THE CYBERCRIME GOLD RUSH

How Nigeria’s Digital Fraud Economy Became a Billion Naira Enforcement War

The Economic and Financial Crimes Commission’s latest performance figures tell a story that goes well beyond another record year for Nigeria’s anti-graft agency. Behind the N1.233 trillion recovered and 10,872 convictions secured between October 2023 and July 2026 lies a more consequential shift. Cybercrime has moved from the margins of Nigeria’s financial crime landscape into one of its central engines.

EFCC Chairman Ola Olukoyede said the commission received 49,673 petitions, investigated 39,615 cases and filed 14,476 cases in court during the 34-month period. The commission also secured 10,872 convictions, giving it a conviction to filing ratio of more than 75 percent. In the first six months of 2026 alone, 1,370 convictions were secured from 1,889 cases filed.

But the most revealing statistic concerns the composition of the crime being investigated.

Between 2024 and 2026, the EFCC recorded 46,288 offences across nine major categories. Advance fee fraud accounted for 20,726 cases, while cybercrime accounted for 8,222. Combined, the two categories represented more than 62 percent of the offences recorded. Cybercrime alone therefore represented roughly 18 percent of the total, or almost one in every five offences captured in the commission’s analysis.

That matters because cybercrime is no longer simply the familiar story of internet fraudsters sending deceptive emails or posing as wealthy individuals online. The financial crime ecosystem has become considerably more sophisticated, combining social engineering, identity theft, business email compromise, cryptocurrency, compromised accounts, phishing, romance fraud, investment scams and increasingly automated attacks.

Nigeria’s enforcement figures also show how rapidly the broader criminal justice response has expanded. EFCC convictions rose from 190 in 2016 and 189 in 2017 to 312 in 2018 and 1,280 in 2019. The number dropped to 976 in 2020 before climbing to 2,220 in 2021, 3,785 in 2022, 2,674 in 2023 and a record 4,111 in 2024. The 2024 figure was the highest annual conviction total in the commission’s history at the time.

The trajectory is striking. In 2016, the EFCC secured fewer than 200 convictions. By 2024, it was securing more than 4,000 a year. The 10,872 convictions recorded under the current administration therefore represent not just an increase in enforcement activity, but the emergence of a significantly more prosecution focused financial crime regime.

Yet convictions tell only part of the story.

The money trail is becoming increasingly international.

Nigeria’s own government told the United Nations in 2025 that cyber enabled fraud had become a significant threat to national security, financial integrity and public trust. Citing Nigeria Inter Bank Settlement System data, the government said fraud related financial losses exceeded N17.5 billion in 2023. It identified identity theft, business email compromise, investment scams, SIM swap fraud and phishing among the dominant schemes, many of them linked to transnational organised criminal networks.

That transnational dimension is becoming increasingly difficult to ignore.

INTERPOL’s 2026 African Cyberthreat Assessment found that artificial intelligence was linked to 55 percent of reported cybercrime across Africa. The assessment, based on information from 36 African member countries, described cybercrime as an increasingly industrialised and borderless ecosystem. Reported cybercrime related losses across Africa more than doubled from $192 million in 2024 to $484 million, according to the assessment.

The operational picture is equally revealing. INTERPOL said 72 percent of surveyed African countries reported the presence of scam centres, while online scams remained the continent’s most reported cybercrime. Business email compromise and romance scams were particularly prominent in Central and West Africa.

Nigeria is consequently dealing with a problem that extends well beyond individual fraudsters. Cybercrime increasingly operates like a business, with specialised roles, infrastructure, stolen identities, payment channels, cryptocurrency wallets, money mules and international networks.

The scale of recent international enforcement operations illustrates the challenge. In Operation Red Card 2.0, conducted across 16 African countries between December 2025 and January 2026, authorities arrested 651 people and recovered more than $4.3 million. Investigators identified scams linked to more than $45 million in financial losses and 1,247 victims, while seizing 2,341 devices and taking down 1,442 malicious IP addresses, domains and servers. Nigerian authorities were among those involved, including an operation against a syndicate that used phishing, identity theft and social engineering.

The global numbers make the Nigerian challenge look even larger.

In the United States, the FBI’s Internet Crime Complaint Center received 859,532 complaints in 2024, with reported losses exceeding $16 billion, a 33 percent increase from the previous year. By 2025, complaints had risen above one million and reported losses approached $21 billion. The FBI said cyber enabled fraud alone generated more than $17.7 billion in reported losses in 2025.

The comparison should not be treated as a direct measurement of Nigeria against the United States. Reporting systems, population, financial infrastructure and definitions differ significantly. But the figures demonstrate the scale of the global market in which Nigerian cybercrime operates.

There is another important dimension. The same digital infrastructure that makes cybercrime scalable also makes the proceeds more difficult to trace.

Cryptocurrency, fintech platforms, mobile banking, payment aggregators, mule accounts and cross border transfers can allow criminal proceeds to move through several layers before reaching their ultimate beneficiaries. This turns cybercrime into an AML problem as much as a policing problem.

For banks and fintechs, the risk is therefore no longer limited to identifying suspicious transactions after the money has moved. Effective controls increasingly require institutions to understand customer behaviour, beneficial ownership, transaction patterns, device intelligence, account linkages and unusual changes in financial activity.

The EFCC’s recovery figures reinforce this point. During the 34-month period, the commission recovered N1.233 trillion, including N836.34 billion returned to individuals, companies and other beneficiaries, while N397.26 billion went directly to the Federal Government and public institutions. It also secured forfeiture of 10,053 tangible assets, including thousands of electronic devices, real estate, vehicles and land.

The electronic asset figure is particularly telling. Cybercrime investigations increasingly depend on digital evidence, devices, communications records, account histories and transaction trails. Enforcement is consequently becoming a battle over data as much as cash.

The next challenge may be artificial intelligence.

INTERPOL’s latest assessment suggests AI is already embedded across the cybercrime lifecycle, from reconnaissance and phishing to social engineering and evasion. That means fraudsters can potentially produce more convincing messages, imitate identities, automate targeting and operate at a scale that would previously have required much larger criminal organisations.

For Nigeria, this creates a difficult enforcement equation. The country has demonstrated that it can arrest suspects, prosecute cases and recover assets at unprecedented levels. The question is whether enforcement capacity can evolve at the same speed as the technology used by criminal networks.

The EFCC’s numbers show substantial progress. Its historical conviction trajectory demonstrates that the agency has dramatically increased its courtroom output. Its latest offence data, however, delivers a warning alongside the achievement. If cybercrime and advance fee fraud account for more than three fifths of recorded offences, then Nigeria’s financial crime strategy cannot treat cybercrime as a specialist policing issue.

It has become an economic security issue.

The real test of the next decade will therefore not simply be how much money the EFCC recovers or how many cybercriminals it convicts. It will be whether Nigeria can make the financial system sufficiently intelligent to identify criminal proceeds before they disappear across borders, platforms and digital assets.

The cybercrime economy is scaling. Nigeria’s enforcement architecture will have to scale faster.