Fraudsters Hack Moniepoint Payment Platform, Nigerians Lose N1.1 Billion

In a shocking turn of events, fraudsters have infiltrated the Moniepoint payment platform, resulting in financial losses amounting to N1.1 billion. This breach highlights the increasing sophistication of cybercriminals targeting financial institutions in Nigeria.

Details of the Cyber Attack

Justin Enang, the prosecutor from the Lagos Police Special Fraud Unit (PSFU), disclosed that the alleged mastermind, Mr. Sunday Ozimede, was arraigned in the Lagos Division of the Federal High Court. He faces charges of conspiracy and obtaining N945.7 million under false pretenses.

The prosecutor revealed that Mr. Ozimede planted a malicious bug in Moniepoint’s data system. This action caused financial damages amounting to N145 million to the microfinance bank.

Legal Framework and Charges

The case has been built under various sections of Nigerian law, including:

• Cyber Crimes Act, 2015 (Amended 2024): Mr. Ozimede’s actions violated sections 27(i)(b) and 14 of the Act.
• Money Laundering (Prevention and Prohibition) Act, 2022: He contravened sections 18(2)(b) and (d), punishable under section 18(3).

These laws were designed to curb cybercrimes and financial fraud in Nigeria, but this incident underscores the urgent need for stricter enforcement and advanced cybersecurity measures.

Moniepoint and AfriGO to Distribute 5 Million Contactless Cards to Boost Digital Payments in Nigeria

Court Proceedings and Bail Conditions

During the court session, Mr. Ozimede pleaded not guilty to the charges. Justice Ambrose Lewis-Allagoa granted him bail set at N50 million, requiring a surety who owns a landed property.

The case is expected to proceed with further investigations and hearings as authorities work to unravel the full extent of the fraud.

Implications for Financial Institutions

This breach is a wake-up call for financial institutions in Nigeria to enhance their cybersecurity frameworks. Moniepoint, a trusted microfinance platform, serves millions of Nigerians daily. Such incidents erode customer trust and highlight vulnerabilities in digital payment systems.

Preventing Future Cyber Attacks

To avoid similar occurrences, financial institutions must:

• Invest in Advanced Cybersecurity Tools: Deploy artificial intelligence (AI) and machine learning (ML) to detect and prevent fraud in real-time.
• Regular System Audits: Conduct frequent security audits to identify and fix vulnerabilities.
• Employee Training: Educate staff on recognizing and preventing potential cyber threats.
• Collaboration with Law Enforcement: Work closely with cybersecurity agencies to monitor and respond to threats.

A Call to Action for Customers

Customers should also take precautions to protect their accounts by:

• Using strong, unique passwords.
• Avoiding sharing sensitive information online.
• Regularly monitoring their account statements for unauthorized transactions.

Conclusion

The Moniepoint hack serves as a reminder of the evolving nature of cybercrime. While the financial loss is significant, it is crucial for stakeholders to learn from this incident and strengthen defenses against future attacks.

By implementing robust cybersecurity measures and fostering a culture of vigilance, Nigeria can safeguard its digital economy and protect its citizens from financial fraud.

For more details, read the full report on The Gazette.