The Central Bank of Nigeria (CBN) has issued a high-priority alert today, Wednesday, April 22, 2026, warning the public against a surge in sophisticated fraudulent messages and cyber-hacking attempts. The warning follows a string of recent breaches targeting major Nigerian digital infrastructures.
The Nature of the Threat
According to a statement signed by the Acting Director of Corporate Communications, Hakama Sidi Ali, the apex bank identified several “malicious methods” currently in use:
- Impersonation Scams: Fraudsters are circulating deceptive emails and SMS messages that mimic official CBN branding to trick recipients into revealing personal banking details or clicking malicious links.
- Fake Policy Claims: Many of these messages peddle false information regarding the bank’s leadership, licensing, or new policy updates to create a false sense of urgency.
- Phishing Links: The primary goal of these attacks is to gain unauthorized access to personal bank accounts and exfiltrate sensitive data.
Escalating National Cyber Crisis
The CBN’s alert comes just days after a massive cybersecurity breach at the Corporate Affairs Commission (CAC):
- The CAC Breach: Between April 17 and April 20, the CAC was forced to shut down its online portal following an attack by a threat actor known as “ByteToBreach.” Reports suggest that millions of sensitive documents, including national IDs and passport photos of entrepreneurs, may have been compromised.
- Cascading Failures: Experts believe the current surge is a coordinated operation targeting Nigeria’s financial and corporate systems, with Remita Payment Services and Sterling Bank also reportedly facing recent threats.
- The AI Factor: Security analysts warn that 2026 has seen a rise in “AI-generated phishing,” making scam messages nearly indistinguishable from professional government communication.
CBN Security Mandate
In response to these threats, the CBN has reiterated its official stance:
- Verified Communication: The only official source for CBN updates is its website (www.cbn.gov.ng). The bank will never ask for sensitive info like BVN or passwords via email or text.
- Bank Audit: Earlier this month, the CBN directed all Deposit Money Banks (DMBs) to complete a mandatory cybersecurity self-assessment by April 21 to ensure their defense systems are battle-ready.
