The Association of Corporate Communication and Marketing Professionals in Banks (ACAMB) has urged bank customers to remain vigilant against phishing scams and other forms of cyber fraud, warning that criminals are using fake bank alerts, cloned websites and impersonation accounts to steal sensitive financial information.
The warning follows a fraudulent text message impersonating various banks, which FactCheckAfrica debunked after finding that the link contained in the message led to a cloned internet banking website designed to steal customers’ login credentials, Bank Verification Numbers (BVNs), card details and transaction PINs.
The incident highlights the growing risks associated with digital banking fraud in Nigeria. In June, Wema Bank suspended its engagements on X, formerly Twitter, amid reports of more than 70 fake accounts impersonating the bank and its ALAT platform. In August, Zenith Bank Plc disclosed that it was investigating unauthorised access to customer data linked to a global cyberattack.
ACAMB President, Jide Sipe, said fraudsters were increasingly adopting sophisticated methods to impersonate trusted banking brands and obtain customers’ personal information, making fraudulent communications difficult to distinguish from legitimate messages.
“When a scam message carries your name, your phone number or your bank’s logo, it looks real. That is exactly why customers must slow down. No bank in Nigeria will ask you to confirm your PIN, password, OTP or BVN through a link,” Sipe said.
He acknowledged efforts by banks to strengthen fraud detection and customer protection, as well as regulatory measures introduced by the Central Bank of Nigeria through its mandatory cybersecurity self-assessment guide.
However, Sipe stressed that these measures must be complemented by customer awareness and vigilance, particularly when handling requests for sensitive banking information.
“Banks can strengthen their security systems, but fraudsters continue to find ways to exploit unsuspecting customers. We must all remain vigilant. Always pause, verify requests through official channels and report anything suspicious before taking action,” he added.
The ACAMB president urged customers to avoid clicking links in unsolicited messages asking them to verify, reactivate or secure their bank accounts.
He also warned customers against disclosing their personal identification numbers (PINs), passwords, one-time passwords (OTPs), card verification values (CVVs) or BVNs in response to suspicious requests.
According to him, customers should verify such requests directly with their banks through official mobile applications, verified social media accounts or published customer service numbers.
He advised anyone who had entered banking details on a suspicious website to contact their bank immediately to secure their account and block affected cards where necessary.
ACAMB reaffirmed its commitment to working with member banks, regulators and the media to raise awareness of cyber fraud and promote safer digital banking practices as the use of online financial services continues to expand across Nigeria.