Your National Identification Number (NIN) is one of the most important pieces of identity information you have in Nigeria.

It is used to establish or verify your identity for a wide range of services, including financial transactions. NIMC says the NIN should be closely guarded and should not be disclosed unnecessarily, particularly online or on social media.

This matters because your NIN may form part of the identity information used when financial institutions or digital lenders verify customers.

But there is an important point to understand:

Someone having your NIN does not automatically mean they can take a loan in your name.

A legitimate lender is expected to carry out proper credit assessment and due diligence before providing credit. Nigeria's current consumer-lending framework requires credit advances to be provided on an opt-in basis and prohibits automatic or pre-authorised lending.

The real danger is when your NIN is combined with other personal information, identity documents, phone numbers, financial information or compromised accounts.

Here's how to protect yourself — and what to do if a loan has already been taken using your identity.

Why You Should Protect Your NIN

NIMC describes the NIN as a unique identity number that connects records about an individual in the National Identity Database and is used to establish or verify that person's identity.

That makes it sensitive information.

Your NIN can potentially become more valuable to a fraudster when combined with other information such as:

• Your full name
• Date of birth
• Phone number
• Address
• Bank information
• Identification documents
• Passwords or login information
• OTPs
• Copies of your ID documents

So don't think of NIN protection as simply “don't let anyone know my number.”

It's about controlling who receives your identity information, why they need it and where you submit it.

7 Ways to Protect Your NIN From Loan Fraud

1. Don't Upload Your NIN to Random Loan Apps

This is one of the biggest precautions you can take.

Before submitting your NIN to a lending app, determine:

Who operates the app?

Is the lender properly authorised?

Why does the service need your NIN?

What privacy information does it provide?

NIMC specifically warns Nigerians against submitting NIN or BVN information to unauthorised apps and says to use only NIMC and clearly identifiable authorised partners.

2. Don't Send Your NIN Through WhatsApp to “Agents”

Be careful with people who say:

“Send your NIN and I'll help you apply for a loan.”

or:

“Send your NIN slip so I can verify your account.”

If you genuinely need a financial service, use the institution's official app, website or branch rather than sending sensitive documents to an individual's WhatsApp number.

A person's profile picture, business name or WhatsApp status is not proof that they represent a legitimate financial institution.

3. Don't Give Your NIN and OTP Together

Your NIN is an identity identifier.

An OTP is an authentication credential.

They are not the same thing.

If someone says:

“I already have your NIN. Just send the OTP you received so I can complete the verification.”

Stop.

Never disclose an OTP simply because someone claims to be helping you verify your identity or process a loan.

The same applies to:

• Banking PINs
• Card PINs
• Passwords
• Banking-app login details
• Email passwords

4. Be Careful With Your NIN Slip

Your NIN slip contains personal information that you shouldn't distribute casually.

NIMC says the NIN should be closely guarded and specifically advises against unnecessary disclosure online.

Before sending a copy of your NIN slip, ask:

Who is requesting it?

Why do they need it?

Is this an official channel?

How will my information be protected?

If you don't have a clear answer, don't upload it.

5. Download Identity Apps Only From Official Sources

Fake apps and websites can be designed to collect identity information.

NIMC warns Nigerians against downloading its Mobile ID app from dubious websites and social-media accounts and directs users to its official channels.

The same principle applies to financial apps.

Don't install an APK somebody sends you through WhatsApp just because they say:

“This is the loan app.”

Go to the lender's official website or your device's legitimate app store and verify the application.

6. Don't Give a Loan App More Information Than Necessary

Before granting permissions, look at what the application is requesting.

Be particularly cautious when an app requests access to information that doesn't appear necessary for the service.

You should understand:

• What information the app collects
• Why it collects it
• How it uses the information
• Who it shares information with
• How to contact the company about your data

Nigeria's current consumer-lending framework includes requirements around consumer data protection, security measures and privacy.

7. Don't Assume “I Never Applied for a Loan” Means There's Nothing to Check

If your identity information has been exposed, pay attention to unexpected:

• Loan approval messages
• Loan repayment reminders
• Debt-collection calls
• Credit notifications
• Account-opening messages
• Emails from lenders you don't recognise

An unexpected message doesn't automatically prove someone took a loan using your NIN.

It could be a scam, a wrong number or an impersonation attempt.

But don't ignore it until you know what it is.

What If a Loan App Already Used Your NIN?

This is where you need to act quickly.

Suppose you receive a message saying:

“Your loan repayment is overdue.”

But you never borrowed the money.

Don't simply block the number.

Start documenting the situation.

STEP 1: Contact the Lender Directly

Find the lender's official customer-service channel.

Don't use a phone number sent to you by the person demanding payment.

Tell the lender:

“I did not apply for or receive this loan. I believe my identity information may have been used without my authorisation. Please investigate and provide the details of the loan application and your complaint reference.”

Ask for information that can help establish what happened, such as:

• Loan account/reference number
• Date of application
• Date the loan was disbursed
• Amount
• Disbursement destination
• Contact details used
• The lender's complaint/reference number

You don't need to accept responsibility for a debt simply because someone has attached your identity to it.

STEP 2: Make It Clear That You Dispute the Loan

Don't simply say:

“I don't remember taking this loan.”

Be clear.

Say:

“I did not apply for, authorise or receive this loan, and I dispute the debt.”

That distinction matters.

Ask the lender to investigate the identity-verification and application records associated with the loan.

STEP 3: Ask Where the Loan Money Was Sent

This can be one of the most important questions.

Ask:

“What account or wallet received the loan proceeds?”

If the money was sent to an account you don't control, tell the lender immediately.

That could be important evidence that you were not the person who benefited from the loan.

STEP 4: Save Everything

Create a folder on your phone or computer.

Save:

📸 Screenshots of loan messages

📧 Emails

📞 Phone numbers that contacted you

💬 WhatsApp conversations

🧾 Loan references

🏦 Bank statements

📄 Copies of complaints

📱 App notifications

Don't delete the evidence even if the lender eventually says the account was created fraudulently.

STEP 5: Ask the Lender to Correct Its Records

If the investigation confirms that the loan wasn't yours, ask the lender to:

• Correct its records
• Stop treating you as the borrower
• Stop inappropriate collection activity
• Correct any information it has supplied to credit-reporting systems
• Provide written confirmation of the resolution

Get the resolution in writing.

Don't rely only on a phone conversation.

STEP 6: If It's a Digital Lender, Check Its Regulatory Status

Don't assume every loan app operating online is legitimate.

The current FCCPC consumer-lending framework applies to digital lending platforms and establishes requirements around consumer protection, lending practices, privacy and complaints.

If the lender refuses to investigate or you believe it is operating improperly, you can escalate through the appropriate regulatory/consumer-protection channel.

STEP 7: Escalate if the Lender Doesn't Resolve It

Your next step depends on the type of lender and the nature of the complaint.

For a digital consumer lender, the Federal Competition and Consumer Protection Commission (FCCPC) is an important consumer-protection channel.

The current digital consumer-lending framework requires regulated lenders/service providers to provide consumers with channels for enquiries and complaints.

If the issue involves a bank or other regulated financial institution, use the institution's formal complaint process and the applicable financial-sector regulator.

Don't stop at:

“Customer service said they'll look into it.”

Get a complaint/reference number and keep following up.

STEP 8: Contact NIMC if You Suspect Identity Misuse

If your concern goes beyond one loan and you believe your NIN or identity record has been misused, you can contact NIMC through its official channels.

NIMC currently lists:

Toll-free: 08000616462

Call centre: 0700 2255 646

Email: nimccustomercare@nimc.gov.ng

Explain exactly what happened and ask what identity-related assistance is appropriate.

Don't use an unofficial “NIMC agent” on WhatsApp.

Can You Change Your NIN If Someone Uses It for a Loan?

Generally, no.

Your NIN is intended to be a unique lifelong identity number.

NIMC states that once assigned, a NIN cannot be reassigned to another person, and its current modification guidance lists the NIN itself as a non-updatable field.

So if somebody misuses your NIN, the solution isn't to obtain a different NIN.

The goal is to:

Identify the fraudulent activity → dispute it → correct the affected records → secure your other identity information.

What If the Loan App Threatens You?

Some fraudulent or abusive lenders may use aggressive messages or threats to pressure people into paying debts they don't owe.

Don't respond by sending money simply because you're frightened.

Instead:

1. Screenshot the messages.
2. Save the phone numbers.
3. Don't provide additional personal information.
4. Contact the lender through its official channel.
5. Clearly dispute the loan.
6. Report inappropriate conduct through the appropriate consumer-protection channel.

If the messages contain threats of violence or other serious criminal conduct, consider reporting them to law enforcement as well.

What If You Actually Gave the App Your NIN?

Don't panic.

Giving a legitimate lender your NIN during a genuine application is not automatically evidence of fraud.

The important question is whether you gave it to a legitimate service for a legitimate purpose and what else you disclosed.

If you gave your NIN to a suspicious app, however, take additional precautions:

Change passwords

Especially if you created an account with the same password you use elsewhere.

Secure your email

Your email can be used to reset other accounts.

Secure your banking accounts

Contact your bank if you also shared banking credentials or authentication information.

Secure your SIM

Contact your mobile network if you suspect your phone number or SIM has been compromised.

Monitor your financial activity

Look for unfamiliar transactions, loan notifications and account activity.

One Important Myth to Avoid

❌ “If someone knows my NIN, they can automatically take money from my bank account.”

That's not how it should work.

Your NIN is an identity identifier, not your bank PIN or transaction authorisation code.

However, identity information becomes more dangerous when combined with other stolen information or compromised accounts.

That's why you should protect your NIN without becoming unnecessarily afraid of simply having the number known.

Your NIN Safety Checklist

Before giving your NIN to anyone, ask:

WHO?

Who exactly is requesting it?

WHY?

Why do they need it?

WHERE?

Am I submitting it through an official channel?

WHAT ELSE?

Are they also asking for an OTP, PIN or password?

CAN I VERIFY THEM?

Can I independently confirm that the organisation is legitimate?

If you can't answer those questions, stop before submitting your information.

If You Discover a Loan You Didn't Take

Remember this order:

1. DON'T PAY IMMEDIATELY

First establish whether the debt is actually yours.

2. CONTACT THE LENDER

Use its official customer-service channel.

3. DISPUTE THE LOAN

State clearly that you did not apply for or authorise it.

4. REQUEST THE RECORDS

Ask for the loan/application reference and disbursement details.

5. DOCUMENT EVERYTHING

Keep screenshots, messages and complaint references.

6. ESCALATE

Use the appropriate consumer-protection or financial regulator if the lender doesn't resolve it.

7. CONTACT NIMC

If you believe your NIN/identity record itself has been misused.

The Bottom Line

Your NIN is an important identity credential, so don't hand it out casually.

NIMC itself warns Nigerians not to submit NIN or BVN information to unauthorised apps or websites and says the NIN should be closely guarded.

But if a loan appears in your name that you never took, don't assume you have to pay it simply because the lender has your NIN.

Dispute it immediately.

Contact the lender through an official channel, request the application and disbursement information, obtain a complaint/reference number, preserve your evidence and escalate the matter if it isn't resolved.

And remember:

Protect your NIN. Protect your phone number. Protect your OTP. Protect your passwords.

Identity fraud usually becomes much more dangerous when several pieces of information are combined.