Lagos State is launching a multilingual cybersecurity campaign in English, Yoruba and Pidgin English to help residents identify online fraud and protect their banking, email, social-media and work accounts.
The month-long public education drive will run across traditional and social media during October. It will focus on phishing scams, stronger passwords, multifactor authentication and regular software updates, according to a statement issued by Commissioner for Information and Strategy Gbenga Omotoso.
Governor Babajide Sanwo-Olu said online safety could not be left entirely to government agencies, technology companies or security professionals. Individuals, families, businesses and public institutions all had a role in reducing digital risks.
“Cybersecurity is a shared responsibility. Citizens must remain vigilant, understand common cyber risks, and take proactive steps to protect themselves from cybercriminals,” the governor said.
The campaign will be coordinated by the Lagos State Ministry of Innovation, Science and Technology and the state’s Cybersecurity Advisory Board, led by Professor Fene Osakwe. The government said using three widely understood languages should make practical security advice available to residents who may not engage with technical information presented only in formal English.
Why language matters in fraud prevention
Online fraud often succeeds because criminals create urgency, confusion or fear. A message may claim that a bank account will be blocked, a parcel cannot be delivered, a relative needs emergency money or a payment must be made immediately.
The technical method may be sophisticated, but the final step frequently depends on persuading a person to click, transfer money, reveal a verification code or approve a login. Advice that is clearly explained in the language people use every day can therefore be as important as security software.
The campaign also recognises the diversity of Lagos, where millions of people use smartphones for banking, shopping, transport, government services and business. New users may enter the digital economy without receiving formal instruction on how to recognise fraudulent links, impersonated accounts or social-engineering tactics.
Lagos said it introduced cybersecurity guidelines earlier in 2026 for small, medium and large organisations. The guidelines provide scalable measures for protecting digital assets and managing risk. The state is also working towards ISO 27001 certification, an international standard for information-security management systems.
Four habits that reduce everyday cyber risk
Pause before responding to urgent messages. A request to transfer money, confirm a password or open a link should be verified through a separate channel. If a message appears to come from a bank, employer, colleague or relative, contact that person or organisation using a number or website already known to be genuine. Do not rely on the contact details contained in the suspicious message.
Use a different password for every important account. Reusing one password means a breach at a less secure service can expose email, banking and social-media accounts. Current security guidance recommends long, random passwords or passphrases, ideally stored in a reputable password manager. Email deserves particular protection because it is often used to reset other accounts.
Turn on multifactor authentication. This adds a second check, such as an authentication-app code, security key, fingerprint or facial scan. It can stop an attacker who has obtained a password. Residents should never read an authentication code or one-time banking code to an unsolicited caller.
Install updates promptly. Phone, computer, browser and application updates often repair known security weaknesses. Devices that no longer receive security updates should not be used for sensitive financial or work activity where a safer alternative is available.
How to recognise a phishing attempt
Warning signs include a slightly altered website address, unexpected attachments, poor spelling, an unusual request from a familiar person, an offer that appears too generous and pressure to act before checking the details.
People should also be cautious when a caller knows some personal information. Names, workplaces, birthdays and family connections can be collected from public social-media profiles or previous data breaches. Possessing those details does not prove that a caller represents a bank, government agency or employer.
The campaign follows several recent Nigerian warnings about digital impersonation. The Nigerian Communications Commission has cautioned about fake mobile networks used to intercept communications for banking fraud. The Independent National Electoral Commission has also warned citizens against a fraudulent voter-registration website.
Related: NCC warns of fake mobile networks used for banking fraud and INEC warns Nigerians against fake voter registration website.
What to do after suspected fraud
A person who believes money or account details have been compromised should contact the bank or payment provider immediately using an official channel. Fast reporting may allow a transfer to be flagged, an account restricted or a card blocked.
The victim should change affected passwords from a trusted device, sign out unfamiliar sessions and review recovery email addresses, phone numbers and forwarding rules. Screenshots, transaction references, phone numbers, usernames, email headers and messages should be preserved rather than deleted, as they may assist an investigation.
The incident should be reported to the relevant financial institution and law-enforcement agency. If a mobile number or SIM card appears to have been taken over, the telecommunications provider should also be contacted without delay.
Businesses need additional controls. Staff should know how to verify changes to supplier bank details, sensitive payments should require more than one approval, access should be limited to what each worker needs, and essential data should be backed up in a form that cannot be altered by an attacker.
Lagos’s campaign will be judged by whether the advice reaches people beyond technology circles and changes everyday behaviour. Publishing messages in English, Yoruba and Pidgin is an important start, but residents will also need clear reporting channels, repeated reminders and practical support when an incident occurs.
Readers should share verified safety guidance with relatives, employees and community groups, particularly people who are new to mobile banking or online services. Follow Podium News for practical updates on fraud alerts, data protection and digital safety in Nigeria.
