Your National Identification Number (NIN) is a unique identifier linked to your identity, so it should not be treated like an ordinary piece of information.

NIMC specifically advises Nigerians to closely guard their NIN and not disclose it to everyone or publish it online. The Commission also warns against submitting NIN or BVN details to unauthorised apps, websites or social-media accounts.

But what happens if you discover that a loan app has used your NIN to create or associate a loan with you — even though you never applied for it?

Here are the steps you can take.

How to Protect Your NIN From Loan Fraud

1. Don't submit your NIN to every app that requests it

Before giving an app your NIN, check what company operates it and why the information is required.

NIMC warns against dubious apps and unauthorised portals collecting NIN or BVN information.

Be especially careful with loan apps shared through:

  • Random WhatsApp messages

  • Telegram groups

  • Unverified websites

  • APK files sent directly to your phone

  • Social-media advertisements that redirect you to unknown websites

2. Verify the lender before applying

If you actually need a digital loan, check whether the lender appears on the FCCPC's current list of approved/registered digital money lenders.

FCCPC regulates digital lending operators and publishes information about registered digital lending companies and apps. The Commission has also taken enforcement action against non-compliant operators.

Don't assume an app is legitimate simply because you found it online or because it is presented as a loan service.

3. Don't send your NIN slip to strangers on social media

Avoid sending a photograph or PDF of your NIN slip through WhatsApp, Telegram, Instagram DM or other channels unless you have verified who is receiving it and why it is necessary.

NIMC advises that your NIN should be closely guarded and not disclosed online indiscriminately.

4. Be careful with unofficial APK loan apps

One major warning sign is a loan app that asks you to download an APK directly from a website or message instead of using an official app distribution channel.

FCCPC has previously warned about digital lenders using APKs to obtain access to consumers' private information and has taken action against non-compliant operators.

Never install an unknown loan APK just because someone promises a quick loan.

5. Don't give an app unnecessary permissions

Pay attention to the permissions an app requests.

A loan application should not automatically get unrestricted access to everything on your phone simply because you want to borrow money.

Review permissions for:

  • Contacts

  • Photos and files

  • SMS

  • Microphone

  • Camera

  • Location

If an app requests permissions that appear unnecessary, reconsider using it.

6. Keep your NIN information off public platforms

Don't post your NIN slip, NIN number or other identity documents publicly.

Also avoid putting your NIN on:

  • Social-media profiles

  • Public portfolios

  • Business cards

  • Public Google Drive links

  • Online forms from unknown organisations

NIMC specifically advises against publishing the NIN online or printing it alongside contact information on business cards or office stationery.

What If a Loan App Already Used Your NIN?

If you receive a loan notification, SMS, email or collection message for a loan you never took, don't ignore it.

Start documenting the situation immediately.

Step 1: Don't admit that you took the loan

If you genuinely did not apply for the loan, don't tell the lender that you will repay it simply because you received a demand for payment.

State clearly that you dispute the loan and that you did not authorise the application.

Step 2: Contact the lender in writing

Contact the company through its official customer-service channel.

Tell them:

"I am disputing this loan because I did not apply for or authorise it. Please provide the application and verification records associated with this loan and investigate the suspected identity misuse."

Keep screenshots of your complaint and any response.

Step 3: Ask for the evidence behind the loan

Ask the lender to investigate how the loan was created and request the relevant records they can lawfully provide, such as:

  • Loan application details

  • Date and time of application

  • Verification information

  • Disbursement details

  • Account or wallet to which the money was sent

  • Relevant transaction/reference information

  • Records showing how your identity was verified

The purpose is to establish whether your identity was actually used without your authorisation.

Step 4: Dispute inaccurate credit information

If the fraudulent loan has been reported to a credit bureau, dispute the entry.

CBN's credit-bureau guidelines provide for individuals to inspect their credit information and request correction of information they believe is inaccurate, incomplete or outdated. Information confirmed to be inaccurate or incomplete is to be remedied within the applicable process.

Don't assume that because a loan appears on a credit report, you automatically owe it.

Step 5: Report the lender to FCCPC if the issue isn't resolved

If the lender fails to properly address the dispute, you can escalate the matter to the Federal Competition and Consumer Protection Commission (FCCPC).

FCCPC's complaint system allows consumers to submit complaints and attach supporting documents such as receipts, agreements and correspondence.

This is particularly important if you are dealing with an unapproved digital lender, abusive recovery practices or misuse of personal information.

Step 6: Report suspected identity theft where appropriate

If you believe someone deliberately used your identity to obtain money, preserve the evidence and consider reporting the suspected fraud to the appropriate law-enforcement authorities.

Keep:

  • Screenshots

  • SMS messages

  • Emails

  • Loan statements

  • Phone numbers

  • App names

  • Payment details

  • Account numbers

  • Complaint/reference numbers

  • Any threatening messages

Don't delete evidence before the matter is resolved.

Step 7: Contact NIMC about your identity information

For NIN-related concerns, contact NIMC through its official channels rather than people claiming to be NIMC agents on social media.

NIMC lists its customer-care contacts and official support channels on its website.

What You Should NOT Do

If a loan app claims you owe money you never borrowed:

❌ Don't send money just to make the calls stop.

❌ Don't give the caller your OTP, PIN or banking password.

❌ Don't install another app because a "recovery agent" tells you to.

❌ Don't delete the messages or evidence.

❌ Don't send additional identity documents to an unverified person.

❌ Don't publicly post your NIN while trying to prove that you are a victim.

Instead, document the issue, dispute the loan formally and escalate through the appropriate regulatory channels.

Your NIN Is an Identity Credential — Treat It That Way

Your NIN is designed to identify you during identity verification, so protecting it does not mean refusing every legitimate request for identification.

It means verifying who is requesting it, why they need it, and whether the organisation is authorised to collect it.

The safest approach is simple:

Verify → Minimise what you share → Keep evidence → Act quickly if something goes wrong.

If you discover a loan you never took, don't panic and don't automatically pay. Dispute it, document it and escalate it.