NCC Introduces 14-Day Alert Rule Before SIM Card Recycling to Curb Fraud
The Nigerian Communications Commission (NCC) has unveiled a significant regulatory proposal aimed at addressing a growing digital security concern: the risks associated with recycled phone numbers. The telecom regulator is pushing for a mandatory 14-day notification period before telecom operators can deactivate and recycle inactive SIM cards, a move designed to protect consumers from potential identity theft and financial fraud.
The Problem with Recycled Phone Numbers
In today's interconnected digital landscape, phone numbers serve as critical identifiers linked to numerous sensitive accounts. From banking and fintech applications to government identification systems, email verification, and social media platforms, mobile numbers have become essential keys to personal and financial data. When these numbers become inactive and are reassigned to new users without proper safeguards, the new subscribers can inadvertently gain access to accounts and information belonging to the previous owners.
The current system allows telecom operators to classify a SIM card as inactive after six months without revenue-generating activity such as calls, SMS, or data usage. If the inactivity persists for an additional six months, the number can be recycled and assigned to another customer. Often, subscribers receive no warning that their phone number is about to be permanently deactivated.
Details of the NCC's Proposed Solution
The proposal was detailed in a consultation paper released on February 26, 2026, titled "Stakeholders Consultation Process for the Telecoms Identity Risks Management Platform." Under the leadership of Executive Vice Chairman Aminu Maida, the NCC seeks to amend Section 2.3.1 of the Quality-of-Service Business Rules that govern telecommunications providers.
The new regulation would require operators to send alerts to subscribers at least 14 days before final deactivation and recycling of their phone numbers. These warnings could be delivered through:
- Another mobile number linked to the user's account
- Email notifications
This notification period provides subscribers with a final opportunity to reactivate their lines before losing them permanently. Additionally, the proposal includes an innovative "parking" option that would allow users to reserve their phone numbers for up to one year at a minimal cost, particularly beneficial for frequent travelers, those who switch devices regularly, or individuals maintaining backup contact numbers.
The Telecoms Identity Risk Management System (TIRMS)
The 14-day alert requirement represents just one component of a broader initiative called the Telecoms Identity Risk Management System (TIRMS). This comprehensive platform will function as a centralized database tracking phone numbers that have been deactivated, recycled, swapped, or barred from service.
Telecom operators will be required to upload details of recycled numbers to the system within seven days of deactivation. The database will be accessible to various institutions for verification purposes, including:
- Banks and financial institutions
- Fintech companies
- Central Bank of Nigeria
- Securities and Exchange Commission
- National Identity Management Commission
- Security and law enforcement agencies
The NCC describes TIRMS as a RegTech (regulatory technology) solution designed to strengthen digital identity verification processes and enhance Know-Your-Customer systems across multiple sectors. By enabling organizations to verify whether a phone number has changed ownership, the system aims to prevent identity theft and financial fraud that often exploits recycled numbers.
Next Steps and Implementation Timeline
The proposal is currently in the consultation phase and has not yet become law. In accordance with Section 58 of the Nigerian Communications Act 2003, the NCC must gather feedback from industry stakeholders before finalizing the regulations. Telecom operators, financial institutions, and other relevant groups have 21 days to submit their comments, with the consultation period concluding on March 20, 2026.
Following this feedback period, the commission will review all submissions before issuing final rules. If adopted, these changes could fundamentally transform how Nigerian telecom providers manage inactive phone numbers and significantly enhance the country's digital identity protection framework in an era where mobile numbers function as essential access keys to personal and financial information.
