Nigeria's NCC brings its telecom identity risk system for recycled and reassigned numbers live in October 2026

Nigeria's NCC brings its telecom identity risk system for recycled and reassigned numbers live in October 2026

9 September 2026: The Nigerian Communications Commission (NCC) says its Telecommunications Identity Risk Management System (TIRMS), together with the business rules that go with it, is scheduled to go live in October 2026. The announcement is in the communiqué from the regulator's 110th board meeting, held on 9 September 2026.

Not yet independently verified. The regulator's communiqué says TIRMS goes live in October 2026; it does not give a day for TIRMS itself. Details of the business rules, such as notice periods before a number is recycled, come from reporting on draft rules we have not read. We will update this when it can be confirmed, and remove this note.

What TIRMS does

According to the communiqué, TIRMS will strengthen the governance of telecommunications identities, including mobile numbers, and reduce the risks that come from their misuse, reassignment or recycling. The regulator notes that phone numbers are increasingly linked to financial, social and other digital services: when an operator recycles a number to a new subscriber, the new holder can receive one-time passwords, bank alerts or account-recovery messages meant for the previous one.

The same communiqué says the NCC's Device Management System is now live, helping to enforce type approval and to block devices reported stolen, and restates the regulator's zero tolerance for call masking.

Who is affected

Mobile network operators, which must apply the new rules, and every business in Nigeria that uses a phone number as an identifier: banks and fintechs using SMS one-time passwords, payment and wallet apps, KYC providers, e-commerce and delivery platforms, and SaaS products that let users log in or recover accounts by phone.

What to do

1. Map every place your product treats a phone number as proof of identity: sign-up, login, password reset, transaction approval.
2. Find out how your SMS or telecom provider will expose TIRMS information, for example whether a number has been recently reassigned, and whether you can query it before sending a code.
3. Add a second factor for high-risk actions rather than relying on SMS alone.
4. Review dormant accounts linked to numbers that may have been recycled.
5. Watch for the NCC's go-live notice and the final business rules.

Why it matters for buyers

Number recycling is a known route to account takeover, and Nigeria's heavy use of mobile money makes it a real fraud risk. A regulator-run system for tracking number status gives businesses a tool to close that gap, but only if their providers integrate it. Ask your messaging and identity vendors how they will use it.

Sources

• Nigerian Communications Commission: Communiqué issued at the end of the 110th Board meeting (9 September 2026) - 9 September 2026
• Technext: NCC portal that curbs SIM card fraud to go live in October 2026 - 5 October 2026