How fraudsters exploit loopholes in OPay, PalmPay to hijack identities

image 73
Share this story

OPay and PalmPay accounts are being fraudulently opened using the identities of unsuspecting individuals. Recent incidents across Nigeria confirm that you can open OPay or PalmPay accounts with anybody’s name, and we may have found out how.

Firstly, let’s get some context.

I’ve been seeing glimpses of this issue but could not confirm until my elderly neighbour fell victim. Her phone was stolen and fraudsters hijacked her identity, siphoning over ₦100,000 from her friends using OPay accounts created with her full legal name.

Advertisement

To order your copy, send a WhatsApp message to +1 317 665 2180

Initially, we were confused. How could accounts bearing her full legal name be opened without her Bank Verification Number (BVN) or National Identity Number (NIN)? While OPay promptly blocked the fraudulent accounts when we notified them, they remained silent on how such a breach could occur in the first place.

OPay and PalmPay accounts are being fraudulently opened using the identities of unsuspecting individuals. Recent incidents across Nigeria confirm that you can open OPay or PalmPay accounts with anybody’s name, and we may have found out how.

Firstly, let’s get some context.

I’ve been seeing glimpses of this issue but could not confirm until my elderly neighbour fell victim. Her phone was stolen and fraudsters hijacked her identity, siphoning over ₦100,000 from her friends using OPay accounts created with her full legal name.

Initially, we were confused. How could accounts bearing her full legal name be opened without her Bank Verification Number (BVN) or National Identity Number (NIN)? While OPay promptly blocked the fraudulent accounts when we notified them, they remained silent on how such a breach could occur in the first place.

Advertisements

Advertisement

Things were about to get even weirder.

The scam escalated, targeting high-profile individuals like tech CEOs like Adewale Yusuf of AltSchool Africa and Techpoint Africa, Dr Neto Ikpeme of Wellahealth, and Abimbola Adebakin of Advantage Health Africa. I too received a fraudulent message, ostensibly from Adewale Yusuf, requesting urgent funds through OPay and PalmPay accounts.

How is this happening?

Our investigation unveiled a disturbing loophole in OPay’s account creation process.

Besides the standard NIN/BVN verification, OPay offers a third, laxer method — Verify with bank account. This backdoor permits fraudsters to easily manipulate the system using just a phone number, facial recognition, and any name and address, facilitating identity theft with alarming ease.

We saw a video circulating online of someone opening an OPay account with the name of popular actress, Bimbo Ademoye. We decided to test this, and I seamlessly opened an OPay account with a friend’s phone number and my commercial bank account details. Even though I already have an OPay account with my BVN details.

Advertisements

If you’ve dropped your account number anywhere on the Internet, for giveaways or a business transaction, you might already be at risk of this loophole.

PalmPay, also has this “verify with bank accounts” feature, but it didn’t work when we tried it. Surprisingly, you can open a PalmPay account with any name without any verification whatsoever. This allows you perform up to ₦50,000 in transactions.

Advertisements

Wider implications

These incidents are symptomatic of a growing financial fraud epidemic in Nigeria, with banks and individuals losing billions of Naira. The NIBSS has raised concerns over unlicensed financial services companies masquerading as deposit-taking institutions, reflecting increased regulatory scrutiny over fintech operations​​.

While the CBN has mandated the use of NIN for all tier 1 wallets and bank accounts, the effectiveness of these measures remains to be seen.

Advertisements
Lennox Mall

The rise of digital payments has unfortunately increased the potential for fraud, as highlighted by PalmPay. Late reporting of fraud has been cited as a key factor in the low recovery of stolen funds​​. In a separate incident, a man was charged for using someone else’s identity to open accounts with OPay, PalmPay, and other online banks, defrauding the victim of ₦771,000​​.

As this investigation into the fraudulent activities involving OPay and PalmPay unfolds, a crucial question lingers: Is the Central Bank of Nigeria (CBN) aware of these specific vulnerabilities, and if so, what actions are being taken?

Advertisements

TechPoint

Do you have an important success story, news, or opinion article to share with with us? Get in touch with us at publisher@thepodiummedia.com or ademolaakinbola@gmail.com Whatsapp +1 317 665 2180

Join our WhatsApp Group to receive news and other valuable information alerts on WhatsApp.


Share this story
Advertisements
jsay-school

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

sanya-onayoade

Sanya Onayoade

Continental Editor, North America

SANYA ONAYOADE is a graduate of Mass Communication and a Master of Communication Arts degree holder from the University of Ibadan. He has attended local and international courses on Media, Branding, Public Relations and Corporate Governance in many institutions including the University of Pittsburgh; Reuters Foundation of Rhodes University, South Africa and Lagos Business School. He has worked in many newspaper houses including The Guardian and The Punch. He was the pioneer Corporate Affairs Manager of Odua Telecoms Ltd, and later Head of Business Development and Marketing of Nigerian Aviation Handling Company (NAHCO Plc).

He has led business teams to several countries in the US, Asia and Europe; and was part of an Aviation investment drive in West Africa. He has also driven media and brand consultancy for a few organizations such as the British Council, Industrial Training Fund, PKF Audit/Accounting Firm and Nigeria Stability and Reconciliation Programme. He is a Fellow of Freedom House, Washington DC, and also Fellow of Institute of Brand Management of Nigeria. Sanya is a member of Nigerian Institute of Public Relations (NIPR), Advertising Practitioners Council of Nigeria (APCON) and Project Management Institute (PMI). He is a 1998 Commonwealth Media Awards winner and the Author of A Decade Of Democracy.
Morak Babajide-Alabi

Morak Babajide-Alabi

Continental Editor, Europe

Morak Babajide-Alabi is a graduate of Mass Communication with a Master of Arts Degree in Journalism from Napier University, Edinburgh, United Kingdom. He is an experienced Social Media practitioner with a strong passion for connecting with customers of brands.

Morak works as part of a team currently building an e-commerce project for the Volkswagen Group UK. Before this, he worked on the social media accounts of SKODA, Audi, SEAT, CUPRA, Volkswagen Passenger Cars, and Volkswagen Commercial Vehicles. In this job, he brought his vast experience in journalism, marketing, and search engine optimisation to play to make sure the brands are well represented on social media. He monitored the performance of marketing campaigns and data analysis of all volumes of social media interaction for the brands.

In his private capacity, Morak is the Chief Operating Officer of Syllable Media Limited, an England-based marketing agency with head office in Leeds, West Yorkshire. The agency handles briefs such as creative writing, ghostwriting, website designs, and print and broadcast productions, with an emphasis on search engine optimisation. Syllable Media analyses, reviews, and works alongside clients to maximise returns on their businesses.

Morak is a writer, blogger, journalist, and social media “enthusiast”. He has several publications and projects to his credit with over 20 years of experience writing and editing for print and online media in Nigeria and the United Kingdom.

Morak is a dependable team player who succeeds in a high-pressure environment. He started his professional career with the flagship of Nigerian journalism – The Guardian Newspapers in 1992 where he honed his writing and editing skills before joining TELL Magazine. He has edited, reported for, and produced newspapers and magazines in Nigeria and the United Kingdom. Morak is involved in the development of information management tools for the healthcare sector in Africa. He is on the board of DeMiTAG HealthConcepts Limited, a company with branches in London, Lagos, and Abuja, to make healthcare information available at the fingertips of professionals. DeMiTAG HealthConcepts Limited achieved this by collaborating with notable informatics companies. It had partnered in the past with Avia Informatics Plc and i2i TeleSolutions Pvt.

Out of work, Morak loves walking and also volunteers on the board of a few UK Charity Organisations. He can be reached via http://www.syllablemedia.com
Ademola-Akinbola

Ademola Akinbola

Publisher/Editor-in-Chief

Brief Profile of Ademola Akinbola

Ademola AKINBOLA is an author, publisher, trainer, digital marketing strategist, and a brand development specialist with nearly three decades of experience in the areas of branding, communication, corporate reputation management, business development, organizational change management, and digital marketing.

He is the Founder and Head Steward at BrandStewards Limited, a brand and reputation management consultancy. He is also the Publisher of The Podium International Magazine, Ile-Oluji Times, and Who’s Who in Ile-Oluji.

He had a successful media practice at The Guardian, Punch and This Day.

He started his brand management career at Owena Bank as Media Relations Manager before joining Prudent Bank (now Polaris Bank) as the pioneer Head of Corporate Affairs.

The British Council appointed him as Head of Communication and Marketing to co-ordinate branding and reputation management activities at its Lagos, Abuja, Kano and Port Harcourt offices.

In 2007, he was recruited as the Head of Corporate Planning and Strategy for the Nigerian Aviation Handling company. He led on the branding, strategic planning and stakeholder management support function.

His job was later expanded and redesigned as Head of Corporate Communication and Business Development with the mandate to continue to execute the Board’s vision in the areas of Corporate Planning and Strategy, Branding and New Businesses.

In 2010, he voluntarily resigned from nacho aviance to focus on managing BrandStewards, a reputation and brand management firm he established in 2003. BrandStewards has successfully executed branding, re-branding and marketing communication projects for clients in the private and public sectors.

Ademola obtained a M.Sc. Degree in Digital Marketing & Web Analytics from Dublin Institute of Technology in 2016, and the Master of Communication Arts degree of the University of Ibadan in 1997. He had previously obtained a Higher National Diploma (with Upper Credit) in Mass Communication from Ogun State Polytechnic, Abeokuta.

He has published several articles and authored five management books.

He has benefitted from several domestic and international training programmes on Brand Management, Corporate Communications, Change Management and Organizational Strategy.
Open chat
Hello. Do you want to keep receiving our stories via WhatsApp? Send us a message!