As Nigeria prepares to implement open banking in August, cybersecurity expert and cloud-security consultant Mr. Anthony Fakiyesi has stressed the urgent need for robust cybersecurity protocols to protect sensitive financial data and ensure trust in the evolving digital ecosystem.
Speaking in an interview with the News Agency of Nigeria (NAN) on Tuesday in Lagos, Fakiyesi warned that the success of open banking hinges on the ability of banks and third-party providers to secure customer information against data breaches and cyber threats.
Open banking, mandated by the Central Bank of Nigeria (CBN), requires banks to share customer data with authorised financial institutions and third-party providers. Fakiyesi noted that while this would enhance innovation and financial inclusion, it could also expose users to significant risks if cybersecurity frameworks are not watertight.
He called for strict regulatory oversight, secure API frameworks, and continuous monitoring systems to ensure that the new digital infrastructure is resilient and trustworthy.
This sharing would be done through a standardised Application Programming Interface (API) under the framework established by the CBN.
According to the expert, while open banking promises innovation, inter-operability and financial inclusion, Nigeria must confront significant challenges – cyber threats and data privacy violations.
He said that the implementation would open the door to services such as account aggregation, personalised financial management and seamless cross-platform transactions.
Fakiyesi said that with ISO 20022 as its backbone, the system brought structured, rich data formats that facilitated smarter fraud detection and cross-border functionality.
“In spite of its benefits, its introduction into an already vulnerable cybersecurity landscape raises serious concerns.
“Nigeria’s financial institutions lost over N59 billion to fraud in 2023 alone, and cyberattacks are increasingly sophisticated, with phishing, SIM-swapping, banking trojans, and business email compromise continuing to plague both consumers and banks.
“As data moves beyond the control of traditional banks and into the hands of multiple third party providers, the risk of data breaches grows exponentially,” he said.
Fakiyesi added that without an accreditation and vetting system for third parties as seen in more mature open banking markets such as the United Kingdom, there would be no guarantee of uniform cybersecurity standards.
This, he said, could leave consumer data exposed, especially if the providers would lack adequate security measures.
He added that regulatory clarity was needed as the framework had yet to include clear policies for incident compensation or mandatory security certifications.
The expert said that countries such as the United Kingdom and Australia enforced strong consumer protection laws, including financial reimbursement in the event of fraud linked to open banking services.
Fakiyesi said that absence of such measures in Nigeria could erode public trust.
“Furthermore, cybersecurity awareness remains low, particularly outside urban areas, and many users are unfamiliar with how their data is used, how to grant consent securely, or how to recognise a suspicious activity.
“The Nigeria Data Protection Commission (NDPC) has rightly emphasised the need for robust consent management, data minimisation and privacy-by-design principles.
“By comparison, UK’s open banking ecosystem is bolstered by comprehensive cybersecurity frameworks.
“Nigeria can learn from this by establishing a central accreditation body, enforcing breach notification timelines, and building a national security baseline for fintech,” he said.
Fakiyesi said that Nigeria’s open banking journey must prioritise establishing an accreditation system for third-party providers to ensure a secure rollout.
He said that Nigeria must also mandate strict data protection policies, create regulatory provisions for customer reimbursement and dispute resolution, and launch cybersecurity awareness campaigns for consumers and providers.
He encouraged investment in advanced threat detection and infrastructure hardening as well as capacity strengthening of NDPC, CBN and other oversight bodies to monitor compliance.
“Open banking is undoubtedly a game-changer as it can democratise financial services, drive fintech innovation and deepen digital inclusion.
“However, without security by design and robust governance, it could expose Nigeria to new waves of cyber threats and data privacy violations.
“If done right, Nigeria has the potential not only to modernise its financial ecosystem but also to set a benchmark for open banking in emerging markets where innovation and cyber resilience must grow side-by-side,” he said.
