PwC flags AI fraud threat to Nigeria telecoms

Nigeria’s telecommunications sector faces escalating risks from artificial intelligence-driven fraud, prompting warnings that operators must strengthen defences with advanced detection systems and tighter internal controls to protect revenue and customer trust.

A new advisory from PwC highlights how fraudsters are increasingly deploying generative AI tools, automated bots and deepfake technologies to exploit vulnerabilities across mobile networks, digital payment platforms and customer verification systems. The firm says the pace and sophistication of such attacks are outstripping traditional fraud-prevention frameworks used by many operators in Africa’s largest telecom market.

Nigeria’s telecom industry, led by major operators such as MTN Nigeria, Airtel Africa and Globacom, has undergone rapid digital expansion, driven by rising smartphone penetration and the growth of mobile financial services. That expansion has also widened the attack surface for cybercriminals, particularly in areas such as SIM registration, mobile money transactions and customer onboarding.

PwC notes that AI-enabled fraud is becoming more adaptive, allowing attackers to mimic user behaviour, bypass identity checks and automate large-scale scams with minimal human intervention. Voice cloning and synthetic identity fraud are emerging as key concerns, especially in call centre interactions and remote verification processes. These techniques can deceive both automated systems and human agents, making detection significantly more difficult.

Industry executives say the financial impact is already visible. Telecom operators across Africa have reported rising losses linked to subscription fraud, SIM swap scams and unauthorised access to mobile wallets. While precise figures remain closely guarded, analysts estimate that fraud-related losses run into hundreds of millions of dollars annually across the continent, with Nigeria accounting for a substantial share due to its market size.

The warning comes at a time when telecom companies are also investing heavily in digital services, including fintech platforms, enterprise solutions and data-driven offerings. This diversification has created new revenue streams but has also introduced complex security challenges. Fraud risks now extend beyond traditional voice and data services into payments, lending and digital identity ecosystems.

PwC argues that a shift in strategy is required, moving from reactive fraud management to predictive and intelligence-led systems. Machine learning models capable of analysing large volumes of real-time data can help identify anomalies and flag suspicious behaviour before losses occur. However, such systems require continuous training and integration with existing network infrastructure, which can be resource-intensive.

The advisory also stresses the importance of regular system audits, employee training and cross-industry collaboration. Telecom operators are being encouraged to share threat intelligence with financial institutions, regulators and cybersecurity agencies to build a more coordinated response. Fragmented approaches, PwC warns, allow fraud networks to exploit gaps between sectors.

Regulatory oversight is evolving in response to these risks. Authorities such as the Nigerian Communications Commission have introduced stricter requirements for SIM registration, data protection and consumer verification. Yet enforcement challenges persist, particularly in rural areas and informal markets where identity documentation may be inconsistent.

Cybersecurity experts say that while regulation plays a critical role, the burden of defence ultimately rests with operators. Investment in AI-driven fraud detection systems, biometric authentication and secure digital identity frameworks is increasingly viewed as essential rather than optional. Some companies have begun deploying behavioural analytics and network-level monitoring tools to track unusual patterns in usage and transactions.

There are also concerns about insider threats and operational vulnerabilities. Fraud schemes often involve collusion or exploitation of internal processes, making governance and accountability central to mitigation efforts. PwC recommends strengthening internal controls, conducting background checks and implementing strict access protocols to reduce exposure.

Consumer awareness remains another weak link. Many users are still vulnerable to phishing, social engineering and fraudulent communications that leverage AI-generated content. Telecom companies are being urged to expand public education campaigns and provide clearer guidance on recognising and reporting suspicious activity.