• Deloitte expects ransomware and phishing attacks to intensify in Nigeria in 2026 as services and data move online.

• Nigeria ranked third in Africa for phishing cases in 2024, with 3,459 incidents recorded, according to Interpol.

• Cybercrime caused more than $3 billion in losses between 2019 and 2025, with annual losses of about $500 million.

Ransomware and phishing attacks are expected to increase in Nigeria in 2026 as services, payments and data migrate rapidly online. Deloitte highlighted this trend in its report “Nigeria Cybersecurity Outlook 2026”, published in January 2026.

Deloitte attributed the projected increase to the wider availability of tools and techniques that were once limited to experienced cybercriminals. This shift expands risks beyond large organizations. Small and medium-sized enterprises, schools, hospitals and public administrations are increasingly targeted, particularly when cybersecurity budgets and resources remain limited.

The report explained that phishing campaigns are gaining credibility through artificial intelligence. Attackers can now convincingly impersonate communications from trusted colleagues, banks, suppliers or regulators. Once attackers gain access to a user account, ransomware operators can lock systems, quietly exfiltrate customer data, threaten public disclosure and pressure organizations into paying ransoms.

This trend unfolds amid a broader acceleration of cybercrime across Africa. In its “Cybercrime Africa Cyberthreat Assessment 2025”, Interpol said expanding online activity, including social media, digital commerce and mobile banking, facilitates cybercrime.

Interpol added that cybercriminals continuously refine their tactics by using social engineering, artificial intelligence and instant messaging platforms to launch increasingly sophisticated attacks.

The report ranked Nigeria third in Africa for the number of identified phishing cases in 2024, with 3,459 incidents, behind Egypt and South Africa. It added that cybercriminal activities caused estimated financial losses exceeding $3 billion between 2019 and 2025. Official sources estimate Nigeria loses about $500 million per year to cybercrime.

“Strengthening resilience does not always require complex solutions. Regular staff awareness, stronger account protection, basic monitoring of unusual activity and clearly defined recovery plans can significantly reduce impact. Organizations that prepare early have a much higher chance of recovering quickly. Those that believe they are not potential targets may discover that a single convincing message can cause serious disruption,” the Deloitte report said.

This article was initially published in French by Isaac K. Kassouwi

Adapted in English by Ange J. A. de BERRY QUENUM