Transparency and Integrity

3/16/2024

ALERT: Private Website, XpressVerify Has Access To 'Registered Nigerians' Data And Is Making Money From It

 



FIJ Raises Alarm Over Private Website XpressVerify.com Having Unrestricted Access To National Identification Numbers(NINs) Personal Details Of Registered Nigerians. 


Foundation for Investigative Journalism (FIJ) has discovered that XpressVerify.com, a private website, has unrestricted access to the National Identification Numbers (NINs) and personal details of every registered Nigerian.


This website has monetised the recovery of NINs and personal information on the Nigerian identification database FIJ has revealed.


The website and the National Identity Management Commission (NIMC) are yet to tell FIJ what relationship both entities have.


Section 14 of the NIMC Act 2007 mandates NIMC to be the body that creates, manages, maintains and operates the National Identity Database.


NIMC has its specialised website and mobile application.


XpressVerify, a standalone website, has been managing and using information from the National Identity Database.

Anybody can retrieve details such as phone numbers, full names, NIN, address and photographs of any Nigerian whose data is on the National Identity Database with as low as N200.


The website does not confirm what type of person can check what type of information. There were no restrictions to the number of NIN-related data that could be fetched when FIJ checked.


Vendors across different Nigerian cities have been checking the NINs and phone numbers of citizens from the same database NIMC ought to maintain and keep secure.


“I’ve found my (lost) NIN phone number… Everyone’s NIN information, including phone number and address, can be found here. That’s pretty scary,” a lady told FIJ on Friday.


She had gone to a kiosk, where private vendors promised to resolve countless NIN challenges in Lagos, to recover a NIN-linked phone number she had forgotten about.


The vendor asked for a N1,000 service fee to recover her phone number, but the unprecedented March network downtime forced the vendor to abort after several trials. A peep at his computer screen gave away the website: xpressverify.com.


When FIJ checked xpressverify.com, the website only asked the new user to register and sign in with a new profile.


The new user then had to buy units. A unit costs N200, and each unit can be used to make one verification at a time.


The user can use either a phone number, a NIN or a few demographic details to retrieve more data from any individual’s registration slip on the National Identity Database.


This reporter found his personal information and those of a colleague on xpressverify. For N200 each, our respective states of origin, phone numbers, cities of residence, home addresses, heights, central ID and tracking identifications were public information.


A random phone number search also brought up the full details of a random Nigerian whose data was registered by NIMC.


Xpressverify has no social media presence. NIMC never mentioned a partnership with Xpressverify or any other private website to manage the national database.


FIJ sent a mail on Friday to ask NIMC if it had third-party vendors gaining access to the National Identity Database. The commission had not responded at press time.


Xpressverify has only one phone number on which it receives complaints and inquiries. It had not told FIJ its relationship with NIMC at the time of this report.

No comments:

Post a Comment