Nigerian Communications Commission warns AI‑driven fraud threatens telecoms and banking

The Nigerian Communications Commission (NCC) has issued an alert that artificial intelligence is being exploited by cybercriminals to launch sophisticated attacks on the country’s telecommunications and banking systems. The warning was delivered by Dr Aminu Maida, the commission’s executive vice‑chairman, during the second International Cybersecurity Conference in Abuja on 28 October 2026.

Addressing the audience via Sunday Oshadami, the commission’s Executive Commissioner for Technical Services, Maida outlined several AI-facilitated dangers, which included tailored phishing schemes, automated tools for harvesting login credentials, deep-fake media crafted to circumvent multi-factor authentication, and malware capable of altering itself to avoid detection. Emphasizing that telecommunications infrastructure forms the backbone of Nigeria’s digital economy by facilitating banking, commerce, public services, and communication, he warned that a breach of any telecom provider could trigger ripple effects throughout the financial industry, national defense, and civil administration.

Background

The NCC has classified telecommunications infrastructure as Critical National Information Infrastructure, a designation that underscores the sector’s strategic importance. In response, the commission has set up a Computer Security Incident Response Team to monitor threats, share intelligence and enforce incident reporting. It has also introduced a Cyber Resilience Framework that outlines common security standards for licensed operators. To demonstrate the shifting landscape of AI-powered risks, Maida referenced recent international events, including hacks targeting supermarket cooling equipment in France and a spyware operation that infected the devices of at least 45 journalists in the Middle East during the 2024-2025 period.

Why it matters

The potential impact of AI‑powered fraud extends beyond individual victims. Disruption of telecom services could interrupt banking operations that rely on mobile and internet platforms, affecting both consumers and businesses. Moreover, the NCC warned that such attacks could undermine national security by impairing communication channels used by defence and civil authorities. The commission’s call for zero‑trust security architectures, continuous auditing of AI models for vulnerabilities, and resilient network designs reflects concerns that existing security measures may be insufficient against machine‑learning attacks that operate at microsecond speeds.

What happens next

The NCC has urged all licensed telecommunications operators to adopt the recommended zero‑trust security frameworks and to conduct regular audits of any AI systems in use. The commission’s Computer Security Incident Response Team will continue to coordinate threat monitoring and intelligence sharing. While specific enforcement actions were not detailed, the NCC indicated that compliance with the Cyber Resilience Framework will be closely monitored, and operators may be required to demonstrate the ability to recover from attacks without prolonged service outages.