The Central Bank of Nigeria (CBN) issued a circular on Monday requiring banks to begin imposing a cybersecurity levy on transactions.
The levy is scheduled to go into effect two weeks from today.
The circular stated that it was a follow-up to previous letters dated June 25, 2018 (Ref: BPS/DIR/GEN/CIR/05/008) and October 5, 2018 (Ref: BSD/DIR/GEN/LAB/11/023) about compliance with the Cybercrimes (Prohibition, Prevention, Etc.) Act 2015.
The Office of the National Security Adviser’s recent public engagements on the matter are likewise relevant.
Following the enactment of the Cybercrime (Prohibition, Prevention, etc) (amendment) Act 2024 and under the provision of Section 44 (2)(a) of the Act, a levy of 0.5 per cent (0.005) equivalent to a half per cent of all electronic transactions value by the business specified in the Second Schedule of the Act, is to be remitted to the National Cybersecurity Fund which the Office of the National Security Adviser shall administer.
The CBN said that all banks, other financial institutions and payment service providers are now required to implement the directive, saying, “The levy shall be applied at the point of electronic transfer origination, then deducted and remitted by the financial institution. The deducted amount shall be reflected in the customer’s account with the narration, ‘Cybersecurity Levy’.
“Deductions shall commence within two weeks from the date of this circular for all financial institutions and the monthly remittance of the levies collected in bulk to the NCF account domiciled at the CBN by the fifth business day of every subsequent month.”



