Beyond BVN: Why Nigeria Must Complete Fraud Protection Architecture

On March 26, 2026, the Central Bank of Nigeria issued a circular revising the regulatory framework for the Bank Verification Number. The reform, effective May 1, 2026, introduced several major changes. BVN enrollment is now restricted to individuals aged 18 and above. Customers may update the phone number linked to their BVN only once.

Access to the BVN database is limited to CBN-licensed financial institutions unless the regulator grants an exception. And financial institutions are now required to maintain a temporary watchlist for BVNs linked to suspected fraudulent transactions for up to 24 hours, during which customers are contacted for clarification before the transaction proceeds.

The reform did not arrive from nowhere. The Nigeria Inter-Bank Settlement System reported that digital payment fraud losses fell from ₦52.26bn in 2024 to ₦25.85bn in 2025, a decline of about 51 percent. That decline suggests that tighter identity controls, data protection, stronger transaction monitoring, and improved fraud response systems may be helping. But it would be too simplistic to credit the decline to BVN-NIN linkage alone.

Fraud reduction is usually the result of several overlapping controls, including better bank monitoring, telecom safeguards, customer verification, data privacy systems and regulatory enforcement.

What The CBN Got Right

The 24-hour watchlist is not bureaucratic friction for its own sake. It reflects a basic principle of fraud prevention: suspicious transactions are easier to stop before funds leave the system than after they have moved across accounts, platforms, or borders. A short, accountable delay that requires a bank to reach the customer can be a reasonable safeguard when the alternative is irreversible loss.

The phone number restriction is also more defensible than its public reception suggests. The BVN registry has grown from 51.9 million registrations in 2021 to 67.8 million by December 2025, a 6.8 percent year-on-year increase, according to NIBSS. As that registry has scaled, the phone number attached to a BVN has become one of the most important recovery and authentication points in a person’s financial identity.

Restricting repeated changes can make it harder for a fraudster to use SIM-swap tactics or unauthorized account recovery to take over a customer’s banking profile.

It is not a perfect solution. But it is a defensible one.

What The Reform Does Not Yet Solve

Every identity reform of this kind asks one question that policy documents rarely answer directly: who is most likely to fail the new test, and has the system built anything practical for them?
The data points to the challenge. NIBSS reported that Nigeria had more than 320 million active bank accounts as of March 2025, while BVN registrations stood at roughly 68 million. That does not mean 250 million people lack BVNs.

A single person can hold multiple bank accounts, and many accounts can be linked to one BVN. NIBSS itself attributes the gap to exactly this pattern, along with customers who have yet to complete enrollment. But the gap still matters, because it shows that BVN coverage, account ownership, and clean identity linkage are not the same thing.

That gap is most likely to affect the populations identity infrastructure must serve carefully: traders, artisans, informal sector operators, rural account holders, and people whose primary phone numbers are tied to shared family lines, old SIM cards, or records created years ago under names or documents that no longer match perfectly across databases.

For that population, a one-time phone number update is not a minor inconvenience. It may become a permanent decision made under conditions of incomplete information.

A trader in a rural market who registered her BVN in 2019 with a SIM card she no longer owns may not experience this reform as fraud protection. She may experience it as a door that is closing before she fully understands how to correct her record.

This is the structural blind spot that better designed inclusion programmes try to avoid. The Bank of Industry’s Presidential Conditional Grant Scheme, widely known as the Nano Grants programme, targeted nano business owners across all 774 local government areas with a one-time ₦50,000 grant.

Its use of BVN and NIN helped connect biometric identity with financial identity, but its larger lesson was not verification alone. It showed that identity requirements work better when they are paired with outreach, correction support, and active enrollment assistance for the population least likely to already have clean, matched records.

The new BVN framework tightens verification. It has not yet clearly paired that tightening with the same level of enrollment and correction support.

There is a second gap that matters even more for Nigeria’s economic growth. Every rule in the new BVN framework is built around individual account holders. None of it fully addresses business identity, the verification layer that determines whether a small trader, market vendor, informal retailer, or micro enterprise can be recognized, financed, and protected as a commercial entity rather than merely as an individual with a bank account.

This distinction is not academic. A market trader’s personal BVN tells a bank who she is. It does not tell the bank how long her business has operated, whether her supplier relationship is legitimate, what her transaction history looks like, whether her business is creditworthy, or whether the person claiming to be her vendor is actually her vendor.

That second layer of verification, business identity, is the layer Nigeria’s reform has not yet built. And it is the layer that determines whether financial inclusion becomes business growth, not just personal account security.

What Should Come Next

None of this is an argument against the CBN’s reform. Fraud watchlists, phone number controls, database access restrictions, and age based enrollment rules are serious responses to a serious threat. The fraud loss decline reported by NIBSS suggests that Nigeria’s fraud control environment is improving. But the next phase must be designed for inclusion as carefully as this phase was designed for control.

That next phase should include a clear, well-publicized correction pathway for account holders whose phone number, name spelling, date of birth, or identity records no longer match across their BVN and NIN profiles.

It should provide practical guidance before the one-time phone number update becomes a permanent penalty for an honest documentation mismatch.

It should also include deliberate enrollment and correction support for rural and informal-sector account holders, especially those farthest from bank branches, stable phone lines, and formal documentation systems.

Finally, Nigeria should begin building a real business identity layer. A market trader, small importer, roadside retailer, or informal service provider should be verifiable not only as a person, but as a commercial actor with business history, supplier relationships, transaction records, and a pathway to formal credit.

Nigeria has built one of the more credible financial identity systems on the continent.

BVN-NIN integration is genuine infrastructure, not just paper policy. But an identity system is only as inclusive as its weakest point of enrollment. Right now, that weakest point remains the same population it has always been: people farthest from a bank branch, a stable phone line, and a documentation trail that matches across every database that now expects it to.

Tightening the front door is the easier half of identity reform. Building the ramp for everyone the front door was not originally designed for is the harder and more important half.

Nigeria has done the first. It must now do the second.

-Oyindamola Falujo is a business strategy and operations leader who served as Lead, Business Development and Strategy at OAR Identity Ltd, a certified third-party agent for Nigeria’s National Identity Management Commission, where she worked on enrollment architecture for the World Bank-supported Digital Identification for Development programme.