Bank Employee Fraud: 5 Ways Nigerian Customers Can Protect Their Money

Bank employee fraud can expose weaknesses in the systems designed to protect customers’ money. A recent conviction in Lagos shows why internal access controls, transaction monitoring and prompt reporting matter.

A bank customer may follow every security precaution and still depend on safeguards within the financial institution holding their money. That responsibility came into focus after the Economic and Financial Crimes Commission (EFCC) secured the conviction of a former banker, Chukwuebuka Nweke, over the unauthorised withdrawal of ₦1 million from a customer’s account.

The case raises an important question: What can Nigerian customers do to protect their money when the suspected fraud involves someone with access to banking systems?

According to the EFCC, Nweke accessed a desktop computer assigned to another employee, Emmanuella Anyanwu, without lawful authority on June 21, 2025. The commission said the access facilitated the withdrawal of ₦1 million from an account belonging to Leelee Dumbari.

The EFCC’s Lagos Zonal Directorate 1 prosecuted Nweke under Section 386(1) of the Criminal Law of Lagos State, 2011.

Nweke pleaded not guilty, leading to a full trial. The prosecution called five witnesses, while the defence presented one witness.

Justice Ismail Ijelu of the Lagos State High Court, Ikeja, found Nweke guilty and ordered him to pay a ₦1 million fine within 30 days. Failure to pay would result in his remand in a correctional centre for six months.

The conviction highlights a risk that extends beyond suspicious text messages and fraudulent phone calls: the misuse of access to systems connected to customers’ money.

Banks handle sensitive financial information and process transactions through systems accessed by authorised personnel. Consequently, protecting customers requires more than asking account holders to keep their PINs and passwords private.

Financial institutions also need controls that restrict employees to appropriate levels of access, record activity within their systems and flag suspicious transactions for investigation.

The Central Bank of Nigeria (CBN) recognises customers’ right to privacy and confidentiality, including protection against unauthorised access to their account information.

However, the details of Nweke’s conviction do not establish whether the bank involved had particular security weaknesses or whether a specific control failed. Those questions require additional evidence.

Review bank statements, transaction alerts and account balances. Report withdrawals or transfers you do not recognise immediately. Early reporting gives the bank an opportunity to investigate while relevant transaction records are available.

Do not disclose your PIN, password or one-time password (OTP) to anyone claiming to represent your bank. Be cautious of callers who pressure you to reveal confidential information to resolve an alleged account problem.

If you suspect fraud, contact your bank using its official telephone number, application or branch. Request that the bank investigate the transaction and take appropriate steps to secure your account.

Keep the complaint reference number and records of your communication.

If your bank fails to resolve your complaint, you can escalate it to the CBN’s Consumer Protection Department, subject to the applicable complaint-resolution timelines.

The CBN’s complaint lodgement guidelines explain how customers can submit complaints against regulated financial institutions.

Keep transaction alerts, account statements, receipts and relevant correspondence. These records can help the bank investigate the complaint and support further action where necessary.

Do not share sensitive banking information publicly while seeking assistance.

The Lagos case demonstrates that unauthorised access to a computer system connected to a financial transaction can result in criminal prosecution and conviction.

However, a criminal conviction does not automatically establish whether the affected customer has recovered the money. The available report does not confirm the recovery status of the ₦1 million involved in this case.

For customers, the practical lesson is clear: personal security precautions matter, but they must work alongside effective safeguards within financial institutions.

Banks have responsibilities to protect customer information and provide accessible complaint channels. Customers, in turn, should monitor their accounts and report suspicious activity promptly.

Ultimately, confidence in banking depends not only on the security measures customers can see but also on the controls that protect their money behind the scenes.