28/04/2026
NIGERIA'S CYBERCRIME CRISIS: WHY PROSECUTION ALONE WILL NEVER BE ENOUGH - AND WHAT MUST CHANGE
By Emeka Ugwuonye, Esquire | Eculaw Group | Law. Rights. Accountability.
An Opinion for Nigerian Policy Makers and Legislators:
The EFCC Chairman, Olanipekun Olukoyede, has done Nigeria a service by stating what many Nigerians already know but rarely say at a podium reserved for policy makers. Speaking at the 8th Biennial Conference of the Committee of Pro-Chancellors of State-Owned Universities in Nigeria, he stated that his research over the past year shows that approximately six out of ten students in Nigerian universities are involved in cybercrime - a situation he described as "very disturbing."
If that figure is even approximately correct, Nigeria does not have a cybercrime problem. It has a civilisational emergency.
Let us be precise about what this means in practical terms. Nigeria has approximately 1.8 million undergraduate students across its federal, state, and private universities. If six in ten are engaged in cybercrime in any form, we are discussing over one million young Nigerians whose primary intellectual and entrepreneurial energy is directed not at building the future of the country, but at defrauding people - predominantly abroad, but increasingly domestically. Nigeria loses at least $500 million annually to various forms of cybercrime. This number can only increase, if the right meadures are not implemented. Over 2,800 young people, mostly students, were convicted for cybercrime offences in a single year. These are not statistics. They are a measure of a generation being lost.
Why the Current Approach Is Failing:
The Nigerian government's dominant response to cybercrime has been prosecutorial. Arrest. Prosecute. Convict. The EFCC has pursued this with considerable operational vigour. A single operation in Lagos yielded 792 arrests linked to a transnational cybercrime syndicate, many of them undergraduates. The commission has integrated artificial intelligence into its investigative processes. It has achieved thousands of convictions. It has recovered billions of naira in proceeds of crime.
And yet the problem grows. The reason is not prosecutorial failure. It is the fundamental mismatch between the instrument deployed and the nature of the problem being addressed.
Cybercrime at this scale is not primarily a law enforcement failure. It is a policy failure - rooted in unemployment, educational dysfunction, the absence of legitimate technology pathways for talented young Nigerians, and a cultural normalisation of fraud that no amount of prosecution has yet reversed. The EFCC Chairman himself acknowledged this, noting that some suspects had allegedly placed their university lecturers on their payroll - a detail that tells us the corruption has penetrated the very institutions responsible for producing citizens of integrity. You cannot arrest your way out of a problem that has corrupted the fabric of the university system itself.
What Nigerian Law Must Do:
Nigeria's primary cybercrime legislation, the Cybercrimes (Prohibition, Prevention, Etc.) Act 2015, was a commendable first step. But it is now over a decade old in a field that transforms itself every eighteen months. The 2024 amendment addressed some gaps, particularly around cyberbullying and electronic fraud. But the legislative framework still lacks several critical components that modern cyber governance requires.
First, Nigeria needs a comprehensive National Cybersecurity Strategy with genuine legislative backing - not a policy document but a statute that mandates coordinated action across ministries, defines responsibilities, sets timelines, and creates accountability mechanisms. Countries that have made meaningful progress against cybercrime, the United Kingdom, Estonia, Singapore, did so through whole-of-government frameworks that treated cybersecurity as infrastructure, not enforcement.
Second, Nigeria needs a Digital Economy and Cyber Ethics curriculum integrated into every level of the university system. The EFCC Chairman urged pro-chancellors to deploy AI-driven governance systems, invest in broadband infrastructure, and build capacity in cybersecurity and digital governance. These are operational recommendations. What is needed equally urgently is moral and civic education in digital ethics, teaching young Nigerians not merely the consequences of cybercrime but the values framework that makes its rejection a matter of professional identity, not merely fear of arrest.
Third, Nigeria needs a structured pathway from cybersecurity talent into the legitimate technology economy. The same intelligence, technical aptitude, and social engineering skill that Nigerian youth deploy in fraud can, with the right institutional scaffolding, produce world-class cybersecurity professionals, software engineers, and digital entrepreneurs. The gap between a Yahoo boy and a cybersecurity consultant is not talent. It is opportunity.
The Role of International Partnership:
Eculaw Group intends to pursue this policy agenda actively - including through structured partnerships with leading American educational institutions in the field of law and technology. Institutions such as Harvard Law School's Cyberlaw Clinic, the Berkman Klein Center for Internet and Society, and similar centres at Stanford and Georgetown have developed sophisticated frameworks for cybercrime policy, data protection law, and digital governance that Nigeria's legislators urgently need exposure to.
The model we envision is not aid or charity. It is intellectual exchange - Nigerian legal and policy professionals engaging with the world's most advanced thinking on cyber law and bringing that knowledge home in forms that Nigerian institutions can operationalise. Nigeria's lawyers, its legislators, and its regulators must sit at the same table as their counterparts in Washington, London, and Brussels if this country is to develop a cyber governance framework fit for the digital century.
The EFCC Chairman has sounded the alarm. The question now is whether Nigeria's policy makers will treat this as the emergency it is, or whether, as has too often been the case, the alarm will be noted, a committee will be constituted, a report will be written, and nothing will fundamentally change.
Nigeria's young people are not inherently criminal. They are creatively intelligent, technically capable, and operating in an environment that has failed to give them a legitimate outlet for those qualities. The answer to that failure is not more convictions. It is better policy, stronger institutions, and a government serious enough about its own future to invest in the talent it is currently prosecuting.
---
Eculaw Group | Law. Rights. Accountability.
Emeka Ugwuonye, Esquire — Principal, Eculaw Group | Founder, DPA International Foundation.
© Eculaw Group 2026
This analysis is provided for informational purposes and does not constitute legal advice. Eculaw Group specializes in governance, regulatory compliance, and public policy engagement across Nigerian jurisdictions.
