The Federal Government has initiated plans to overhaul Nigeria’s cybercrime legislation in response to growing threats from artificial intelligence, sophisticated internet fraud, digital surveillance and attacks on critical national infrastructure. The Attorney-General of the Federation and Minister of Justice, Lateef Fagbemi, disclosed that the Federal Ministry of Justice had advanced work on a draft executive bill intended to strengthen the investigation and prosecution of cybercrime. The announcement was made on Tuesday, October 27, at the second International Cybersecurity Conference in Abuja, where government officials, technology regulators and lawmakers discussed the implications of rapidly evolving digital threats. The proposed reforms aim to strengthen national cybersecurity while protecting fundamental rights and maintaining public confidence in Nigeria’s expanding digital economy.
Fagbemi’s message was delivered on his behalf by the Director of Public Prosecutions of the Federation, Rotimi Oyedepo. He explained that the proposed legislation would modernize existing legal provisions to address emerging technologies, improve the preservation and exchange of electronic evidence and strengthen cooperation among law enforcement agencies. According to the minister, cybercrime has expanded beyond conventional internet fraud to include cryptocurrency related offences, sexual extortion, child exploitation and AI assisted deception. He stressed that Nigeria requires legislation capable of addressing increasingly complex criminal activities while ensuring that investigators and prosecutors operate within the law. Although the draft executive bill is being developed, its complete provisions have not been publicly released, and it has not yet become law.
Nigeria’s cybersecurity conferences bring together government agencies, industry representatives and technology specialists to discuss digital security challenges.
The conference was organised by the National Information Technology Development Agency (NITDA) and the Nigerian Communications Commission (NCC) under the theme Cyber Resilience in the Age of AI: Defending Minds, Networks and Nations. Discussions focused on how artificial intelligence is transforming cybercrime and creating new vulnerabilities for individuals, businesses and government institutions. Participants identified digitally manipulated identities, automated attacks, sophisticated malicious software and emerging forms of online deception as serious concerns. The gathering also provided a platform for examining how Nigeria’s existing legal and regulatory systems could be updated to address these challenges without discouraging technological innovation or legitimate digital activities.
NITDA Director-General Kashifu Inuwa Abdullahi confirmed that the agency was working with the Office of the National Security Adviser and the National Assembly to review the Cybercrimes Act. He explained that the review could involve substantial legislative changes designed to provide clearer powers and stronger protection standards. Abdullahi also disclosed that the government was considering a national cybersecurity architecture that would establish minimum security requirements for organisations. He warned that cybercriminals increasingly exploit human behaviour through convincing AI-generated voices, videos and images rather than relying exclusively on technical attacks against computer systems. The development has made public awareness, identity verification and stronger institutional safeguards important components of cybersecurity planning.
Nigeria’s law enforcement agencies investigate online fraud and other digital offences as cybercriminal techniques become more sophisticated.
The Executive Vice-Chairman of the Nigerian Communications Commission, Aminu Maida, also warned that increasingly sophisticated cyberattacks could disrupt telecommunications networks, financial institutions and government operations. Represented by the commission’s Executive Commissioner for Technical Services, Sunday Oshadami, Maida explained that cybercriminals were using automated systems, deepfake technology and advanced malware to compromise digital infrastructure. He highlighted the danger of attacks that can operate at extraordinary speeds and exploit weaknesses before conventional security teams respond. The NCC disclosed that it had established a Computer Security Incident Response Team and introduced a cyber resilience framework prescribing security standards for licensed telecommunications operators. Maida urged operators to adopt stronger access controls and continuously assess their systems for vulnerabilities.
The proposed reforms could have significant implications for Nigerian banks, telecommunications companies, technology businesses and public institutions that manage large volumes of sensitive information. AI-generated voices and manipulated videos can be used to impersonate executives, deceive customers or authorise fraudulent transactions, while automated attacks can target financial systems and essential services. Stronger cybersecurity obligations could encourage organisations to improve identity verification, incident reporting, digital evidence preservation and staff training. However, the specific obligations businesses would face under the proposed legislation remain uncertain because the draft has not been published. Regulators and lawmakers will therefore need to consider how additional compliance requirements can improve security without imposing disproportionate costs on smaller organisations or restricting legitimate innovation.
The announcement comes more than a decade after Nigeria enacted the Cybercrimes (Prohibition, Prevention, etc.) Act in 2015 to establish a legal framework for preventing, investigating and prosecuting offences committed through computer systems and electronic networks. The legislation was amended on February 28, 2024, with changes covering areas such as cyberstalking, reporting obligations and the protection of computer systems. However, the 2024 amendments generated criticism from civil society organisations and media freedom advocates, who expressed concerns that certain provisions could be used against journalists, activists and other individuals exercising their constitutional rights. In May 2025, the government indicated that further consultations would take place to address concerns surrounding the law. The latest reform initiative therefore builds on an existing legislative debate while responding to emerging technological risks.
Fagbemi emphasised that strengthening cybersecurity legislation must not undermine the fundamental freedoms guaranteed under Nigerian law. He explained that improved enforcement powers should operate alongside safeguards protecting human rights, privacy and the rule of law. The proposed reforms also draw on Nigeria’s participation in international cybersecurity initiatives, including the Budapest Convention on Cybercrime and engagement with the United Nations Convention against Cybercrime. Such arrangements can support cooperation between national authorities when criminal activities involve individuals, financial accounts or digital infrastructure located in different countries. However, effective international collaboration will require clear legal procedures governing electronic evidence, data sharing and the protection of personal information.
Lawmakers have also called for stronger institutional coordination as Nigeria considers the proposed reforms. Senate Committee on ICT and Cybersecurity Chairman Shuaib Salisu proposed the development of a national cybersecurity resilience index to assess how effectively organisations protect their systems against emerging threats. He also recommended closer engagement among technology regulators, security agencies and legislators to harmonise cybersecurity policies. Similarly, House of Representatives Committee on ICT and Cybersecurity Chairman Stanley Adedeji Olajide warned that rapidly evolving technologies were exposing limitations in existing legislation. Their contributions reflected concerns that effective cybersecurity requires more than criminal penalties, including preventive standards, institutional preparedness, international cooperation and clear procedures for responding to attacks.
As of October 28, 2026, the Federal Ministry of Justice has confirmed progress on a draft executive bill, but no new cybercrime legislation arising from the initiative has been enacted. The proposed changes will require further consideration and the appropriate legislative process before they can become legally binding. The government faces the task of developing a framework capable of addressing AI-powered fraud, cyberattacks and digital exploitation while ensuring that stronger investigative powers do not compromise freedom of expression, privacy or other constitutional protections. For Nigerian businesses, financial institutions and internet users, the eventual outcome could influence digital security obligations, criminal investigations and public confidence in online services. The success of the reforms will depend on their legal clarity, practical implementation and ability to respond to technological developments without weakening fundamental rights.
