap Fraud in Nigeria

SIM swap fraud is a systemic threat that operates at the intersection of telecom and banking infrastructure — and it requires no mistake from the victim when executed through a bribed insider. The most important protections are these. First, set a SIM lock PIN with your mobile network provider immediately — this is the single most effective barrier available to individual Nigerians today. Second, if your phone loses signal unexpectedly, treat it as a potential SIM swap and contact both your bank and your telecom provider without delay. Third, use authenticator app-based two-factor authentication rather than SMS OTP wherever possible, since authenticator apps are immune to SIM swap attacks. Fourth, update old dormant phone numbers linked to your financial accounts before abandoning them — number recycling creates victims who did nothing wrong. Fifth, report any suspected SIM swap to the NCC consumer helpline on 622, the CBN at cpd@cbn.gov.ng, and the EFCC at efcc.gov.ng within 72 hours of discovery to maximise your eligibility for the CBN’s 16-working-day fraud refund process. SIM swap fraud is serious, but it is preventable with the right precautions in place.