The Inspector-General of Police, Olatunji Rilwan Disu, has cautioned Nigerians against a range of cyber-related offences, warning that unauthorised access to personal devices and online accounts, identity impersonation, cyberbullying and the circulation of private images could attract legal consequences.
He also placed financial institutions, fintech operators and telecommunications companies on notice over insider threats and weaknesses in their internal control systems, insisting that the fight against cybercrime must extend beyond technological safeguards to encompass accountability, intelligence gathering and public cooperation.
Disu issued the warnings while declaring open the 2026 Cybersecurity Awareness Campaign organised by the Nigeria Police Force National Cybercrime Centre (NPF-NCCC) in Abuja. The campaign is themed, “Towards a Resilient Cyberspace: Think Before You Click.”
Represented by a senior police officer at the event, the IGP said the country’s increasing reliance on digital technology had opened up opportunities for economic expansion and improved public services but had simultaneously exposed individuals, businesses and institutions to fraud, identity theft, data breaches, extortion and other financially motivated cyber offences.
He maintained that safeguarding Nigeria’s security could no longer be restricted to physical locations, arguing that digital networks, online platforms and technological systems had become critical components of national life that required effective protection.
According to him, the Police must move beyond responding to cyber incidents after they occur by adopting an intelligence-driven strategy capable of identifying threats, detecting vulnerabilities and disrupting criminal operations before they escalate.
“We must move from incident response to threat anticipation, from reactive investigation to proactive disruption, and from analysing yesterday’s attack to preparing for tomorrow’s attack,” Disu said.
He identified intelligence gathering, threat assessment, open-source intelligence, digital forensics and prompt information sharing as essential tools for strengthening the country’s capacity to prevent, investigate and respond to cybercrime.
The police chief described personnel of the NPF-NCCC as guardians of Nigeria’s digital frontiers, stressing that their responsibilities demanded continuous professional development, technical expertise, integrity and discipline.
He argued that the availability of sophisticated technology alone could not guarantee a secure digital environment without competent personnel, effective procedures, accountability and public confidence in the institutions responsible for enforcing the law.
Disu consequently called for a coordinated response involving government agencies, security and law enforcement institutions, regulators, banks, telecommunications operators, technology companies, educators, civil society organisations and the media.
“No single institution can secure Nigeria’s digital environment. It requires a whole-of-society and an all-of-cybersecurity ecosystem approach,” he said.
Beyond the responsibilities of law enforcement agencies, the IGP drew attention to the potential risks posed by insider threats within the financial and telecommunications sectors. He urged financial institutions, fintech companies, payment service providers and telecommunications operators to strengthen their internal safeguards and improve their ability to detect suspicious activities.
He recommended tighter access controls, thorough employee screening, transaction monitoring, regular internal audits and independent oversight to reduce the possibility of criminal activity facilitated by employees or weaknesses in institutional procedures.
Disu explained that cyber-enabled financial crimes could arise from stolen or compromised credentials, the misuse of authorised access, negligence, deliberate misconduct or inadequate supervision.
“Firewalls and encryption are essential, but they cannot replace strong internal control,” he said.
He assured Nigerians that the NPF-NCCC would sustain its collaboration with regulators and financial intelligence agencies to support the lawful detection and investigation of financial crimes committed through digital platforms.
Turning to the responsibilities of individual internet users, Disu urged Nigerians to exercise caution when opening messages, clicking links or responding to unsolicited communications, warning that a single careless action could expose personal information and compromise online accounts.
He advised members of the public to safeguard their passwords and one-time passwords, activate multi-factor authentication and promptly report suspicious digital activities to the appropriate authorities.
“Think before you click. If you don’t know the person who sent you the message, you can ignore it. If you click, anything could happen. You can get a virus, and your account can be wiped out,” he warned.
The IGP further cautioned against the use of weak passwords that could easily be guessed, particularly combinations based on dates of birth or the names of children and other relatives.
He also advised Nigerians to independently verify payment instructions before transferring money, stressing the importance of confirming the authenticity of requests to avoid falling victim to fraudulent transactions.
On the misuse of personal devices and online identities, Disu warned that gaining access to another person’s phone, WhatsApp account, email or social media profile without authorisation could constitute an offence under applicable cybercrime laws.
He similarly cautioned against creating fraudulent accounts in other people’s names or using their photographs without permission, as well as sending threatening or abusive messages, engaging in cyberstalking and cyberbullying, or knowingly circulating false information capable of triggering panic or endangering lives.
The police chief singled out the unauthorised distribution of intimate photographs and private videos as another serious concern, warning Nigerians against sharing such material for revenge, amusement or any other purpose without the consent of the person involved.
He noted that cases involving children attracted particular seriousness, underscoring the need for responsible online conduct and respect for the privacy and safety of vulnerable persons.
Disu also warned Nigerians against allowing other people to use their bank accounts or SIM cards to receive suspicious funds, explaining that account holders could face investigation where their accounts were allegedly used to facilitate fraudulent transactions.
“Don’t lend anybody your bank account. If fraud passes through it, you may answer as an accomplice,” he said.
He further condemned the falsification of payment alerts and receipts, describing the unlawful sale or distribution of other people’s Bank Verification Numbers (BVNs), National Identification Numbers (NINs) and bank card details as practices that could expose victims to identity theft and financial exploitation.
Emphasising the legal consequences of digital misconduct, the IGP reminded Nigerians that ignorance of the law was not an excuse. He warned that individuals who knowingly assist, encourage or conspire with cybercriminals could also face prosecution and the penalties prescribed by law.
The campaign, he indicated, must also extend to homes, schools and workplaces, where responsible digital behaviour can be encouraged before harmful practices become established.
Addressing parents and educators, Disu urged them to make online safety an essential life skill for children and young people, rather than treating it as a subject confined to technology specialists.
He also challenged business leaders to recognise cybersecurity as a management and leadership responsibility, insisting that protecting digital assets and customer information should not be left exclusively to information technology departments.
The IGP appealed particularly to Nigerian youths to deploy their digital knowledge and technical abilities towards lawful and productive ventures, including cybersecurity services, software development and technology entrepreneurship.
He warned that the temptation to acquire quick wealth through online fraud could jeopardise young people’s freedom, reputations and personal well-being.
“To Nigerian youth, your digital skills are our national asset. Do not let pressure for quick wealth mortgage your future. Cybercrime can cost you your freedom, your reputation and peace of mind. Choose creativity over criminality and integrity over shortcuts,” he said.
Disu also encouraged victims of online fraud, cyberbullying and sextortion, as well as individuals targeted by people seeking to recruit them into cybercrime, to seek assistance and report incidents to the appropriate authorities.
He stressed that reporting such cases was important to enabling law enforcement agencies to investigate offences, identify emerging threats and strengthen preventive measures.
Defining the objective of the campaign, the police chief said a resilient cyberspace was one in which threats were anticipated, vulnerabilities reduced, incidents detected early, responses coordinated and recovery mechanisms strengthened.
He commended the NPF-NCCC and other stakeholders for their contributions to improving cybersecurity awareness, urging participants to take the campaign’s message beyond the event by sharing it within their communities, institutions and workplaces.
According to him, building a safer digital environment requires sustained public awareness, responsible internet use, effective law enforcement and cooperation among the public and private sectors.
He called on Nigerians to embrace responsible digital conduct and collective action, noting that the security of the country’s cyberspace depended not only on the work of the Police and technology specialists but also on the decisions made by individual users and institutions.
Disu subsequently declared the 2026 Cybersecurity Awareness Campaign of the NPF-NCCC open, reaffirming the need for greater vigilance and a coordinated national response to the evolving challenges of cybercrime
