Short answer
Our cybersecurity class teaches you to spot and stop the attacks Nigerians meet every day: phishing links, SIM swaps, WhatsApp takeovers, fake transfer alerts and business email fraud. It covers passwords and password managers, two-step verification, phone and Wi-Fi safety, backups, customer data under the Nigeria Data Protection Act and keeping a small business website safe. For career learners, it lays out the route into security work. Classes run at 93B Ibusa Road, Asaba, or online. Message us on WhatsApp for the current fee and the next start date.
Who the class is for
- Beginners. Anyone with a smartphone and a banking app who is tired of being an easy target.
- Business owners and staff. Shops, offices and online sellers who handle customer details, payments and a business WhatsApp line.
- Future security professionals. Students and graduates who want a career in security and need the right foundations first.
The attacks Nigerians face, and what stops them
Many losses don’t start with clever hacking. They start with a message that gets someone to hand over a code, a PIN or a password.
In 2026, ngCERT, the Nigeria Computer Emergency Response Team, reported a significant rise in serious incidents hitting organisations in Nigeria, driven by phishing, ransomware, business email compromise and data breaches. It linked many of them to common weaknesses, including missing two-step verification, unpatched systems, and low user awareness and staff training.
| Attack | What it looks like | What stops it |
|---|---|---|
| Phishing | A text, email or post that copies a bank, a delivery company or a government agency and asks you to “verify” something or pay | Type the address yourself or use the official app. Never enter an OTP or PIN on a page you reached from a link |
| SIM swap | Your line suddenly loses service while someone else activates a replacement SIM for your number, and your bank codes go to them | Report a sudden loss of service to your network at once. Use an authenticator app instead of SMS codes where you can |
| WhatsApp and social media takeover | “I sent you a code by mistake, please send it back.” Or a friend’s hacked account asking you for an urgent loan | Never share the six-digit code. Set a two-step verification PIN. Call your friend on a number you know |
| Fake transfer alert | A buyer shows you a screenshot or an SMS credit alert and pushes you to release the goods quickly | Confirm the money in your banking app, or with your bank, before anything leaves the shop |
| Business email compromise | A supplier’s email announcing a “new bank account”, or a message from “the boss” asking for an urgent transfer | Confirm any change of bank details by phone, on a number you already had. Turn on two-step verification for business email |
A padlock in the address bar doesn’t make a site genuine. In October 2026 the NCC’s Computer Security Incident Response Team (NCC-CSIRT) warned of fake copies of the Commission’s device-verification website on lookalike addresses. The fakes used HTTPS to look safe and pushed visitors to hand over OTPs and bank details or to make payments. The NCC says it never asks for an OTP or bank details during device verification.
On SIM swaps, ngCERT’s advisory is clear: never give your PIN or password to a caller who says they’re from your network, use a different password for every account, and choose an authenticator app or a security key over SMS codes. If your line goes dead for no clear reason, treat it as urgent: call your network from another phone, then your bank.
What the training covers
The class turns those defences into habits. It covers eight areas.
- Passwords and password managers. Long, different passwords for email, banking and social accounts, kept in a password manager so you don’t have to remember them. When one website leaks, a reused password opens every account that shares it.
- Two-step verification. Turning it on for email, WhatsApp, Facebook and Instagram, checking the security settings in your banking apps, and choosing an authenticator app over SMS codes where you can, because a SIM swap hands SMS codes to the attacker.
- Spotting scams. The patterns scams share: urgency, secrecy, a request for an OTP, PIN or BVN, a link that is almost right, an offer that is too good to be true. You see real examples and learn to slow down before you click.
- Securing your phone and WhatsApp. Screen lock, software updates, apps only from Google Play or the App Store, and WhatsApp’s two-step verification PIN: WhatsApp tells you to set a secret PIN and “never share it with anyone”. Also why modified apps such as GB WhatsApp are a bad idea: WhatsApp warns that using fake versions “poses serious privacy and security risks to your account and data”.
- Safe public Wi-Fi. What other people on a hotel, campus or event network may be able to see, and why banking and logins belong on mobile data or your own hotspot.
- Backups. Copies of your photos, documents and business records that a stolen phone, a dead laptop or ransomware can’t take with them. Keep one copy offline: an ngCERT ransomware advisory describes attackers deleting backups and encrypting drives that are still connected.
- Customer data under the NDPA. What the law expects of any business that keeps customers’ details. More on this below.
- Keeping a small business website safe. Updates, admin accounts, backups and the questions to ask your host. Also below.
For business owners: customer data and your website
Customer data and the NDPA
If your business keeps customers’ names, phone numbers, addresses or payment details, the Nigeria Data Protection Act 2023 applies to you. Section 39 requires “appropriate technical and organisational measures” to keep personal data secure.
Section 40 sets the clock for a breach. If a breach is likely to put people’s rights and freedoms at risk, you must notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it. Where the risk to them is high, you must also tell the affected people immediately, in plain and clear language.
Under section 48, the Commission can order a penalty of up to ₦10M or 2% of annual gross revenue for the previous financial year, whichever is greater, for a “data controller or data processor of major importance”, and up to ₦2M or 2%, whichever is greater, for others. In class, owners and staff work through what that means day to day: collect only what you need, limit who can see it, lock devices, keep backups and know what to do in the first 72 hours.
Your website
Common ways into a small business website are software that hasn’t been updated, a weak or shared admin password, and the hosting account itself. In 2026 ngCERT warned of a critical flaw in cPanel, the control panel many shared-hosting companies give their customers, which could let one customer on a shared server take control of every website on it. It urged hosting providers and website owners to patch immediately.
The class covers keeping software updated, admin accounts with two-step verification, backups stored away from the server, and what to ask your host. If you’d rather hand this job over, our website care plans cover updates, security monitoring, backups and uptime checks, from ₦25k to ₦75k a month (see our prices).
This is a class, not an audit. It teaches you and your staff to protect yourselves. If your business needs a penetration test or a formal security audit, hire a specialist firm under a written contract that states exactly what they may test.
If you want a career in cybersecurity
Security builds on other skills: you can’t protect a network you don’t understand. The usual route looks like this.
- Networking. How devices talk to each other: IP addresses, DNS, routers and Wi-Fi. Cisco Networking Academy’s Networking Basics course is free.
- Linux. The command line you’ll meet on servers and in security tools. Cisco’s Linux Unhatched is a free eight-hour introduction.
- Security fundamentals. How attacks work, how defenders spot them, and where passwords, encryption, access control and incident response fit. Cisco’s Introduction to Cybersecurity is also free.
- A recognised certification. Two widely recognised options are ISC2’s Certified in Cybersecurity (CC), an entry-level certification that needs no work experience, and CompTIA Security+. The bodies that set these exams also set the fees, so check the current price on their own sites before you budget.
- Practice you’re allowed to do. A home lab on your own laptop, and practice platforms built to be attacked. Never someone else’s system.
We don’t certify anyone. Our class gives you the foundations and the habits; recognised certifications come from the bodies that set the exams. Be wary of any course that promises you a job at the end.
The law: only test what you own
Curiosity draws people into security. Pointed at the wrong target, it becomes a crime. Nigeria’s Cybercrimes (Prohibition, Prevention, etc.) Act 2015, amended in 2024, makes unlawful access to a computer system, unlawful interception and system interference offences, punishable with prison terms and fines. The NCC’s consumer leaflets on the Act give the wording and penalties: unlawful access and interception, and system interference.
So the rule in our class is simple: only test what you own, or what you have written permission to test from someone with the authority to give it. A friend who says “try my school portal” can’t give that permission, because the school owns the portal. The same goes for a neighbour’s Wi-Fi, a former employer’s email and any website you don’t run.
If you stumble on a weakness, stop, write down what you saw and tell the owner. Don’t dig further to prove it.
Don’t pay a “hacker” to recover an account. Anyone online who offers to break into or “recover” an account for a fee is either committing a crime or running a scam. To get a WhatsApp account back, re-register your number in the official app.
How classes run in Asaba and online
In person, classes hold at our office at 93B Ibusa Road, Asaba. Message us before you come, so someone is there to meet you; directions are on our contact page. If you can’t get to Asaba, you can join online. Either way, bring the phone you use for banking and WhatsApp, and a laptop if you have one.
Message us on WhatsApp for the current fee and the next start date. When you do, ask who will lead your class and what security work they have done. Any training provider, including us, should give you a straight answer.
Learning AI tools too? Our AI class covers what is safe to type into ChatGPT, Claude and Gemini. And if you want to build the kind of website you’re learning to protect, see our web design classes in Asaba.
Frequently asked questions
Do I need to be good with computers to join?
No. The scam, phone and WhatsApp parts are for anyone with a smartphone. The career part goes further, and suits people who are comfortable on a laptop and ready to practise between classes.
Will the class teach me to hack?
It teaches how attacks work so you can stop them, and for career learners it explains how security testing is done legally, in a lab you own. It won’t teach you to break into accounts or systems you don’t own; the Cybercrimes Act treats unlawful access as a crime.
Will I get a certificate?
We don’t certify anyone. Recognised certifications, such as ISC2’s CC and CompTIA Security+, come from the bodies that set the exams. The career section of the class shows you the route to them.
Where do I report a scam or a hacked account in Nigeria?
If money is involved, call your bank’s fraud line at once, then report the crime on the Nigeria Police Force National Cybercrime Centre’s e-reporting portal. If your bank doesn’t resolve your complaint, you can take it to the CBN’s Consumer Protection Department, but only after you’ve complained to the bank. Organisations can also report incidents to ngCERT at incident@cert.gov.ng.
General information, not legal advice. Rules change; check the current version with ngCERT, the NCC and the Nigeria Data Protection Commission before you act.
