{"id":5225,"date":"2022-10-13T13:51:30","date_gmt":"2022-10-13T11:51:30","guid":{"rendered":"https:\/\/www.projects.88designs.co.za\/acsus\/?p=5225"},"modified":"2022-10-13T13:51:33","modified_gmt":"2022-10-13T11:51:33","slug":"data-for-fraud-how-the-biometric-system-exposes-nigerians-to-cyber-thieves","status":"publish","type":"post","link":"https:\/\/www.projects.88designs.co.za\/acsus\/data-for-fraud-how-the-biometric-system-exposes-nigerians-to-cyber-thieves\/","title":{"rendered":"Data for fraud: How the biometric system exposes Nigerians to cyber thieves"},"content":{"rendered":"\n

In December last year, an unidentified middle-aged man surfaced on social media, threatening to kill himself at a United Bank for Africa (UBA) Iju branch, Lagos State, alleging that the bank transferred his money to hackers who compromised his account. By Tunde Omolehin. First published in RM Times.<\/a><\/em><\/p>\n\n\n\n

It was gathered that the man had earlier reported an unfamiliar debit transaction of N450, 000 on his account to the bank. The bank asked him to get a court order to prove he had no business with the recipient, who apparently is a hacker.<\/p>\n\n\n\n

\u201cHe came to the bank and complained at the Customers\u2019 desk how his Bank Verification Number (BVN) was compromised by an unknown person but was asked to get a court order, only to be informed upon his return that the transaction had been facilitated in favour of the supposed hacker,\u201d Sanusi Amao, one of the security guards where the incident unfolds told <\/strong>RMTimes<\/em><\/a>.<\/p>\n\n\n\n

\u201cIncidents like this are frequent in the bank hall, but most victims stay silent on it and bear the loss. The fact is that the bank will never take responsibility for any account details that an outsider has compromised.\u201d<\/p>\n\n\n\n

RMTimes<\/a><\/em> further gathered that the victim was neither refunded nor compensated for losing his hard-earned money in such a way.<\/p>\n\n\n\n

But Mrs. Lillian Okon was lucky to have been refunded the sum of N191, 000 after being swapped from her bank account by similar hackers who specialise in cyber fraud.<\/p>\n\n\n\n

\u201cHonestly, I never believed that the money would ever come back to me, but I thank God for the EFCC for being the hope of the common people like me,\u201d she states.<\/p>\n\n\n\n

Mrs. Okon, in January 2021, had received a call from an unknown person who claimed to be an official from the bank she domiciled her account.<\/p>\n\n\n\n

\u201cA male voice requested my bank account details that the Federal Government wanted to credit my account with the Covid-19 loan I had applied for,\u201d she reveals.<\/p>\n\n\n\n

\u201cWithin a minute of giving my details, I started receiving some debit alerts that showed that I authorised some transactions from my account,\u201dAdegoke said.<\/p>\n\n\n\n

The Police in Osogbo, Osun State, later apprehended the suspects following a report by a Point-of-Sale Operator who grew suspicious of their activities. They subsequently handed them over to the EFCC for further investigation.<\/p>\n\n\n\n

Until the incident, Okon said, she had no prior knowledge that a third party could gain access to her bank details without submitting her ATM code and Bank Identification Number, with an acronym known as BVN.<\/p>\n\n\n

\n
\"\"
One of the NIMC Centers in Osun State<\/em><\/figcaption><\/figure>\n<\/div>\n\n\n

\u201cI gave the caller my birth date, full name, and some data about myself, but not that of my bank or secret codes,\u201d she tells RMTimes<\/a><\/em>.<\/em><\/strong><\/p>\n\n\n\n

\u201cThe e-fraud has been massive since the introduction of its cashless banking system in 2014 by the Federal Government. In fact, in most cases, the bank officials are complicit in giving out details of customers to the fraudsters.\u201d according to Zainab Mohammed, a university\u2019s under-graduate studying cyber-security<\/p>\n\n\n\n

In the last few years, both data theft and cyber-crimes have become so widespread that the arrest and prosecution of the suspects have become a major preoccupation of the EFCC.<\/p>\n\n\n\n

They are often referred to as Yahoo boys in Nigerian parlance. The groups were a new breed of young people specialising in defrauding Nigerians and foreigners through various online tricks.<\/p>\n\n\n\n

The prevalence of e-fraud between 2020 and 2021 had the Central Bank of Nigeria issued a fraud alert about the activities of cyber-criminals who are taking advantage of the current coronavirus pandemic to defraud citizens.<\/p>\n\n\n\n

The Apex bank says cyber-criminals were taking advantage of the COVID-19 pandemic to defraud citizens, steal sensitive information or gain unauthorised access to computers or mobile devices using different techniques.<\/p>\n\n\n\n

Fraud Index Rises<\/strong><\/p>\n\n\n\n

According to a report from Consumer Awareness and Financial Enlightenment Initiative, CAFEI, a nonprofit organisation, Nigeria topped the countries prone to cybercrimes.<\/p>\n\n\n\n

The report, released in 2019, projected a total sum of US$6 trillion will be lost by 2030 to cybercrime within and outside Nigeria.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n


The CAFEI also shows that, in 2018, commercial banks in Nigeria have lost a cumulative N15 billion (US$39 million) to electronic fraud and cybercrimes. This was a 537% increase on the N2.37 billion loss recorded in 2017. Over 17 600 bank customers and depositors lost N1.9 billion to cyber fraud in 2018.<\/p>\n\n\n\n

Similar losses were also revealed by PwC\u2019s Global Economic Crime and Fraud Survey 2020, which showed that the total cost of cybercrimes in Nigeria is worth about $42 billion.<\/p>\n\n\n\n

Aside from that, investigative data from the EFCC in Lagos state for the second quarter of 2021 indicated that Lekki District was the preferred location for many cyber fraud syndicates.<\/p>\n\n\n\n

According to the report, between April and June 2021, the command\u2019s Advance Fee Fraud and Cyber Crime Sections recorded 402 internet-related fraud arrests.<\/p>\n\n\n\n

Unsecure Data?<\/strong><\/p>\n\n\n\n

A financial expert, Dare Omoluabi, says the mass e-registration of citizens using biometrics systems via facial photographs, fingerprints, and the issuance of a unique identification number may have encouraged fraud related to falsely using consumers\u2019 bank accounts.<\/p>\n\n\n\n

\u201cIf you have been following data on fraud-related cases, you will agree that all can be traced to individuals\u2019 biometric data flipping into the hands of these cyber-criminals and fraudsters,\u201d Omoluabi asserts.<\/p>\n\n\n\n

\u201cThe moments they can lay hold on such data like your National Identification Number (NIN) or Bank Verification Number (BVN), then rest assured that everything about you can be manipulated,” emphasised Omoluabi.<\/p>\n\n\n\n

However, he expressed concern over requesting the Bank Verification Number (BVN) of applicants as a prerequisite for the NIN registration.<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

RMTimes<\/a><\/em> recall that since the introduction of cashless policy via National Identification Numbers in 2014, and subsequent mandatory use of Bank Verification Numbers for online transactions, there have been ever-growing perpetrators of fraud in the finance sector in Nigeria.<\/p>\n\n\n\n

The Federal Government had mandated the National Identification Management Commission (NIMC) by the NIMC Act No. 23 of 2007 to establish, own, operate, maintain and manage the National Identity Database in Nigeria.<\/p>\n\n\n\n

It also charged the Commission to register persons covered by the act, assign a unique NIN, and issue General Multi-Purpose Cards (GMPC) to those who are citizens of Nigeria and others legally living in the country.<\/p>\n\n\n\n

But Joshua Olufemi, Founder and Executive Director of Dataphyte, and co-researcher of \u201cSecurity Playbook of Digital Authoritarianism in Nigeria\u201d, believes there is evidence that large volumes of personal data, \u201cincluding biometric information stored on multiple centralized databases, have been frequently compromised.<\/p>\n\n\n\n

\u201cFor instance, when you register for and purchase a new SIM card and insert it into your phone, walk into a banking hall to open an account, register your business with the tax authorities, and then proceed to register for your National Identity Number (NIN).<\/p>\n\n\n\n

\u201cYou avail people in these private and public organisations the opportunity to track your physical locations and movements, to track and stop your financial transactions, to track and intercept your communications, to block your online content and communications.<\/p>\n\n\n\n

\u201cThere is evidence that large volumes of personal data, including biometric information stored on multiple centralized databases, have been frequently compromised, increasing citizens\u2019 exposure to privacy intrusions, targeted advertisements, identity fraud, and blackmail.\u201d Olufemi told RMTimes<\/a><\/em>.<\/em><\/strong><\/p>\n\n\n

\n
\"\"
Applicants waiting for their turn to be documented at NIMC center in Sokoto State<\/figcaption><\/figure>\n<\/div>\n\n\n

Getting a NIN from the NIMC offices across the country is not something you would do without getting yourself prepared for it, says Mr. Segun during a cross-section interview with some awaiting NIN applicants in Sokoto state.<\/p>\n\n\n\n

The 35-yr-old who appeared frustrated in a long queue says: \u201cYou have to commit your time, money and energy and in the end may not get it at ease.\u201d<\/p>\n\n\n\n

\u201cThis is about the fourth time I am doing SIM re-registration and verification within the same year; either they call me to say the registration wasn\u2019t successful or something else,\u201d he laments.<\/p>\n\n\n\n

\u201cYet fraudsters are still committing different crimes using SIM without hiding the lines. When you report such criminal acts, it is still difficult for the security agents to fish out the fraudsters.\u201d<\/p>\n\n\n\n

Unease, Compromised<\/strong><\/p>\n\n\n\n

RMTimes<\/em> <\/a>investigation reveals different prices for \u2018capturing\u2019 alone and \u2018capturing with printout\u2019. Getting a slip of Identify card is not without a fee illegally attached to it by NIMC officials in most biometric collections in some locations visited by RMTimes<\/a><\/em>.<\/em><\/strong><\/p>\n\n\n\n

Many applicants seeking to obtain NIN allege the sale of the registration form at unofficial fees was a day-to-day business among officials who use security guards as \u2018middlemen\u2019 or \u2018agents\u2019 to avoid being caught in the act.<\/p>\n\n\n

\n
\"\"
Applicants awaiting their turn for NIN biomteric data collection<\/figcaption><\/figure>\n<\/div>\n\n\n

\u201cFor processing, they collect between N5, 500 and N6, 000 from us,\u201d says an applicant who spoke on the condition of anonymity.<\/p>\n\n\n\n

An agent who approached the reporter to ask if he was interested explains that the cash charges are to fast-track the process through extra efforts.<\/p>\n\n\n\n

\u201cThe charges are to buy fuel for the generator and ensure that we subscribe to a faster internet connection rather than waiting for the system provided by the Government,\u201d he states.<\/p>\n\n\n\n

One applicant at the NIMC headquarters in Osogbo Osun State, Adekemi Sule describes the process as cumbersome. \u201cSome people come to the centre as early as 6 am to queue,\u201d she observes.<\/p>\n\n\n\n

The story is the same in other centres visited within the metropolis. There is also an allegation that the NIMC officials collected between N2, 500 and N3, 000 from intending registrants to start the registration process.<\/p>\n\n\n\n

But the spokesperson of NIMC, Kayode Adegoke, said the Commission will always ensure maximum security of its systems and database because of the critical nature of the identity data that the Commission collects, manages and maintains as critical assets for the country.<\/p>\n\n\n\n

\u201cWe assured members of the public that it would continue to uphold the highest ethical standards in data security on behalf of the federal government and ensure compliance with data protection and privacy regulations,” he said.<\/p>\n\n\n\n

Data Protection<\/strong><\/p>\n\n\n\n

Experts say Nigerians are unaware that data protection right is the process of safeguarding important information from corruption, compromise, or losses incurred.<\/p>\n\n\n\n

\u201cLack of adequate knowledge about what data protection entails is no doubt making Nigerians\u2019 data vulnerable to breach,\u201d says Dr Nafiudeen Adetutu, a data scientist at the Ladoke Akintola University of Technology Ogbomosho, Oyo State.<\/p>\n\n\n\n

\u201cMany Nigerians still don\u2019t take the protection of their data privacy seriously. This explains why their data and personal information are breached by some dubious companies and individuals whose custodies the data is kept.\u201d<\/p>\n\n\n

\n
\"\"
Sourced- Dataphyte<\/figcaption><\/figure>\n<\/div>\n\n\n

\u201cAnd this is one of the reasons experts said every Nigerian should be fully aware of data protection and privacy in order to prevent these online criminals,\u201d he stresses.<\/p>\n\n\n\n

\u201cThe citizens have to be able to apply Section 6 (a,c) of the National Information Technology Development Agency- NITDA Act 2007 in pursuit of the data rights infringement which is the current national law on data protection in Nigeria as of today.\u201d<\/p>\n\n\n\n

The regulation aims to protect the right to privacy, create the right environment for digital transactions and job creation, and improve information management practices in Nigeria.<\/p>\n\n\n\n

Deji Idowu, a security expert, also advised that banks should ensure that they put the right personnel in charge of their sensitive online departments to ensure that no foreign body has access to it.<\/p>\n\n\n\n

\u201cSecurity against fraud in banks is a holistic battle. Banks should not only ensure that competent people are employed to man their IT department, but they should also continue to ensure that those employed are dutiful and sincere,\u201d he adds.<\/p>\n\n\n\n

Adejoh Moses, a Chartered Accountant, says customers were culturally unfamiliar with security issues around digital transactions.<\/p>\n\n\n\n

\u201cEven well-educated people run the risk of falling victim to social engineering and identity theft traps in this country,\u201d he observes.<\/p>\n\n\n\n

\u201cBank institutions must go beyond educating customers on the protection of crucial information to actual data protection and integrity amongst operators and stakeholders. Customer education is required in countering security threats in digital payments.\u201d<\/p>\n\n\n\n

The accountant points out: \u201cthe various channels collecting citizens\u2019 biometric data such as Private Businesses, Banks and Telecommunication Service Providers, and Foreign Embassies must ensure that the process of collecting or gathering citizen\u2019s biometric data is secure and not compromised.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"

In December last year, an unidentified middle-aged man surfaced on social media, threatening to kill himself at a United Bank for Africa (UBA) Iju branch, Lagos State, alleging that the bank transferred his money to hackers who compromised his account. By […]<\/p>\n","protected":false},"author":1,"featured_media":5226,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[411,402],"tags":[],"class_list":["post-5225","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-africa-us-china","category-projects"],"_links":{"self":[{"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/posts\/5225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/comments?post=5225"}],"version-history":[{"count":1,"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/posts\/5225\/revisions"}],"predecessor-version":[{"id":5227,"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/posts\/5225\/revisions\/5227"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/media\/5226"}],"wp:attachment":[{"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/media?parent=5225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/categories?post=5225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.projects.88designs.co.za\/acsus\/wp-json\/wp\/v2\/tags?post=5225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}