One Phone Number for Life, One Device at a Time: Everything You Need to Know About Nigeria’s New BVN Rules Effective May 1, 2026
Summary
The Central Bank of Nigeria has overhauled its Bank Verification Number framework with sweeping new guidelines that took effect on May 1, 2026 marking the most significant update to Nigeria’s financial identity system since the BVN was introduced in 2014. The changes include a lifetime limit of one phone number change per BVN holder, a strict one device per banking app policy, a ₦20,000 transaction cap within the first 24 hours of logging into a new device, a BVN fraud watchlist system that can temporarily freeze accounts, and a new minimum age of 18 for BVN enrolment. The reforms are designed to combat SIM swap fraud, identity theft, and the rising tide of digital financial crime and apply to all deposit money banks, fintechs, payment service providers, and licensed financial institutions operating in Nigeria.
Since its introduction in 2014, Nigeria’s Bank Verification Number has been the backbone of the country’s financial identity architecture linking biometric data to bank accounts across institutions and serving as the primary tool for fighting ghost accounts and identity fraud. Twelve years later, the CBN has introduced what analysts are describing as the most consequential update to the BVN system since it was first launched a package of reforms that took effect on May 1, 2026 and will fundamentally change how millions of Nigerians access and manage their bank accounts.
Nigeria now has over 67.8 million BVN registrations as of December 2025, up from 51.9 million in 2021. Mobile banking is mainstream, digital transfers happen in seconds and fraud has followed the money. SIM swap fraud, in which criminals convince a telecom provider to transfer a customer’s phone number to a SIM they control, has become one of the most damaging threats to Nigerian bank customers. By controlling a phone number, a fraudster can intercept OTP codes, reset passwords, and drain accounts before the victim realises anything is wrong. The new BVN framework is the CBN’s direct response to that threat and its scope is broader than most social media coverage has captured.
The Five Rules Every Nigerian Must Know
The most consequential change is the lifetime restriction on phone number updates. Under the new rule, customers are now allowed to change the phone number linked to their BVN only once ever. This is a sharp departure from previous practice, where multiple updates were possible with relative ease. Phone numbers are central to banking authentication OTPs, transaction alerts, and account recovery codes all flow through the registered number making that number the single most critical piece of contact information in the entire banking relationship. Customers who currently have outdated, borrowed, or rarely used numbers linked to their BVN are strongly advised to use their one permitted change before it becomes critically necessary.
Mobile banking apps will now be restricted to one device at a time. Logging into a banking app on a new phone will automatically deactivate access on the previous device and trigger additional authentication checks. Some digital banks like OPay had already implemented this approach but applying it universally across all CBN licensed institutions is on a different scale entirely.
Customers activating their banking apps on a new device will face a temporary transaction limit of ₦20,000 within the first 24 hours. This restriction acts as a safety buffer, ensuring that even if an account is compromised during device setup, the amount that can be moved is significantly limited.
Banks are now required to place any BVN linked to suspicious activity on a temporary 24 hours watchlist. During this period, affected accounts may be restricted or frozen while the bank contacts the customer for verification. This real time transaction monitoring system is designed to detect and prevent fraudulent activities more efficiently. Customers must therefore remain reachable on their registered numbers because a call from their bank during a fraud review could be the difference between protecting their funds and losing them.
The CBN has set 18 years as the minimum age for BVN enrolment. Minors will no longer be allowed to hold independent BVNs instead, parents and guardians must rely on structured banking products designed for children to manage funds on their behalf.
What Customers Must Do Now
Only licensed financial institutions will be granted access to BVN data under the new framework, to enhance data privacy and curb unauthorised access. The CBN has advised all customers to confirm their BVN-linked phone number is active, secure, and permanently theirs and to update details where necessary before the rules make that process more restrictive. Customers whose names appear misspelled between their BVN and NIN linked to existing accounts represent a group the policy has not yet fully addressed a gap that banks and the CBN will need to resolve as implementation beds in.
Analysis
The CBN’s BVN overhaul is a proportionate institutional response to a crisis that has been building for years. Digital fraud in Nigeria’s banking sector is not a fringe problem it is a growing, organised, technologically sophisticated threat that has cost customers, banks, and the broader financial system tens of billions of naira annually. SIM swap fraud alone has decimated savings accounts, compromised business transactions, and eroded the trust of a population that the CBN is simultaneously trying to pull deeper into formal financial services through its financial inclusion agenda. You cannot expand financial inclusion if the system people are being included in is demonstrably unsafe. The lifetime phone number change restriction is the rule that will generate the most controversy and it deserves scrutiny alongside applause. In a country where network reliability is inconsistent, where telecom operators have been known to deactivate numbers after periods of inactivity, and where millions of Nigerians have historically registered BVNs through agents using numbers that were never truly theirs, a one time for life limit creates a permanent vulnerability for customers who do not act quickly and deliberately. The CBN and the banks will need robust, accessible, and verifiable processes for handling the edge cases the widow whose BVN is registered on her late husband’s number, the rural customer whose number was deactivated, the name mismatch between BVN and NIN that will inevitably surface in large numbers as the rule beds in. The one device policy and the ₦20,000 new device limit are both sensible and enforceable, and the fraud watchlist mechanism gives banks a tool they have clearly needed. Together, the reforms signal a CBN that is no longer content to observe the fraud crisis and issue warnings it is restructuring the identity infrastructure of the entire banking system to make large scale digital theft significantly harder. That is exactly the right instinct. The execution will determine whether the promise is kept.
Tags