Finance leaks and fraud

How to detect fake bank alerts before you release goods

· The Brillrec team · 6 min read

The only reliable way to detect a fake bank alert is to ignore the alert and check your own account. If the credit isn't in the business account's history and balance, the money hasn't arrived, however real the SMS, email or receipt looks. A daily bank reconciliation then catches any fake payment that got past the counter.

A customer shows your cashier a convincing transfer receipt. The queue is growing, so the cashier releases the goods. Two days later the statement shows the money was never there. Fake alerts only need to fool one busy person for thirty seconds.

How common are fake alerts?

There is no official CBN or NIBSS figure for fake alerts on their own. A Sahara Reporters investigation (20 September 2026) found a website, "Slipcraft", generating fake receipts that imitate OPay, PalmPay and Kuda. It cited a 2025 press survey of 330 traders: 52% had received a fake transaction at least once, 27% had lost money and 15% had stopped accepting transfers. That was a journalist's survey, not an official one.

For wider context, NIBSS reported digital payment fraud losses of ₦25.85bn in 2025 across 67,518 incidents, with social engineering, especially insider abuse, the most common technique, according to ITEdgeNews (checked November 2026).

How fake alerts work

  • Fake receipts and screenshots that copy a real app's success screen.
  • Fake SMS and email alerts. An ICPC investigator told HumAngle they are sent from a "cloned system" and dummy accounts not tied to the financial system.
  • "It will drop" pressure. The customer insists the transfer is "successful on my side" and wants to leave while the money is "on its way".
  • Staff involvement. Sometimes the person who "confirmed" the payment knew it hadn't arrived.

In every case the evidence comes from the customer's side, not yours.

A checklist for cashiers

Print this and put it at every till.

What the customer shows you Proof of payment? What to do
Screenshot or receipt on their phone No Ask the checker to confirm in the business account
SMS or email alert forwarded to you No Confirm in the business account
"It's showing successful on my side" No Wait for the credit, or take POS or cash
Credit in the business account history and balance Yes Release the goods and record the sale

Before goods leave:

  1. Name a checker per shift, a supervisor or branch accountant with view access to the business account. Ask your bank which limited user roles it offers on business internet banking.
  2. Confirm the credit in the account, not the notification. A genuine credit changes the available balance; a fake SMS changes nothing.
  3. Check the amount, sender and receiving account exactly. ₦185,000 is not ₦18,500.
  4. If the money hasn't arrived, the goods don't leave. Offer POS or cash.
  5. Record every transfer sale: customer name, phone number, amount, time and account paid into.
  6. For large orders, confirm before packing or loading.

Managers must back this up, or the rule will be dropped by the next busy Saturday. If you suspect fraud, the ICPC investigator quoted by HumAngle advised reporting to the police, the ICPC or the EFCC.

Why the checklist isn't enough

A counter rule fails in predictable ways: untrained new staff, a checker on break, a busy branch, or a staff member working with the fraudster. You need a second check that doesn't depend on the counter: the bank reconciliation, done daily. See the biggest finance leaks in Nigerian businesses for how leaks like this add up.

How daily reconciliation catches credits that never arrived

Every transfer sale your staff record is an expected credit. Each morning, ask: did every expected credit from yesterday arrive? Match yesterday's sales record to the statement by amount, reference, date and, where you captured it, the NIP session ID, the unique number every NIP transfer carries.

A sale with no bank line was paid with money that never arrived. A bank line with no sale is money received but not recorded, which is worth chasing too.

Example figures: Ikeja branch, 14 October. Staff recorded 46 transfer sales. Next morning, 45 match credits on the statement. One sale of ₦185,000 at 4.52pm has none. With the cashier's name, the time and the customer's phone number on record, the manager can call the customer, review the CCTV and report it the same day. Found at month-end, the same ₦185,000 is 30 days old and the trail has gone cold.

For the full method, see bank reconciliation in Nigeria, step by step, and for card sales, how to reconcile POS transactions.

How Brillrec helps

Brillrec is the finance operations platform for Nigerian businesses, with three products: Reconciliation, Internal Control Automation and Financial Close Management. Your checklist stops fake alerts at the counter; Brillrec makes the next-morning check quick enough to do daily.

  • Daily reconciliations on Essential and above, so yesterday's gaps show this morning. Accounts linked to an accounting system and a bank feed are also reconciled month-to-date each morning, with a short summary emailed. See pricing.
  • Statement at a glance. Before any matching, Brillrec shows money in and out, whether the statement adds up and credits not found in your records, as a one-page PDF if you want it.
  • Statements as they come. Reconciliation reads PDF, Excel and CSV statements from any Nigerian bank in the layout the bank sends, and checks the running balance line by line. Moniepoint business statements are recognised by name. On Essential and above, bank feeds through Mono and statements by email mean nobody has to upload files each morning.
  • Matching your sales record to the bank by reference, NIP session ID, amount and date, including one sale paid in two transfers or one transfer covering several sales. A line that looks like a second copy is flagged "Possible duplicate", with its twin shown side by side.
  • Open items kept in view. A sale with no credit is carried forward until it is cleared. Items open over 30 days are listed, and an explanation is required as they age.
  • A second pair of eyes. Sign-off can require a reviewer who is not the preparer, segregation of duties is checked, and the work is recorded in a tamper-evident audit log.
  • The owner's month-end report in Financial Close Management shows cash by account, money found and reconciliations signed off, without opening a spreadsheet.

Reported by clients: 99% of clients' bank and ledger lines matched automatically in a month, 70% less month-end close time, 50% less audit preparation time and 2.5x finance team productivity. Results depend on your records and how your team works. See client results.

Frequently asked questions

How can I know if a bank alert is fake?

Ignore the alert and check the business account. If the credit is in the account history and the balance has gone up, it is real. If it exists only as an SMS, email or screenshot, treat it as not received.

What should I do if I released goods on a fake alert?

Gather the sales record entry, the customer's details, any CCTV and the fake receipt, and report to the police. The ICPC and the EFCC also take reports.

Should we stop accepting transfers?

Most businesses can't turn transfer customers away. Confirming before release, plus daily reconciliation, keeps the risk low.

How often should I reconcile to catch fake payments?

Daily, if you take transfers at a counter. Monthly is too late to recover goods or trace a customer.

Start your free 14-day trial, no card needed, or book a 20-minute demo.

Brillrec demonstration

Let’s look at your workflow.

Tell us a little about your organisation. We prepare an email draft for you to review and send.

Prefer to try it yourself? Start your 14-day free trial.

Step 1 of 2 · Your details

Your details
Email us directly