The Central Bank of Nigeria (CBN) has issued new directives affecting the Bank Verification Number (BVN), instant payment services and the handling of dormant bank accounts.
The directives were contained in three circulars released by the apex bank on March 12, 2026, and sent to banks, other financial institutions and payment service providers operating in the country.
In one of the circulars, the CBN outlined new operational rules for instant payment services as part of efforts to protect customers and reduce cases of electronic fraud.
Under the directive, all financial institutions offering instant payment services must allow customers to voluntarily opt out of the service.
Customers will be able to switch off the instant transfer feature on their accounts for a chosen period. Once the option is activated, the account holder will not be able to send money electronically through instant transfers to other accounts.
However, the CBN said customers can still visit their bank branches to carry out transfers while the restriction is in place.
The regulator said the opt-in and opt-out process must be protected by multi-factor authentication to ensure that only the account owner can make the request.
According to the circular, customers will automatically be enrolled for instant payment services when they open a new account, but they can later change their preference.
The CBN also directed banks to allow customers adjust their personal transaction limits for instant transfers.
While the existing regulatory ceiling of N25 million for individuals and N250 million for corporate accounts remains unchanged, customers can decide to set lower limits on their accounts.
The apex bank said any change in transaction limits must pass through enhanced verification procedures and risk assessment by the financial institution before it takes effect.
Financial institutions have also been directed to deploy enterprise fraud monitoring systems capable of tracking both incoming and outgoing transactions in real time in order to detect suspicious activities.
According to the circular, stronger identity verification procedures must also be adopted for online account opening and account reactivation.
The regulator said all accounts opened online must undergo a “liveliness check,” while the details must be validated instantly against the national identity and BVN databases.
Banks are also required to introduce stronger authentication measures such as biometric verification, soft tokens, hard tokens and other security tools before reactivating accounts online.
The CBN further directed financial institutions to tighten security on mobile banking applications.
Financial institutions that do not operate websites are required to publish the information on the websites of their industry associations.
Banks must also publish the list of dormant accounts every year in at least two national daily newspapers.
Where the list is too long, the institution may publish a brief notice directing customers to a section of its website where the full details can be accessed.
The CBN added that state and unit microfinance banks are not required to publish the information in national newspapers but must display it at their business locations.
The regulator also addressed concerns regarding compliance with the Nigeria Data Protection Act 2023.
According to the apex bank, the publication of information about dormant accounts and unclaimed funds does not violate data protection rules because the law allows personal data to be processed when it is required for compliance with legal obligations or for the protection of the interests of the account owner.
The CBN said its powers to issue such directives are also backed by provisions of the Banks and Other Financial Institutions Act 2020, which authorises the regulator to provide guidelines on the administration of unclaimed funds held by banks and financial institutions.
The circular on dormant accounts takes immediate effect and replaces an earlier directive issued on February 17, 2025.