NITDA raises alarm over AI-driven cyber threats, deepfakes, voice cloning

"The month-long campaign was aimed at mobilising citizens, businesses and institutions to take collective responsibility for securing Nigeria’s digital space." NITDA 

.... "The increasing use of digital technology in everyday life, commerce and public governance means that cybersecurity can no longer be regarded as the exclusive responsibility of information technology professionals, government agencies or security experts.

.... “Securing Nigeria’s digital landscape requires an active, shared commitment from every citizen, business, and institution participating in the online ecosystem.”

The National Information Technology Development Agency, NITDA, has warned Nigerians against emerging cyber threats driven by artificial intelligence, AI, including social engineering, deepfake impersonation, voice cloning and fraudulent QR code attacks.

The agency gave the warning as it launched the 2026 National Cybersecurity Awareness Month with the theme, “Together for a Safer Cyberspace.”

NITDA, in a statement issued by its Director, Corporate Communications, Mrs Hadiza Umar, said the month-long campaign was aimed at mobilising citizens, businesses and institutions to take collective responsibility for securing Nigeria’s digital space.

According to the agency, the increasing use of digital technology in everyday life, commerce and public governance means that cybersecurity can no longer be regarded as the exclusive responsibility of information technology professionals, government agencies or security experts.

It said: “Securing Nigeria’s digital landscape requires an active, shared commitment from every citizen, business, and institution participating in the online ecosystem.”

NITDA noted that the rapid global shift towards artificial intelligence and automated systems had also transformed the nature of cyber threats, with criminals increasingly deploying sophisticated techniques beyond conventional phishing attacks.

It identified AI-driven social engineering, deepfake impersonations, voice cloning and fraudulent QR code attacks, otherwise known as “quishing,” among the emerging threats confronting individuals and organisations.

The agency stressed that building a resilient cyberspace would depend largely on individual vigilance and proactive security practices.

To reduce exposure to cyber attacks and protect personal and organisational digital assets, NITDA advised Nigerians to adopt basic cyber hygiene measures, including the use of strong and unique passwords for different accounts.

It urged users to employ secure password managers to generate and store complex passphrases, while also enabling multi-factor authentication, MFA, on personal, professional and financial accounts.

According to NITDA, MFA provides an additional layer of protection capable of blocking unauthorised attempts to access accounts.

The agency also advised Nigerians to maintain proper software and device hygiene by promptly installing security patches and operating system updates to protect their devices against known vulnerabilities.

On financial security, NITDA warned Nigerians never to disclose their One-Time Passwords, OTPs, Personal Identification Numbers, PINs, or online banking login details to anyone.

It further urged citizens to exercise caution when using AI and other emerging online tools, particularly by avoiding the uploading of sensitive personal, financial or proprietary corporate information to public AI models or unfamiliar online platforms.

The agency said users should verify links and media before interacting with them, warning against suspicious links, unknown attachments and unsolicited requests for personal information.

It particularly advised Nigerians to be wary of messages employing urgent language or involving synthetic audio and deepfake visuals.

NITDA also called for responsible social media use, cautioning that excessive disclosure of personal information online could provide cybercriminals with materials for targeted social engineering attacks.

It equally recommended that individuals and organisations maintain regular offline and cloud backups of critical data to facilitate quick recovery in the event of ransomware attacks or system disruptions.

The agency said, through its Computer Emergency Response structure, it remained committed to equipping citizens and organisations with the tools, knowledge and frameworks required to mitigate digital risks, report incidents and promote a secure and inclusive digital economy.

NITDA urged Nigerians to follow its official cybersecurity awareness tips, updates and threat advisories on social media through @NITDANigeria.

For incident reporting and further enquiries, the agency directed the public to the Computer Emergency Readiness and Response Team, CERRT.ng, through its website, www.cerrt.ng, email cerrt@nitda.gov.ng, or telephone +234 817 877 4580.