In this latest analytics for Telecoms Clinic@ITREALMS, REMMY NWEKE dissects the CBN’s "once-in-a-lifetime" BVN phone linkage mandate. While aiming for security, this policy ignores the NCC’s 360-day SIM recycling reality. From diaspora risks to the "dead person" SIM loophole, exploring why this "digital marriage" without divorce is a dangerous identity trap.
Preamble:
The Nigerian digital landscape is currently witnessing what can only be described as a regulatory "clash of the titans." On one hand, the Central Bank of Nigeria (CBN) is tightening the noose on financial fraudsters with a series of aggressive new directives.
A digital marriage without divorce:
In a circular issued in mid-March 2026, the CBN introduced an "Addendum to the Revised Regulatory Framework for BVN Operations." Among its sweeping changes; which include a strict 18-year age limit for enrollment and a 24-hour temporary fraud watchlist, the most controversial is the restriction on amending the phone number linked to a BVN.
According to the apex bank, starting May 1, 2026, a customer will only be permitted to change their BVN-linked phone number once in their entire lifetime.
The logic is simple: fraudsters often use "SIM swaps" or social engineering to hijack the phone number attached to a victim’s BVN, gaining access to OTPs and account recovery tools. By limiting changes to once per lifetime, the CBN hopes to make the "foundational identity layer" of our banking system virtually unhackable. But in a country where SIM cards are lost, stolen, or recycled as frequently as the harmattan winds, this "digital marriage" has no provision for the messy realities of life.
Recycling nightmare: Who owns your number?
The first point of confusion lies in the "ownership" of a mobile number. In the eyes of the law and the NCC, a phone number is a leased resource, not private property. Per the Quality of Service (QoS) Business Rules, an operator can, and will deactivate a prepaid line if it has not seen a "Revenue Generating Event" (RGE) for six months. If dormancy continues for another six months, bringing the total to 360 days, the number is "churned" and put back on the shelf for sale to a new customer.
This creates a terrifying scenario for the "Telecoms Clinic." Imagine a Nigerian professional who travels abroad for two years. If they fail to "park" their line, the operator recycles it. A stranger buys that SIM and suddenly starts receiving the original owner's bank alerts. Under the new CBN rule, the original owner has only one shot to fix this. If they lose their phone again five years later, they are effectively "digitally dead" in the Nigerian banking space.
Furthermore, if a recycled number was previously used for a crime, the "last known owner" on the BVN database remains the primary suspect. While the NCC is launching the Telecom Identity Risk Management System (TIRMS) portal to track these changes, the integration between the telco’s "churning" data and the bank’s "BVN" data is historically sluggish.
Diaspora trap and 'Dead People' dilemma:
For the millions of Nigerians in the diaspora, this is a ticking time bomb. Many rely on roaming Nigerian SIMs to manage their local accounts. If a SIM card is damaged or the roaming service fails, the logistical hurdle of changing that number is already high.
With a "one-time-only" limit, the margin for error disappears. A single mistake by a bank teller or a failed SIM-swap process could permanently lock a diaspora Nigerian out of their home-based savings.
Then there is the grim reality of mortality. What happens when a BVN holder passes away? In Nigeria, the process of obtaining "Letters of Administration" can take years. During this time, the deceased’s phone number will almost certainly hit the 360-day dormancy mark and be recycled.
Unless the family is tech-savvy enough to keep the line active, a stranger will eventually "inherit" the deceased’s digital financial identity. The CBN’s directive is eerily silent on how estates can manage these "lifetime" links when the life in question has ended.
Liability and legal fog:
If a telco recycles a number that is still linked to an active BVN, who is liable for the resulting fraud?
If a telco recycles a number that is still linked to an active BVN, who is liable for the resulting fraud?
The Operator? They followed the 360-day rule.
The Subscriber? They were unaware of the recycling timeline.
The CBN? They created a rule that ignores the technical lifespan of a SIM card.
The "Confusion Galore" extends to the legal system. If the police arrest a student because they bought a recycled SIM that is still linked to a fraudster's BVN, the "One-Time" rule makes it nearly impossible for the student to "clean" their new number’s identity.
ALSO READ:
Nigeria: The Digital umbilicus and ghost of elections past by Remmy Nweke – Telecoms Clinic@ITREALMS
Clinic’s prescription: Immediate safeguards
As we approach the May 1 deadline, stakeholders must act to bridge this regulatory gap.
The CBN must define "Exceptional Circumstances": A "Once in a Lifetime" rule is too rigid for a developing economy. There must be an appeals process for victims of documented theft or verified recycling.
NCC must mandate "Line Parking" Awareness: Telcos should be compelled to inform every subscriber about "Line Parking" services that allow them to keep a number for up to a year without activity for a small fee.
The TIRMS Handshake: The TIRMS portal must be more than a database; it must be an "automated trigger." When a number is churned, the bank should be notified to "delink" it from any BVN instantly.
Conclusion:
While we applaud the CBN’s commitment to security, policy must be grounded in the practicalities of the industry it regulates. You cannot build a "life-time" policy on a "360-day" product. Without a harmonized approach between the CBN, the NCC, and the banks, the "once-in-a-lifetime" rule will create more confusion than it cures, leaving millions of Nigerians vulnerable to a new kind of digital disenfranchisement.
For now, the advice to every Nigerian is simple: Check your BVN-linked number today. Keep it active. Or risk being locked out of your own future.
No comments:
Post a Comment