The Integrated Personal and Payroll Information System (IPPIS) database is safe and secure, Office of the Accountant General of the Federation (OAGF) assured.

The assurance is on the heels of recent insinuation of tampering and compromise of the system. Assurance of its safety and security was given in a statement issued on behalf of the Office by the Director of information, Mallam Bawa Mokwa.

The OAGF restated that the database had not been compromised assuring that employees’ personal data on the database was safe and secure.

The OAGF, which manages the IPPIS and other financial management initiatives of the Federal Government, said it was already implementing its ICT security policy that aims to ensure that its digital assets are secured in line with global best practices.

The Office explained that no data was saved on its website, adding that the IPPIS used the website to only share information and not for any transaction.

“The IPPIS is not using the OAGF website for any transaction. The website is actually the medium to share information.

Neither payroll nor payment is made through the website, therefore, no data is contained in the website,” it said. The OAGF stated that the IPPIS validation portal that was recently developed for updates of employees’ information was deployed for a period and after the exercise, the data were pulled out and the site shut down permanently.

According to the Office, “the IPPIS Validation Portal was deployed on a secure platform. A secured database and application were purchased from the popular HELIX-FONS.’

The Office acknowledged that the IPPIS was of utmost importance to Nigerian workers, thus it became imperative to assuage the fears of any loss or breach of employees personal data in the IPPIS database.

The prospects of active data protection and security has brightened with the partnership between Nigeria Data Protection Commission (NDPC) and banks to create awareness about the requirements and operations of the Data Protection Act.

With more than two-thirds of Nigerians’ personal data and transactions in excess of a billion, banks arguably have the largest private data bank and are seen as critical stakeholders in data privacy and security.

While banks constitute less than one per cent of the over 500,000 data processors’ organisations in Nigeria, their huge customers’ base and data make them one of the most significant pillars of national data protection and security.

The KPMG West Africa Banking Industry Customer Experience Survey 2023 found that “the security, integrity, and privacy offered by banks continue to be important values for customers”, with a sense of security and privacy moderating customers’ choices. The survey also found a notable increase in digital lending, which exposes customers’ data to more online activities.

President, Association of Corporate & Marketing Communication Professionals of Banks (ACAMB), Mr. Rasheed Bolarinwa, during a working visit to NDPC headquarters in Abuja, engaged with the top management of the data protection agency with a view to achieving stronger collaboration with the financial services sector.

He said a stronger working relationship between NDPC and banks and other operators in the financial services sector would enhance regulatory oversight and achievement of the goals of individuals’ data protection and private security.

Dr. Vincent Olatunji, National Commissioner and Chief Executive Officer, Nigeria Data Protection Commission (NDPC), assured ACAMB of the NDPC’s willingness to collaborate with financial sector players.

According to him, the Commission’s role is not punitive but rather to ensure full compliance with the Data Protection Act.

He welcomed ACAMB and NIPR Finance Hub’s offer to support the Commission’s advocacy efforts.

He noted that the NDPC’s mandate is to safeguard individuals’ data privacy rights, foster safe personal data transactions, and prevent the misuse of personal data, among other objectives.

Analysts said collaboration between banks and NDPC would be a game-changer for Nigerian data security given banks’ extensive investments and experience in data privacy.

Financial Institutions Training Centre (FITC), has reported an 8,993 per cent  rise in fraud losses in Nigeria banks, totaling N42.6 billion in  second quarter of this year.

The report noted that the amount lost between April and June 2024 alone exceeded the N9.4 billion lost to fraud by the banks throughout the entire 2023.

According to the FITC Report on Fraud and Forgeries, Quarter 2, 2024, which was released on Saturday, the Q2 loss shows an 8,993 per cent increase in loss when compared with the N468.4 million lost in Q1 2024.

This also represents a 637 per cent increase when compared with the N5.7 billion loss recorded in Q2 2023.

FITC said ‘miscellaneous and other fraud’ types constituted the largest loss, representing 96.46 per cent of the total amount lost, with a value of N41.14 billion.

This was followed by losses from fraudulent withdrawals and computer/web fraud, amounting to approximately N781.2million and N400.7million, respectively.

The FITC report stated that there was a staggering 1,784 per cent increase in the total amount involved in fraud cases from Q1 to Q2 2024, with the sum escalating from N2.9billion to approximately N56.3billion in Q2.

The increase via cash is likely to be fuelled by the demand for cash ransom for kidnapped citizens by bandits.

A further analysis of the data shows a significant rise in the amount lost across all channels, except for mobile fraud, which recorded a decline.

In terms of magnitude, losses through bank branch-related channels rose by 31,497 per cent to a value of N42.2 billion in Q2 from N133.9 million in Q1 2024.

Additionally, computer/web frauds also saw a monumental increase of 1,560 per cent, with losses growing from N24million to N400.8million.

However, there was no indication of the amount lost due to ATM-related fraud, while mobile fraud recorded a decline in the amount lost from the previous quarter, decreasing by 59 per cent from N216.4 million in Q1 to N88.7 million in Q2 2024.

During the second quarter of 2024, fraudulent activities were carried out through various channels, including ATMs, online platforms like web and mobile banking, bank branches, and point-of-sale (POS) terminals.

Among instruments used, card fraud recorded a significant decrease, declining by 47.66 per cent. from 21,469 in Q1 to 11,237 in Q2.

In contrast, fraudulent activity involving cheques and cash increased by 36.67 per cent and 9.09 per cent, respectively, with cheques surging from 30 cases in Q1 to 41 cases in Q2, while the use of cash rose from 209 in the first quarter of 2024 to 228 in the second quarter of 2024.

With the staggering increase in losses to fraud, the FITC advised the banks to enhance their monitoring and auditing procedures.

According to the Centre, deposit money institutions can utilize AI-driven tools that flag unusual entries or patterns to implement continuous and automated monitoring systems that can detect anomalies or discrepancies in settlement files.

Additionally, regular unannounced internal audits focusing specifically on settlement processes can be conducted to identify and address any irregularities promptly.

“Access controls should also be strengthened by limiting access to settlement files to only a small, vetted group of authorised personnel given the appropriate clearance and are regularly trained on the latest security protocols.

“The implementation of multi-factor authentication (MFA) and role-based access controls (RBAC) can aid the reduction of the risk of unauthorised changes to settlement files,” FITC stated.