She had not bought a house.
She had never signed any document.
She had never met the seller.
But somewhere in the Lagos land registry, her BVN, her NIN, her signature — perfect, precise, indistinguishable from the one she had used her entire adult life — had authorised the purchase of a property worth ₦47 million.
And the loan taken to buy it was in her name.
Amara was 34.
A data analyst at a telecoms firm in Victoria Island.
She was the kind of person who used different passwords for different accounts, who read privacy policies, who had set up two-factor authentication on everything she owned before most Nigerians knew what two-factor authentication meant.
She was, professionally and personally, a woman who understood how data worked.
Which is why, when she saw the loan alert on her phone at 6:47am, her blood went cold in a specific way.
Not panic.
Recognition.
Someone had been inside her life.
The alert was from a microfinance bank she had never used.
“Dear Amara Nwosu, your loan of ₦38,500,000 has been approved and disbursed. Repayment begins April 1, 2023.”
She called the number on the alert.
An automated system.
She pressed every option until a human answered.
“There must be a mistake,” she said.
“Ma, the loan was approved with your BVN, your NIN, and a notarised consent form signed in your name. Our KYC is complete.”
“I did not sign anything.”
A pause.
“Ma, we have the signature.”
She drove to the microfinance bank before 9am.
The branch manager — a nervous man named Mr. Taiwo — showed her the file.
Her photograph. Not a photograph she recognised — taken somewhere, somehow, without her knowledge.
Her BVN. Correct.
Her NIN. Correct.
Her signature. On a notarised consent form.
She stared at the signature for a long time.
It was hers.
Every loop. Every angle. The small leftward drift at the end of the A in Amara that she had developed in secondary school and never lost.
It was hers.
And she had never signed it.
The property was a commercial unit in Lekki Phase 1.
She had never been inside it.
The seller was a company called Greenfield Property Holdings Ltd.
Registered six months earlier.
One director.
A man named Amara Nwosu.
Her name.
Her identity.
A man.
She went to the police that afternoon.
Area F Command, Victoria Island.
She sat in a waiting room for two hours.
When she finally saw an officer, she explained everything.
He wrote it down slowly, asked her to come back with printed bank statements, her original BVN card, and two passport photographs.
“We will investigate,” he said.
She asked how long it would take.
He looked at her with the eyes of a man who has been asked that question many times.
“These things take time, ma.”
She left the station and sat in her car.
She was not a woman who fell apart easily.
She ran data models for a living. She found patterns in noise. She solved problems with structure.
But this was different.
Someone had not stolen her money.
They had stolen her identity — her name, her biometrics, her legal existence — and used it to create a parallel version of her that had bought property, taken loans, and signed documents she had never seen.
The parallel Amara had a life.
And it was destroying the real one.
The credit bureau hit came four days later.
Her credit score — which she had spent ten years building — collapsed overnight.
The ₦38.5 million loan was in default from day one, since she had never received the funds.
Her bank called to inform her that her salary account had been flagged.
Her application for a legitimate mortgage — which she had submitted three months earlier — was rejected.
On paper, she was a loan defaulter.
On paper, she was a property fraudster.
On paper, she barely existed as herself anymore.
Her colleague suggested Legalnaija.
“There’s a lawyer on there who handles digital fraud cases,” he said. “Someone from our department used them last year.”
She was on legalnaija.com before he finished the sentence.
At Legalnaija, access to justice is infrastructure — built specifically for the moment when the system turns against you and you do not know where to turn.
She found him through the directory.
His name was Barrister Emeka Eze.
Emeka Eze did not look like a man who dismantled sophisticated fraud networks.
He was 41. Slight. Wore reading glasses he was always misplacing. His office in Surulere had a ceiling fan that wobbled on every rotation and law books stacked in arrangements that only he understood.
But he had spent twelve years doing one thing:
Following digital trails.
He had handled seventeen identity theft cases since the Cybercrime Act was passed in 2015.
He had won fourteen of them.
He read Amara’s file in forty minutes.
Then he looked up.
“Tell me everything about the six months before this happened.”
the truth is never where you first look for it.
Emeka believed this.
He did not start with the microfinance bank.
He did not start with Greenfield Property Holdings.
He started with Amara.
“When did you last apply for a job?” he asked.
“Eight months ago. I was headhunted. Sent my CV.”
“To whom?”
She pulled up the email. A recruitment firm called TalentBridge Nigeria.
“Did you get the job?”
“No. They said the role had been filled internally.”
Emeka wrote something down.
“Did the application require your BVN?”
She stopped.
Thought.
“Yes,” she said slowly. “For a background check.”
TalentBridge Nigeria had a website.
Professional. Clean. Testimonials from satisfied candidates. A Lagos address in Ikeja.
Emeka drove to the Ikeja address.
It was a printing shop.
The owner had never heard of TalentBridge Nigeria.
The address had been used on the website without his knowledge.
Emeka photographed everything.
He went back to his wobbling ceiling fan and pulled up the WHOIS registration for the TalentBridge website.
Registered seven months ago.
Taken down one week after Amara received her loan alert. Whoever built it had known exactly how long they needed it to exist.
He filed the first application under the Cybercrimes (Prohibition, Prevention) Act 2015.
Section 22 — identity theft and impersonation.
Maximum sentence upon conviction: seven years.
He filed simultaneously at the Federal High Court for an injunction against the microfinance bank — freezing any further action on the loan, halting credit bureau reporting, and ordering the preservation of all KYC documents used in the application.
The bank’s lawyer called him the next morning.
“You can’t freeze a valid loan on the basis of an unproven allegation.”
I can freeze it,” Emeka said pleasantly, “on the basis of an ex parte application to a Federal High Court judge who agreed with me at 8am this morning.”
A pause.
“We’ll be in touch,” the lawyer said.
The injunction gave them time.
Emeka used it.
He subpoenaed the notary who had certified Amara’s signature on the consent form.
The notary — a man with an office in Apapa — said he had notarised hundreds of documents and could not recall the specific transaction.
Emeka showed him the date.
The notary checked his register.
The register showed that on the day in question, he had notarised three documents.
Emeka asked for the other two.
The notary went pale.
The other two documents had been notarised for the same company.
Greenfield Property Holdings Ltd.
Different names. Different BVNs. Different signatures.
But the same handwriting on the supporting covering letters.
The same email address used to book the notary appointments.
The same phone number on the contact forms.
One person. Three victims.
Amara was not the only one.
Emeka contacted the Nigeria Computer Emergency Response Team — ngCERT.
He filed a formal report with the EFCC’s cybercrime unit.
He found the other two victims through the notary’s records.
A retired civil servant in Abuja.
A pharmacist in Ibadan.
Between the three of them: ₦91 million in fraudulent loans.
Three identities constructed from data harvested through fake recruitment portals, fake loan applications, a fake property management app that had briefly appeared on the Google Play Store before being removed.
The operation had been running for at least two years.
The EFCC moved in the fourth week.
They had been building their own case.
Emeka’s filing had given them the thread they needed to pull publicly.
The arrest happened on a Thursday.
Two men. Mid-thirties. An apartment in Lekki Phase 2 that contained twelve laptops, four modems, a professional signature forgery kit — pressure pads, tracing equipment, ink-matching tools — and a database.
The database contained 340 names.
BVNs. NINs. Signatures. Photographs. Employment histories. Family members.
340 Nigerians whose identities had been harvested and were sitting, ready to use, in a folder labelled “Stock.”
Amara sat in Emeka’s office when he told her about the database.
She was quiet for a long time.
“Three hundred and forty people,” she said.
“Yes.”
“And they don’t know.”
“Most of them don’t. Not yet.”
She looked at the wobbling ceiling fan.
“How did they get all of it? The signatures — how do you steal a signature?”
Emeka took off his reading glasses.
“You apply for a job. You apply for a loan. You download an app that asks for verification. You sign a consent form that you think is for one thing.”
He put his glasses back on.
“Every time a Nigerian signs their name on a digital form without reading what they are authorising — that signature is potentially collectible.”
She stared at him.
“We sign things every day,” she said.
“Yes,” he said. “You do.”
The Federal High Court ruled six weeks later on the injunction.
The loan was voided.
The credit bureau entries were expunged.
Greenfield Property Holdings Ltd was wound up by court order.
The land registry entry — the fraudulent purchase made in Amara’s name — was cancelled.
It took four months to undo what had taken the fraudsters four days to construct.
Four months of Emeka’s fees.
Four months of Amara’s salary account under a flag.
Four months of her mortgage application on hold.
Four months of explaining to her bank, her employer, her landlord that she was not a fraudster.
She got everything back.
Except the four months.
The two men were charged under the Cybercrimes Act.
Identity theft. Obtaining credit by false pretence. Conspiracy to commit fraud.
The trial is ongoing.
The remaining 337 people in the database — those whose identities had been harvested but not yet used — were contacted by the EFCC.
Most of them had no idea.
Some of them found out their data had been stolen from a recruitment website they had used three years ago and forgotten.
One woman found out her signature was in the database from a form she had signed at a supermarket loyalty programme registration.
A supermarket.
Three months after the court ruling, Amara’s mortgage was approved.
She moved into a two-bedroom flat in Gbagada in January 2024.
On the day she got the keys, she sat on the floor of the empty living room — no furniture yet, just walls and light — and called her mother.
She didn’t say much.
Her mother talked about curtains.
Amara listened, and looked at the ceiling, and breathed.
I have told you a story.
Now let me tell you what it means.
Because Amara’s story is not about sophisticated criminals.
It is about an infrastructure gap.
The gap between how easily your identity can be taken — and how little most Nigerians know about how to protect it, detect it, and fight back.
Here is what the Cybercrimes (Prohibition, Prevention) Act 2015 gives you:
→ Identity theft and impersonation is a criminal offence — up to 7 years imprisonment.
→ Unauthorised access to computer systems is a criminal offence.
→ Electronic fraud carries penalties of up to 10 years.
→ You can report to the EFCC Cybercrime Unit, the Nigeria Police Force INTERPOL Unit, or ngCERT.
→ A Federal High Court can grant injunctions to freeze fraudulent transactions and reverse credit bureau damage.
The law exists.
Most Nigerians do not know it exists.
Here is how your identity is being harvested right now:
→ Fake recruitment portals that collect BVN for “background checks”
→ Loan apps that collect more data than they need and sell what they don’t use
→ Digital consent forms signed without reading
→ Phishing emails from institutions that look identical to real ones
→ Loyalty programme registrations that collect signature samples
→ WhatsApp “verification” messages that are not from who they say they are from
You are not paranoid for being careful.
You are a target for not being.
Protect yourself:
→ Never provide your BVN to any entity that is not a CBN-licensed financial institution.
→ Your BVN is not a general-purpose ID. It is a financial instrument.
→ Check your credit bureau report at least twice a year — Services are all accessible online.
→ If you see a loan or account you did not open — act within 48 hours. Speed is everything.
→ Report to the EFCC Cybercrime Unit: cybercrime@efcc.gov.ng
→ Get a lawyer who understands the Cybercrimes Act before the fraudsters get further ahead of you.
legalnaija.com
— find verified lawyers who handle digital fraud cases.
The man who stole Amara’s identity had her signature before he had her phone number.
He had found it on a PDF she had uploaded to a job portal.
An offer letter from a previous employer.
She had uploaded it as proof of experience.
She had not thought about her signature.
She had never thought about her signature.
None of us think about our signatures.
We think about our passwords. Our PINs. Our OTPs.
But in Nigeria, where paper and biometric identity still intersect, your signature is a key.
Guard it
340 names in a database labelled “Stock.”
Not victims.
Not people.
Stock.
That is what your identity is worth to the people who trade in it.
A unit of inventory.
Waiting to be deployed.
The only thing standing between your name and that folder is knowledge — knowing what they want, knowing how they take it, knowing what to do when they succeed.
Legalnaija was built for this.
Not just for lawyers.
For every Nigerian who deserves to know their rights before they need them.
Emeka Eze fixed his ceiling fan three months after Amara’s case closed.
He had meant to do it for two years.
He stood on a chair and tightened the bolt and it stopped wobbling.
He sat back at his desk and opened the next file.
A retired teacher in Kaduna.
A loan in her name.
A property she had never seen.
A signature that was hers but wasn’t.
He put on his reading glasses.
He began.
At Legalnaija, we are building the
We are building those tools that deliver –
Legal knowledge. Verified lawyers. Digital rights. Access for everyone.
Because Amara should not have needed four months to recover her own name.
And you should not need a crisis to discover what the law already gives you.
END
Be the first to comment