CBN Tightens BVN Rules: One-Device Policy, ₦20,000 Cap, Anti-Fraud Measures Take Effect May 1

In a decisive move to reinforce the security of Nigeria’s fast-growing digital banking space, the Central Bank of Nigeria (CBN) has announced a comprehensive overhaul of the Bank Verification Number (BVN) framework, introducing stricter rules that will reshape how customers access and operate their bank accounts nationwide.
The new guidelines, scheduled to take effect from May 1, 2026, are part of the apex bank’s broader strategy to curb escalating cases of cyber fraud, identity theft, and unauthorized account access, which have become increasingly prevalent with the surge in mobile banking adoption.
At the core of the reforms is a stringent “one customer, one device” policy for mobile banking applications. Under the new regime, bank customers will only be permitted to operate their banking apps on a single device at any given time. Any attempt to log in on a new device will automatically terminate access on the previously registered device, a measure designed to prevent multiple access points that could be exploited by fraudsters.
To further tighten security, customers switching devices will now undergo enhanced authentication procedures. These additional verification layers are expected to include multi-factor authentication checks, aimed at confirming the identity of the account holder before granting access.
The CBN also disclosed that BVNs linked to suspicious transactions will be subjected to a 24-hour fraud watchlist. During this monitoring window, banks are empowered to impose temporary restrictions or freeze affected accounts pending thorough investigation. This rapid-response mechanism is intended to limit financial losses and disrupt fraudulent activities in real time.
In a bold step to tackle the persistent threat of SIM-swap fraud, the apex bank has introduced a lifetime limit on phone number changes linked to BVNs. Customers will now be allowed to update their registered phone number only once, a policy the regulator believes will significantly reduce cases where criminals hijack phone lines to gain access to banking platforms.
Additionally, a transaction cap of ₦20,000 has been placed on accounts accessed via newly activated devices within the first 24 hours. This precautionary limit serves as a safeguard, ensuring that even if unauthorized access occurs, potential losses are minimized during the critical transition period.
The revised BVN framework also introduces a stricter eligibility criterion, setting 18 years as the minimum age for enrollment. Minors will no longer be allowed to independently register for BVN and must instead operate accounts under parental or guardian supervision, aligning Nigeria’s banking practices with global standards on financial identity management.
Industry stakeholders note that the reforms reflect the CBN’s growing emphasis on cybersecurity resilience within the financial system. As digital channels continue to dominate banking transactions, regulators are under increasing pressure to stay ahead of sophisticated fraud schemes targeting unsuspecting customers.
While the new measures may introduce additional steps for users, financial experts argue that the long-term benefits—enhanced security, reduced fraud incidents, and improved trust in the banking system—far outweigh the temporary inconvenience.
Banks across the country are expected to begin customer sensitization campaigns ahead of the implementation date, ensuring a smooth transition to the new regime. Customers are also advised to update their contact details, secure their devices, and remain vigilant against phishing attempts and other forms of digital fraud.
With these sweeping reforms, the Central Bank of Nigeria is sending a strong signal of its commitment to safeguarding Nigeria’s financial ecosystem, reinforcing confidence in digital banking, and protecting millions of account holders from evolving cyber threats.
CBN introduces sweeping BVN reforms effective May 1, including one-device banking, transaction caps, and stricter anti-fraud measures to secure Nigeria’s digital banking system.