A privately-run website, nimcverify.ng, has been found selling Nigerians’ sensitive personal information, including National Identification Number (NIN) records, for as little as ₦150, despite having no official link to the National Identity Management Commission (NIMC). Investigations reveal that the platform allows anyone to retrieve another person’s NIN details using nothing more than a phone number.
The process is disturbingly simple. After inputting a target’s phone number, users are prompted to make a small payment either to an auto-generated account unique to their request or directly to the site administrator’s personal account. Once payment is confirmed, the system delivers the NIN record in minutes. The platform also advertises other illicit services such as NIN modification, Bank Verification Number (BVN) retrieval, and unauthorised identity data alterations.
The pricing structure makes the service even more alarming. For as little as ₦150 to ₦280, a buyer can obtain a complete NIN printout containing an individual’s biodata. Such details, if misused, could enable identity theft, fraudulent bank transactions, SIM card registration scams, and other cybercrimes. Experts warn that the low cost not only makes the data accessible to organised criminal networks but also to ordinary individuals with malicious intent.
The exposure of nimcverify.ng raises serious concerns over data protection and the integrity of Nigeria’s identity management system. While NIMC has not officially commented on the matter, the case underscores the vulnerability of personal records and the urgent need for tighter enforcement of the Nigeria Data Protection Act. It also highlights the growing underground market for identity-related services, where stolen or misused data can be traded openly with minimal risk of detection.
Cybersecurity specialists have called for a thorough investigation into how such sensitive records are being accessed in the first place, as well as stricter monitoring of online platforms offering identity-related services. Without immediate action, the breach could further erode public trust in national identity systems, leaving millions of Nigerians at heightened risk of fraud and financial loss.
