NITDA – Mosravo Endless Solutions Publications

NITDA and CBN to Hold Sovereign Cloud Talks for Banks and Fintechs

admin — Wed, 21 Oct 2026 12:50:23 +0000

The National Information Technology Development Agency (NITDA) and the Central Bank of Nigeria (CBN) will bring together regulators, banks, fintech companies and digital infrastructure providers for an Executive Regulatory Dialogue on the National Sovereign Cloud Initiative (NSCI). The meeting, announced on 19 October 2026, is scheduled for 28 October 2026 in Lagos.

The goal is to work out how Nigeria’s push for “sovereign” cloud, meaning cloud services that keep data and control within the country, will be applied in one of the most data-heavy parts of the economy. For anyone who runs payments, lending, savings or accounting systems in the cloud, this is a development to follow closely.

What is on the agenda

According to the announcement, the dialogue will cover regulatory expectations, how ready domestic infrastructure is, and practical approaches to data localisation and sovereign cloud adoption. Four themes are expected to dominate:

Workload classification: deciding which systems and data must be hosted under sovereign or domestic arrangements, and which can stay where they are.
Regulatory compliance: how institutions will show they meet the rules.
Infrastructure capacity: whether local data centres and providers can handle the demand.
Investment opportunities: where new capacity and services are needed.

The organisers say they want to identify priority actions and areas that still need regulatory clarity, with implementation described as “coordinated, practical and phased”. No new obligations were announced with the dialogue itself.

How we got here

The financial-sector talks build on a set of policy steps taken earlier this year. In August 2026, NITDA Director-General Kashifu Inuwa Abdullahi signed a package of cloud instruments, including a National Cloud Computing Guideline, a National Cloud Technical Guideline and a National Digital Infrastructure Assurance Framework. The assurance framework is meant to verify, through assessment, that cloud and data centre providers actually meet national technical standards rather than simply claiming to. NITDA also set up a taskforce to drive the sovereign cloud programme.

NITDA said a regulatory platform for onboarding, assessing and certifying providers would be running by October 2026, with plans for a public register of certified cloud providers. The agency has stressed that the same standards apply to local providers and global hyperscalers, and that Nigeria is not closing its market to foreign cloud companies.

The CBN’s payment data rules

The CBN’s involvement matters because of its own data localisation directive. As reported, it requires payment transaction data generated in Nigeria to be stored and managed domestically, and covers deposit money banks, microfinance banks, mobile money operators, switching companies and payment service providers, with effect from 1 January 2027. A certified provider register would give these institutions a standard way to check whether a cloud provider meets the requirements, something they previously lacked.

Why this matters beyond the big banks

Even if your business is not a licensed financial institution, these changes may reach you. Many SMEs build on fintech platforms, payment gateways and core banking software, and those partners will be the first to adjust. That could mean new hosting arrangements, updated contracts and data-processing terms, and in some cases price changes as providers pass on the cost of local infrastructure.

There are potential benefits too. More local data centre capacity can mean lower latency for Nigerian users, less exposure to foreign-exchange swings on cloud bills paid in dollars, and clearer rules about where customer data lives, which helps when dealing with the Nigeria Data Protection Act.

Key details are still open, including the exact certification criteria, any fees and how strictly workload classification will be applied. That is precisely what the Lagos dialogue is meant to clarify, so businesses should avoid making expensive moves on rumours alone.

What you should do

Map your data. List the systems that hold payment, customer and financial records, and note where each one is hosted.
Ask your providers. Write to your cloud, payment and software vendors and ask how they plan to meet the NSCI and CBN requirements, and whether they intend to seek NITDA certification.
Review contracts. Check whether your agreements let you choose data location and move data if rules change.
Watch for the outcomes of the 28 October dialogue and NITDA’s certified provider register before committing to migrations.
Budget early if you are a payment service provider or microfinance bank, since the CBN directive’s January 2027 date is close.

Sources

Featured image: Photo: "Mediq Utrecht Data center Gwan Kho" by Gwan Kho, CC BY-SA 2.0, via Openverse — source

Scam Alert: Sextortion and AI-Faked Nudes Targeting Nigerians

admin — Wed, 21 Oct 2026 11:02:50 +0000

Nigerian authorities have issued a string of warnings this month about sextortion, a form of online blackmail that is now being boosted by artificial intelligence. The Nigeria Police Force National Cybercrime Centre (NPF-NCCC) raised the alarm at its October cybersecurity awareness events in Abuja, and NITDA’s computer emergency response team issued an advisory about criminals using AI to create fake explicit images. This alert is for everyone who uses social media, dating apps or messaging apps, and especially for parents, teachers and employers who look out for young people and staff.

Key takeaways

Sextortion is blackmail: criminals threaten to release intimate images or videos unless the victim pays money, sends more images or meets other demands.
NITDA warns that criminals can now use AI to create convincing fake explicit images, so you can be targeted even if you never shared anything.
Paying does not make it stop. Blackmailers usually come back for more.
Save evidence, stop responding, report the account to the platform and report the crime to the police cybercrime centre.
Sharing someone’s intimate images without consent is an offence in Nigeria, and the police say cases involving children are treated as particularly serious.

What the authorities are saying

On 17 October 2026, at the World Cyber Security Awareness Walkathon in Abuja, AIG Akaninyene Ezima, who heads the NPF-NCCC, warned Nigerians about romance scams and sexual extortion, in which fraudsters build online relationships to obtain intimate photos and later threaten to publish them. He also flagged investment fraud that shows victims fake profit dashboards before blocking withdrawals, and noted that some Nigerians have lost hundreds of millions of naira, with others losing billions, to such schemes.

Days earlier, the Inspector-General of Police used the centre’s 2026 awareness campaign to list common online offences, including sharing someone’s nude or private photos or videos without consent. He urged victims of sextortion, fraud and cyberbullying to come forward and report.

In early October, NITDA’s CERRT advisory warned of rising sextortion threats and the growing use of AI-generated explicit images. It stressed that children, teenagers and adults can all be targeted.

How the scam works, step by step

1. First contact

According to NITDA, the approach often starts on social media, messaging apps, dating platforms or even online games. The account may look like an attractive stranger, a fellow student or a new business contact. NITDA notes that it may be impossible to verify who is really behind such an account.

2. Building trust

The criminal invests time in friendly or romantic chat. Police say fraudsters use these online relationships to gain trust, with the aim of getting the victim to share private photos or videos.

3. The trap closes

Once they have images, or have created fake ones with AI, the tone changes. The victim is threatened that the material will be published or sent to people they know unless they pay or comply.

4. Escalating demands

The first payment is rarely the last. NITDA warns that complying does not guarantee the threats stop, and blackmailers may keep asking for more money or more images.

The AI twist: fakes made from ordinary photos

The newest danger is that a criminal no longer needs a real intimate image. NITDA’s advisory explains that AI tools can be used to create convincing fake explicit images. In practice that means a normal profile picture, graduation photo or work headshot could be misused. Victims may feel they have no defence because “it looks real”. Remember: the shame belongs to the criminal, not to you, and a fake image is still evidence of a crime.

Warning signs

A new online contact who moves very quickly to flirting or romantic talk.
Pressure to switch from a public platform to a private messaging app or video call.
Requests for photos, or attempts to steer a video call towards undressing.
A profile with few real connections, recently created, or using photos that look too polished.
Sudden threats, a countdown or a list of your contacts appearing in a message.
Any demand for money or more images in exchange for “deleting” content.

How to protect yourself and your family

Do not send intimate images or videos online, even to people you know or trust. This is NITDA’s first recommendation.
Lock down your profiles. Police urge caution about sharing personal information and photos online, so limit who can see your friends list, photos and workplace.
Be careful with strangers on dating apps, social media and gaming platforms, and treat unverified accounts with caution.
Talk to children and teenagers. NITDA notes that young victims often stay silent out of fear or shame. Make it clear they can come to you without being punished.
Employers: include sextortion in staff security awareness sessions, so employees know it is safe to ask for help if they are targeted.

What to do if you are a victim

Do not pay and do not send more images. Paying rarely ends the threats.
Save evidence before blocking. Take screenshots of messages, usernames, profile details, phone numbers, payment requests and account details. Do not delete the chat.
Stop all contact once you recognise the threat.
Report the account and the content to the platform where it happened.
Use StopNCII.org. This free service creates a digital fingerprint of an image on your own device, without uploading it, so that participating platforms such as Facebook, Instagram, TikTok and Snapchat can block it from being posted.
Report to the police. The NPF-NCCC accepts reports through its e-reporting portal at nccc.npf.gov.ng/ereport and by email at nationalcybercrimecenter@nccc.npf.gov.ng.
Get support. NAPTIP’s cybersecurity response team handles online exploitation, and organisations such as WARIF, the Mirabel Centre and, for minors, the Cece Yara Foundation offer counselling and legal support. If you have already paid money, you can also report to the EFCC.

What you should do

Share this alert with family members, students and staff, and agree a simple rule at home and at work: if anyone is ever threatened with intimate images, real or fake, they should tell someone they trust, keep the evidence and report it, without paying a single naira. Sextortion depends on fear and silence; speaking up early takes away the criminal’s power.