Phishing Campaign Impersonating Official verifymydevice.gov.ng Device Verification Portal

Advisory ID NCC-CSIRT-2610-040
Probability High
Impact High
Information Handling (TLP) TLP:CLEAR
Publication date 30-10-2026
Product (s) General Public
Version (s) N/A
Platform (s) Web browsers, Mobile devices, SMS/USSD
Summary The NCC-CSIRT has identified an active phishing campaign exploiting public interest in the Commission's device verification platform. Threat actors are using deceptive domains, including secure-verifymydevice.ng, verifymydevice.com.ng, embed-ncc.registrmydevice.ng, and verifymydevice.ng, to impersonate the official verifymydevice.gov.ng portal. These fraudulent sites are designed to deceive the public into submitting sensitive information or making payments under the false pretense of device registration or verification.
Threat Type (s)
  • Phishing
  • Social Engineering
  • Brand Impersonation
  • Fraudulent Domain Registration (Cybersquatting)
Consequences Successful exploitation may lead to:
  • Theft of personal information
  • Financial loss from fraudulent payments.
  • Identity theft and further targeted scams.
  • Erosion of public trust in NCC's legitimate verification channels.
  • Distribution of malware via malicious redirects.
Description The campaign leverages domains that are visually and typographically similar to the official verifymydevice.gov.ng portal.
The fraudulent sites typically employ social engineering tactics, such as fake verification prompts or urgent alerts, to coerce victims into sharing OTPs, banking details or making payments for non-existent services.
The fraudulent sites clone the NCC logo and general appearance of the official device verification portal to appear legitimate. It also uses HTTPS encryption to create a false sense of security. Thereby tricking unsuspecting public into believing they are interacting with the official device verification portal.
Solution NCC-CSIRT recommends the following immediate actions for all stakeholders:
· Only use official channels. Verify device status exclusively through the USSD code *315# or the official NCC website at www.ncc.gov.ng/devicechecker or the official device verification portal www.verifymydevice.gov.ng or call 622.
· The NCC will never request a one-time password (OTP), bank details or other sensitive information during the verification process. Never share OTPs
· Before entering any data, carefully check the browser address bar. The only legitimate consumer-facing domain ends in .ncc.gov.ng. and .gov.ng
· Report any suspected phishing domain to NCC-CSIRT via official channels.
www.ncc.gov.ng or www.csirt.ncc.gov.ng
Mandated Action · Telecommunications Service Providers and licensed operators are mandated under the CRF-NCS to report cybersecurity incidents to NCC-CSIRT within 4 hours of detection or awareness.
· Service Providers shall block access to the identified malicious domains (e.g., secure-verifymydevice.ng, verifymydevice.com.ng) through DNS filtering and secure web gateways.
· Providers shall disseminate this advisory to their cybersecurity, fraud management and customer operations teams.
Remediation Deadline · Block identified malicious domains and notify NCC-CSIRT of actions taken. Immediate (within 24 hours)
· Align with CRF-NCS reporting timelines as specified (incident report within 24 hours via the NCC-CSIRT Incident Reporting Portal).
References · https://verifymydevice.gov.ng/