Nigeria’s Digital Expansion Fuels Escalating Cybersecurity Losses, Expert Analysis Shows

By Tosin Clegg

Nigeria’s rapid digital expansion has triggered a sharp rise in cybersecurity losses, with financial fraud increasing by nearly 196 percent over the past five years, according to industry and regulatory reports. By 2024, total fraud-related losses reportedly exceeded ₦53.4 billion, with banks alone losing ₦42.6 billion in the second quarter of 2024.
According to cybersecurity researcher and zero-trust architecture specialist Mr. Isaac Adinoyi Salami, the scale of these losses reflects structural weaknesses in Nigeria’s digital and financial infrastructure rather than isolated criminal activity. He noted that while the acceleration of digital banking, mobile payments, and real-time transaction systems has expanded economic access, security frameworks have not evolved at the same pace.

Available reports indicate that fraudulent transactions surged dramatically between 2023 and 2024, with complaints rising by 132 percent within a year. Salami explained that this trend is driven by increasingly sophisticated social engineering tactics, insider threats, and the exploitation of instant payment platforms that process transactions faster than monitoring systems can detect anomalies.

The banking sector appears particularly vulnerable. A single second-quarter 2024 report revealed losses of ₦42.6 billion, surpassing total fraud losses recorded in the entire previous year. Rather than targeting a few high-value accounts, fraud actors have shifted strategy toward high-volume, low-value attacks, extracting smaller sums from a wider pool of victims. In 2024 alone, this approach reportedly accounted for over ₦13 billion in losses.
Dr. Salami noted that this tactical evolution complicates detection because smaller transactions often evade traditional fraud-threshold alerts designed to flag unusually large transfers.
Beyond criminal ingenuity, Salami emphasized that systemic factors are driving the escalation.
One key vulnerability lies in insider threats. Employees within financial institutions have, in some cases, been identified as weak links in cybersecurity defenses, exploiting gaps in internal controls or insufficient oversight mechanisms. According to Salami, without continuous behavioral monitoring and adaptive access controls, insider risks remain difficult to contain.

Infrastructure gaps also contribute significantly. Nigeria’s high-speed, real-time payment architecture enables near-instant transactions, but these systems often lack equally rapid fraud-prevention safeguards. Once a fraudulent transfer is executed, recovery becomes increasingly unlikely.
Additionally, cybersecurity resilience across many organizations remains comparatively low. Salami pointed to inadequate investment in advanced threat intelligence systems, limited workforce training, and fragmented security governance as factors leaving institutions exposed to AI-driven phishing, credential harvesting, and automated attack campaigns.

The impact extends beyond direct financial theft. Estimates suggest that cybercrime costs Nigeria approximately $500 million annually, reflecting not only stolen funds but also reputational damage, operational disruption, regulatory penalties, and consumer distrust.

As digital adoption accelerates across banking, telecommunications, e-commerce, and government services, vulnerabilities in one sector can cascade into others, amplifying systemic risk.
Need for structural reform
Dr. Salami argued that addressing the crisis requires moving beyond compliance-driven cybersecurity toward intelligence-driven digital defense architecture. Recommended reforms include:
Strengthening internal governance frameworks to mitigate insider threats;
Embedding AI-enabled anomaly detection into instant payment systems;
Standardizing real-time fraud risk scoring across financial institutions;
Expanding workforce cybersecurity training and certification programs; and
Investing in adaptive, zero-trust security models that assume no implicit trust within networks.
Without structural reform, Salami warned, fraud losses may continue to escalate as attackers leverage automation, artificial intelligence, and cross-platform vulnerabilities.

Nigeria’s digital transformation has delivered economic inclusion and innovation. However, Salami concluded that unless cybersecurity resilience advances at the same pace, the financial gains of digitization risk being undermined by escalating systemic cyber threats.