E-Financial
PalmPay’s Efforts at Curtailing Cyber Fraud: Two Sides of the Same Coin

The financial inclusion rate in Nigeria has improved. Since the country adopted an inclusion strategy in 2012, adult Nigerians with a bank account have increased, and now account for more than two-thirds of the financially included.
According to the 2023 Report on Access to Financial Services in Nigeria, financial inclusion continues to expand and has so far been fueled by marginal growth among the country’s banked population and major gains in non-bank formal adoption.
Although approximately 40 million adult Nigerians remain formally excluded, formal financial inclusion was said to have grown from 56% in 2020 to 64% in 2023.
In the last four years, fintech companies in Nigeria have played a vital role in closing this gap, bringing financial services to the country’s unbanked and driving economic growth. Their successes, however, have not come without challenges.
Following the penetration of digital payment platforms in Africa, a fraud epidemic has plagued the fintech ecosystem in Nigeria, with Mobile, Web and POS being the most exploited channels by fraudsters in the country in 2023.
According to the 2023 NIBSS Annual Fraud Landscape report, incidents of “Fraud loss via Internet Banking increased by 325% between 2022 and 2023.”
The rise of digital payment platforms in Nigeria has increased the potential for cyber fraud, with fintech companies now forced to balance between making payment apps user-friendly and prioritising users’ safety to stem increased cyber fraud.
Fintech Side of the Coin
To address the fraud epidemic, the Fintech Association of Nigeria (FintechNGR) plans to unveil a fraud reporting framework sometime this year, while fintech platforms such as PalmPay continue to take the initiative to reevaluate their in-app safety features to protect their users from the activities of fraudsters.
Since launching in Nigeria in 2019 under a Mobile Money Operator (MMO) licence by CBN, PalmPay has grown to over 30 million users as part of its payment ecosystem.
In building a user-friendly app, PalmPay has also sought to foster a secure financial ecosystem by integrating safety features into its app so that the millions of users who transact with the app do so in a safe and trusted environment.
In general, PalmPay employs a closed-loop risk management system that involves continuous monitoring, analysis, and response to fraud threats and allows it to detect and prevent security risks in real-time and reduce the potential impact of fraud.
In particular, to reduce incidents of fraud, protect their users from fraudsters, and provide a safe banking environment, PalmPay binds their users’ phones to the app and has an auto-logout and biometrics feature to confirm users’ identity.
PalmPay Safety Features
Chika Nwosu, Managing Director, PalmPay, said the reason why the fintech platform has witnessed astonishing growth in four years was because “We prioritise the safety and security of our users.” He said they’ve been able to achieve this by “marrying security and safety with the customer experience to create a balance.”
Because it understands that curtailing fraud is a two-way street, PalmPay runs a Wallet Safety Workshop to teach users of its app and POS machines various security topics covering payment security and common security issues in daily life, such as password management, fraud detection, phishing and risk identification.
The safety workshop underscores PalmPay’s understanding of user security as an important part of curtailing fraud and encourages its users to ensure that they always secure their wallets using the several built-in safety features in its app.
A recent example was a series of campaigns encouraging its users to link their wallets with their BVN or NIN, following the directive by the Central Bank of Nigeria (CBN) for users of fintech platforms to link their wallets with their BVN or NIN.
To encourage the users to meet the CBN deadline of January 31, 2024, PalmPay introduced an incentive payment system where up to N500 was paid to users who got ahead of the deadline and validated their wallet information.
PalmPay users have several options for protecting themselves against fraudsters such as the two-factor verification process that makes it difficult for fraudsters to gain access to users’ apps without spooking them. In the first half of 2023, millions of users linked their secure email addresses to their PalmPay app. With this feature, PalmPay users effortlessly receive OTPs for their in-app login.
The PalmPay app has a device management feature that allows users to manage trusted devices and remove untrusted devices. When logging in on an untrusted device, users complete a comprehensive security verification process that involves inputting an OTP and their PIN to ensure security.
Role of PalmPay Users
While fintech companies play a role in protecting users from cyber fraud, the rising fraud incidents in Nigeria can sometimes be due to poor digital and financial literacy, but most especially the failure of many victims to report an attack.
In a report last year, Temitayo Oduwole, Head of IT and Payments, PalmPay, observed that customers do not take prompt action in incidents of fraud and that “Only 33 per cent report the same day or take the necessary right action on the same day.”
Effective investigation into incidents of fraud begins when the user reports to their bank that fraud has occurred. However, fraud, if not reported within the hour the crime occurred, allows criminals to move the stolen funds to ‘safe’ places.
Precaution remains the best remedy to protect oneself from cyber fraud. Anti-fraud expert Tosin Adenekan warned fintech users against trusting strangers with their personal information when performing digital transactions.
According to Mrs Adenekan, “Users of fintech platforms owe it to themselves to follow standard safety precautions to avoid being defrauded by cyber criminals.
“Do not allow strangers such as POS operators to handle personal ATM cards. This is because cybercriminals often posing as helpful POS operators can exploit this to observe PIN entries and distract card owners, ultimately swapping ATM cards.”
She urged fintech users to “take steps to reduce incidents of fraud on their wallets by creating strong passwords, enabling the two-factor authentication features on their fintech app, monitoring their wallets for unauthorised transactions, and protecting their personal login information when in public from prying eyes.”
Other steps to take include “regularly updating their apps, setting limits for their wallets, staying alert for phishing attempts, getting the proper financial education, using secure internet connection, being aware of pop-ups and fraudulent emails, and ensuring that operating systems and internet connections are up to date.”
To prevent falling victim to cyber fraud, Mrs Adenekan urged fintech users to adhere to these safety guidelines and “don’t trust everything on the internet.”
E-Financial
CBN Introduces AML to Fight Financial Terrorism, Gives Banks Deadline

Central Bank of Nigeria (CBN) has directed all financial institutions to implement real-time transaction alert systems as part of enhanced anti-money laundering (AML) compliance.
The directive was conveyed in a letter dated May 20, 2025, with reference number BSD/DIR/CON/AML/018/033, and titled “Exposure of Draft Baseline Standards for Automated Anti-Money Laundering (AML) Solutions – Request for Comments.”
The letter, signed by Olubukola Akinwunmi, director of banking supervision, was addressed to all financial institutions and outlines the regulatory expectations for modern AML compliance.
The apex bank emphasised that the initiative is part of its broader commitment to safeguarding the integrity and stability of Nigeria’s financial system, especially in the face of rapid digital transformation and the rise of innovative financial products.
The draft standards, which are now open to feedback from stakeholders, are designed to promote operational efficiency and ensure compliance with Anti-Money Laundering, Combating the Financing of Terrorism, and Counter-Proliferation Financing (AML/CFT/CPF) regulations.
“This standard is informed by a comprehensive assessment of existing solutions within the industry and aligns with global best practices, including recommendations by the Financial Action Task Force (FATF),” the document stated.
According to the CBN, the draft baseline standards are developed with key objectives in mind.
These include strengthening the AML capabilities of financial institutions through advanced, technology-driven solutions; encouraging the adoption of emerging technologies for real-time detection and reporting of suspicious transactions; reducing the inefficiencies associated with manual compliance processes; and ensuring alignment with evolving regulatory expectations both locally and internationally.
The draft document is available for download on the official website of the Central Bank of Nigeria, and all stakeholders have been encouraged to review and provide feedback.
“We look forward to receiving your valuable feedback,” the letter noted, highlighting the collaborative approach to shaping the final version of the standards.
Among the critical requirements outlined in the draft are real-time alerts for transactions considered high risk.
These include cross-border transactions, excessive cash deposits, cryptocurrency-related dealings, and other activities flagged under existing AML regulations.
The document specifies that the time taken to review and act on such alerts must not exceed a predetermined timeline, reinforcing the need for swift response and decision-making.
The CBN mandates that financial institutions implement transaction monitoring systems capable of supporting multiple risk scenarios.
These systems should use configurable filtration rules and customer segmentation techniques to effectively detect suspicious behavior. Institutions are also required to conduct regular stress testing and system validation exercises to minimise false positives.
“Each institution must define a predetermined threshold for false positives and ensure that the rate remains below this threshold,” the document stated, underlining the importance of maintaining a balance between alert sensitivity and accuracy.
The draft also mandates that AML solutions incorporate artificial intelligence and machine learning (AI/ML) capabilities.
These technologies should support anomaly detection, behavioral pattern recognition, automated risk scoring, and adaptive learning based on insights from previously flagged alerts and their resolutions.
The aim is to ensure that the systems not only detect suspicious activity but also evolve over time to become more efficient and accurate.
Real-time access to Customer Due Diligence (CDD), Know Your Customer (KYC), and Know Your Customer’s Business (KYB) data is another essential feature prescribed in the draft standards.
Financial institutions are expected to automate customer onboarding processes with real-time identification and verification in line with existing AML/CFT/CPF regulations.
This includes integration with Bank Verification Number (BVN) and National Identification Number (NIN) databases to ensure instant verification.
Moreover, the draft outlines the need for comprehensive KYC and KYB functionalities.
These must include automated customer risk profiling, transaction behaviour analysis, historical data tracking, and the inclusion of various risk factors derived from money laundering, terrorist financing, and proliferation financing risk assessments and typologies.
The solutions must also enable continuous classification of customers into risk categories to facilitate more targeted and effective risk management.
The Central Bank’s move to expose the draft for industry-wide input reflects its intention to build a robust, technologically advanced AML compliance culture across Nigerian financial institutions.
It signals a significant step towards enhancing transparency, operational efficiency, and international alignment in Nigeria’s financial regulatory environment.
E-Financial
Peter Obi Denies Secret Meeting with Tinubu over Fidelity Bank

Peter Obi, presidential candidate of Labour Party for 2023 elections, has publicly dismissed recent allegations linking him to a secret meeting with President Bola Tinubu over a fabricated debt scandal involving Fidelity Bank, describing the claims as “baseless, malicious, and entirely false.”

Peter Obi and Bola Tinubu
In a statement posted on his official X handle on Thursday, Obi expressed deep concern over what he called a growing business of blackmail targeting his public image.
“It’s obvious that the biggest business for blackmailers now is talking about Peter Obi from every negative perspective,” he wrote, adding that even his “solemn spiritual trip to Rome” had been twisted into a “blackmail campaign.”
Obi addressed a viral claim suggesting he travelled to Rome for a private meeting with President Tinubu in connection with a purported ₦225 billion debt crisis involving Fidelity Bank.
He categorically denied the allegation, clarifying the nature of his brief interaction with the President.
“I have never sought an audience with, nor met, President Tinubu since he assumed office,” Obi stated.
“Except (for a) one-minute meeting at the arena of Saint Peter’s Basilica, Rome during the inauguration Mass of Pope Leo XIV, where I was seated behind, and had to respectfully greet him and other dignitaries present.”
According to Obi, he was in Rome on May 9 for the lying-in state of Pope Francis and departed for London immediately after the Mass before returning to Nigeria.
The former Anambra State governor also refuted renewed claims that he owns Fidelity Bank.
He acknowledged his previous role as Chairman and Director of the bank, but emphasised that he does not own it.
“Fidelity has over 500,000 shareholders, none of whom hold a majority stake,” Obi explained.
“What this blackmailer seeks is to harm these hardworking Nigerians and cause them needless distress.”
He described the individual behind the allegations as a “self-proclaimed blackmailer-in-chief” and criticised the ongoing efforts to tarnish his reputation for political or financial gain.
Obi offered a prayer for those responsible for spreading falsehoods against him: “May God grant you the virtues of gratitude and understanding to know that we came here with nothing and will go with nothing, (and) that they cannot profit from their evil ways.”
E-Financial
PremiumTrust Bank Reassures Customers of Continued Security after Cyberattack Foil

PremiumTrust Bank, a Nigerian commercial bank, has reassured its customers of the maximum security of their funds after an attempted cyberattack on the bank was foiled by a law enforcement agency.
The bank said in a statement that the swift detection of the breach proves that its system functions precisely as intended, detecting, blocking, and escalating threats without compromising customer trust or data.
“In light of the recent release issued by the Economic and Financial Crimes Commission (EFCC) concerning an attempted cyberattack by some unscrupulous elements, PremiumTrust Bank wishes to reassure our valued customers, stakeholders, and the general banking public that our security architecture remains resilient,” the bank said.
“The attempt to gain unauthorised access to our database and infrastructure was swiftly detected and completely neutralised by our Internal Information Security and IT Surveillance Teams through real-time monitoring and advanced security protocols,” it added.
The bank revealed that the culprits are now facing trial at the Federal High Court, Lagos, as they were prevented from executing their “malicious plan”, underscoring the effectiveness, vigilance, and sophistication of PremiumTrust Bank’s cybersecurity framework.
The EFCC Lagos Zonal Directorate 1, on Tuesday, arraigned two employees of the bank, namely, Kehinde Odeyemi and Matthew Adeniyi Damilola, before Justice Alexander Owoeye of the Federal High Court in Ikoyi, Lagos.
They were arraigned alongside three others, Samson Latshin Dakup, Bolaji Omotosho Yinka, and Sunday Badeniyi Okunola, on a seven-count charge bordering on conspiracy to steal.
According to the EFCC, the defendants allegedly attempted to manipulate the bank’s server and domain credentials in an effort to gain unauthorised access to its database and steal customer funds. The commission said the planned fraudulent activity was intercepted before any loss occurred.
PremiumTrust Bank has, however, lauded the EFCC for its swift and highly professional response in not only foiling the cyberattack but also diligently tracking down the syndicate and their collaborators.
“We deeply value the Commission’s unwavering commitment towards safeguarding the integrity of Nigeria’s financial system.
“We remain unwavering in our duty to protect customers’ data and deposits, using a world-class, multilayered security infrastructure,” the bank said.
The lender encouraged customers to practice safe digital banking habits and remain vigilant even as it continues to invest in innovative cybersecurity solutions to prevent breaches.
- News2 days ago
Manager, Others Arraigned for Allegedly Hacking into Premium Trust Bank’s Server
- Telecom2 days ago
MTN Nigeria Drags 20 Banks to Court over N6Bn Debt by SleekChip
- Telecom2 days ago
Africa Launches First Continental Space Agency
- E-Business2 days ago
CAC, NIBSS Unveil Platform for Data Access to Private Firms
- News2 days ago
DBI Clocks 21, to Train 5m Workers
- Broadcasting2 days ago
How Automated Payments Can Reshape Savings Beyond Local Cooperatives
- General News2 days ago
NITDA Takes IT Projects Clearance Campaign to Office of Accountant General, Others
- Telecom2 days ago
Minister Decries High Rate of Nigerian Women Access Gap to Smartphones