As Nigerians increasingly rely on mobile phones for banking, business, communication and everyday transactions, cybersecurity experts are warning that digital convenience comes with growing risks. From phishing attacks and hacked social media accounts to deepfakes and artificial intelligence-powered fraud, individuals and organisations must become more deliberate about protecting themselves online.
The mobile phone has become much more than a communication device for many Nigerians. It is a bank, a business centre, a shopping mall and a gateway to the world.
However, behind the convenience of digital technology lies a growing threat. Fraudulent bank alerts, hacked social media accounts, identity theft, phishing attacks and the emerging dangers of artificial intelligence are making cybersecurity an increasingly important concern.
How safe is our money? Who has access to our personal information? And how can we protect ourselves in an environment where even a familiar voice, photograph or video may no longer be genuine?
These questions formed the focus of a discussion on Late Edition, a programme on NTA News 24 Abuja, featuring two cybersecurity experts: Dr. Ibrahim Waziri Jr., Founder and CEO of Beast Front, and Professor Charles Emoekpere Orbih, Co-founder of Cyber Training and Consulting Services.
The conversation explored the growing cybersecurity threats facing Nigerians and offered practical recommendations for individuals, businesses and policymakers.
The Mobile Phone: Convenience and a Growing Security Risk
With the increasing adoption of mobile technology in Nigeria, more people are using their phones to conduct financial transactions, run businesses, access information and communicate.
According to Dr. Ibrahim Waziri Jr., mobile technology has significantly expanded financial inclusion, particularly by providing banking services to people who previously had limited access to traditional financial institutions.
However, this increased accessibility has also expanded the opportunities available to cybercriminals.
He explained that one of the first steps towards protecting mobile devices is to pay attention to the manufacturers and providers of the devices we use.
Some affordable devices, particularly those from manufacturers whose credibility and security practices are difficult to establish, may expose users to malware or unwanted data collection.
Beyond the device itself, users must also pay attention to the applications installed on their phones.
Dr. Waziri emphasised the importance of understanding who develops an application, how secure it is and what permissions it requests.
He illustrated this with a simple example: a recipe application does not need access to your contacts.
Users should therefore review application permissions and avoid granting unnecessary access to personal information.
He also recommended the following basic precautions:
- Avoid opening links from unknown or unverified sources.
- Use trusted platforms and institutions for financial transactions.
- Pay attention to password security and consider passwordless authentication where available.
- Review the permissions granted to mobile applications.
- Follow cybersecurity guidelines and remain informed about emerging threats.
He further stressed the importance of regulatory oversight, suggesting that Nigeria should strengthen mechanisms for identifying and certifying trusted device manufacturers, software providers and technology products.
Just as people would not randomly employ an unqualified builder to construct their homes, consumers should be careful about the devices and software they trust with their personal and financial information.
Why Nigerians Keep Falling Victim to Online Scams
Professor Charles Emoekpere Orbih explained that the widespread use of mobile devices has created a much broader attack surface for cybercriminals.
Today, almost everyone with a mobile phone is a potential target, regardless of age, education or location.
He noted that online scams have evolved considerably over the years.
In the early 2000s, many people were familiar with fraudulent emails, particularly the infamous Nigerian email scams involving promises of money, romantic relationships and business opportunities.
Today, cybercriminals have expanded their methods. Scams now arrive through SMS, WhatsApp messages, phone calls, social media platforms and other digital channels.
Many of these messages promise unrealistic investment returns or opportunities to make quick money.
According to Professor Orbih, cybercriminals exploit human weaknesses, including greed, desperation, curiosity and the desire for quick financial gains.
He also pointed out that people are particularly vulnerable when multitasking. A person who is distracted by several activities may quickly click on a suspicious link or disclose confidential information without carefully examining the request.
His advice was straightforward: awareness is essential.
People must learn to recognise suspicious messages, verify the identity of callers and avoid clicking on links simply because they appear urgent or attractive.
How to Identify Fraudulent Links and Phishing Attacks
One of the most important aspects of the discussion was how to distinguish legitimate online communications from fraudulent ones.
Professor Orbih acknowledged that identifying fraudulent links can be difficult, especially for people without technical knowledge.
He recommended paying close attention to the source of a message.
For example, a fraudulent website may imitate the name and appearance of a legitimate bank by changing just one letter in its web address. To an unsuspecting user, the two addresses may appear almost identical.
Artificial intelligence has made this problem even more complicated because scammers can now reproduce the appearance and design of legitimate websites with greater accuracy.
Professor Orbih advised users to examine the following:
- Check the sender: Establish who sent the message and whether the source is familiar and trustworthy.
- Examine the web address: Look carefully for unusual spellings, missing letters or suspicious variations in the domain name.
- Review the language: Messages containing grammatical errors, unusual expressions or suspicious requests deserve closer attention.
- Watch out for urgency: Messages insisting that you must click immediately or risk losing an opportunity are common characteristics of scams.
- Verify through official channels: If a message claims to come from your bank or another institution, contact that organisation directly using its established communication channels.
Dr. Waziri added that legitimate financial institutions generally do not send random links asking customers to execute sensitive transactions.
A notification about an expiring card or password, for example, may simply ask the customer to take action through the institution’s official platform rather than provide a suspicious link.
He explained that phishing attacks often involve criminals creating replicas of legitimate websites or manipulating communication channels to deceive users.
Some attackers exploit the visual similarities between letters such as lowercase ‘l’ and uppercase ‘I’ to create web addresses that look almost identical to genuine ones.
With artificial intelligence, reproducing the appearance of an existing website has become easier.
Another form of attack involves intercepting communication between two parties. In what is commonly known as a Man-in-the-Middle attack, a criminal positions themselves between a user and a legitimate service, potentially intercepting or altering information being exchanged.
Dr. Waziri advised users to remain vigilant and verify suspicious communications through alternative channels. If an email claims to come from your bank, for instance, you can independently call the bank or visit a branch rather than following the link provided.
How Can Money Disappear From Your Account Without Clicking a Suspicious Link?
Many people assume that online fraud only happens when they click on suspicious links. However, Dr. Waziri explained that there are other ways cybercriminals can gain access to personal and financial information.
One major vulnerability is the practice of reusing passwords across multiple platforms.
For example, someone may use the same username and password for Facebook, email accounts and online banking services.
If one of those platforms is compromised, criminals may attempt to use the stolen credentials to access other accounts.
This practice is known as credential reuse, and it can expose several accounts through a single security breach.
Dr. Waziri strongly advised against using the same password across multiple services.
He recommended using password managers, which help users generate, store and manage unique passwords for different accounts.
He also encouraged the adoption of passwordless authentication, including passkeys and biometric authentication, where supported.
The central message is that protecting one account should not automatically depend on the security of another.
Protecting Social Media Accounts From Identity Theft and Hacking
Social media has created opportunities for communication, networking and business, but it has also introduced new security challenges.
Professor Orbih explained that people now maintain hundreds or even thousands of online connections, many of whom they may never have met in person.
This makes it difficult to establish the identity and intentions of everyone within one’s digital network.
One common threat involves suspicious group messages and unsolicited invitations to WhatsApp groups promoting investment opportunities, cryptocurrencies and promises of extraordinary financial returns.
He advised users to leave unfamiliar groups, block suspicious accounts and avoid engaging with unsolicited investment offers.
He also highlighted the importance of using strong passwords and enabling two-factor authentication.
Two-factor authentication adds an additional layer of security by requiring another form of verification before granting access to an account.
Professor Orbih shared an experience involving a website operated by his organisation that was compromised by hackers.
The attackers gained access to the website, changed its password, created an administrator account and added several subscribers.
The website was eventually restored, but the incident demonstrated how vulnerable websites can become when security practices are neglected.
He explained that many websites, particularly those built with WordPress, depend on plugins and themes that require regular updates.
When these updates are ignored, security vulnerabilities may remain exposed, allowing attackers to gain unauthorised access.
A compromised website can also be abused to distribute malicious messages or other harmful content. In some cases, it may become part of a botnet.
The incident reinforces the need for website owners and administrators to:
- Regularly update WordPress installations, themes and plugins.
- Use strong and unique administrator passwords.
- Enable two-factor authentication.
- Limit administrator privileges to trusted individuals.
- Monitor websites for unusual activity.
- Maintain regular backups and security checks.
Professor Orbih also cautioned against indiscriminately saving passwords in browsers, noting that a compromised browser or device could expose sensitive information.
Ultimately, he encouraged people to be cautious about the links they click, the groups they join and the individuals they trust online.
Artificial Intelligence, Deepfakes and the New Face of Cybercrime
Perhaps one of the most concerning aspects of the discussion was the growing use of artificial intelligence to facilitate cybercrime.
Dr. Waziri warned that society is entering a period in which distinguishing between genuine and artificially generated content is becoming increasingly difficult.
Previously, digital manipulation was largely associated with edited photographs and obvious visual alterations. Today, artificial intelligence can generate realistic images, videos and voices capable of imitating real people.
A criminal can potentially use someone’s photograph or voice recordings to create convincing content that appears to show that person saying or doing things they never actually did.
This creates new opportunities for impersonation, identity theft, financial fraud and manipulation.
Dr. Waziri noted that even some traditional methods of biometric verification are facing new challenges as artificial intelligence becomes more sophisticated.
He advised people to apply the same caution they exercise in their physical lives to their digital activities.
For example, most people would not willingly enter a stranger’s vehicle without establishing who the driver is. The same principle should apply online.
People should not visit unfamiliar websites, engage with suspicious accounts or participate in questionable activities simply out of curiosity.
He also highlighted the growing use of AI-generated identities in online scams, including forms of catfishing in which people believe they are interacting with genuine individuals when they are actually communicating with artificial identities.
The implication is that users can no longer rely entirely on photographs, videos or familiar voices to establish someone’s identity.
How to Recognise and Protect Yourself From Deepfakes
Professor Orbih agreed that distinguishing between genuine and manipulated content is becoming increasingly challenging.
He explained that misinformation has always existed in society. Stories and rumours often change as they are passed from one person to another.
Artificial intelligence has amplified this challenge by making it possible to manipulate information, images and videos on a much larger scale.
He advised Nigerians to pay greater attention to the original source of information.
Before accepting or sharing a controversial video, photograph or news report, individuals should ask:
- Where did the information originate?
- Who first published it?
- Is the source credible?
- Are reputable news organisations reporting the same development?
- Can the information be independently verified?
Professor Orbih particularly warned about the potential use of deepfakes during election campaigns.
Manipulated videos and audio recordings could be used to damage the reputation of political candidates, influence public opinion or spread false information.
He therefore encouraged Nigerians to compare information across credible media organisations and avoid accepting everything they encounter online as factual.
His message was clear: trust, but verify.
He also emphasised that completely withdrawing from the internet is not a realistic solution. Digital technology has become an essential part of modern life.
The challenge is to participate responsibly while remaining alert to the possibility of manipulation.
Should Artificial Intelligence Be Regulated?
The conversation also examined whether governments should regulate artificial intelligence to prevent its misuse.
Professor Orbih acknowledged that there is an ongoing global debate involving innovators, businesses, governments and other stakeholders.
While some advocate for fewer restrictions to encourage innovation, others argue that stronger controls are necessary to protect individuals and society.
He supported responsible AI development and usage, arguing that artificial intelligence should improve people’s lives rather than create additional risks.
He noted that AI is increasingly being used to automate tasks that previously required significant human effort.
However, developers and organisations must ensure that the technology is not being used to cause harm.
According to him, some form of regulation is necessary, but regulators must first understand the technology they intend to govern.
He compared the current excitement and anxiety surrounding artificial intelligence to the concerns that accompanied the Y2K transition around the year 2000.
At the time, many people feared that the world would experience widespread technological failures. However, the internet eventually became an integral part of everyday life.
Artificial intelligence is following a similar path towards widespread adoption.
As it becomes more accessible, society must establish appropriate standards, safeguards and responsible-use policies.
Professor Orbih also stressed that Nigeria and other African countries must participate in developing the policies and standards that will shape the future of artificial intelligence.
Africa should not simply remain a consumer of technologies developed elsewhere. It must become an active participant in determining how these technologies are developed and deployed.
Nigeria Must Move From Consuming Technology to Building It
Dr. Waziri expanded on the question of AI regulation by arguing that Nigeria must begin thinking beyond technology consumption.
He explained that governance is not simply about restricting artificial intelligence. It also involves establishing the necessary structures to manage how the technology is developed and used.
At the organisational level, businesses should determine which AI tools employees can access, what those tools can be used for and what boundaries should guide their operations.
He also raised an important emerging concern: the increasing independence of AI agents.
Unlike traditional software applications that generally depend on direct human instructions, AI agents can perform multiple tasks with limited human intervention.
This introduces new cybersecurity challenges because organisations must consider not only the actions of human users but also the activities of the AI systems operating on their behalf.
Businesses must therefore establish clear controls over the number of AI agents that can be deployed, the permissions they receive and the activities they are allowed to perform.
Dr. Waziri described the present period as an important turning point in cybersecurity.
While cybercriminals are becoming more sophisticated, cybersecurity professionals are also developing new tools and models to respond to emerging threats.
He believes that the increasing demand for cybersecurity solutions presents significant opportunities for young professionals.
In particular, there is a growing need for people who can combine artificial intelligence with cybersecurity to develop better systems for identifying, preventing and responding to digital threats.
He encouraged young professionals to consider specialising in this emerging field.
The Way Forward: Awareness, Responsibility and Participation
As the discussion drew to a close, Professor Orbih emphasised that people should not be afraid of the internet or artificial intelligence.
Rather, they should understand the risks and learn how to protect themselves.
Technology is designed to make life easier, improve efficiency and create new opportunities. However, individuals must take responsibility for their digital security.
He also called on Nigeria to become more actively involved in shaping the future of technology.
According to him, the country must move beyond being a passive consumer of digital products and services.
Nigeria must participate in developing the standards, policies and innovations that will determine how emerging technologies are used.
He warned that failure to participate could leave the country further behind as the world moves towards increasingly advanced forms of artificial intelligence.
His closing message was a call for Nigerians to embrace technology, develop the necessary skills and become active participants in the evolving digital world.
Practical Cybersecurity Lessons for Every Nigerian
The discussion between Dr. Ibrahim Waziri Jr. and Professor Charles Emoekpere Orbih offers several important lessons for individuals, businesses and institutions.
Here are some practical steps everyone can begin taking:
- Think before you click. Avoid opening links from unknown or suspicious sources, even when they appear to come from familiar contacts.
- Verify financial requests. Never rely solely on messages, emails or phone calls requesting financial information or transactions. Contact the institution independently.
- Use strong, unique passwords. Avoid using the same password across multiple platforms. Consider using a reputable password manager.
- Enable two-factor authentication. Add an extra layer of security to your email, banking and social media accounts.
- Review application permissions. Do not give applications access to contacts, photographs, microphones or other information unless necessary.
- Keep your devices and websites updated. Regularly install security updates and maintain your website’s plugins, themes and software.
- Be careful with OTPs and verification codes. Never disclose one-time passwords or authentication codes to someone who contacts you unexpectedly.
- Question what you see online. Photographs, videos and voice recordings can be manipulated. Verify important information through credible and independent sources.
- Be cautious with unfamiliar online groups. Avoid unsolicited investment opportunities and suspicious WhatsApp groups.
- Continue learning. Cybersecurity threats evolve constantly. Staying informed is one of the most effective ways to protect yourself.
Conclusion
The digital world offers enormous opportunities for Nigeria. Mobile banking, e-commerce, artificial intelligence and digital communication are transforming how people live and work.
However, the benefits of these technologies can only be fully realised when individuals, businesses and governments take cybersecurity seriously.
As Dr. Ibrahim Waziri Jr. and Professor Charles Emoekpere Orbih emphasised, the solution is not to withdraw from the digital world but to become more informed, cautious and responsible participants in it.
The future will belong not only to those who adopt new technologies but also to those who understand how to use them safely and contribute to shaping their development.
The real question is no longer whether we should embrace the digital world. It is whether we are prepared to protect ourselves and become active participants in shaping its future.
