Regional security research
Cyber threats in Nigeria
Research suspicious bank messages, supplier payment changes and unsolicited links with evidence-first workflows for teams and individuals in Nigeria.
Verify payment and account requests
If a message claims a bank account needs urgent action, open the genuine banking app or obtain support details independently. Confirm changes to supplier payment instructions through an established contact route. Do not disclose passwords or one-time codes to someone contacting you unexpectedly.
Review messages before forwarding
A familiar WhatsApp contact may be forwarding an unverified claim or using a compromised account. Preserve the message and timestamp, inspect the destination without opening it, and avoid forwarding a live suspicious URL to more people. Guardian can add evidence but cannot authenticate a sender.
Find appropriate reporting channels
Use your bank or affected service for account-specific action. For national cybersecurity guidance, consult ngCERT at cert.gov.ng and verify the current reporting process. Do not treat this page as an emergency reporting service or infer Nigerian victim counts from a domain suffix.
Check evidence before acting
Check a suspicious link, message or screenshot text with Guardian. Remove private tokens and personal information before submission. A low-risk result is not a guarantee of safety.
Review source-linked threat feeds and investigate the indicator. Region tags describe available evidence or inference; they do not establish victim location, operator identity or complete national coverage.
Further reading
Practical research guides · Africa-tagged phishing observations this week
Nigeria · Kenya · UAE · Saudi Arabia