Regarded as one of the positive innovative interventions in the financial sector, the Point of Sales system has undoubtedly made banking easy and promoted financial inclusion, especially in rural areas. However, on the flip side, it has turned into a tool through which fraudsters swindle unsuspecting Nigerians. With little or no measures put in place to stem the tide by financial regulators and the police, DAMILOLA OLUFEMI writes that many people are likely to be left high and dry
In September, Med Pepple, a Twitter user, took to the microblogging platform and tweeted, how her younger brother was repeatedly fleeced of his savings at different Point of Sales centres in Port Harcourt, Rivers State.
According to the thread, her brother, an undergraduate in one of the tertiary institutions in the state, had lost money thrice to fraudsters after using POS machines at different locations.
“It is no news that fraudsters set up POS outlets, copy customers’ pins and clear their accounts. This is the third time he has been defrauded. The bank Automated Teller Machines in his school are always out of cash,” an obviously angry Pepple tweeted.
When PUNCH Investigations reached out to her via her Twitter handle to shed light on the incidents, she refused to divulge her brother’s details, citing security reasons.
She, however, obliged our correspondent with skeletal details of her brother’s experiences.
Pepple said the day of her tweet coincided with his birthday and that she sent him money as a gift.
She noted that as soon as her brother got the money, he went to a POS outlet to make a withdrawal.
“Shockingly, when his debit card was slotted into the POS machine, the operator told him that his bank account was empty. My brother was furious and immediately sent a message to the family WhatsApp group to inform them about the development. He felt like dying. They took all his money,” she lamented.
Recalling his other two experiences, Pepple said the sad events happened in April during the Easter celebration and in September.
She explained that in April, he got a debit alert on his phone for an unauthorised transaction which was later traced to a particular POS centre.
Pepple said despite getting a new debit card from the bank, her brother was again defrauded in September.
“It all happened in Port Harcourt. That experience triggered the tweet because I kept hearing about similar incidents from friends here,” she said with exasperation.
Miffed by her brother’s ugly experiences, Pepple blamed the rise in POS fraud on negligence on the part of financial institutions and called for urgent action to nip the trend in the bud.
“I know how hard I worked to save the money sent to him, only for someone to just take it just like that. Someone has to fix this before it affects everyone. The fact that the banks are not doing anything about it also triggered the tweet. The main issue here is about regulators not scrutinising POS operators,” she added.
Enter an easy payment system
Although the invention of the POS system dates back to the 1800s, the Central Bank of Nigeria officially introduced it to the Nigerian banking sector in 2012.
It was launched as part of the apex bank’s much-touted cashless policy.
One of the reasons cited by the CBN for introducing the new policy was that it would reduce the amount of physical cash in circulation and encourage more electronic-based transactions.
The policy specified penal charges for individuals and corporate organisations that withdraw or lodge cash above the prescribed limits of N500, 000, per day and N3m for corporate accounts.
The CBN, in a notice published on its website in 2012, further stated that the policy will drive development and modernise the payment system in line with Nigeria’s vision of being amongst the top 20 economies by 2020.
“An efficient and modern payment system is positively correlated with economic development and is a key enabler for economic growth. To reduce the cost of banking services (including the cost of credit) and drive financial inclusion by providing more efficient transaction options and greater reach,” it stated.
POS transaction
The POS system involves the use of a machine, which is a mini hardware computer that accepts both credit and debit cards to carry out financial transactions like transfers, withdrawals, airtime recharge and payment of utility bills.
This mode of payment is preferred because it does not require a customer’s presence in the banking hall and helps to facilitate transactions in rural areas where banking services are not available.
In a 2021 report published by Enhancing Financial Innovation and Access, an organisation that promotes financial inclusion, it was revealed that 38 million Nigerian adults lack basic banking services.
“EFInA data shows that only 64 per cent of Nigerian adults were financially included by the end of 2020. This means that 36 per cent of Nigerian adults, or 38 million adults, remain completely financially excluded,” the report read.
A booming business
As the POS system gained prominence, its popularity peaked during the COVID-19 lockdown in 2020, due to health and safety concerns.
Succinctly put, the pandemic sparked a digital frenzy in Nigeria, as it led to the closure of public facilities, including banks, forcing people to embrace electronic payment systems – mobile banking and POS.
According to data from the Nigeria Inter-Bank Settlement System Plc portal, published by PUNCH in May 2022, Nigerians made use of POS terminals 178.9 million times in two months.
It was noted that the figure indicated a 25.59 per cent increase from the 142.51 million times it was used in the corresponding period of 2021.
Breaking it down further, the NIBSS report stated that POS terminals were used 3.03 million times daily to process payments in the first two months of 2022, as the use of cheques dropped to a six-year low.
The data further showed that the total value of these transactions was N1.15tn, a 19.76 per cent increase from the N958.14bn worth of transactions processed in the corresponding period of 2021.
According to the NIBSS, there are 986,252 registered POS units in Nigeria, while 955,234 units were deployed and in use.
In its ‘Instant Payments – 2020 Annual Statistics’, the NIBSS revealed that the COVID-19 pandemic changed the e-payments landscape and accelerated the adoption of instant payments as more people transitioned to electronic channels for funds exchange in the wake of government lockdown.
NIBSS, as part of its function, provides the infrastructure for automated processing, settlement of payments and fund transfer instructions between banks, discount houses and card companies in Nigeria.
Meanwhile, it is owned by the CBN and all licensed Deposit Money Banks in Nigeria.
According to Statista, an online portal that provides data on the global digital economy and trends, the number of POS terminals in Nigeria from 2017 to 2022 is over 1.1 million.
The data highlighted why it is hard to walk through a street in Nigeria without seeing a POS centre.
Experts have described the POS business as very lucrative and revealed that an outlet sited in a good location has the propensity to attract an average of 30 to 50 customers per day.
It was noted that such outlets can generate a minimum of N5, 000, profit daily.
Infiltration by fraudsters
Ironically, amid the growing patronage of POS terminals arose the monstrous challenge of fraudsters infiltrating the system to defraud customers who use their cards for transactions.
CBN, in its Financial Stability Report of 2018, revealed that POS, ATMs and Mobile Money, are the worst culprits when it comes to e-payment crime in Nigeria.
It noted that ATMs had the biggest fraud cases with 34.87 per cent, followed by Mobile Money at 28.21 per cent, while POS has 19.55 per cent.
According to a report by Forbes, the rise in cashless POS transactions is not lost on hackers, scammers and cyber-criminals because technologies like near-field communication and radio-frequency identification that are typically used in cashless POS payments are still vulnerable to data theft.
The report projected that POS fraud would become more prevalent in the post-COVID-19 cashless era.
How POS theft is perpetrated
Based on PUNCH Investigations’ findings, the most common means through which POS fraud is perfected is after a transaction.
A customer’s details, such as card number, Card Verification Value number, expiration date and passwords are clandestinely copied or memorised by a fraudulent POS operator.
Usually, hours or days after, the operator-cum-fraudster would use the details to facilitate electronic transfers from the victim’s bank through the POS terminal or via an online banking application.
What then plays out is that the victim starts getting unauthorised debit alerts, which if escalated (reported) to the bank, are not easily resolved, as the victim’s bank and that of the fraudster will endlessly trade blame.
This has been the experience of those that spoke with our correspondent.
Another method is for the operator to use the victim’s card details to divert money into a betting account.
Tracking such transactions, our correspondent learnt from bank officials that spoke under the condition of anonymity, can be problematic as the operations of betting companies differ and they mostly withhold their customers’ details.
However, it was gathered that in rare cases where details of fraudsters are obtained, the bank will give them to the affected customers and refer them to report to the police for proper investigation.
PUNCH Investigations learnt that once this happens, most victims would simply back out and allow the matter to die a natural death.
Cards vulnerability
Shedding more light on POS-related fraud, Forbes noted that when a customer uses a smartphone or any other contactless payment method, credit card numbers are left vulnerable unless they are properly encrypted.
“More specifically, it’s the firmware in the POS terminal that hackers target to steal credit card and other payment data. The problem is, many merchants fail to utilise point-to-point encryption solutions to safeguard POS data. Without P2PE, it’s impossible to guarantee that payment data remains secure from the customer’s smartphone all the way to its destination in backend payment processing systems.
“Unfortunately, many merchants rely solely on transmission-level encryption for POS transactions, encrypting card data only when it moves from the POS terminal to the payment processor. This increases the attack surface for hackers, introducing additional risk to businesses in a time of crisis,” Forbes stated.
It advised merchants to also consider a POS ‘lockdown’ strategy, using technology that whitelists authorised processors. “If any systems or software comes in contact with the POS that’s not whitelisted, the system automatically shuts off and locks down completely until the issue is resolved, preventing any fraudulent transactions from being processed,” it added.
Whitelist, according to TechTarget, an online tech portal, is a cybersecurity strategy that approves a list of email addresses, IP addresses, domain names or applications, while denying all others.
Unforgettable memory
Aside from the experience of Pepple’s brother, the country is replete with ugly stories of theft perpetrated via POS terminals.
Among those with ugly memories is that of Kayode Michael, a Lagos-based fashion designer, who until his account was wiped clean in 2020, was fixated on the use of POS terminals for financial transactions.
Michael, who revealed that the incident took place before the COVID-19 pandemic broke out, said he went to a POS outlet to withdraw N15,000, with which to procure food items for his family and clothing materials for a customer.
When it got to his turn, as he met quite a handful of customers, he handed his ATM card to the POS operator and was told to input his password.
“I remember that something strange happened,” he recalled.
“I was still inputting my password when I got a debit alert and an approved receipt. My mind was not there while entering the password because I was in a hurry but I was not suspecting anything since I was given the N15, 000.”
Michael said a few days later, he received a debit alert of N10,000 for a transaction he did not initiate and immediately suspected that the withdrawal must have been carried out from the POS outlet.
Luckily, he was able to transfer what was left in his account into that of his wife to forestall further deductions.
“It was not possible for me to visit the area where the POS terminal was located due to distance and traffic. I live in Agege while the centre was in Badagry,” he added.
While describing his experience as unforgettable, Michael implored the government and security agencies to carry out regular background checks on POS operators to prevent the business from being infiltrated by unscrupulous elements.
Salary vanished into thin air
Mariam Bala, a secondary school teacher in Kaduna State is still dazed after N80, 000 was stolen from her savings account in 2021, shortly after she withdrew N20, 000 from a POS outlet.
She recalled using a POS machine manned by an unfamiliar face in Down Quarters in an area known as Kakuri, noting that before she could return there, the man had fled.
Bala, who sounded dejected, regretted her decision to patronise the unfamiliar POS operator on that fateful day.
“Some people, rather than sympathise with me, made disparaging comments about my ordeal. Some women said the incident would serve as a lesson to me not to patronise just any POS operator,” the distraught teacher said.
Like many others, Bala went to lodge a complaint at the bank but was told to stop using the debit card and issued a new one.
When asked about the bank’s efforts to identify or track the fraudster, she said, “They promised to track the person involved but they have not told me anything. I have accepted my fate,” the teacher said forlornly.
Defrauded via a betting site
Similarly, a young lady presently undergoing the mandatory National Youth Service Corps programme in Ikirun, a remote community in Osun State, was also served the same unpalatable dish.
Speaking under the condition of anonymity (as the NYSC rule forbids members from granting press interviews), she revealed that her N60, 000, was fraudulently withdrawn hours after she used a POS terminal.
She told our correspondent that the unavailability of banks or ATM centres in the community made the use of POS as the only available option.
The corps member said it happened when she got a three-month contract job in May and was being paid N60, 000, monthly.
According to her, on July 28, she got an alert notification but was shocked when within five minutes she received yet another one indicating that the money had been transferred into a betting site account.
She said, “I have been using POS pay points since I came to this town. I don’t even know at what point I was careless. All my salary was withdrawn,” she lamented.
The angry lady claimed she lodged a complaint at her bank but was told that the only way the fraud could have been perpetrated was if they (fraudsters) had access to her card details.
She said, “I told them that my card was with me all the while and was never stolen. I also made them to know that I don’t use bank online services or apps.
“I was told that the fraudster downloaded a banking app, used my details to create an account, logged in and carried out the transaction.”
The corps member said during a visit to another of the bank’s branches in Osogbo, the state capital, she learnt that the money was allegedly moved from the betting account to that of a commercial bank but that the bank claimed there was nothing suspicious about the transaction.
When asked if the matter was reported to the police, she said it was not, adding, “I was frustrated and gave up. I haven’t reported and won’t do that. Once I do, I am expected to go through another round of stress and spend more money to recover the stolen money.”
POS owners are also victims
PUNCH Investigations learnt that while customers are usually at the receiving end of fraudulent activities, POS operators are not spared the terrible ordeal.
Recounting his experience, Ismael Uthman, an Osun-based POS operator, said he lost N30,000 to a customer-cum-fraudster.
Uthman, who is also a journalist, said he ventured into the business in 2021 to augment his income.
Sharing his experience with PUNCH Investigations, Uthman said his employee in Owode-Ede, Osun State, was actually the one scammed.
He narrated that the fraudster went to his female employee to withdraw the sum of N70, 000 but that the transaction failed several times.
He said the fraudster pretended to have an emergency, and appealed to his employee to give him N30,000 in exchange for his phone and promised to come back but never did.
Uthman said he was called by his hysterical staff at about 7:30 pm and told him about the development.
Sadly, it was discovered that the phone left as collateral was not functioning.
“The lady did not suspect that the phone was faulty. He just deceived her, collected N30, 000 and went away. She did not know the person,” Uthman said.
‘I lost over N540, 000 to fraudsters too’
Uthman told our correspondent that cumulatively, he had lost over N540,000 to fraudsters disguised as customers and was forced to disengage his employees and reduce his POS terminals from three to one.
He said surviving the ordeal has been the grace of God, noting that he now depends on his salary and stipends made from media engagements.
Share your story or advertise with us: Whatsapp: +2347068606071 Email: info@newspotng.com
