Title Page
CYBERSECURITY THREATS AND PREVENTION AMONG ONLINE BANKING USERS IN NIGERIA
A Research Project Submitted to the Department of __________________________
Faculty of __________________________
__________________________ University
In Partial Fulfilment of the Requirements for the Award of the Degree of __________________________
By
__________________________
Matriculation Number: __________________________
Supervisor: __________________________
October 2026
Certification
This is to certify that this research project titled “Cybersecurity Threats and Prevention Among Online Banking Users in Nigeria” was carried out by __________________________ under my supervision and has been approved as meeting the requirements for the award of the relevant academic qualification.
Supervisor: __________________________
Signature: __________________________
Date: __________________________
Head of Department: __________________________
Signature: __________________________
Date: __________________________
Declaration
I declare that this research project is my original academic work and that all sources of information used in the study have been appropriately acknowledged. The quantitative data presented in Chapter Four are simulated/modelled data prepared for academic research demonstration because primary field data were not collected for this project.
Dedication
I dedicate this research work to God Almighty, my family, and everyone committed to promoting safer and more responsible use of digital financial services.
Acknowledgements
I sincerely appreciate my supervisor for the guidance and corrections provided throughout this research. I also appreciate my lecturers, classmates, family members, and friends for their encouragement and support.
I acknowledge the work of the Central Bank of Nigeria (CBN), Nigeria Inter-Bank Settlement System (NIBSS), and other institutions whose publications and regulatory materials provided useful information for understanding cybersecurity and electronic fraud in Nigeria.
Abstract
The rapid adoption of online banking has transformed the way Nigerians access financial services. Customers can transfer funds, pay bills, check account balances, purchase goods and services, and perform other banking activities through internet banking and mobile applications. However, increased dependence on digital banking channels has also created opportunities for cybercriminals to exploit weaknesses in technology, human behaviour, and financial processes.
This study examined cybersecurity threats and prevention among online banking users in Nigeria. The study focused on major threats including phishing, social engineering, identity theft, malware, credential theft, SIM-related attacks, fake banking applications and websites, unauthorised transactions, and account takeover. It also examined preventive measures involving customers, banks, regulators, and other stakeholders.
A descriptive survey design was adopted. For the purpose of this academic project, a modelled sample of 200 hypothetical online banking users was used to demonstrate the quantitative analysis. Data were presented using frequency tables and percentages, while chi-square analysis was used to demonstrate the testing of the research hypotheses. The modelled findings indicated that phishing and social engineering were among the most significant threats perceived by online banking users. The analysis also indicated that customer cybersecurity awareness and the adoption of protective measures were associated with reduced exposure to cyber threats.
The study concludes that cybersecurity in online banking requires a combination of customer awareness, strong authentication, transaction monitoring, secure banking infrastructure, timely fraud reporting, regulatory oversight, and continuous cybersecurity education. The study recommends that Nigerian banks strengthen real-time fraud monitoring, customer education, authentication mechanisms, incident response, and communication concerning fraudulent activities.
Keywords: Cybersecurity, online banking, cyber fraud, phishing, social engineering, banking security, Nigeria.
Table of Contents
- Chapter One: Introduction
- Chapter Two: Literature Review
- Chapter Three: Research Methodology
- Chapter Four: Data Presentation, Analysis and Findings
- Chapter Five: Summary, Conclusion and Recommendations
- References
- Appendix
Chapter One: Introduction
Background to the Study
The banking industry has undergone significant technological transformation over the past two decades. Traditional banking activities that once required customers to visit physical branches can now be performed through mobile banking applications, internet banking platforms, automated teller machines, USSD services, and other electronic payment channels.
In Nigeria, digital banking has become an important part of everyday financial activity. Customers use online banking to transfer money, pay utility bills, purchase airtime and data, make online purchases, receive payments, and manage their accounts. The expansion of digital financial services has improved convenience and accessibility, but it has also increased the potential attack surface for cybercriminals.
The Central Bank of Nigeria (CBN) recognises cybersecurity as an important component of financial-sector stability. Its Risk-Based Cybersecurity Framework and Guidelines for Deposit Money Banks and Payment Service Banks provides requirements for strengthening cybersecurity governance, risk management, protection, detection, response and recovery within regulated financial institutions.
The development of electronic payment channels has also created new forms of financial crime. The CBN established the Nigeria Electronic Fraud Forum (NeFF) partly because the increased adoption of electronic payment channels had increased the need for coordinated responses to electronic fraud. NeFF brings together relevant stakeholders to improve information sharing and develop strategies for addressing electronic fraud.
Cybersecurity threats affecting online banking users are not limited to sophisticated technical attacks. In many cases, criminals exploit human behaviour. Phishing messages may impersonate banks and request customers to click links or disclose sensitive information. Social engineering may involve criminals pretending to be bank employees, customer-service agents, friends, relatives, or government officials.
The CBN’s consumer fraud guidance identifies phishing, identity theft and social engineering among the threats facing consumers and advises customers not to click suspicious links, to verify requests through official channels, and to avoid sharing sensitive financial information.
The Economic and Financial Crimes Commission (EFCC) has similarly warned about banking and online account scams involving phishing, spoofing, fake banking communications and fraudulent websites designed to obtain customers’ login details, PINs and passwords.
Cybersecurity therefore involves more than installing technological controls. It requires cooperation between banks, customers, regulators, telecommunications providers, payment processors and law-enforcement agencies.
Statement of the Problem
The increasing use of online banking in Nigeria has created substantial benefits for customers, banks and the wider economy. However, it has also created opportunities for cybercriminals to target users through technical and non-technical methods.
Online banking users may be exposed to phishing messages, fake websites, fraudulent mobile applications, malware, password theft, social engineering, SIM-related attacks, identity theft and unauthorised transactions. Some users may unknowingly disclose passwords, one-time passwords, card details, PINs or other sensitive information to criminals.
A major challenge is that cybersecurity depends partly on user behaviour. Even when banks provide security controls, customers may still become victims if they use weak passwords, click malicious links, disclose authentication information or fail to report suspicious transactions promptly.
The CBN states that customers have a duty to promptly report suspected fraud or compromise to their banks and relevant authorities. It also emphasises customers’ responsibility to exercise reasonable care while using banking services.
The problem is therefore not simply the existence of cyber threats but the ability of online banking users and financial institutions to identify, prevent, detect and respond to them effectively.
Purpose of the Study
The main purpose of this study is to examine cybersecurity threats and prevention among online banking users in Nigeria.
The specific objectives are to:
- identify the major cybersecurity threats affecting online banking users in Nigeria;
- examine users’ awareness of online banking cybersecurity threats;
- determine the common methods through which cybercriminals target online banking users;
- examine the cybersecurity measures adopted by online banking users;
- assess the relationship between cybersecurity awareness and users’ adoption of preventive measures;
- examine the role of banks and regulators in protecting online banking users; and
- recommend effective measures for reducing cybersecurity risks associated with online banking in Nigeria.
Research Questions
The study seeks to answer the following questions:
- What are the major cybersecurity threats affecting online banking users in Nigeria?
- How aware are online banking users of cybersecurity threats?
- What methods are commonly used by cybercriminals to target online banking users?
- What cybersecurity measures do online banking users adopt?
- Does cybersecurity awareness influence the adoption of preventive measures?
- What role do banks and regulatory institutions play in preventing online banking cyber fraud?
- What measures can improve cybersecurity among Nigerian online banking users?
Research Hypotheses
H₀₁: There is no significant relationship between cybersecurity awareness and the adoption of preventive measures among online banking users in Nigeria.
H₀₂: There is no significant relationship between exposure to cybersecurity threats and the likelihood of experiencing unauthorised online banking transactions.
H₀₃: There is no significant relationship between bank-provided cybersecurity education and users’ confidence in protecting their online banking accounts.
Significance of the Study
This study is significant to online banking users because it highlights common threats and practical ways of protecting financial accounts.
The study is also useful to commercial banks because it identifies areas where customer education, authentication, fraud monitoring and incident response can be strengthened.
For the CBN and other regulators, the study provides an academic assessment of the importance of cybersecurity awareness and consumer protection in digital banking.
Researchers and students may also use the study as a reference for future research on cybersecurity, electronic banking, financial technology and cybercrime.
Scope of the Study
The study focuses on cybersecurity threats affecting individuals who use online banking services in Nigeria. It covers threats such as phishing, social engineering, identity theft, malware, credential theft, SIM-related attacks, fraudulent websites and applications, account takeover and unauthorised transactions.
The study focuses primarily on individual online banking users rather than the internal cybersecurity architecture of specific banks.
Operational Definition of Terms
Cybersecurity: The protection of digital systems, networks, devices, applications and information from unauthorised access, attacks, disruption or misuse.
Online banking: The use of internet-connected devices or digital platforms to access banking services.
Phishing: A fraudulent attempt to obtain sensitive information by pretending to be a trusted individual or organisation.
Social engineering: The manipulation of individuals into revealing information or performing actions that compromise security.
Identity theft: The unauthorised acquisition and use of another person’s identifying information.
Malware: Malicious software designed to disrupt systems, steal information or gain unauthorised access.
Account takeover: Unauthorised control of a customer’s banking account, usually after the criminal obtains authentication credentials or other access information.
Cyber fraud: Fraud committed using computers, networks, digital devices or electronic communication systems.
Chapter Two: Literature Review
Concept of Cybersecurity
Cybersecurity refers to the practices, technologies, policies and procedures used to protect digital information and systems against unauthorised access, alteration, destruction and disruption.
In banking, cybersecurity protects customer information, authentication credentials, payment systems, transaction records and other sensitive financial resources.
Effective cybersecurity generally involves confidentiality, integrity and availability. Confidentiality ensures that information is accessed only by authorised persons. Integrity protects information from unauthorised alteration, while availability ensures that legitimate users can access systems when required.
Concept of Online Banking
Online banking refers to the delivery of banking services through electronic platforms. These platforms include internet banking websites, mobile banking applications, USSD services and other digital channels.
Online banking reduces the need for customers to visit physical bank branches and enables transactions to occur rapidly. However, the convenience of digital banking also means that criminals can target customers remotely.
The CBN has established various frameworks and guidelines covering electronic payment channels and payment service providers in Nigeria.
Cybersecurity Threats Facing Online Banking Users
Phishing
Phishing is one of the most common threats against online banking customers. Attackers may send fraudulent emails, text messages or social-media messages designed to look like communications from banks.
A phishing message may claim that an account has been suspended or that the customer needs to update information. The victim is then directed to a fraudulent website or asked to provide sensitive information.
Social Engineering
Social engineering exploits human psychology rather than relying exclusively on technical vulnerabilities.
A criminal may create urgency by telling a customer that suspicious activity has been detected on an account. The criminal may then request an OTP, PIN, password or other sensitive information.
The CBN has specifically identified social engineering as an important financial-crime risk and has called for stronger controls and greater vigilance within the financial sector.
Identity Theft
Identity theft occurs when criminals obtain personal information and use it for fraudulent purposes. Information such as names, telephone numbers, account details, identification information and authentication credentials can potentially be abused.
Malware
Malware includes malicious software capable of stealing credentials, monitoring activities or compromising devices. Users who install applications from untrusted sources may increase their exposure to malware.
SIM-Related Attacks
A criminal may attempt to obtain control of a victim’s telephone number or manipulate telecommunications processes to intercept authentication messages. Because mobile numbers may be linked to banking services, compromise of a telephone account can create additional financial risk.
Fake Banking Websites and Applications
Fraudsters can create websites and applications that resemble legitimate banking platforms. Customers who enter their credentials into these platforms may unknowingly give criminals access to sensitive information.
Password and Credential Theft
Weak, reused or exposed passwords increase the risk of account compromise. Attackers may obtain credentials through phishing, malware, data breaches or social engineering.
Unauthorised Transactions
Unauthorised transactions occur when funds are transferred or withdrawn without the legitimate account holder’s permission.
Modern fraud controls increasingly focus on detecting unusual transaction behaviour. The CBN has identified real-time fraud monitoring and stronger identity verification as important elements of financial-sector protection.
Causes of Cybersecurity Vulnerability Among Online Banking Users
Several factors contribute to cybersecurity vulnerability.
First, inadequate cybersecurity awareness may prevent users from recognising fraudulent messages.
Second, users may prioritise convenience over security. For example, they may use the same password across several services or leave banking applications logged in on shared devices.
Third, cybercriminals continuously change their techniques. A fraudulent message may be personalised using information obtained from social media or other sources.
Fourth, the rapid expansion of digital financial services increases the number of people using electronic payment channels.
Finally, delayed reporting can make fraud more difficult to contain and investigate.
Cybersecurity Prevention Measures
Strong Authentication
Banks should use strong authentication mechanisms to reduce the possibility of unauthorised access. Multi-factor authentication adds additional layers of protection beyond a password.
Transaction Monitoring
Banks can use automated systems and behavioural analytics to identify unusual transaction patterns.
Customer Education
Customers need regular and practical cybersecurity education. Banks should explain that legitimate employees should not request sensitive authentication information through unofficial channels.
Strong Password Management
Users should create strong and unique passwords and avoid reusing passwords across different services.
Software and Device Updates
Keeping operating systems, browsers and banking applications updated reduces exposure to known security weaknesses.
Secure Communication
Customers should access banking platforms through official applications and verified websites rather than links received from unknown persons.
Prompt Fraud Reporting
Customers should report suspected compromise or unauthorised transactions immediately. The CBN explicitly recognises prompt reporting as an important customer responsibility.
Regulatory Oversight
Regulators play an important role by establishing cybersecurity standards, supervising financial institutions and promoting consumer protection.
The CBN’s 2024 Risk-Based Cybersecurity Framework demonstrates the importance of formal cybersecurity governance within Nigerian financial institutions.
Theoretical Framework
Technology Acceptance Model
The Technology Acceptance Model (TAM), developed by Davis, explains how perceived usefulness and perceived ease of use influence users’ acceptance of technology.
In online banking, customers are more likely to use digital banking services when they believe that the services are useful and easy to use. However, security concerns may also influence their willingness to use digital platforms.
The model is relevant because cybersecurity measures can affect users’ perception of online banking. If security procedures are considered too complicated, customers may attempt to bypass them. If security controls are understandable and convenient, users may be more willing to comply.
Protection Motivation Theory
Protection Motivation Theory explains how individuals respond to perceived threats. A person is more likely to adopt protective behaviour when the person believes that a threat is serious, believes that the recommended protective measure is effective, and believes that they can successfully perform the protective behaviour.
The theory is particularly relevant to cybersecurity awareness because users who understand the consequences of phishing or account compromise may be more likely to adopt preventive measures.
Empirical Review
Previous research into digital banking security has generally demonstrated that cybersecurity is influenced by both technological and human factors.
Studies of electronic banking security frequently identify phishing, social engineering, password compromise, malware and unauthorised transactions as significant risks.
In Nigeria, the regulatory response has increasingly emphasised cybersecurity, fraud monitoring, customer awareness and information sharing. The CBN’s Nigeria Electronic Fraud Forum was established to promote coordinated responses to electronic fraud among relevant stakeholders.
NIBSS has also reported changes in digital-payment fraud trends. Its 2026 report on 2025 data stated that reported digital payment fraud losses fell substantially from the previous year, indicating the potential impact of stronger controls and improved awareness, although cyber and electronic fraud remain significant risks.
Gap in Literature
Although considerable attention has been given to cybersecurity in financial institutions, there remains a need to examine cybersecurity from the perspective of ordinary online banking users.
Many cybersecurity systems are designed and evaluated from the institutional perspective. However, users remain an important component of the security chain because criminals frequently attempt to manipulate customers directly.
This study therefore focuses on the relationship between cybersecurity awareness, exposure to threats and preventive behaviour among online banking users in Nigeria.
Chapter Three: Research Methodology
Research Design
The study adopted a descriptive survey research design. The design was considered appropriate because the study examined users’ awareness, experiences, perceptions and preventive behaviours relating to online banking cybersecurity.
Population of the Study
The population comprises Nigerian adults who use online banking services through internet banking platforms, mobile banking applications and related digital banking channels.
Sample Size
For the purpose of demonstrating the quantitative analysis in this academic project, a modelled sample of 200 hypothetical online banking users was used.
The figures in Chapter Four are simulated/modelled data and are not presented as results from an actual field survey.
Sampling Technique
A hypothetical simple random sampling approach was assumed for the modelled dataset. Each hypothetical respondent was treated as having an equal opportunity of being represented in the sample.
Instrument for Data Collection
The hypothetical research instrument was structured as a questionnaire divided into five sections:
Section A covered demographic characteristics.
Section B examined online banking usage.
Section C assessed awareness of cybersecurity threats.
Section D examined respondents’ experiences with cyber threats.
Section E assessed cybersecurity prevention practices.
Validity of the Instrument
For an actual field study, the questionnaire would be submitted to the researcher’s supervisor and relevant experts for assessment of content validity. Their recommendations would be incorporated before administration.
Reliability of the Instrument
For an actual field study, reliability could be assessed using Cronbach’s alpha after a pilot test. A coefficient of 0.70 or higher would generally be considered acceptable for demonstrating internal consistency.
Because this project uses simulated data, no claim is made that a real reliability test was conducted.
Method of Data Analysis
The modelled data were analysed using frequency counts and percentages. Chi-square analysis was used to demonstrate the testing of the hypotheses.
The decision rule was to reject the null hypothesis where the calculated significance level was below 0.05.
Ethical Considerations
An actual study involving human participants would require informed consent, voluntary participation, confidentiality and protection of respondents’ personal information.
No real participant data were collected for this project. The quantitative results presented in Chapter Four are therefore simulated for academic demonstration.
Chapter Four: Data Presentation, Analysis and Findings
Introduction
This chapter presents the analysis of the simulated data generated for the study. The purpose is to demonstrate how data relating to cybersecurity awareness and online banking behaviour could be analysed.
The tables below do not represent actual responses collected from Nigerian online banking users.
Demographic Distribution of Respondents
| Variable | Category | Frequency | Percentage |
|---|---|---|---|
| Gender | Male | 108 | 54% |
| Female | 92 | 46% | |
| Age | 18–25 | 58 | 29% |
| 26–35 | 76 | 38% | |
| 36–45 | 42 | 21% | |
| 46 and above | 24 | 12% | |
| Total | 200 | 100% |
The modelled distribution shows that respondents aged 26–35 formed the largest age group, representing 38% of the sample.
Major Cybersecurity Threats Identified
| Threat | Frequency | Percentage |
|---|---|---|
| Phishing messages | 156 | 78% |
| Social engineering | 148 | 74% |
| Unauthorised transactions | 126 | 63% |
| Fake websites/apps | 118 | 59% |
| Credential/password theft | 112 | 56% |
| SIM-related attacks | 86 | 43% |
| Malware | 72 | 36% |
| Identity theft | 68 | 34% |
The modelled results indicate that phishing was the most frequently identified threat, followed by social engineering.
This finding is consistent with CBN consumer guidance, which identifies phishing and social engineering among important fraud and scam risks.
Cybersecurity Awareness
| Awareness Level | Frequency | Percentage |
|---|---|---|
| Very high | 42 | 21% |
| High | 76 | 38% |
| Moderate | 52 | 26% |
| Low | 22 | 11% |
| Very low | 8 | 4% |
| Total | 200 | 100% |
The modelled data suggest that 59% of respondents had either high or very high cybersecurity awareness, while 15% reported low or very low awareness.
Preventive Measures Used by Respondents
| Preventive Measure | Frequency | Percentage |
|---|---|---|
| Avoiding suspicious links | 168 | 84% |
| Using transaction alerts | 162 | 81% |
| Using strong passwords/PINs | 154 | 77% |
| Verifying suspicious calls/messages | 148 | 74% |
| Using official banking applications | 146 | 73% |
| Enabling additional authentication | 132 | 66% |
| Regularly updating devices/apps | 126 | 63% |
| Changing passwords periodically | 118 | 59% |
The modelled results suggest that avoiding suspicious links was the most commonly adopted preventive practice.
Experience of Unauthorised Transactions
| Experience | Frequency | Percentage |
|---|---|---|
| Experienced unauthorised transaction | 54 | 27% |
| Never experienced one | 146 | 73% |
| Total | 200 | 100% |
The modelled result indicates that 27% of respondents had experienced at least one unauthorised transaction.
This figure is purely simulated and should not be interpreted as a measured prevalence rate among Nigerian banking customers.
Hypothesis One
H₀₁: There is no significant relationship between cybersecurity awareness and the adoption of preventive measures among online banking users in Nigeria.
A modelled cross-tabulation was developed as follows:
| Cybersecurity Awareness | Adopted Strong Preventive Measures | Did Not Adopt Strong Measures | Total |
|---|---|---|---|
| High | 92 | 26 | 118 |
| Low/Moderate | 44 | 38 | 82 |
| Total | 136 | 64 | 200 |
Using a modelled chi-square test, the relationship was statistically significant at the 0.05 level.
Decision: Reject H₀₁.
Interpretation: The simulated result suggests that cybersecurity awareness is associated with the adoption of preventive measures. This supports the argument that cybersecurity education can influence safer online banking behaviour.
Hypothesis Two
H₀₂: There is no significant relationship between exposure to cybersecurity threats and the likelihood of experiencing unauthorised online banking transactions.
The modelled analysis showed a statistically significant relationship between higher exposure to cybersecurity threats and the likelihood of reporting unauthorised transactions.
Decision: Reject H₀₂.
Interpretation: The simulated result indicates that users who encounter more suspicious activities and cyber threats may face greater risk of unauthorised transactions.
Hypothesis Three
H₀₃: There is no significant relationship between bank-provided cybersecurity education and users’ confidence in protecting their online banking accounts.
The modelled analysis indicated a significant positive relationship between exposure to bank-provided cybersecurity education and users’ reported confidence in protecting their accounts.
Decision: Reject H₀₃.
Interpretation: The simulated result suggests that regular cybersecurity education from banks may improve customers’ confidence and security awareness.
Discussion of Findings
The first major finding from the modelled data is that phishing and social engineering represent significant perceived threats to online banking users. This is consistent with warnings from Nigerian financial-sector institutions about fraudulent messages, impersonation and manipulation of customers.
The second finding is that cybersecurity awareness appears to influence preventive behaviour. Users who understand common threats may be more likely to verify messages, avoid suspicious links, use security controls and report unusual transactions.
The third finding concerns the role of financial institutions. Cybersecurity cannot be left entirely to customers. Banks have responsibilities relating to secure infrastructure, authentication, monitoring, customer communication and fraud response.
The CBN’s cybersecurity framework places significant emphasis on institutional cybersecurity governance and risk management.
The fourth finding is that prompt reporting is important. Customers who suspect that their accounts have been compromised should contact their financial institutions through official channels as quickly as possible.
The CBN also emphasises the importance of complaint mechanisms and prompt reporting of suspected fraud.
Chapter Five: Summary, Conclusion and Recommendations
Summary
This study examined cybersecurity threats and prevention among online banking users in Nigeria.
The study established that the growth of online banking has improved access to financial services but has also created new opportunities for cybercriminals.
The major threats examined included phishing, social engineering, identity theft, malware, credential theft, fake websites and applications, SIM-related attacks, account takeover and unauthorised transactions.
The study also examined preventive measures including strong authentication, secure passwords, transaction alerts, customer education, official banking applications, software updates, transaction monitoring and prompt fraud reporting.
The modelled findings suggested that cybersecurity awareness is associated with stronger preventive behaviour. They also suggested that greater exposure to cybersecurity threats may increase the risk of unauthorised transactions.
Conclusion
Cybersecurity is an essential component of safe online banking in Nigeria. The growing dependence on digital financial services means that customers, banks, regulators and other stakeholders must continuously adapt to emerging threats.
The study demonstrates that cybersecurity is both a technological and human issue. Advanced banking security systems are important, but their effectiveness can be reduced when customers are manipulated into disclosing authentication information or approving fraudulent transactions.
Phishing and social engineering are particularly important because they directly target human decision-making. Customers therefore need continuous education on how to identify suspicious communications and verify requests before taking action.
Banks also have a responsibility to strengthen authentication, transaction monitoring, fraud detection, incident response and customer communication.
The CBN’s cybersecurity framework and consumer-protection measures demonstrate the importance of institutional and regulatory responses to digital financial risks.
Ultimately, effective online banking cybersecurity requires a shared responsibility model in which customers, banks, regulators, telecommunications companies, payment providers and law-enforcement agencies work together.
Recommendations
Based on the findings of the study, the following recommendations are made:
Banks Should Strengthen Real-Time Fraud Monitoring
Banks should continuously improve systems capable of detecting unusual transaction patterns and potentially fraudulent behaviour.
Banks Should Increase Cybersecurity Education
Financial institutions should provide regular cybersecurity awareness campaigns through mobile applications, SMS, email, websites, branches and social media.
Customers should be repeatedly reminded that legitimate banking staff should not request passwords, PINs or authentication codes through unofficial channels.
Customers Should Avoid Suspicious Links
Online banking users should avoid clicking links received from unknown or suspicious sources. Customers should access banking services through official applications and verified banking websites.
Customers Should Protect Authentication Information
Users should never disclose passwords, PINs, OTPs or other authentication information to unknown persons.
Strong and Unique Passwords Should Be Used
Customers should avoid using easily guessed passwords or the same password across multiple services.
Banks Should Improve Authentication
Financial institutions should continue to strengthen multi-factor authentication and other identity-verification mechanisms while ensuring that legitimate customers can use them conveniently.
Customers Should Activate Transaction Alerts
Transaction notifications can help customers identify suspicious activity quickly.
Customers Should Report Fraud Immediately
Customers who suspect unauthorised transactions or account compromise should immediately contact their banks through official channels.
Banks Should Improve Fraud Complaint Processes
Banks should make fraud reporting easy and accessible and should provide customers with clear information about what to do when fraud occurs.
Regulators Should Strengthen Industry Collaboration
The CBN, financial institutions, payment providers, telecommunications operators and law-enforcement agencies should continue sharing information on emerging threats and coordinated fraud prevention.
The existence of the Nigeria Electronic Fraud Forum provides an important foundation for such collaboration.
Cybersecurity Should Be Treated as a Continuous Process
Banks and customers should not treat cybersecurity as a one-time activity. Threats change continuously, meaning that security systems, policies, education and customer practices must also be continuously updated.
Limitations of the Study
The major limitation of this research is that primary field data were not collected from actual Nigerian online banking users. Consequently, the quantitative results in Chapter Four are simulated/modelled data and are intended only to demonstrate an appropriate research-analysis format.
The study also focuses primarily on individual users rather than conducting technical penetration testing or auditing the internal cybersecurity infrastructure of Nigerian banks.
Another limitation is that cybersecurity threats change rapidly. A threat that is common today may evolve into a different form as criminals adopt new technologies and techniques.
Suggestions for Further Studies
Future researchers should conduct primary surveys involving online banking customers across several Nigerian states.
Further studies could also compare cybersecurity awareness between rural and urban banking users.
Researchers may investigate cybersecurity awareness among university students, small-business owners, older banking customers or mobile banking users.
Another useful area of research would be the effectiveness of artificial intelligence and behavioural analytics in detecting online banking fraud in Nigeria.
References
Central Bank of Nigeria. (2024). Risk-Based Cybersecurity Framework and Guidelines for Deposit Money Banks and Payment Service Banks.
Central Bank of Nigeria. Fraud and Scam Awareness.
Central Bank of Nigeria. Consumer Education.
Central Bank of Nigeria. Nigeria Electronic Fraud Forum.
Central Bank of Nigeria. Payments System and Retail Payments Frameworks.
Central Bank of Nigeria. (2025). Draft Guidelines for Handling Authorised Push Payment Fraud.
Central Bank of Nigeria. (2026). CBN Reforms and Initiatives.
Davis, F. D. (1989). Perceived usefulness, perceived ease of use, and user acceptance of information technology. MIS Quarterly, 13(3), 319–340.
Nigeria Inter-Bank Settlement System. (2026). Digital Payment Fraud Drops 51% to ₦25.85b in 2025.
Economic and Financial Crimes Commission. Red Alert on Scam: Banking and Online Account Scams.
Appendix
Sample Questionnaire
Section A: Demographic Information
- Gender: Male [ ] Female [ ]
- Age: 18–25 [ ] 26–35 [ ] 36–45 [ ] 46 and above [ ]
- How frequently do you use online banking?
Daily [ ] Weekly [ ] Occasionally [ ] Rarely [ ]
Section B: Cybersecurity Awareness
- Are you aware of phishing attacks?
- Are you aware that criminals may impersonate bank employees?
- Do you know that banking passwords and OTPs should not be disclosed to others?
Section C: Cybersecurity Threats
- Have you ever received a suspicious banking message?
- Have you ever received a suspicious phone call requesting banking information?
- Have you ever encountered a suspicious banking website or application?
- Have you ever experienced an unauthorised banking transaction?
Section D: Preventive Measures
- Do you use transaction alerts?
- Do you avoid clicking suspicious links?
- Do you use strong passwords or PINs?
- Do you use official banking applications?
- Do you report suspicious transactions immediately?
Section E: Bank Cybersecurity Education
- Has your bank provided you with cybersecurity information?
- Do you believe your bank provides adequate protection against cyber fraud?
- Do you feel confident protecting your online banking account?