PAFON 2026: Cybersecurity gaps, trust issues undermine

Nigeria's ambition to build a fully cashless economy by 2026 is colliding with a hard reality: persistent cybersecurity vulnerabilities and eroding public trust are threatening the entire financial inclusion roadmap. The Pan-African Fintech Operators Network (PAFON) and central bank stakeholders have flagged these structural weaknesses as the primary risk to the country's digital payments transition—a shift critical to tax revenue, GDP tracking, and financial system stability.

## Why are cybersecurity gaps slowing Nigeria's digital payment adoption?

The Nigeria Payment System Vision 20/20 (later extended to 2026) aimed to migrate 80% of transactions digital by 2026. Yet the ecosystem remains fragmented. Fintech platforms, microfinance banks, and legacy banking infrastructure operate across incompatible security standards. A single breach—whether in a third-party API, mobile wallet provider, or merchant gateway—can expose millions of user records. Recent incidents involving unauthorized access to customer data at mid-tier fintechs have already eroded confidence among lower-income users, the exact demographic Nigeria needs to bring into formal finance.

The Central Bank of Nigeria (CBN) mandates compliance with PCI-DSS and local cybersecurity frameworks, but enforcement remains inconsistent. Smaller fintech operators and rural microfinance institutions lack the capital to implement enterprise-grade encryption, tokenization, and multi-factor authentication systems. This creates a two-tier market where affluent users trust bank-backed apps while informal traders and the unbanked remain skeptical of digital alternatives—defeating the inclusion purpose.

## How does declining consumer trust impact financial inclusion metrics?

Trust is the currency of cashless transitions. If Nigerians don't believe their money is safe in a digital wallet, they revert to cash—a rational risk calculation given limited regulatory recourse. PAFON research indicates that cybersecurity incidents and fraud reports have correlated with a plateau in digital transaction growth among lower-income segments since mid-2024.

The irony is self-reinforcing: low adoption = fewer users to spread fixed security costs = smaller operators cut corners = more breaches = lower trust. Nigeria's digital payments penetration, while rising, remains below 35% in rural areas. A major security incident could reverse gains achieved over the past three years.

## What regulatory reforms are needed before 2026?

The CBN's recent cybersecurity directives are a step forward, but enforcement requires real-time monitoring and meaningful penalties. Stakeholders are calling for: (1) mandatory security audits every six months for payment service providers; (2) a national cybersecurity insurance framework to protect consumer deposits; (3) public incident reporting requirements to build transparency; and (4) skills development programs to close the cybersecurity talent gap in fintech.

Without these reforms, Nigeria risks achieving the form of a cashless economy—digital transaction channels exist—while losing the function: genuine trust and financial inclusion.

---

#