CBN’s new BVN rules are live from May 1, 2026, and over 60 million enrolled Nigerians need to know what changed. The CBN’s updated Bank Verification Number framework is now in force. Every bank, fintech, and payment provider licensed to operate in Nigeria falls under it.
The rules target one thing above all else: the fraud that has eaten through Nigeria’s digital banking layer for years.
One Phone Number Change For Life
Most customers will not see this one coming. From today, you can update the phone number linked to your BVN exactly once ever.
Previously, Nigerians could swap BVN-linked numbers with relative ease. That flexibility became a weapon.
SIM-swap attacks work by seizing a victim’s registered number to intercept OTPs before the real account holder sees them. Compromised numbers have been a documented entry point for account infiltration across Nigerian banks. The CBN’s fix is blunt: one change, no second chances.
The stakes are real. Change your number carelessly, or lose access to a freshly updated one, and recovering banking access becomes genuinely difficult. Treat this as a permanent decision.
See Also: Regulator Clash Freezes Nigeria's ₦400bn Airtime Credit Market
One Device, One App Everywhere You Bank
The CBN has locked mobile banking to a single active device per application. Switching to a new device kills the session on your old one immediately.
This targets remote account takeover cases where fraudsters use stolen credentials or cloned devices to access accounts alongside the legitimate user. A single active session removes that dual-access window.
If you switch phones often or share devices, this hits you directly. Plan device changes deliberately. A new phone is not a casual upgrade when your banking apps are involved.
₦20,000 Cap on New Devices for 24 Hours
Switch to a new device, and your transaction limit drops to ₦20,000 for the first 24 hours. The window buys banks time to run identity checks before any significant movement of funds.
The CBN built this as the last barrier before an account gets drained. Even if a fraudster obtains login credentials and accesses a new device, they cannot immediately move large sums. The 24-hour cap limits damage while verification runs.
After the window clears, normal limits resume. Do not plan large transfers immediately after a device change.
See Also: Nigeria Orders Banks and Fintechs to Disclose Cyberattacks
Suspicious BVNs Land on a 24-Hour Watchlist
Banks can now place any BVN flagged for unusual activity on a fraud watchlist for up to 24 hours. During that window, transactions may pause while the institution contacts the account holder.
Criminals rely on moving stolen funds quickly across multiple accounts before anyone notices. The watchlist breaks that window.
Legitimate customers will occasionally feel this, too. Stay reachable. If your bank flags a transaction and cannot reach you, it will hold the funds until it can.
BVN Registration Now Locked to Adults Only
Independent BVN registration is now available only to adults. Anyone under 18 must go through a guardian-linked arrangement approved by their bank.
BVN data is now locked to licensed institutions only. The informal channels that many Nigerians used to resolve BVN errors have closed. All corrections go through your bank, officially.
These rules make fraud structurally harder. That is how trust gets built.
GizPulse covers Nigeria’s financial and digital policy in real time. Subscribe to the GizPulse newsletter and never miss a rule change that affects your money.
