Data commission warns Nigerians against malicious electronic messages

The Nigeria Data Protection Commission has cautioned Nigerians against deceptive electronic messages falsely alleging that recipients have breached traffic rules or engaged in related offenses. These messages are crafted to instill fear and prompt swift action, leading individuals to click on links, reveal personal data, or adhere to hazardous instructions.

In a recent advisory, the Head of the Media Unit, Itunu Dosekun, emphasized that such fraudulent communications have historically been conveyed via phishing emails but can now be delivered across multiple electronic channels. The Commission urged individuals not to engage with or follow any instructions contained within messages that cannot be independently verified.

To safeguard against these threats, the NDPC advised Nigerians to scrutinize the sender's address, domain name, and links before clicking. They must be absolutely certain that the message originates from a legitimate authority or organization before taking any action. The Commission further advised members of the public to independently verify suspicious messages by reaching out to the organization or authority mentioned in the communication through a trusted telephone number, website, or email address.

It is crucial not to rely on the contact details provided within the suspicious message itself. Additionally, the NDPC urged Nigerians to report any suspicious messages or attempts at impersonation to the Commission and the purported organization or authority. In terms of account security, the Commission encouraged the public to employ strong and distinct passwords, refraining from using the same password across multiple services.

If individuals suspect their accounts have been compromised, they should promptly change their passwords. To enhance protection, enabling multi-factor authentication is strongly recommended whenever it is available, as it adds an extra layer of defense beyond the password. The Commission emphasized that fear, urgency, or the semblance of official authority should never compel individuals to click on links or disclose personal information.

They stressed the importance of stopping, verifying, protecting, and reporting such incidents, stressing that the protection of personal data is a shared responsibility.