Nigerians’ National Identification Numbers (NIN) and Bank Verification Numbers (BVN) are allegedly being sold through illegal data marketplaces for between N100 and N300, an investigation has found.
The investigation by the Foundation for Investigative Journalism (FIJ), led by journalist Timileyin Akinmoyeje, examined how personal identity information could be obtained through operators linked to Nigeria’s identity verification system.
As part of the investigation, FIJ visited Ikeja, Lagos, where several individuals operating booths outside NIMC facilities were approached about obtaining NIN information. One of the men reportedly declined when asked to provide another person’s details, while the investigation found that such services were being offered around the area.
Brandspur News reports that the investigation also traced the alleged trade in personal information to individuals operating through networks connected to Front End Partners (FEPs), companies officially licensed by the National Identity Management Commission (NIMC).
According to the investigation, some FEPs allegedly sub-lease their authorised access to other operators, who then use it to facilitate activities in the black market for personal data. The arrangement, according to the report, creates a pathway through which information meant to be protected within official identity systems can be accessed by unauthorised parties.
The investigation also examined a platform initially known as NimcVerify, operated by Timztech Developers. The platform subsequently appeared under the names Bexlo and Nuvra, with changes to its branding, logos and interface, while the investigation found that its backend remained the same.
FIJ further reported that its website had been subjected to multiple coordinated cyberattacks which it traced to the NIMC headquarters in Abuja. The attacks occurred as the organisation investigated the alleged misuse of identity data and access granted to authorised partners.
The findings raise concerns about the handling of Nigerians’ personal information, particularly where access intended for legitimate verification purposes can allegedly be transferred to unauthorised operators.
For Nigerians, the reported availability of NIN and BVN information for small amounts of money highlights the potential exposure of sensitive identity details and the importance of stronger controls around systems holding citizens’ personal data.
