CBN Mandates Liveness Checks and Device Limits to Fight Digital Banking Fraud

Why It Matters

By tightening identity checks and limiting early‑stage transaction volumes, the CBN seeks to protect consumers and preserve confidence in Nigeria’s rapidly expanding instant‑payment ecosystem.

Key Takeaways

• CBN requires real‑time liveness checks for account opening
• Mobile apps limited to one device; new device triggers MFA
• First‑day transaction cap ₦20,000 for new app activations
• Fraud losses rose 603% YoY, reaching ₦3.29 bn Q1 2025
• Customers may opt out of instant payments, default remains opt‑in

Pulse Analysis

Nigeria’s central bank is moving swiftly to harden its digital banking infrastructure as instant payments explode. The March 12 circular mandates that every new or reactivated account undergo real‑time liveness verification against the BVN or NIN database, while mobile applications are limited to a single device. This device‑binding rule forces an additional multi‑factor authentication step whenever a user switches phones, curbing the rapid credential‑theft tactics that fraudsters have exploited. Moreover, a ₦20,000 cap on inflows and outflows during the first 24 hours of app activation creates a financial buffer, preventing high‑value scams from striking before robust monitoring can kick in.

The urgency of these controls is underscored by the staggering rise in fraud losses—603% year‑on‑year to ₦3.29 billion in the first quarter of 2025, despite instant‑payment volumes reaching ₦284.99 trillion. The CBN’s broader strategy now incorporates artificial intelligence and machine‑learning models to flag suspicious patterns in real time, complementing the newly required enterprise‑grade fraud monitoring systems. By aligning regulatory standards with cutting‑edge technology, the central bank hopes to stay ahead of increasingly sophisticated criminal schemes that thrive on the speed and anonymity of digital transfers.

For banks and fintechs, compliance will demand swift upgrades to identity‑verification engines, device‑management modules, and transaction‑limit controls, all before the July 1 deadline. While the added friction may initially concern customers, the optional opt‑out of instant payments—maintaining a default opt‑in—balances security with convenience. In the longer term, these safeguards are expected to reinforce consumer trust, sustain the growth trajectory of Nigeria’s digital payments market, and position the country as a model for emerging economies grappling with similar fraud challenges.