The Federal Government is moving to review Nigeria’s cybercrime legal framework amid growing concerns over artificial intelligence-powered fraud, data breaches and increasingly sophisticated online scams.
The proposed review is expected to address emerging threats linked to the rapid adoption of digital technologies, including the use of AI tools to impersonate individuals, manipulate images and voices, and deceive unsuspecting victims.
As more Nigerians rely on digital banking, online shopping, mobile applications and electronic communication, authorities face growing pressure to ensure that existing laws can respond effectively to new forms of cybercrime.\
Artificial intelligence has made it easier for criminals to produce convincing fake messages, imitate voices and create misleading digital content.
Fraudsters can exploit these tools to impersonate company executives, relatives, government officials and financial institutions in attempts to obtain money or sensitive information.
AI-generated phishing messages can also appear more convincing than traditional scam emails because they may contain fewer grammatical errors and use information gathered from social media or other online sources.
Data breaches present another concern. When personal information such as phone numbers, identification details, passwords or financial records is exposed, criminals can use the information for identity theft, account takeovers and targeted fraud.
These threats have increased calls for stronger cybersecurity safeguards and clearer rules governing the handling of personal information.
Nigeria's principal cybercrime legislation is the Cybercrimes (Prohibition, Prevention, etc.) Act 2015, which was amended in 2024.
The law provides a framework for addressing offences involving computer systems, electronic communications and other forms of cybercrime.
A further review could consider whether existing provisions adequately cover emerging threats involving AI-generated impersonation, automated scams, digital identity theft and large-scale data breaches.
It could also examine the responsibilities of technology companies, financial institutions and other organisations in preventing cyberattacks, protecting customer information and reporting security incidents.
However, the precise scope of any proposed amendments, including the provisions to be changed and the timeline for legislative action, would need to be confirmed through official government announcements or a published bill.
Cybersecurity experts have repeatedly stressed the importance of combining effective enforcement with public awareness, responsible technology use and stronger protection of personal information.
Any changes to Nigeria's cybercrime framework will also need to protect legitimate online activity, freedom of expression and the rights of people who use digital platforms for business, education and communication.
For businesses, stronger safeguards could help reduce financial losses, protect customer trust and improve confidence in Nigeria's digital economy.
For ordinary users, the threat remains immediate: suspicious links, requests for verification codes and unexpected demands for money can all be warning signs of fraud.
Until further details of the proposed review are officially confirmed, Nigerians should remain alert to online scams and avoid sharing passwords, one-time passwords or sensitive financial information with unverified contacts.