Protecting your online accounts from SIM-swap fraud in Nigeria

SIM-swap fraud happens when someone gets your phone number moved onto a SIM card they control, then uses it to receive your one-time codes. In Nigeria, where bank apps, wallets, email and most online accounts send codes by SMS, losing your number can mean losing access to almost everything within an hour.

How does a SIM swap actually work?

The fraudster needs two things: enough personal details to pass as you, and a way to get a replacement SIM issued. Details come from leaked data, social media, phishing calls ("I am calling from your bank, please confirm your date of birth") or a stolen phone. The replacement SIM comes from a network office or agent who is either fooled by fake documents or paid to look away.

Once the new SIM is active, your own SIM goes dead. The fraudster then taps "Forgot password" on your banking app, email or wallet, receives the reset code by SMS and takes over. Many victims only notice when the debit alerts start, and by then the alerts may be going to the fraudster's SIM too.

What are the warning signs?

The clearest sign is a phone that suddenly shows "No service" or "SIM not registered" while people around you on the same network have signal. Restarting does not help. Other signs include:

• an SMS saying your SIM replacement request has been received when you made none;
• calls from "customer care" asking you to confirm a code they just sent;
• emails about password changes you did not make;
• being logged out of WhatsApp or your email on your own phone.

Treat a dead SIM on an ordinary day as an emergency. Ten minutes can decide how much you lose.

What should you do in the first hour?

Use another phone to call your bank's fraud line and ask them to freeze transfers on your accounts. Do the same for any fintech wallet you use. Then contact your network operator, explain that your SIM stopped working without a request from you and ask them to block the replacement.

Next, from a computer or a trusted device, change your email password and sign out of all sessions, because email is usually the master key for everything else. Finally, go to the network's office with your ID and NIN details to recover the number properly, and keep a written record of who you spoke to and when.

How do you stop your number being the only key?

No single SMS should be enough to open your important accounts.

Set a SIM PIN on your phone, so a stolen handset cannot be used to receive codes after a restart. Where an app allows it, switch two-step verification from SMS to an authenticator app such as Google Authenticator or Microsoft Authenticator, which generate codes on the device itself. Protect your email with a long unique password and its own second factor.

Keep your NIN, BVN and date of birth out of public posts and out of strangers' forms. No bank, network or legitimate company will ask you to read back a code they just sent you. Anyone who does is trying to get into your account.

What about betting and gaming accounts?

These accounts hold money too, and many of them use the phone number as the login and the recovery route. If a fraudster controls your number, a password reset by SMS can hand them your balance. When codes stop arriving and the 1win ng login rejects a password you know is right, a SIM swap is one of the quieter explanations. Betting is for adults 18+, and anyone who plays should secure that account as carefully as a bank app.

It helps to know how a platform's sign-in and recovery work before something goes wrong. One independent walkthrough of the 1win login shows the phone and email tabs of the 1win bet login mobile form and explains that a password reset sends a code to whichever channel you pick, which is exactly why both your SIM and your email need protecting. If a SIM swap hits you, the email route lets you reset the 1win sign in password while the number is still being recovered; change it again once the SIM is back in your hands.

Fraudsters also build look-alike login pages for popular betting sites, so type the address yourself instead of tapping a sponsored result, and make account changes on the platform itself, never through a guide or a chat.

A short checklist to finish today

Set a SIM PIN. Move important accounts from SMS codes to an authenticator app where possible. Give your email a password you use nowhere else. Save your bank's fraud line in your phone and on paper. Tell older relatives about the "No service" warning sign, because they are often the first targets.

None of this takes long. Together these steps turn a SIM swap from a disaster into an annoying afternoon at the network office, and they protect every account that depends on that one SIM card.