CBN Limits BVN Phone Number Updates to Once-in-a-Lifetime to Curb Fraud

The Central Bank of Nigeria (CBN) has introduced a new rule restricting how often Nigerians can update the phone number linked to their Bank Verification Number (BVN)—now limited to just once in a lifetime. The directive, communicated to banks and financial institutions on Thursday, takes effect from May 1, 2026.

This move is part of the CBN’s ongoing efforts to strengthen security in Nigeria’s fast-growing digital payments ecosystem. Mobile numbers tied to BVNs are critical for authentication, transaction alerts, and account recovery, making them a prime target for fraudsters. By capping updates, the regulator aims to curb SIM swap fraud and identity manipulation that have increasingly threatened customer accounts.

The BVN system, launched in 2014, serves as the backbone of Nigeria’s financial identity infrastructure. It currently covers 68.59 million Nigerians, providing a centralized way for banks to verify customer identities. With mobile numbers as the key authentication channel, fraudsters often exploit SIM swaps to bypass security checks, putting millions at risk.

While the precise cost of SIM-related fraud in Nigeria is difficult to quantify, reports from the Nigeria Inter-Bank Settlement System (NIBSS) highlight that SIM compromises frequently underpin social engineering scams—the country’s leading form of financial fraud, responsible for 62,901 cases in 2023.

Beyond the phone number restriction, the CBN has directed banks to implement a temporary BVN watchlist. Under this system, any BVN linked to suspicious activity can be placed on hold for up to 24 hours, giving banks time to verify transactions with customers before funds are moved. This proactive pause is a smart move, reflecting a broader trend of regulatory tightening across Nigeria’s banking and fintech sectors.

The circular also reiterates that BVN enrollment remains limited to individuals aged 18 and above, and access to BVN data is strictly restricted to licensed financial institutions. These measures complement other recent initiatives by the CBN, including enhanced KYC protocols, aimed at making Nigeria’s banking ecosystem safer for both customers and institutions.

My take: While some Nigerians may view this once-in-a-lifetime phone update rule as inconvenient, it’s a necessary step given how vulnerable mobile-based authentication can be. With fraudsters becoming more sophisticated, regulatory measures like these are critical to protect both the public and the integrity of the financial system. The temporary watchlist is especially clever—it balances customer access with security, showing that CBN isn’t just reacting to fraud but trying to stay one step ahead.

For anyone managing their BVN-linked phone number, now is the time to ensure your contact details are secure and up-to-date, because you may only get one shot at it.