Identity Verification in Nigeria Guide

Because neither one confirms the person in front of you is the person the number belongs to. A BVN or NIN check is a lookup against a record, and a record can be known, borrowed or bought by someone who isn't its owner. Liveness is the step that closes that specific gap, confirming a real person is physically present at the moment of verification rather than a photo, a screen replay, or a generated face.

Because the token is generated per enterprise, isn't meant to be retained after use, and is created deliberately by the customer rather than typed passively into a form. That combination reduces how much raw identity data you're holding and builds a consent trail that sits far better against your data protection obligations. It costs you a step in the funnel, but it's the step that protects you later.

It depends on what you're optimizing for at that moment. Passive liveness asks nothing of the customer and completes at a higher rate, but it's easier to defeat than active liveness, which asks them to turn their head or blink and is harder to fool. Most institutions run passive by default for everyone and trigger active only when risk signals say the extra friction is worth it.

Because at the moment of onboarding, nothing about a synthetic identity looks wrong. It's built from a real identity number paired with a fabricated name and a controlled phone number, and it passes every static check cleanly. These identities are patient. They behave normally for months before they're used, which means the only way to catch them is behavior over time, not a single check at the door.

Because a device fingerprint or a liveness score captured at onboarding and never seen again by any other system is money spent for nothing. Synthetic identities and mule networks get caught through relationship signals, like several unrelated accounts sharing one device or one address, and that only works if the systems that could see the connection are actually looking at the same data.

Yes, and it's worth planning for specifically rather than assuming document fraud defenses cover it. Biometric and deepfake-driven attacks are more prominent in West Africa than the document forgery that dominates in several neighboring markets. An institution that's calibrated its defenses against forged documents alone is defending the wrong perimeter.