A Postcode Tells You Where. A Bank Needs to Know Who

Log in or create a free account to get started.

Read History Go to My Account Log Out Enhanced by Google Sponsored A Postcode Tells You Where. A Bank Needs to Know Who Nigeria’s new digital postcode maps every building. It does not prove who lives in one, and that is the problem

Listen to this article Share Nigeria’s new digital postcode maps every building. It does not prove who lives in one, and that is the problem the law, the regulator and the fraudster all care about.

By Esigie Aguele Co-founder and CEO, VerifyMe Nigeria

On 1 October 2026, Nigeria switched on its National Digital Alphanumeric Postcode System, giving every addressable building an 11-character code tied to precise geographic coordinates. The idea had been discussed for almost two decades. The Federal Ministry of Communications, Innovation and Digital Economy and NIPOST deserve credit for finally delivering it. Logistics companies, emergency services, and e-commerce platforms will all benefit.

For the banks, fintechs, lenders and insurers who must know their customers, however, a postcode answers the wrong question. It tells you where the building is. It does not tell you who lives in it. That second question, residency, is the one that carries legal weight, and it is the one Nigeria has not yet solved. Location is not residency

Under the Central Bank of Nigeria’s tiered KYC framework, a financial institution opening a higher-tier account must verify where the customer lives. In practice, that means an independent visit to the address, photographs of the property, and a neighbor who confirms that the person lives there. The obligation is about a person, not a building.

A geocode can confirm that a house exists. It cannot confirm that the applicant sleeps there, that the neighbors know them, or that the same address has not been used to open accounts for seven different people at five institutions in ninety days. Nobody can be compelled to register a digital address. A code generated on a phone proves only that someone stood near a building or claimed to.

Context matters too. In Lagos, a numbered gate on a named street is a meaningful signal. In many northern communities, families live in cluster compounds with no house numbers at all, and the same signal means almost nothing. A single national rule applied the same way everywhere will be too strict in some places and dangerously weak in others.

A postcode establishes a location. Address verification establishes what that location means for a customer decision.

VerifyMe pioneered address verification delivered over API in Nigeria. We turned a slow, paper-based process into a service that a bank can call from its onboarding app and receive a field-verified result. That required years of investment in technology and in operations: a nationwide network of trained, tracked field agents, geotagged photographs, quality assurance, and automated neighborconfirmation. Other providers followed, and we welcome that competition. Through technology innovation and operational excellence, what began as a niche compliance task has grown into a market with a capacity of about N25 billion a year.

That market exists because the private sector took the risk, made the investment and proved the demand. It also supports the livelihoods of tens of thousands of field agents in communities across the country.

Address verification today is not a photograph or a tick box. QoreID (A VerifyMe Company), now produces a contextual address intelligence report that weighs five independent layers of evidence:

• Physical verification: agent visit, neighbor confirmation and geotagged photographs.

• Digital presence: whether the applicant’s own device is seen at the address overnight, with checks for GPS spoofing and mock locations.

• Agent fidelity: the agent’s route is tracked to the door, a selfie is taken on site, and the applicant’s description of the house, hidden from the agent, is matched against the photos.

• Environmental context: a five-level framework that adjusts how much each signal can be trusted, depending on the settlement, housing pattern, and mapping quality of the area.

• Network history: how many identities have used the address across institutions, and whether any are linked to confirmed fraud.

That last layer is where the most damaging fraud now hides. A real, verifiable address can be used as a shared onboarding base: several people pass the physical and digital checks at one location, then default on their loans. Each check passes on its own. Only a cross-institution view reveals the cluster. In such a case our report tells the bank that the applicant does live at the address, but that the address itself is high-risk, and it recommends enhanced due diligence rather than approval.

The threat keeps changing. Fraudsters now use synthetic media, manipulated images and location spoofing to defeat verification. We use AI to detect these attacks and update our models and controls every quarter.

Address verification is an adversarial contest, not a static database. A system that is built once and left alone will be beaten within months.

The regulator sets the floor. Verification providers add the layers that catch modern fraud.

The digital postcode should become an infrastructure: an open, standardized layer that everyone can build on. The ministry’s “Built on Nigeria’s Postcode” invitation to developers, announced on 21 October, points in exactly the right direction.

The risk lies elsewhere. In sector after sector, Nigeria has seen a familiar pattern. Private enterprise takes the risk, builds the market, and proves the demand. Then a public institution decides that it, too, should become an operator in that market. If address verification were to follow that path, with the agency that sets the national address standard also selling verification services to banks, whether directly or through a single appointed partner, industry would be entitled to ask some hard questions.

• Who regulates the operator? Nigeria has spent years separating regulation from operation in the postal sector, and the National Assembly has passed reform bills to end NIPOST’s dual role.

Telecommunications flourished once the NCC regulated, and others operated. An agency cannot credibly referee a market in which it also plays.

• Where does capability come from? Verification capacity cannot be procured with a signature. It is built over years of field operations, quality control, and accumulated fraud intelligence. A partner new to the field starts from zero, at the very moment fraud is becoming more sophisticated.

• Who carries the liability? When a verified address turns out to be a fraud base, banks need a provider that stands behind its result and can show a full audit trail.

• What happens to citizens’ data? A single state-designated channel would concentrate residential data on millions of Nigerians, which raises serious questions under the Nigeria Data Protection Act 2023.

The cost of getting this wrong is high. Crowding out private providers would chill investment and innovation, put field jobs at risk, and leave banks with a slower, weaker product just as synthetic fraud accelerates. Nigeria would lose an industry that already works and gain nothing it could not have had through partnership.

Government and industry each have an essential role. Here is how they fit together:

1. Set the address standard. Nigeria still has no official convention for how an address is written. Defining one is NIPOST’s natural mandate, and it would make every downstream system more accurate.

2. Open the postcode as an infrastructure. Make it available to licensed verification providers through open, well-governed APIs. VerifyMe will integrate it into our reports, as we already do with other digital address data.

3. Anchor residency in identity. Link the address to an identity document that citizens must renew and verify the address when it is issued. The FRSC and NIMC are natural candidates.

4. Keep the regulator and the operator separate. The CBN and the ministry should set outcome-based standards for verification, including context, and leave operation to accountable, competing providers.

5. Share fraud intelligence. Create a governed mechanism for institutions to share address-level fraud signals, so that clusters are caught before they cost the system.

Nigeria now knows where its buildings are. The harder work, proving who lives in them, is already being done every day by an industry that Nigerians built. The government’s greatest contribution is to set the standards, open the rails, and let the builders keep building.

Esigie Aguele is the co-founder and CEO of VerifyMe Nigeria, the company behind QoreID, a KYC, address verification and fraud intelligence platform used by Nigerian banks, fintechs and lenders.