Something rare is happening in Nigerian finance. Nearly every regulated corner of it is being forced to get bigger at the same time.
The banks went first. Under the CBN's recapitalisation programme, launched in March 2024, international banks had to reach ₦500 billion, national banks ₦200 billion, regional banks ₦50 billion. Over a 24-month run to the March 2026 deadline, 33 banks raised roughly ₦4.66 trillion between them. A handful lagged and are under special supervision, but the direction is set: a materially larger, better-capitalised banking sector.
Insurance followed. The Nigerian Insurance Industry Reform Act was signed in July 2025, and by August 2026 NAICOM had completed its own recapitalisation exercise, with 43 insurers and reinsurers verified as compliant. General insurers saw their minimum capital raised from ₦3 billion to ₦15 billion. Attention has now moved to pensions, where operators must meet new PenCom capital requirements by the end of December 2026.
All of it sits under a national ambition: a one-trillion-dollar economy by 2030. Bigger banks, bigger insurers, bigger pension funds, deeper capital markets after the Investments and Securities Act 2025 brought digital assets formally under the SEC. On paper, this is a stronger, more serious financial system than Nigeria has ever had. And it is.
But I want to name the risk that comes with it, because it is the kind that hides inside good news.
Capital buys reach. It does not buy resilience.
A bank that just raised ₦500 billion is not automatically harder to defraud. In many ways it is a more attractive target, not a safer one. More customers, more channels, more partners, more data, more money moving faster. Every one of those is surface area. And the threats did not pause for the capital raise. In 2026 alone we have seen a reported ₦10 billion cyberattack on a payment service bank, a ransomware crew claim hundreds of thousands of customer records at a commercial bank, and the EFCC confirm coordinated attacks across six banks. Nigeria has lost more than three billion dollars to cybercrime since 2019, roughly half a billion a year.
The danger in a system-wide recapitalisation is that leadership confuses one kind of strength for another. A strong balance sheet protects you from a bad loan book or a liquidity shock. It does nothing, on its own, against a fraudulent transfer that clears in seconds, an insider with valid access, or a socially engineered customer authorising their own loss. Those are not capital problems. They are controls problems. And controls are a technology and process decision, not a share-capital decision.
There is a version of the next few years where the biggest, best-capitalised institutions in Nigeria also become the biggest, richest targets, and discover that their fraud and compliance systems did not scale with their ambitions. That is the trap. You raised the capital to grow, the growth expanded the attack surface, and the defences stayed where they were.
The regulator clearly anticipated this, which is why the 2026 rulebook pairs the bigger balance sheets with harder controls: automated AML, real-time monitoring, sub-30-minute fraud response, mandatory reporting. Capital and controls are meant to rise together. The institutions that read it that way will turn their new size into genuine resilience. The ones that treat the capital raise as the finish line will simply have more to lose.
This is where I would spend a slice of that new capital, and it is the problem we work on at Autogon. As an institution grows, the only fraud and compliance layer that keeps up is one that scales automatically and reads behaviour in real time. Omniguard learns each customer's normal and holds the transaction that does not fit, whether you are processing thousands of payments a day or millions. Bigger should mean better defended, not just better funded.
Nigeria is building a heavier, stronger financial system. That is worth celebrating. But weight is not the same as resilience, and a richer target is still a target. Let the controls grow with the capital, or the capital just raises the prize.
Sources
- Banks raised ~₦4.66tn from 33 banks (Pension Policy International)
- NAICOM completes insurance recapitalisation, ₦3bn to ₦15bn, 43 firms (NAICOM)
- PenCom pension capital deadline Dec 2026 (Nairametrics)
- ISA 2025 brings digital assets under the SEC (Nairametrics)
- Cybercrime losses >$3bn since 2019 (Guardian)