{"id":16908,"date":"2026-11-13T13:02:10","date_gmt":"2026-11-13T13:02:10","guid":{"rendered":"https:\/\/globalnigerianews.com\/index.php\/2026\/11\/13\/cyberattacks-turned-october-into-a-costly-month-for-nigerian-banks\/"},"modified":"2026-11-13T13:02:10","modified_gmt":"2026-11-13T13:02:10","slug":"cyberattacks-turned-october-into-a-costly-month-for-nigerian-banks","status":"publish","type":"post","link":"https:\/\/globalnigerianews.com\/index.php\/2026\/11\/13\/cyberattacks-turned-october-into-a-costly-month-for-nigerian-banks\/","title":{"rendered":"Cyberattacks turned October into a costly month for Nigerian banks"},"content":{"rendered":"<div>\n<p class=\"wp-block-paragraph\">In early October, a wave of cyberattacks, leading to fraud losses, hit several Nigerian banks and financial institutions, potentially costing billions of naira in customer funds, according to several sources with direct knowledge of the matter.<\/p>\n<p class=\"wp-block-paragraph\">The attacks, the sources noted, affected institutions that rely on external technology providers to run critical financial services, including core banking infrastructure. In one incident, a vendor providing core banking services to financial institutions was reportedly compromised at the system level on October 1. The vendor is one of Africa\u2019s biggest fintech companies.<\/p>\n<p class=\"wp-block-paragraph\">TechCabal could not immediately establish how many attacks happened, how much money was lost, or whether the incidents were connected. But according to their respective financial reports, three of the country\u2019s biggest banks, <a href=\"https:\/\/doclib.ngxgroup.com\/Financial_NewsDocs\/48345_ACCESS_HOLDINGS_PLC-_QUARTER_2_-_FINANCIAL_STATEMENT_FOR_2026_FINANCIAL_STATEMENTS_NOVEMBER_2026.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Access Holdings Plc<\/a>, <a href=\"https:\/\/doclib.ngxgroup.com\/Financial_NewsDocs\/47958_GUARANTY_TRUST_HOLDING_COMPANY_PLC-_QUARTER_2_-_FINANCIAL_STATEMENT_FOR_2026_FINANCIAL_STATEMENTS_SEPTEMBER_2026.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Guaranty Trust Holding Company Plc (GTCO)<\/a>, and <a href=\"https:\/\/doclib.ngxgroup.com\/Financial_NewsDocs\/48062_ZENITH_BANK_PLC-_QUARTER_2_-_FINANCIAL_STATEMENT_FOR_2026_FINANCIAL_STATEMENTS_OCTOBER_2026.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Zenith Bank<\/a> collectively reported\u00a0 \u20a62.74 billion ($2.03 million) in fraud losses for the first six months of 2026. GTCO recorded the sharpest year-on-year increase, with fraud losses up by <a href=\"https:\/\/doclib.ngxgroup.com\/Financial_NewsDocs\/47958_GUARANTY_TRUST_HOLDING_COMPANY_PLC-_QUARTER_2_-_FINANCIAL_STATEMENT_FOR_2026_FINANCIAL_STATEMENTS_SEPTEMBER_2026.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">450.24%<\/a>.\u00a0\u00a0<\/p>\n<div id=\"tc-fraud-visualizer\" style=\"font-family: 'Open Sans', sans-serif; max-width: 700px; margin: 24px auto; background: #FFFFFF; border: 1px solid #F6F6F6; border-radius: 8px; padding: 32px; box-shadow: 0 12px 24px -12px rgba(0,0,0,0.1); color: #151515; position: relative;\">\n<p>  <!-- Header Section --><\/p>\n<div style=\"margin-bottom: 40px;\">\n    <span style=\"display: inline-block; background: #24292F; color: #FFFFFF; font-size: 0.75rem; font-weight: 700; padding: 4px 10px; border-radius: 4px; margin-bottom: 12px; text-transform: uppercase; letter-spacing: 0.05em;\">Data Story<\/span><\/p>\n<h3 style=\"margin: 0 0 8px 0; font-weight: 700; font-size: 1.75rem; line-height: 1.2; color: #151515;\">The Concentration of Bank Fraud<\/h3>\n<p style=\"margin: 0; font-weight: 400; font-size: 1rem; line-height: 1.6; color: #4B5563; max-width: 550px;\">\n      Three top-tier banks absorbed <strong>\u20a62.74 billion<\/strong> in fraud losses in just six months, driven by an unprecedented surge at GTCO.\n    <\/p>\n<\/p><\/div>\n<p>  <!-- Interactive SVG Chart --><\/p>\n<div style=\"position: relative; width: 100%; height: auto;\" role=\"graphics-document\" aria-label=\"Column chart comparing 2025 industry fraud losses to H1 2026 top-tier bank losses.\">\n<p>    <!-- SVG ViewBox mapped to exact coordinates for perfect scaling --><br \/>\n    <svg viewbox=\"0 0 600 320\" style=\"width: 100%; height: auto; overflow: visible;\"><\/p>\n<p>      <!-- Y-Axis Grid Lines & Labels -->\n      <g style=\"font-size: 0.75rem; fill: #6B7280; font-family: 'Open Sans', sans-serif;\">\n        <!-- 30B Line -->\n        <line x1=\"40\" y1=\"40\" x2=\"600\" y2=\"40\" stroke=\"#F6F6F6\" stroke-width=\"1.5\" stroke-dasharray=\"4 4\"><\/line>\n        <text x=\"30\" y=\"44\" text-anchor=\"end\">\u20a630B<\/text><\/p>\n<p>        <!-- 20B Line -->\n        <line x1=\"40\" y1=\"120\" x2=\"600\" y2=\"120\" stroke=\"#F6F6F6\" stroke-width=\"1.5\" stroke-dasharray=\"4 4\"><\/line>\n        <text x=\"30\" y=\"124\" text-anchor=\"end\">\u20a620B<\/text><\/p>\n<p>        <!-- 10B Line -->\n        <line x1=\"40\" y1=\"200\" x2=\"600\" y2=\"200\" stroke=\"#F6F6F6\" stroke-width=\"1.5\" stroke-dasharray=\"4 4\"><\/line>\n        <text x=\"30\" y=\"204\" text-anchor=\"end\">\u20a610B<\/text><\/p>\n<p>        <!-- Baseline (0) -->\n        <line x1=\"40\" y1=\"280\" x2=\"600\" y2=\"280\" stroke=\"#151515\" stroke-width=\"2\"><\/line>\n        <text x=\"30\" y=\"284\" text-anchor=\"end\">0<\/text>\n      <\/g><\/p>\n<p>      <!-- Data Bars with hover effects -->\n      <g class=\"tc-bars\">\n        <!-- 2025 Industry Total (Value: 25.85, Height: 206.8) -->\n        <rect x=\"120\" y=\"73.2\" width=\"120\" height=\"206.8\" fill=\"#24292F\" rx=\"4\" class=\"bar\" style=\"transition: opacity 0.2s; cursor: pointer;\" onmouseover=\"this.style.opacity='0.8'\" onmouseout=\"this.style.opacity='1'\"><\/rect>\n        <text x=\"180\" y=\"60\" text-anchor=\"middle\" font-size=\"1rem\" font-weight=\"700\" fill=\"#24292F\">\u20a625.85B<\/text>\n        <text x=\"180\" y=\"305\" text-anchor=\"middle\" font-size=\"0.875rem\" font-weight=\"600\" fill=\"#151515\">2025 Industry Total<\/text><\/p>\n<p>        <!-- H1 2026 Big Three (Value: 2.74, Height: 21.92) -->\n        <rect x=\"360\" y=\"258.08\" width=\"120\" height=\"21.92\" fill=\"#EA2D2E\" rx=\"4\" class=\"bar\" style=\"transition: opacity 0.2s; cursor: pointer;\" onmouseover=\"this.style.opacity='0.8'\" onmouseout=\"this.style.opacity='1'\"><\/rect>\n        <text x=\"420\" y=\"245\" text-anchor=\"middle\" font-size=\"1rem\" font-weight=\"700\" fill=\"#EA2D2E\">\u20a62.74B<\/text>\n        <text x=\"420\" y=\"305\" text-anchor=\"middle\" font-size=\"0.875rem\" font-weight=\"600\" fill=\"#151515\">H1 2026 (Top 3)<\/text>\n      <\/g><\/p>\n<p>      <!-- Editorial Annotation for the GTCO Spike -->\n      <g style=\"font-family: 'Open Sans', sans-serif;\">\n        <!-- Connecting Line -->\n        <path d=\"M 420 225 L 420 160 L 460 160\" fill=\"none\" stroke=\"#EA2D2E\" stroke-width=\"1.5\"><\/path>\n        <!-- Annotation Badge -->\n        <rect x=\"460\" y=\"142\" width=\"135\" height=\"36\" fill=\"#EA2D2E\" rx=\"4\"><\/rect>\n        <text x=\"468\" y=\"165\" fill=\"#FFFFFF\" font-size=\"0.75rem\" font-weight=\"700\">GTCO UP 450.24%<\/text>\n      <\/g>\n    <\/svg><\/p><\/div>\n<p>  <!-- Footer & Action --><\/p>\n<div style=\"margin-top: 32px; border-top: 1px solid #F6F6F6; padding-top: 16px; display: flex; justify-content: space-between; align-items: center; flex-wrap: wrap; gap: 12px;\">\n    <span style=\"font-size: 0.75rem; color: #6B7280;\"><br \/>\n      <strong>Source:<\/strong> NIBSS (2025) &amp; H1 2026 Financial Reports<br \/>\n    <\/span><br \/>\n    <span style=\"font-size: 0.75rem; font-weight: 600; color: #151515; letter-spacing: 0.05em; text-transform: uppercase;\"><br \/>\n      TechCabal Data<br \/>\n    <\/span>\n  <\/div>\n<\/div>\n<p class=\"wp-block-paragraph\">The Financial Institutions Training Centre (FITC) reported <a href=\"https:\/\/fitc-ng.com\/wp-content\/uploads\/2026\/05\/Q4-2025-FF-Report.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">19,719<\/a> fraud cases in the fourth quarter of 2025, a 34.2% increase from the previous quarter.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">The attacks reflect the growing scale of security risks facing Nigeria\u2019s financial services industry, where rising cyber threats and fraud incidents expose weaknesses in how institutions protect customer funds and critical infrastructure. In Q4, 2025, reported fraud loss surged by 575.7% to <a href=\"https:\/\/fitc-ng.com\/wp-content\/uploads\/2026\/05\/Q4-2025-FF-Report.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">\u20a65.26 billion<\/a> ($3.89 million), according to FITC.<\/p>\n<p class=\"wp-block-paragraph\">These risks are amplified by the industry\u2019s reliance on shared technology providers to process transactions, manage customer accounts and provide lending infrastructure. A breach at one provider could expose multiple financial institutions connected to its systems.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">\u201cThe Bank maintains ongoing supervisory oversight of cybersecurity incidents affecting regulated financial institutions,\u201d a Central Bank of Nigeria spokesperson told TechCabal in an emailed response on Tuesday. \u201cThe Nigerian financial system remains resilient, and the Bank\u2019s supervisory and cybersecurity frameworks remain in force.\u201d\u00a0<\/p>\n<p class=\"wp-block-paragraph\">A top executive at one of the country\u2019s payment gateways, who asked not to be named to discuss sensitive matters, described October as \u201cBlack October,\u201d saying the attacks affected businesses across the financial services industry. Another source at an investment bank told TechCabal that staff were warned not to open external emails amid heightened cyber threats during the month.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">\u201cIt eventually ends up at your door,\u201d the payments gateway executive said.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">A major microfinance bank was also among the affected institutions, according to a source familiar with the incident. The bank reportedly suffered financial losses and a system disruption that forced it to seek temporary alternatives to keep its services running. It has since hired a chief security officer, the source added.<\/p>\n<p class=\"wp-block-paragraph\">Nigeria Inter-Bank Settlement System (NIBSS), the country\u2019s payments switch, did not respond to a request for comments.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">\u201cEveryone has been attacked. People have lost money,\u201d Adedeji Olowe, founder and chief executive officer of Lendsqr, a Nigerian lending technology company, told TechCabal.<\/p>\n<p class=\"wp-block-paragraph\">In <a href=\"https:\/\/www.linkedin.com\/posts\/adedejiolowe_since-last-friday-lendsqr-has-been-battling-ugcPost-7523711978721243136-DIXW\/?utm_source=social_share_send&amp;utm_medium=member_desktop_web&amp;rcm=ACoAAC0l9n8BD4tEkrywMriZ73-2O_lyCc1IwzY\" target=\"_blank\" rel=\"noreferrer noopener\">a LinkedIn post on November 4,<\/a> Olowe said security testing of Lendsqr\u2019s platform uncovered about 800 vulnerabilities and that they \u201cspent three weeks fixing them.\u201d He did not disclose the vulnerabilities\u2019 severity, how many were fixed, or whether any were exploited.\u00a0<\/p>\n<h2 class=\"wp-block-heading\"><strong>Nigerian banks\u2019 growing fraud losses<\/strong><\/h2>\n<p class=\"wp-block-paragraph\">The reported attacks come against a backdrop of persistent fraud losses across Nigeria\u2019s financial system.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">Financial institutions recorded \u20a625.85 billion ($19.16 million) in actual fraud losses in 2025, according to data from the <a href=\"https:\/\/www.cbn.gov.ng\/Out\/2026\/CCD\/Nigeria%20Payments%20System%20Vision%202028.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Nigeria Inter-Bank Settlement System (NIBSS)<\/a>. This reflects a 50.55% decline from 2024, but in 2024, 60.53% of attempted frauds eventually became losses. That number jumped to <a href=\"https:\/\/www.cbn.gov.ng\/Out\/2026\/CCD\/Nigeria%20Payments%20System%20Vision%202028.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">68.81%<\/a> in 2025.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">The Central Bank of Nigeria (CBN) has also warned about rising fraud and money-laundering risks as more financial services move online.<\/p>\n<p class=\"wp-block-paragraph\">\u201cThe payments ecosystem faces rising SIM swap incidents, account takeover fraud, insider collusion, and social engineering,\u201d the CBN said in its <a href=\"https:\/\/www.cbn.gov.ng\/Out\/2026\/CCD\/Nigeria%20Payments%20System%20Vision%202028.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Nigeria Payments System Vision 2028<\/a>.<\/p>\n<p class=\"wp-block-paragraph\">The apex bank has introduced measures to strengthen fraud prevention and make financial institutions more accountable. In its <a href=\"https:\/\/www.cbn.gov.ng\/Out\/2024\/BSD\/CBN%20Risk-Based%20Cybersecurity%20Framework%20for%20DMBs%20and%20PSBs_2024.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">2024 Risk-Based Cybersecurity Framework<\/a>, the CBN asked banks and payment service banks to assess the security of third-party providers through due diligence, routine audits, and ongoing monitoring.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">In March 2026, it <a href=\"https:\/\/techcabal.com\/2026\/03\/12\/cbn-wants-ai-to-fight-money-laundering\/\" target=\"_blank\" rel=\"noreferrer noopener\">formally recognised artificial intelligence<\/a> as a tool for fighting financial crime. But the effectiveness of those measures depends partly on whether institutions report incidents promptly and share information that could help others identify similar threats.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Gaps in industry reporting\u00a0<\/strong><\/h2>\n<p class=\"wp-block-paragraph\">Despite the scale of fraud in Nigeria\u2019s financial system, financial institutions have historically been reluctant to publicly disclose security breaches and fraud incidents. For an industry built on interconnected payment rails and shared technology providers, silence can become a security risk in itself.<\/p>\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/nibss-plc.com.ng\/wp-content\/uploads\/2024\/04\/2023-Annual-Fraud-Landscape.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">NIBSS\u2019s 2023 Annual Fraud Landscape<\/a> found that only 60 of the 163 financial institutions it profiled reported fraud incidents that year, a 37% compliance rate. The remaining 103 institutions did not report cases. NIBSS said failure to report fraud incidents violated the <a href=\"https:\/\/www.scribd.com\/document\/884305544\/circular-on-the-establishment-of-industry-fraud-desk\" target=\"_blank\" rel=\"noreferrer noopener\">CBN\u2019s circular<\/a> establishing industry fraud desks.\u00a0<\/p>\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/www.cbn.gov.ng\/Out\/2024\/BSD\/CBN%20Risk-Based%20Cybersecurity%20Framework%20for%20DMBs%20and%20PSBs_2024.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">CBN\u2019s 2024 cybersecurity framework<\/a> requires supervised financial institutions to report detected cyber incidents to the regulator within 24 hours. It also requires them to submit intelligence on cyber threats through a designated reporting channel by the fifth day of the following month. These requirements are intended to give the regulator visibility into emerging threats and help institutions respond to incidents across the financial system.<\/p>\n<p class=\"wp-block-paragraph\">The reporting gap highlights a weakness in how Nigeria\u2019s financial system coordinates its response to fraud and its missed opportunity to identify and contain attacks before they spread.<\/p>\n<p class=\"wp-block-paragraph\">The CBN\u2019s Payment System Vision 2028 proposes the establishment of a national Security Operations Centre (SOC) and a fraud intelligence-sharing platform. The initiative is part of a broader ambition to reduce fraud losses by 70% by 2028.<\/p>\n<p class=\"wp-block-paragraph\">In January, the CBN <a href=\"https:\/\/techcabal.com\/2025\/01\/28\/cbn-nibss-fraud\/\" target=\"_blank\" rel=\"noreferrer noopener\">directed<\/a> NIBSS to debit the settlement accounts of commercial banks that receive fraud proceeds, making financial institutions tighten their fraud detection measures. The new rule was part of the regulator\u2019s efforts to hold banks and fintechs accountable for lapses in their transaction monitoring systems.<\/p>\n<p class=\"wp-block-paragraph\">In December 2024, TechCabal <a href=\"https:\/\/techcabal.com\/2024\/12\/13\/first-bank-loses-%E2%82%A67-billion-to-fraud-incident\/\" target=\"_blank\" rel=\"noreferrer noopener\">reported<\/a> that First Bank, Nigeria\u2019s oldest bank, suffered a massive fraud incident that led to the theft of \u20a67 billion ($5.19 million) from customer accounts. The incident came several months after an employee <a href=\"https:\/\/techcabal.com\/2024\/05\/31\/first-bank-employee-on-the-run-after-40bn-fraud\/\" target=\"_blank\" rel=\"noreferrer noopener\">fraudulently diverted \u20a660 billion<\/a> ($44.47 million) over two years, undetected, resulting in the <a href=\"https:\/\/techcabal.com\/2024\/08\/05\/first-bank-sacks-employees-after-fraud\/\" target=\"_blank\" rel=\"noreferrer noopener\">dismissal of over 100 employees<\/a> and reportedly connected to the bank\u2019s CEO\u2019s <a href=\"https:\/\/www.thecable.ng\/adesola-adeduntan-steps-down-as-first-bank-ceo\/\" target=\"_blank\" rel=\"noreferrer noopener\">abrupt exit<\/a> eight months before the end of his tenure.<\/p>\n<p class=\"wp-block-paragraph\">\n<\/div>\n<p>Source: <\/p>\n<div class=\"nSourse\">TechCabal<\/div>\n","protected":false},"excerpt":{"rendered":"<p>In early October, a wave of cyberattacks, leading to fraud losses, hit several Nigerian banks and financial institutions, potentially costing billions of naira in customer funds, according to several sources&hellip; <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-16908","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/posts\/16908","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/comments?post=16908"}],"version-history":[{"count":0,"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/posts\/16908\/revisions"}],"wp:attachment":[{"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/media?parent=16908"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/categories?post=16908"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/globalnigerianews.com\/index.php\/wp-json\/wp\/v2\/tags?post=16908"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}