Bank customers have been warned against clicking suspicious links or sharing sensitive financial information online as fraudsters increasingly use fake bank alerts, cloned websites and impersonation accounts to steal banking credentials.
The warning was issued by the Association of Corporate Communication and Marketing Professionals in Banks (ACAMB) following the circulation of a fraudulent text message impersonating banks.
FactCheckAfrica debunked the message, finding that its link led to a cloned internet banking website designed to harvest customers’ login credentials, Bank Verification Numbers (BVNs), card details and transaction PINs.
The incident highlights growing concerns over digital banking fraud, with previous cases involving fake social media accounts and reported unauthorised access to customer data.
In June, Wema Bank suspended its engagements on X, formerly Twitter, amid reports of more than 70 fake accounts impersonating the bank and its ALAT platform.
In August, Zenith Bank Plc disclosed that it was investigating unauthorised access to customer data linked to a global cyberattack.
ACAMB President, Jide Sipe, said fraudsters were adopting increasingly sophisticated methods to impersonate trusted banking brands, making it harder for customers to distinguish fraudulent messages from legitimate communications.
“When a scam message carries your name, your phone number or your bank’s logo, it looks real. That is exactly why customers must slow down. No bank in Nigeria will ask you to confirm your PIN, password, OTP or BVN through a link,” Sipe said.
He acknowledged efforts by banks to strengthen fraud detection and customer protection, as well as regulatory measures introduced by the Central Bank of Nigeria, including its mandatory cybersecurity self-assessment guide.
However, Sipe stressed that institutional safeguards must be supported by customer awareness and vigilance to reduce the risk of fraud.
“Banks can strengthen their security systems, but fraudsters continue to find ways to exploit unsuspecting customers. We must all remain vigilant. Always pause, verify requests through official channels and report anything suspicious before taking action,” he said.
ACAMB advised customers to avoid clicking links in unsolicited messages asking them to verify, reactivate or secure their accounts.
It also warned against disclosing personal identification numbers, passwords, one-time passwords, card verification values or BVNs in response to suspicious requests.
Customers were urged to verify such communications through their banks’ official mobile applications, verified social media accounts or published customer service numbers.
Those who have entered their banking details on suspicious websites should contact their banks immediately to secure their accounts and block affected cards where necessary.
ACAMB said it would continue working with member banks, regulators and the media to raise awareness of cyber fraud and promote safer digital banking practices as the use of online financial services expands across Nigeria.