Personal Identity Data Still Traded on Nigeria's Dark Web

Published Date : 8/14/2025 

29

The Foundation for Investigative Journalism (FIJ) has revealed that different forms of personal data, including the National Identification Number (NIN), Bank Verification Number (BVN), and facial photos of some Nigerians, are still easily accessible on websites that have no affiliation with the National Identity Management Commission (NIMC).

FIJ says in a recent report that it found a website dubbed NINPrint.com through which its reporter was able to access the NIN and BVN of some Nigerians, including three journalists, by just using a phone number and a few hundred Naira. Four of the NINs and BVNs were purchased for an amount as small as 560 Naira, an amount that is less than half a dollar.

The revelation from FIJ comes over a year after it uncovered the activities of another website, XpressVerify, which was found to be involved in illicit NIN activities. The discovery, together with another by digital rights advocacy group, Paradigm Initiative, pushed the NIMC and other relevant bodies to take preventive measures against data peddling on the dark web. At the time, the NIMC also flagged five websites which it said were involved in data harvesting.

FIJ decries the risks of easily accessing such important personal information, noting that it can be used by fraudsters to create bank accounts or access existing ones to steal funds. In some cases, the NIN, together with the BVN, phone numbers, and location address of an individual, easily accessible on the web, can be used to build fake fraudulent profiles to commit far-reaching crimes, FIJ fears.

The outlet emphasizes that easy access to such sensitive personal information is at variance with certain provisions of the NIMC Act, 2007, and the Nigeria Data Protection Act, 2023, which state that such information can only be accessed either through express personal consent or through a court order.

Concerns about data mishandling have been rife in Nigeria. Last month, the country’s anti-graft agency (EFCC) raised an alarm over the sale of stolen NIN and BVN data used to carry out financial fraud through fintechs. In July, the BVN issuance figure reached 66.2 million, according to Nigeria Communications Week, indicating a steady adoption trend in the past four years. 

Q: What is the National Identification Number (NIN) in Nigeria?

A: The National Identification Number (NIN) is a unique identifier assigned to every Nigerian citizen and legal resident by the National Identity Management Commission (NIMC). It is used for various official purposes, including voter registration, bank account verification, and government services.

Q: What is the Bank Verification Number (BVN) in Nigeria?

A: The Bank Verification Number (BVN) is a unique identification number assigned to each bank customer in Nigeria. It is used to verify the identity of individuals for banking transactions and to prevent fraud.

Q: What are the risks of personal data being sold on the dark web?

A: The risks include identity theft, financial fraud, and the creation of fake profiles for criminal activities. Easy access to personal data can lead to significant financial losses and privacy violations for individuals.

Q: What measures have been taken to prevent data peddling on the dark web in Nigeria?

A: The National Identity Management Commission (NIMC) and other relevant bodies have taken preventive measures, including flagging websites involved in data harvesting and implementing stricter data protection laws. However, the issue persists, indicating a need for ongoing vigilance and enforcement.

Q: What is the role of the Foundation for Investigative Journalism (FIJ) in this issue?

A: The Foundation for Investigative Journalism (FIJ) is an organization that conducts in-depth investigations into various issues, including data privacy and security. They have played a crucial role in uncovering the sale of personal data on unaffiliated websites and raising awareness about the risks involved. 

More Related Topics :