Certificate Fraud in Nigeria: What Institutions Are Up Against

The short version

Certificate fraud is usually discussed as a problem of documents: better paper, better seals, sharper eyes at the point of inspection. That framing has survived a long time without producing much, and it is worth abandoning.

The durable version is an economic one. A convincing certificate takes an afternoon and a design tool. Disproving one takes a phone call to an office that may not answer, to a registry that may hold the record on paper, in a system with no counterpart anywhere else. When producing costs hours and checking costs days, most certificates are simply never checked, and a document nobody checks is worth forging.

That asymmetry is the whole problem, and it points somewhere unexpected. The institution best placed to fix it is not the employer doing the checking. It is the institution whose name is being copied, because it is the only party that can make checking cheap.

Why forgery is rational here

Consider the decision from the forger's side, without moralising about it. The document has to survive one encounter: a recruiter with a stack of applications and an afternoon. It does not have to survive a determined investigation, because a determined investigation almost never happens. It has to be plausible for ninety seconds.

Everything about the market makes that easy. Certificates are presented as scans and photographs, so physical qualities are invisible. Layouts are public, because genuine recipients post theirs online. Institution names, crests, and signature blocks are all published. The only genuinely scarce input is the record itself, and the record is exactly what nobody looks at.

Now consider the checking side. A recruiter who wants to be sure has to identify the right office, find a working contact route, send a request that includes enough detail to identify a person without breaching their privacy, and then wait. The waiting is the part that kills it. Confirmation that arrives three weeks after the hiring decision is not a control; it is an archive entry.

So verification gets dropped, quietly, without anyone deciding to drop it. It is dropped because it does not fit inside the timeline of the decision it was supposed to inform. And once employers in a market have learned that certificates cannot be checked in time, they start discounting all of them, which is the cost genuine graduates pay for a problem they had no part in.

What it looks like at scale

The clearest recent illustration is not a forgery at all, which is what makes it worth setting out.

On 30 December 2023, Daily Nigerian published an undercover investigation in which a reporter who already held a Nigerian degree and had already completed national service obtained a degree from a Cotonou university in six weeks (archived copy) and was mobilised for NYSC on it. Three days later, on 2 January 2024, the Federal Ministry of Education suspended evaluation and accreditation of degree certificates from Benin Republic and Togo pending an investigation.

By August 2024 the then Minister of Education, Tahir Mamman, said more than 22,700 certificates from the two countries had been invalidated, that three institutions in Togo and five in Benin Republic were recognised, and that many of the people holding those certificates had never left Nigeria.

Sit with the shape of that. These were not clumsy forgeries. In the main they were genuine documents, issued by institutions that really existed, following a process that really ran, with paperwork that a registrar would have confirmed if asked. Nothing about the certificates was detectably wrong, because the wrong thing was upstream of the certificate.

Which is why inspection was never going to catch it. A document check asks whether this paper is real. It cannot ask whether the award behind it meant anything, and no amount of security printing will make it able to. Twenty-two thousand is not a printing failure. It is what happens when the question a certificate is supposed to answer goes unasked for long enough that an industry forms around the silence.

The confirmation gap

Nigeria has never had a single place to check a person. That is now changing for degrees, and the section below sets out how far, but it has not changed for anything else, and none of it is a matter of anyone underperforming. Secondary results go through WAEC or NECO, each with its own result checker and its own token. Tertiary admission runs through JAMB. Degrees and transcripts run through each institution's own registry, at each institution's own pace. National service has a separate route again. Every profession maintains its own register: MDCN for doctors, COREN for engineers, ICAN for chartered accountants.

One curriculum vitae can require five unrelated checks across five unrelated systems, run by a person who has a map of none of them. Verifying a certificate online walks through what each of those routes actually involves, and how employers verify certificates covers the same ground from the side of the organisation that has to run them at volume. The point here is simply that there are five of them, and that the number is why the work does not get done.

The consequence is that the burden of proof sits in the wrong place. In a functioning arrangement, the party making the claim carries the cost of supporting it. Here the party checking the claim carries it, and they carry it separately, from scratch, every single time. A thousand employers each spend a small amount of effort establishing the same fact, and the institution that already knows the answer spends its own effort answering them one at a time.

Nothing in the left panel is anyone's fault. It is what happens when the record exists in exactly one place and can only be reached by asking a person for it. The right panel is not a better registry. It is the same registry, publishing once instead of replying repeatedly.

What the state has built, and what it leaves out

Since that episode, Nigeria has done something about it, and any honest page on this subject written in 2026 has to say so.

Two separate mechanisms are often reported as one, so it is worth keeping them apart.

The National Credential Verification Service is the new one, launched in March 2025 under the Nigeria Education Repository and Databank and made mandatory from 6 October 2025 by a service-wide circular from the Secretary to the Government of the Federation. It applies across ministries, departments, agencies and higher institutions, public and private, with no appointment confirmed without clearance, and each clearance carries a National Credential Number and security codes.

The Ministry's own Evaluation and Accreditation System is the older one, and it is a different thing: an application a person makes to have qualifications evaluated or authenticated, for study abroad, for admission, or for employment. It is also the function that was suspended for Benin Republic and Togo in January 2024. In April 2026 it moved fully online, ending physical visits to the Ministry.

The distinction matters if you are relying on either. One is a clearance an employer requires before confirming an appointment. The other is an application with a queue, which you submit and wait for, and which asks your institution to send a transcript directly. Neither is a lookup a stranger can run on a certificate they were handed.

Notice what that is. Faced with the problem this page describes, the Nigerian state did not respond with better paper. It responded by giving each record an identifier, a code, and a place to be checked, which is the entire argument here, implemented at national scale by the party with the most to lose. If you were unsure whether verifiable credentials are a real answer or a vendor's framing, that is your evidence.

Two limits matter, and they are the reason this page does not end here.

Its scope is tertiary academic credentials. Federal universities, colleges of education and polytechnics are being covered first, with other institutions onboarded in phases. Professional body membership and CPD records, training provider course certificates, bootcamp credentials, corporate compliance records, and event and conference certificates all sit outside it. That is not an inference from the announcements: the words professional, vocational and training provider do not appear anywhere in the founding policy, and the National Credential Number is defined in it as the National Academic Credential Verification Number. Does NERD cover professional certificates? works through the definitions. If you issue any of those, nothing above applies to you.

It is a clearance process, not a public check. An employer or an institution runs it, as a step in hiring or admission. It is not something a stranger handed a certificate can complete in seconds without contacting anyone, which is the specific cost described earlier in this page.

There is a third consequence, and for most organisations reading this it is the operative one. The floor has moved. Once employers become used to a degree carrying a national credential number they can check, a course certificate carrying nothing at all looks materially worse than it did in 2023. That comparison is now being made against your certificates, whether or not anyone tells you.

What it costs the institution copied

Institutions tend to treat forgery of their certificates as an irritation that happens to other people. It is worth being specific about what it actually costs, because none of it appears on a budget line and all of it is real.

Staff time, indefinitely. Every confirmation request is a person reading an email, searching a record, and composing a reply. The volume does not fall over time. It rises with every cohort, because every graduate you have ever issued to remains someone an employer might ask about. This is the only administrative load in an institution that grows monotonically and never retires.

A discount applied to your genuine graduates. When employers learn that credentials from a given issuer cannot be confirmed quickly, they do not conclude that the issuer is dishonest. They conclude that the certificate carries less information than it claims to, and they weight it accordingly. That penalty falls entirely on the people who earned it.

Your name on documents you did not issue. A forgery circulates under your institution's name, and you find out about it last, if at all. You cannot recall it, correct it, or contact the people who saw it. The only correction available is a person checking, at the moment it matters, and finding nothing behind it.

Defences that do not survive contact

Most anti-forgery spending goes on the document, and most of it is wasted for the same reason: it assumes the person assessing the certificate has a genuine one to compare it against. They do not, and usually they are looking at a scan.

Holograms, watermarks, and security paper. These raise the price of a good forgery. They do not help the recruiter, because a recruiter has never held one of your certificates before and is looking at a photograph of this one. A security feature that cannot be assessed by the person making the decision is a cost you carry and the forger routes around.

Serial numbers with nothing behind them. A number printed on a certificate proves nothing unless it resolves to something. If checking the number means emailing your office, the number has not changed the economics at all; it has just made the email slightly easier to write. Credential ID covers the difference between an identifier and a lookup.

A QR code that leads nowhere useful. QR codes appear on forgeries too. They are convenience, not evidence. What matters is what the code resolves to: a record held by the issuer, or a page anyone could have made.

"Contact us to verify". This is the default policy at most institutions and it is the one that guarantees the outcome described above. It routes every check through your own staff, at your own pace, which is precisely the bottleneck that makes checking too expensive to do. It is also the sentence a forger most wants to see, because they know what happens next in practice.

For the narrower question of what to examine when a specific document looks wrong, and which warning signs carry no information at all, spotting a fake certificate covers it properly. Inspection is a real skill. It just cannot settle the question on its own, which is the point that section ends on.

Real is not the same as accredited

There are two different questions here and they are constantly merged, at some expense.

The first is authenticity: is this record real? Did this institution award this thing to this person? The second is standing: was the institution approved to award it, and does the award mean anything? A certificate can be entirely genuine, verifiable in seconds, and issued by a body with no recognition whatsoever.

The National Universities Commission publishes the list of approved universities and periodically names institutions operating without approval, which makes the second question answerable. Both checks matter, and they return different answers. An institution that can prove its records are real has solved the first problem completely and the second not at all, and should say so rather than let the first imply the second.

The part an issuer can actually fix

You cannot stop anyone printing a document with your name on it. That is worth stating plainly, because a good deal of institutional spending is aimed at a target that cannot be hit.

What you can decide is what happens when someone tries to check one. If every credential you issue lives at a permanent address that anyone can open in seconds, three things change at once, and none of them depend on the forger's behaviour.

Checking becomes cheap enough to actually happen. This is the whole of it. A check that takes four seconds gets done; a check that takes four days gets skipped. Move the check inside the timeline of the decision and it stops being optional.

A forgery has nothing to point at. Once your genuine credentials resolve to a page, the absence of one is itself the answer. The forger's problem is no longer producing a convincing document, which is easy. It is producing a record inside your system, which is not.

You leave the loop. The requests stop arriving, because the question is answered before anyone needs to ask you. This is the part institutions underestimate: the administrative saving is not a side benefit of verifiable credentials, it is frequently the largest single benefit.

The technical machinery underneath is not complicated. Each credential is signed with a digital signature the issuer controls, which means altering any detail on the record invalidates it, and the signature can be checked by anyone against a published key. That property is what makes it a verifiable credential rather than a web page with a tick on it. Our security page sets out how the signing works here and, more usefully, what it does not cover.

None of this requires an institution to run software. Credential verification describes the checking side, and choosing a certificate platform in Nigeria is worth reading before assuming the answer is a design tool, which is where most institutions start and where a good number of them stop.

What this does not solve

Three honest limits, because a page arguing for verifiable credentials that omitted them would be doing the thing it criticises.

It does not touch fraud at the point of award. If a credential is issued to someone who did not earn it, whether through a compromised assessment or someone inside the institution, verification confirms the fraud rather than catching it. The record is real. That is an assessment integrity problem, and no credentialing system addresses it.

It does nothing for credentials you did not issue. An institution can only make its own records checkable. A candidate presenting four certificates from four bodies is still four separate problems, and three of them are not yours.

It does not make an unknown institution credible. Verifiability is a property of the record, not a judgement about the issuer. An organisation nobody has heard of, issuing perfectly verifiable credentials, is still an organisation nobody has heard of.

Where we stand

We build the part of this that is buildable. Every credential issued through this platform is signed, gets its own permanent verification page, and can be checked by anyone holding the link without contacting the issuer, without an account, and without any prior relationship with us.

That solves the confirmation gap and none of the other problems on this page. We would rather be clear about which is which than sell an institution a product for a problem it does not have. If your real difficulty is assessment integrity, or the standing of your awards, a credentialing platform is not what you need, and we will say so on the call.