Loading story…
Nigeria is strengthening its cybersecurity posture as cybercrime becomes more profitable even while reported fraud cases decline. Authorities are preparing a new national cybersecurity framework expected to mandate incident reporting, set minimum cybersecurity investment requirements, and expand public-private collaboration. The push comes as organizations in Nigeria faced an average of 4,361 attempted cyberattacks per week in June 2026, making the country one of Africa’s most targeted environments and often exposing victims to threat levels roughly double the global average.
Financial losses have risen sharply, with digital-payment fraud reaching ₦25.85 billion in 2025, driven in part by insider-enabled schemes including SIM swap fraud, account compromise, and phishing. Nigeria already requires breach notification within 72 hours under its 2023 Data Protection Act, but enforcement and compliance remain uneven, especially among smaller organizations with limited training and security resources. Officials and industry observers say stronger enforcement, better reporting, and improved defenses against credential theft are critical to reducing cybercriminal profits in the country’s expanding digital economy.
See the reporting duties and controls this puts on the clock.
4 events from the most recent confirmed update back to the earliest known activity.
Nigerian authorities are developing a new cybersecurity framework intended to mandate incident reporting, set minimum cybersecurity investment levels, and expand public-private collaboration. The move is presented as part of a broader effort to strengthen the country's cybersecurity posture as cybercrime losses rise.
Organizations in Nigeria experienced an average of 4,361 attempted cyberattacks per week in June 2026, according to Check Point Software. The references say this made Nigeria the second most targeted country in Africa, with threat levels often about twice the global average.
Nigeria recorded ₦25.85 billion in digital-payment fraud losses in 2025, despite a decline in the total number of reported fraud incidents. The reporting attributes much of the impact to insider involvement, SIM swap fraud, account compromise, and phishing.
Nigeria's 2023 Data Protection Act established a requirement for breach notification within 72 hours. The references note that enforcement capacity and business compliance have remained weak.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
UK fraud losses climbed sharply in the first half of 2026 as criminals increasingly used social media platforms rather than email to find and manipulate victims. Reporting cited a suspected **£153 million HMRC tax fraud** linked to TikTok, major fraud exposure on Meta platforms highlighted by Lloyds Bank, and record **£221.5 million** in UK investment scam losses reported by UK Finance, underscoring how platform-specific lures, impersonation, and AI-enabled scaling are reshaping online fraud. Authorities also linked the trend to cross-border criminal operations targeting UK victims through fake social media accounts. The UK National Crime Agency said fraud suspects were arrested in Nigeria after intelligence sharing tied to an investment scam operation, illustrating how overseas networks used fraudulent Facebook personas and other social channels to run scams against people in the UK while law enforcement pursued international disruption efforts.
Jul 29, 2026
INTERPOL’s **African Cyberthreat Assessment Report 2026** says artificial intelligence is now linked to **55% of reported cybercrime across Africa**, helping criminals scale scams, credential harvesting, and automated social engineering while making attacks harder to detect. The report says cybercrime losses on the continent rose from **$192 million** in 2024 to **$484 million**, with major threats including **business email compromise**, romance scams, **deepfake-enabled sextortion**, synthetic identity fraud, ransomware, and pervasive **mobile money fraud**; nearly all surveyed countries reported mobile-money-related abuse, and **72%** said scam centers were operating within their borders. INTERPOL described the threat landscape as an industrialized, cross-border ecosystem tied in some cases to **human trafficking** and transnational organized crime, with regional patterns ranging from mobile money fraud and ransomware in East Africa to prolific BEC and romance scams in Central and West Africa. The agency said weak real-time information sharing among banks, telecoms, and law enforcement is being exploited by criminals, but noted some defensive gains: **17 countries** updated cybercrime laws, Tanzania reported a **19%** drop in fraud attempts after stricter SIM registration enforcement, Senegal launched an online reporting platform for digital violations affecting children, and four major cybercrime operations in 2025 led to **more than 1,500 arrests** and **over $100 million recovered**.
Aug 5, 2026
INTERPOL and industry reporting warn that transnational fraud networks are becoming more sophisticated and more profitable by combining **AI-enabled deception**, crypto abuse, and organized scam-center operations. INTERPOL’s 2026 Global Financial Fraud Threat Assessment says AI-enhanced fraud is **4.5 times** more profitable than traditional methods and links financial fraud to broader criminal ecosystems including cybercrime, human trafficking, and terrorist financing. Researchers and investigators described tools such as **ProKYC** that can forge identity documents, generate deepfaked liveness checks, create selfie-with-ID images, and tailor verification artifacts to defeat KYC controls, while a cybercrime forum vendor separately advertised fraudulently verified accounts on exchanges including `Bitget`, `Bitvavo`, and `Kraken` with European IBAN and SEPA capabilities, underscoring how criminals are abusing rather than breaching financial platforms. Authorities are responding with wider enforcement actions against the infrastructure behind these scams. In India, Goa police arrested seven suspects, questioned 24 others, raided more than 40 locations across 11 states, and identified **313 suspected mule accounts** in an investigation spanning investment scams, sextortion, parcel fraud, fake hotel bookings, and so-called digital arrest schemes. In Cambodia, officials said raids across at least five provinces led to more than **1,000 arrests** tied to cybercrime and online scam compounds, part of a broader regional crackdown on an industry the UN says generates billions of dollars annually and has been linked to trafficked workers and abuse. INTERPOL said fraud-related Notices and Diffusions have risen **54% since 2024**, with support in more than **1,500** transnational fraud cases involving **$1.1 billion** in losses, and it is launching **Operation Shadow Storm** to target scam-centre-linked fraud, cybercrime, and human trafficking.
Aug 12, 2026