By Remi Afon
INTERPOL’s latest African Cyberthreat Assessment should serve as a stark wake-up call for Nigeria.
The report reveals that artificial intelligence was linked to more than half of all cybercrime cases reported by surveyed African nations in 2025. This does not mean AI creates cybercrime on its own; rather, criminals are weaponising AI to render existing schemes faster, cheaper, more convincing, and infinitely scalable.
Phishing emails that once failed the basic literacy test are now generated with polished, professional prose in seconds. Bad actors can clone voices, manipulate videos, forge synthetic identities, and launch hyper-personalised scams at scale. The tools of digital deception are growing vastly more sophisticated and dangerously accessible.
For Nigeria, this is no abstract threat. We are already battling a heavy toll from Business Email Compromise, investment fraud, romance scams, identity theft, and corporate impersonation. AI simply strips away the obvious red flags that citizens previously relied upon for protection. A frantic voice note from a relative, a video directive from a CEO authorising an urgent transfer, or a celebrity endorsing an investment platform can all be synthetically engineered.
Nigeria’s expanding digital economy has brought immense opportunity, connecting millions through mobile banking, fintech platforms, and e-commerce. Yet, this expanding footprint widens our attack surface. Fraudsters do not need a high success rate; they only need a fraction of users to fall for a tailored story, click a malicious link, or hand over credentials.
We must also confront an uncomfortable truth highlighted by INTERPOL: Nigerian criminal networks remain heavily implicated in Business Email Compromise and online fraud across West and Central Africa.
Accepting this reality is only step one. The critical next step is examining why so many of our youth are drawn into cybercrime in the first place and recognising why traditional responses are failing to stop the trend.
Law enforcement remains indispensable. Organisers who profit from financial destruction must face the full weight of the law. However, law enforcement alone cannot solve this crisis. Nigeria cannot simply arrest its way out of cybercrime.
The image of a lone hacker operating out of a dark room with a laptop is obsolete. Modern cybercrime is a fully industrialised ecosystem comprising recruiters, social engineers, malware developers, account suppliers, money mules, and cryptocurrency launderers.
Operating much like corporate enterprises, these syndicates feature defined roles, targets, technical support, and international cross-border capabilities. AI streamlines this entire pipeline by automating victim research, drafting phishing lures, and executing conversational fraud. Crucially, it lowers the technical barrier to entry.
In a nation characterised by a massive youth population, high unemployment, and widespread digital literacy without sufficient economic outlets, cybercrime is frequently glorified as a shortcut to financial survival. In some communities, perpetrators are celebrated while the severe human toll on victims is ignored. That culture must change.
Nigeria has concentrated immense energy on detection, arrest, and prosecution. While necessary, these reactive measures tackle crime only after damage is done. Minimal attention is paid to prevention, ethical reorientation, and rehabilitation.
A clear distinction exists between ringleaders of organised syndicates and peripheral youth who are manipulated or gradually drawn in. Many begin naively by lending a bank account to receive a transfer, procuring SIM cards, or handling online chats without understanding the broader criminal operation.
Punishment without rehabilitation merely removes offenders temporarily. A youth leaving a correctional facility with the same technical skill set, zero employment prospects, and stronger criminal connections is a recipe for recidivism.
This is the gap GoLegit Africa was established to bridge.
Cybercrime prevention must incorporate early intervention, practical training, mentorship, and reintegration. The goal is not to excuse criminality or replace law enforcement, but to redirect suitable individuals into legitimate careers in cybersecurity, software development, and the broader tech sector. The sharp mind capable of exploiting a system possesses the exact skill set required to defend one.
However, technical upskilling is insufficient on its own. Reorientation must instil ethics, accountability, and an understanding of victim impact. Cybercrime is not victimless; behind every successful payout is a ruined business, a family stripped of life savings, or a worker denied wages.
To counter the evolving threat landscape, Nigeria must institute a comprehensive policy framework resting on four interconnected pillars.
Prevention must take root through school, university, and community-level education, ensuring youth understand both the severe legal consequences of cybercrime and the hidden risks of assisting criminal networks, such as serving as money mules.
Simultaneously, protection requires mandatory upgrades for banks, fintechs, and telecommunications providers to deploy AI-driven fraud detection, robust identity verification, and real-time transaction monitoring.
On the operational front, enforcement agencies need advanced technical capabilities so law enforcement can rapidly trace deepfakes, synthetic identities, and cross-border cryptocurrency transactions before funds vanish.
Alongside these measures, rehabilitation must be institutionalised within the judicial system, using structured diversion programmes to retrain low-level offenders and turn potential bad actors into productive talent for the legal digital economy.
INTERPOL’s report is ultimately a warning about speed and scale. As AI empowers criminals to automate deception, Nigeria’s strategic response must evolve with equal urgency. Enforcement will always be necessary, but it cannot stand alone; prevention, protection, and rehabilitation must be given equal weight in safeguarding our national future.
Remi Afon is the Founder and Executive Director of GoLegit Africa, a non-profit organisation focused on cybercrime prevention, offender rehabilitation, ethical digital-skills development, and reintegration into legitimate technology careers.