People. Companies. A more informed tomorrow.
RRSource helps you see the bigger picture — real experiences, verified information and what happened after the job.
The newest scams do not always look suspicious. They arrive wearing the identity of banks, businesses, government agencies and people you already trust. As impersonation fraud becomes more convincing, the real defence is no longer asking whether something looks genuine — but whether it can be independently verified.
SCAMS & FRAUD
The message has your bank's name. The website looks right. The WhatsApp profile has the logo. The person knows enough about you to sound convincing.
That may now be the warning.
For years, Nigerians have been taught how to spot a scam.
Look for bad spelling.
Look for a strange email address.
Look for unbelievable promises.
Look for somebody asking you to send money urgently.
Those lessons still matter.
But they are becoming less useful against a different kind of fraud.
The modern scammer increasingly does not want to look like a scammer at all.
He wants to look like someone you already trust.
Your bank.
A government department.
A company you know.
A customer-service agent.
A legitimate seller.
Your employer.
Perhaps even someone in your family.
And recent warnings from regulators outside Nigeria are showing just how convincing that impersonation can become.
On 1 September, the US Federal Trade Commission warned consumers about scammers creating fake websites that impersonated genuine car dealerships.
These were not crude pages offering suspiciously cheap vehicles.
The scammers were copying legitimate dealership information and presenting apparently genuine businesses online. Victims believed they were dealing with a real dealer, transferred money and later discovered that the actual dealership knew nothing about the transaction.
Two weeks later, on 15 September, the FTC issued another warning.
This time scammers were impersonating farm-equipment businesses, advertising equipment that did not exist and collecting payments from buyers who believed they were purchasing from legitimate companies.
Different product.
Same trick.
Don't create a fake company nobody has heard of.
Borrow the reputation of a real one.
That distinction matters enormously.
The scam no longer begins by asking:
Can I convince this person to trust me?
It begins with:
Whose trust can I steal?
The method is hardly foreign to Nigeria.
The Economic and Financial Crimes Commission has long warned that phishing and spoofing operations may use copied bank logos, letterheads and lookalike websites to persuade people to hand over usernames, passwords and other banking information.
The EFCC has specifically described variations involving online commerce, vehicles and other sales.
The Central Bank of Nigeria has separately warned about people falsely claiming to represent the CBN while offering grants, contracts, loans and intervention funds.
The CBN says it does not distribute such opportunities through unsolicited WhatsApp messages, SMS, social-media approaches or phone calls, and does not appoint unofficial intermediaries to collect fees on its behalf.
Even the EFCC-linked Special Control Unit Against Money Laundering carries warnings about people presenting themselves on Instagram, Facebook, WhatsApp and other channels as agents able to obtain SCUML certificates.
The irony is almost perfect.
An anti-money-laundering institution itself has to warn the public about people impersonating it.
That tells us something important.
No organisation's reputation is automatically protected from being borrowed by somebody else.
Imagine the difference.
A stranger sends:
“Send ₦250,000 and I will double it.”
You are suspicious immediately.
Now imagine:
“GTBank Security: We detected an attempted transfer from your account. Your account has been restricted. A verification officer will contact you.”
A few minutes later, somebody calls.
They know your name.
They know your number.
They may know your bank.
Their WhatsApp photograph carries a corporate logo.
They tell you they are trying to protect your money.
Then they ask for the OTP that has just arrived on your phone.
Psychologically, this is a completely different attack.
The scammer has changed your role.
You no longer think you are being asked to take a risk.
You think you are preventing one.
That is why impersonation can be so effective.
FTC data gives an indication of how expensive that psychological trick has become.
More than one million impersonation scams were reported to the agency in 2025, making impersonation its most reported fraud category for the ninth consecutive year.
Reported losses reached approximately $3.5 billion.
The FTC says some of the costliest cases begin with a supposed bank-security warning.
Victims are convinced that their money is under threat and are instructed to transfer it somewhere “safe.”
The safe account belongs to the criminal.
That phrase deserves remembering:
“Move your money to protect it.”
It converts fear into action.
And speed is usually part of the design.
Your account is compromised.
The police are coming.
Your BVN will be blocked.
Your SIM will stop working.
Your package cannot be delivered.
Your account needs upgrading.
Your transaction must be reversed now.
Urgency reduces the amount of time available for the most dangerous thing a victim can do to a scammer:
check independently.
Nigeria's regulators are clearly treating telephone identity as a serious financial-security problem.
On 31 August, the Nigerian Communications Commission published new consumer information about its Telecommunications Identity Risk Management System, or TIRMS.
The system allows authorised organisations to check whether a mobile number has been swapped, reassigned, blacklisted, churned or otherwise changed before relying on it for sensitive transactions.
That may sound technical.
It isn't.
Your phone number can unlock enormous parts of your life.
Bank alerts.
Password resets.
WhatsApp.
Email recovery.
Fintech accounts.
Two-factor authentication.
Identity verification.
If somebody can convincingly become “you” at the telephone layer, the damage can travel far beyond the SIM card.
The NCC specifically advises Nigerians never to disclose PINs, passwords or OTPs and to contact their financial institution immediately when suspicious activity appears around a number.
The Central Bank has also introduced tighter security measures, including stronger fraud monitoring and additional controls around sensitive banking activity.
The infrastructure is changing because the threat is changing.
There is another problem.
Identity theft no longer has to stop at logos and websites.
Nigeria's Data Protection Commission has warned that emerging technologies, including artificial intelligence, are making the distinction between genuine and stolen identities increasingly difficult.
The Commission has also highlighted cases involving people assuming the identities of public figures to deceive their contacts and associates.
This moves the problem into far more uncomfortable territory.
A familiar face is no longer enough.
A familiar voice is no longer enough.
A photograph is no longer enough.
A corporate logo certainly isn't enough.
And eventually even video may not be enough.
The oldest advice in fraud prevention was:
Trust what you can see.
The emerging advice may have to become:
Verify what you can see.
This is particularly relevant in Nigeria because so much commerce happens conversationally.
The seller isn't always behind a checkout page.
They are on WhatsApp.
Property enquiries happen there.
Cars are advertised there.
Jobs are discussed there.
School fees are arranged there.
Small businesses take orders there.
Agents negotiate there.
Family members request money there.
A profile photograph, Nigerian number and familiar writing style can therefore carry far more psychological authority than they should.
Technology companies are increasingly developing scam-detection systems aimed at identifying suspicious messages, impersonation and social-engineering patterns.
They would not be doing that if the solution were simply:
“Don't be gullible.”
The scams are getting better.
Defence has to get better too.
That may now be the wrong question.
Fake things are increasingly designed to look real.
Instead ask:
Can I verify this independently?
A bank calls?
Hang up and call the number you already know.
A business sends new payment details?
Confirm through another established channel.
Someone claiming to be an official sends a WhatsApp message?
Visit the institution's website yourself rather than clicking their link.
Someone sends you an OTP and asks you to read it back?
Stop.
A seller sends a company registration certificate?
Verify the company independently.
A familiar person suddenly needs money?
Call them.
Not on the number supplied in the message.
Not through the link they gave you.
Use a route you already trusted before the request arrived.
That small difference destroys much of the impersonator's advantage.
For years, discussions about online fraud focused on the criminal's identity.
Who is behind the account?
Where are they?
What name are they using?
But perhaps the more useful question today is:
Whose reputation are they borrowing?
Because that is increasingly where the value lies.
The criminal may have no credibility whatsoever.
But Zenith Bank does.
The CBN does.
DHL does.
Jumia does.
Your employer does.
Your brother does.
Your landlord does.
A real estate company does.
A respected Instagram merchant does.
A government ministry does.
So the scammer does not always need to establish a trustworthy identity.
They simply have to place themselves close enough to an existing one.
There is a secondary casualty.
Every successful impersonation weakens legitimate trust.
If customers repeatedly see fake bank messages, eventually genuine bank communication becomes harder to trust.
Fake estate agents damage genuine estate agents.
Fake sellers make legitimate online merchants look suspicious.
Fake recruiters make real job opportunities harder to believe.
Fake government representatives reduce confidence in genuine government outreach.
This is how fraud damages an ecosystem.
The victim loses money.
The impersonated person or organisation loses something else:
the certainty attached to its name.
That is reputation damage even when the organisation did absolutely nothing wrong.
The FTC's latest warnings are useful to Nigerians not because American car dealerships and American agricultural equipment are suddenly our biggest problem.
They matter because the underlying behaviour is transferable.
Find something people already trust.
Copy it.
Place yourself between the trusted party and the victim.
Create urgency.
Move the victim away from independent verification.
Take the money.
It can happen with a tractor in Iowa.
It can happen with a Tokunbo car in Lagos.
It can happen with an apartment in Abuja.
It can happen with a supposed bank officer in Port Harcourt.
It can happen with an Instagram vendor in Ibadan.
The product changes.
The architecture does not.
And that may be where the next generation of consumer protection has to concentrate.
Not simply:
“Who says they are trustworthy?”
But:
“What independent evidence proves they are who they claim to be?”
Because the latest scammer may not look suspicious at all.
They may look exactly like someone you trust.
And that is the trick.
Previous
When Modernising a Brand Starts Erasing It
Next
Thirty Seconds: How Fast Can a Reputation Collapse?
Loading comments…
