nimcverify.ng personal data sale allows access to NINs and BVNs for as little as N150, putting Nigerians’ identity security in serious jeopardy

nimcverify.ng personal data sale has been found to exploit Nigerians’ vital identity information, offering access to NIN and BVN details for as little as N150—despite no affiliation with NIMC.

Also read: ‘Revealed’ Centres NIMC officials exploit Nigerians through NIN registration

Investigations by FIJ confirmed that a simple phone number is all it takes.

The website, run by “Timzytech Developers,” offers NIN printouts and unauthorized identity services like BVN retrieval and NIN modification for just N150 to N280.

Surprisingly, the service worked seamlessly when tested using phone numbers from consenting journalists.

And yet, neither nimcverify.ng nor Timzytech appear on NIMC’s list of licensed data handlers or Front‑End Partners (FEPs), putting their operations squarely outside the law ([fij.ng][1]).

The site’s domain was newly registered on May 22 and includes privacy shielding.

Hosting records point to Cloudoon’s infrastructure, masking the identities of its operators.

The consequences of such exposure are profound. Access to NIN, BVN, phone number and address creates dangerous opportunities for identity theft, fraud, phishing and even kidnapping.

Full dossiers can be built for malicious exploitation.

Under Section 14 of the NIMC Act, only NIMC can manage national identity data.

Section 28 criminalizes unauthorized access or disclosure, with penalties of at least N1 million fine and/or a minimum three years imprisonment.

The Nigeria Data Protection Act (NDPA) of 2023 further mandates lawful and transparent data handling, with penalties up to N10 million or 2% of gross revenue, and strict breach notification rules.

This troubling revelation isn’t isolated. NIMC has previously flagged sites like AnyVerify.com.ng and others for similarly fraudulent data harvesting ([Business Post Nigeria][3]).

Vigilance is key. Nigerians are urged to never share personal information with unverified platforms.