CBN Alerts Public to Fraudulent Messages, Cybersecurity Hack Attempts

The Central Bank of Nigeria has raised the alarm over a fresh wave of fraudulent messages, emails, and online communications falsely purporting to originate from or be linked to the apex bank, warning that the schemes are designed to hack into personal accounts and steal sensitive information.

In an advisory issued on April 21, 2026, the CBN’s spokesperson, Hakama Sidi-Ali, disclosed that fraudsters are circulating deceptive emails, text messages, and digital content falsely linked to the bank. These messages are crafted to mislead the public, often pushing false claims about the bank’s leadership, licensing processes, and policy decisions all in a bid to trick recipients into clicking malicious links or surrendering sensitive data.

The CBN stressed that such fraudulent communications are intended to hack personal accounts, and strongly advised members of the public to refrain from clicking links or sharing personal information on suspicious websites.

The bank also stressed that it does not request personal or financial information through unofficial channels, urging Nigerians to treat any such communication as fraudulent.

The CBN confirmed that it has an official website, and advised the public to verify the authenticity of all CBN communications through the official website and recognised media outlets, and to report any suspected fraudulent site, email, or message to law enforcement authorities.

The apex bank reaffirmed its full commitment to safeguarding the Nigerian financial system, adding that it will continue to strengthen its cybersecurity frameworks in collaboration with relevant agencies to protect the public against digital fraud.

The alert comes amid a broader crackdown on cyber threats targeting Nigeria’s financial sector. According to PM News Nigeria Earlier this month, the CBN issued a directive mandating all deposit money banks to complete a Cybersecurity Self-Assessment within three weeks, while other regulated financial institutions were given five weeks to comply, as part of intensified efforts to evaluate and strengthen cyber resilience across the sector.

Share this post :

Facebook
Twitter
LinkedIn
Pinterest
Latest News
Categories

Subscribe our newsletter

Subscribe to our newsletter for latest updates and stay notified.