Last Updated on 1 day ago by Chris Morgan

ATM Card or Mobile Banking Compromised in Nigeria? 10 Steps to Protect Your Money

Discovering that your ATM card or mobile banking account may have been compromised can be frightening, especially when your salary, savings, school fees, or business income is involved. You may notice an unfamiliar debit alert, receive an unexpected OTP request, lose your phone, or discover that someone else has accessed your banking app.

The most important thing is to act quickly and methodically. Reporting the incident early, blocking the affected payment channel, securing your phone number and email, and preserving transaction evidence can help limit further losses and support your complaint.

If you suspect that your bank account has been compromised in Nigeria, do not wait until you know exactly how it happened. Contact your bank through an official channel and explain what you have observed.

This guide explains what to do immediately, how to report unauthorized transactions, what to do if your SIM or phone has been compromised, and how to reduce the risk of another incident.

Important: This article provides general financial education, not a guarantee of reimbursement or a substitute for advice about your particular case. Your bank’s procedures and the applicable rules may vary depending on the transaction and the circumstances.

What Does It Mean When Your ATM Card or Mobile Banking Account Is Compromised?

Your banking details or access may be compromised when another person obtains the information, device access, or authentication method needed to attempt transactions or control your account without your permission.

This does not always mean that your bank’s systems have been hacked. In many cases, fraudsters exploit stolen information, deception, lost devices, or access to a victim’s phone number.

Common warning signs include:

Debit alerts for transactions you did not make.
OTPs or transaction approval requests you did not initiate.
Notifications that your banking password or PIN has changed unexpectedly.
A banking app that logs you out or reports an unfamiliar device.
Unexpected SIM deactivation or loss of mobile network service.
A missing ATM card or a card that has been used without your permission.
Password-reset messages or calls from people claiming to represent your bank.
Transfers or withdrawals you cannot explain.

One unusual alert does not automatically prove fraud; it could be a delayed notification, a mistaken transaction, or another banking issue. However, you should treat unexplained activity as urgent until your bank helps establish what happened.

10 Steps to Take If Your ATM Card or Mobile Banking Account Is Compromised

1. Contact Your Bank Immediately

Your first priority is to notify the bank that holds the affected account. Use the customer-care number on the bank’s official website, its verified mobile app, or another contact method you independently know is genuine.

Explain whether your ATM card is missing, your mobile banking login may have been exposed, your phone has been stolen, or unauthorized transactions have appeared.

Ask the bank to take the appropriate protective measures. Depending on the incident, these may include:

Blocking or hotlisting the affected ATM card.
Temporarily restricting digital banking or transfers.
Disabling compromised mobile-app access or removing an unfamiliar device.
Securing the account against further unauthorized activity.
Recording your fraud report and providing a complaint reference number.

Ask the bank to explain which services will be disabled and whether you can still receive legitimate payments or access funds through a safe alternative.

Do not rely on an email address or telephone number supplied by a suspicious caller or message. A fraudster may impersonate bank staff, so independently verify the contact details.

The Central Bank of Nigeria advises customers who suspect fraud to contact their financial institution promptly. See the CBN’s fraud and scam awareness guidance.

2. Block Your ATM Card if It Is Lost or Exposed

If your physical ATM card is missing, stolen, retained by a suspicious ATM, or potentially copied, ask your bank to block it immediately.

If your banking app offers a card-lock or card-freeze function, you may use it while contacting the bank, provided you can access the genuine app safely. Do not assume that locking the card also disables transfers through mobile banking, USSD, internet banking, or other payment channels.

If you still have the card but suspect someone has learned your PIN, tell the bank. Ask whether the card should be blocked and replaced rather than simply changing the PIN.

Once the bank confirms the card has been blocked, ask about replacement procedures, any applicable fees, and how to confirm that the old card can no longer be used.

Remember: blocking an ATM card may stop card-based transactions, but it may not secure a separately compromised banking app or account login. Address each affected channel.

3. Secure Your Mobile Banking App and Online Banking Login

If someone may know your banking password, app PIN, or login details, secure the account from a device you trust.

After contacting the bank and following its instructions:

Change your mobile banking password or login credentials.
Change any other password that you reused on the compromised account.
Sign out unknown devices or active sessions if the service offers that option.
Ask the bank to reset or re-register your mobile banking access if necessary.
Review your account settings for unfamiliar changes to contact details, beneficiaries, or linked devices.

Use a strong, unique password where passwords are supported. A banking-app PIN and an ATM PIN are not necessarily interchangeable, and changing one does not automatically change the other.

If your phone itself may be under another person’s control, do not use it to reset sensitive credentials until you have made it safe. Use a trusted device and ask the bank for the appropriate recovery process.

Never share your ATM PIN, password, OTP, or transaction authorization code with someone who contacts you unexpectedly. A person claiming to be a bank employee does not need you to disclose these secrets to prove your identity over an unsolicited call.

4. Secure Your SIM Card, Phone Number, and Email

In Nigeria, a mobile number may be linked to transaction alerts, password recovery, OTP delivery, and mobile banking registration. If a fraudster takes control of your number, they may be able to interfere with your ability to secure other accounts.

If your phone is stolen or your SIM suddenly stops working without a clear explanation:

Contact your mobile network provider through an official channel.
Ask it to suspend or secure the affected SIM and explain the process for replacing it.
Tell your bank that your registered phone number may be compromised.
Secure the email account associated with your banking services.
Change exposed email passwords and review recovery details and active sessions.
Ask your bank whether the registered number or mobile-app registration needs to be reset.

A sudden loss of network service can have several causes, so it is not conclusive proof of SIM-swap fraud. Nevertheless, when it occurs alongside suspicious bank activity, treat it seriously.

If your phone is missing, use the device manufacturer’s official security tools where available to lock or locate the device, or erase it if necessary. Consider the consequences of erasing it before doing so, particularly if you need evidence. Inform your bank first if you believe the device can be used to access your funds.

5. Check Your Transactions and Identify Unauthorized Debits

Once immediate access has been restricted, review your transaction history and account alerts. Identify every transaction you do not recognize, not just the first one you noticed.

Record the following information for each disputed transaction:

Date and approximate time.
Amount involved.
Transaction reference or session ID, where available.
Type of transaction, such as an ATM withdrawal, card payment, transfer, or USSD transaction.
Recipient or destination details shown in your records.
Whether you received an alert or authorization request.

For example, suppose your account shows a ₦45,000 transfer that you did not make. Record the date, time, amount, reference number, and the recipient details available in your transaction history. Report that specific transaction to the bank and ask it to investigate.

If several transactions occurred, list them separately. This makes it easier to explain the amount in dispute and reduces the risk of overlooking additional losses.

Do not delete transaction alerts, messages, or emails that may help explain what happened. Keep copies of relevant evidence in a secure location.

6. Report the Fraud Formally and Obtain a Complaint Reference

A telephone call may be a useful first step, but you should also create a formal complaint through the bank’s recognized complaint channel, such as its official app, customer-care email, online complaint form, or branch.

Your complaint should state:

Your name and the affected account, using the identification details the bank requests through its secure process.
What happened and when you first noticed it.
The disputed transactions and total amount involved.
The steps you have already taken to secure the account.
The resolution you are requesting, such as an investigation, protection against further unauthorized activity, and consideration of reimbursement where applicable.

Request a complaint or tracking number and retain the bank’s acknowledgment. If you report the issue at a branch, keep any receipt or written acknowledgment provided.

Do not include your ATM PIN, banking password, or OTP in your complaint. Submit supporting documents only through channels the bank confirms are genuine.

A clear record of your complaint can help you follow up, demonstrate when you notified the bank, and support escalation if the issue remains unresolved.

7. Preserve Evidence and Report the Incident to the Appropriate Authorities

Keep relevant evidence together in a secure folder. This may include transaction alerts, bank statements, screenshots, complaint acknowledgments, suspicious messages, call details, and correspondence with your mobile network provider.

Avoid editing the original evidence unnecessarily. If you make notes or screenshots, keep the original messages or files where possible.

Depending on the circumstances, you may also report the incident to the appropriate law-enforcement authority, including the Nigeria Police Force or the Economic and Financial Crimes Commission (EFCC). Ask the relevant authority about its current reporting procedure and any documents required.

A police or law-enforcement report may support the record of the incident, but it does not automatically guarantee that your bank will reimburse you. Continue communicating with the bank and keep its complaint reference.

For general guidance, consult the CBN’s fraud and scam awareness page.

8. Follow Up on the Disputed Transactions

After filing your complaint, ask the bank what happens next. Find out whether it needs additional information, whether the recipient institution has been contacted, and how you will receive updates.

Keep a simple record of every follow-up:

Information to record	Example
Date reported	29 October
Complaint reference	Your bank-issued reference
Amount disputed	₦45,000
Latest response	Investigation pending
Next follow-up	Date advised by the bank

The dates and figures in this example are illustrative.

Do not assume that every unauthorized transaction will be reversed immediately. The outcome may depend on the transaction type, the evidence, the investigation, and applicable rules. A completed transfer can be difficult to recover, so early reporting is important.

If the bank requests additional documentation, submit it through a verified channel and retain copies. If you disagree with its explanation or decision, ask for the reasons in writing and the next available complaint or escalation route.

9. Escalate an Unresolved Complaint to the CBN

If your bank does not resolve your complaint within the applicable period, you may be able to escalate the matter to the Central Bank of Nigeria’s Consumer Protection Department.

The CBN’s published complaint guidance generally directs customers to complain to their financial institution first and allows escalation when the institution fails to resolve the matter within the relevant timeline. Its published guidance has referred to a two-week period for many complaints, with different timelines for certain complaint categories. Confirm the current rules and the deadline applicable to your case before relying on a particular date.

To prepare your complaint, gather:

Your name and contact details.
The name of the bank or financial institution.
The date and details of the disputed transaction.
The amount in dispute, if any.
Your bank complaint reference and evidence that you first contacted the bank.
Relevant statements and supporting documents.
A clear explanation of the resolution you are seeking.

Do not include your PIN or password in the complaint.

Start with the CBN’s official Complaint Lodgement guidance and complaints management information. You can also check the CBN Complaints Management System portal for the applicable process.

Keep copies of everything you submit. Escalation is a route for seeking review; it is not a guarantee that the disputed funds will be recovered.

10. Strengthen Your Banking Security Before Resuming Normal Use

Once the bank has secured the affected services, review the habits and settings that could leave you exposed again.

Use a unique banking password wherever applicable.
Set a strong screen lock on your phone.
Enable available security notifications and authentication protections.
Keep your phone’s operating system and banking apps updated.
Remove unfamiliar apps or applications you do not trust.
Review beneficiaries, linked devices, account details, and recent transactions.
Avoid banking over public Wi-Fi where a safer connection is available.
Never install remote-access software at the request of an unsolicited caller claiming to be from your bank.
Avoid clicking links in unexpected messages about blocked accounts, refunds, or urgent verification.
Store your card and confidential banking information securely.

Ask your bank which security features are available for your account. Some services offer transaction limits, device management, card controls, or ways to restrict certain payment channels. Availability varies by institution and product.

Do not reactivate a compromised card or device simply because you have changed a password. First make sure the bank has completed the necessary security steps.

What If Money Has Already Been Stolen From Your Bank Account?

If you have already lost money, concentrate on three priorities: stopping further transactions, documenting the disputed activity, and pursuing the bank’s formal complaint process.

First, tell your bank which transactions you did not authorize and ask it to investigate urgently. If the money was transferred to another account, provide the transaction reference and any destination details shown in your records. Ask whether the bank can contact the receiving institution or take any permitted steps to restrict further movement of the funds.

Second, preserve all relevant evidence. Keep the original alerts, statements, messages, and complaint reference. If a fraudster contacted you, preserve the communication details where safe and lawful.

Third, request written updates and follow the applicable escalation process if the complaint remains unresolved.

Be cautious of anyone who promises to recover stolen funds for an upfront fee or claims to have special access to your bank. Recovery scams often target people who have already experienced financial loss. Verify any recovery service independently and never disclose your PIN, password, or OTP to a third party.

Can the bank reverse the transaction? It may be possible in some circumstances, but reversal or reimbursement is not automatic. The bank’s investigation, the type of transaction, the evidence, and the applicable rules all matter. Report the incident promptly and ask the bank to explain the specific process for your case.

How to Report ATM Card or Mobile Banking Fraud in Nigeria

The appropriate reporting route depends on what happened.

Problem	First action
Lost or stolen ATM card	Ask your bank to block the card
Unknown debit or withdrawal	Report the transaction to your bank and request an investigation
Compromised mobile banking login	Ask the bank to secure the account and reset affected access
Stolen phone or suspected SIM swap	Contact your bank and mobile network provider
Suspected criminal fraud	Consider reporting to the appropriate law-enforcement authority
Unresolved bank complaint	Review the CBN’s official escalation process

Use official contact details from the bank’s verified website, app, card documentation, or branch. Do not rely on search advertisements, social media comments, or unsolicited messages as proof that a telephone number belongs to your bank.

For unresolved financial complaints, begin with the CBN’s official complaint lodgement instructions. Follow the instructions that apply to your financial institution and complaint type.

How to Prevent ATM Card and Mobile Banking Fraud

Prevention cannot eliminate every risk, but a few consistent habits can make your accounts harder to misuse.

Protect your PIN, password, and OTP

Never disclose your ATM PIN, online banking password, or OTP to someone who contacts you unexpectedly. Do not write your PIN on your card or store it with the card.

When entering your PIN at an ATM or point-of-sale terminal, shield the keypad from people nearby. Be cautious if a stranger offers unsolicited help with a banking device.

Verify bank messages before responding

Fraudsters may use text messages, calls, social media, or fake websites to create urgency. They might claim your account will be blocked unless you click a link or provide a code.

Instead of following the message’s instructions, contact your bank through an independently verified channel. Do not share security codes merely because a caller knows your name or some account details.

Keep your phone and email secure

Use a screen lock, update your software, and review the applications installed on your device. Protect your email account because it may be used for password recovery and banking notifications.

If your phone or SIM goes missing, act quickly to secure both your mobile number and your banking access.

Review your account regularly

Check transaction alerts and statements instead of assuming every debit is legitimate. Report unfamiliar transactions promptly and keep records of the bank’s response.

If your bank offers transaction notifications, account controls, or transfer limits, learn how they work and use them where appropriate.

Be careful with public devices and shared phones

Avoid saving banking passwords on shared computers or devices. Log out after using a banking service and never leave an unlocked phone unattended.

Do not allow an unfamiliar person to operate your banking app or enter confidential information on your behalf.

Frequently Asked Questions

Can I block my ATM card without visiting a bank branch?

Many banks provide ways to block or freeze a card through an official mobile app, customer-care service, or other approved channel. The available options vary by bank. Contact your bank immediately and ask which method is available for your card.

What should I do if my phone is stolen and it has my banking app?

Contact your bank using a trusted phone or device and explain that the phone may provide access to your account. Ask it to restrict mobile banking access, remove the device where possible, and protect the account against unauthorized transfers. Contact your mobile network provider to secure your SIM and protect your registered number.

What if I accidentally shared my OTP with a stranger?

Treat the situation as urgent. Contact your bank immediately, explain what you shared and when, and ask it to secure the affected account or transaction channel. Do not wait to see whether money disappears. If you reused passwords or disclosed other credentials, secure those accounts as well.

Will my bank refund money stolen from my account?

Not every disputed transaction results in a refund. The outcome depends on the facts of the incident, the transaction type, the bank’s investigation, and the applicable regulatory and contractual rules. Report the transaction promptly, provide accurate evidence, and request a written explanation of the decision.

How long does a bank take to resolve a fraud complaint in Nigeria?

There is no single timeline that should be assumed for every type of fraud complaint. Applicable timelines can depend on the complaint category and current regulatory requirements. Ask the bank to confirm its expected resolution date and consult the CBN’s current complaint guidance if the matter remains unresolved.

Can I report bank fraud to the CBN immediately?

The CBN’s published complaint guidance generally requires customers to approach their bank or financial institution first and allow the applicable resolution period before escalating an unresolved complaint. For immediate account protection, contact your bank without delay. Check the CBN’s current instructions for the appropriate escalation route.

Is it safe to use my account after changing my password?

Not necessarily. If your ATM card, SIM, email, phone, or another authentication method has been compromised, changing one password may not address every risk. Ask the bank to confirm that affected access has been secured and review any unfamiliar devices, beneficiaries, or account changes before resuming normal use.

Should I pay someone who says they can recover my stolen money?

Be very cautious. An unsolicited person who guarantees recovery or requests an upfront fee may be attempting another scam. Use your bank’s official complaint process and appropriate law-enforcement channels. Never share your PIN, password, OTP, or remote access to your phone with a supposed recovery agent.

Final Thoughts

If your ATM card or mobile banking account has been compromised in Nigeria, speed and accurate documentation matter. Contact your bank, block the affected access, secure your phone number and email, review disputed transactions, and obtain a formal complaint reference.

Keep evidence, follow up in writing, and use the CBN’s complaint process if the bank does not resolve the matter within the applicable period. Do not assume that changing a password or blocking a card automatically secures every banking channel.

The sooner you report the incident and follow the appropriate security steps, the sooner the bank can begin responding to the risk. Although no process guarantees recovery of lost funds, taking these actions promptly can help limit further exposure and put you in a stronger position to pursue a resolution.

Editorial note: Banking procedures and regulatory requirements can change. Confirm the latest instructions with your bank and the relevant official authorities before taking action.

Reliable sources consulted

These sources support the factual and editorial framework of the article. Official guidance should take precedence over unsourced claims on blogs or social media.

1. Central Bank of Nigeria — Fraud and Scam Awareness

Primary source for fraud response, phishing, identity theft, social engineering, and securing compromised financial information.

Read the CBN guidance

2. CBN — Complaint Lodgement

Explains the need to contact the financial institution first, document the complaint, and understand escalation procedures.

Read the complaint guidance

3. CBN — Complaints Management

Additional information about unresolved complaints and escalation to the regulator.

Read the complaints management guidance

4. CBN — Consumer Bill of Rights and Duties

Supports advice on safeguarding banking credentials and reporting suspected fraud or errors promptly.

Read the consumer guidance

5. CBN — Consumer Complaints Portal

A further route to check the regulator’s complaint submission and tracking process.

Open the CBN complaints portal

What to Do If Your ATM Card or Mobile Banking Account Is Compromised in Nigeria