CBN introduces 24-hour watch list for suspicious BVNs, tightens banking rules

From Adanna Nnamani, Abuja

The Central Bank of Nigeria (CBN) has unveiled new regulations aimed at strengthening fraud control and digital banking security across the country.

The apex bank issued a circular to all banks, other financial institutions, and payment service providers, detailing amendments to the Revised Regulatory Framework for Bank Verification Number (BVN) operations and additional requirements for Instant Payment services.

Under the new BVN framework, “financial institutions are required to maintain a temporary watch list for BVNs implicated in suspected fraudulent transactions.

“Any BVN placed on this list will remain there for a maximum of 24 hours, during which the account holder will be contacted to provide clarification.”

The circular also set age restrictions for BVN enrolment, limiting registration to individuals 18 years and above, and restricts phone number amendments linked to BVNs to a single change.

The circular further noted that: “Access to BVN databases will now be exclusively for CBN-licensed financial institutions, with the central bank retaining the right to grant access in extenuating circumstances under existing laws. These provisions are set to take effect from May 1, 2026.”

In addition, the CBN issued guidelines for Instant Payment (IP) services, aimed at enhancing security and customer control, emphasising that: “Financial institutions are now required to implement voluntary opt-in/opt-out functionality, allowing customers to choose whether to participate in instant payment services.

“Default onboarding will be opt-in, but customers who opt out will still be able to conduct physical transfers at bank branches.

“Customers can also set voluntary transaction limits, subject to maximum thresholds of N25 million for individuals and N250 million for corporates, with adjustments requiring enhanced due diligence and risk assessment.” To combat fraud, the CBN mandated that all financial institutions activate Enterprise Fraud Monitoring for both inflows and outflows, and introduce liveliness checks for online account opening or reactivation, validating accounts in real-time with the BVN/NIN databases and using appropriate authentication measures such as soft or hard tokens.